exim/exim.changes

-------------------------------------------------------------------
Fri Aug  4 15:14:35 CEST 2006 - poeml@suse.de

- add support for building with mysql lookup support, by defining 
  %build_with_mysql at the top of the spec file [#188586]
- don't use %name macro in %setup therefore (so another spec file
  can have a different Name tag)
- remove stray bzcat %{S:30} line

-------------------------------------------------------------------
Thu Aug  3 16:18:54 CEST 2006 - poeml@suse.de

- update to 4.63
  * Use a glob alias rather than an array ref in eximstats generated
    parser. This improves both readability and performance.
  * Collect SpamAssassin and rejection statistics in eximstats.
    Don't display local sender or destination tables in eximstats unless
    there is data to show.
    Added average volumes into the eximstats top table text output.
  * Collect data on the number of addresses (recipients) as well
    as the number of messages in eximstats.
  * Correct an error in the documentation for the redirect router. Exim
    does (usually) call initgroups() when daemonizing.
  * Call initgroups() when dropping privilege in exim.c, so that Exim runs
    with consistent privilege compared to when running as a daemon.
  * Note in the spec that $authenticated_id is not set for local
    submissions from trusted users.
  * The ratelimit per_rcpt option now works correctly in acl_not_smtp.
    Thanks to Dean Brooks <dean@iglou.com> for the patch.
  * Make it easier to get SMTP authentication and TLS/SSL support working
    by adding some example configuration directives to the default
    configuration file. A little bit of work is required to uncomment the
    directives and define how usernames and passwords are checked, but
    there is now a framework to start from.
  * Added #define LDAP_DEPRECATED 1 to ldap.c because some of the "old"
    functions that Exim currently uses aren't defined in ldap.h for OpenLDAP
    without this. I don't know how relevant this is to other LDAP libraries.
  * Add the verb name to the "unknown ACL verb" error.
  * Magnus Holmgren's patch for filter_prepend_home.
  * Fixed Bugzilla #101: macro definition between ACLs doesn't work.
  * Applied Magnus Holmgren's patch to fix Bugzilla #98: transport's home
    directory not expanded when it should be if an expanded home directory
    was set for the address (which is overridden by the transport).
  * Applied Alex Kiernan's patch to fix Bugzilla #99: a problem with
    libradius.
  * Added acl_not_smtp_start, based on Johannes Berg's patch, and set the
    bit to forbid control=suppress_local_fixups in the acl_not_smtp ACL,
    because it is too late at that time, and has no effect.
  * Changed ${quote_pgsql to quote ' as '' instead of \' because of a
    security issue with \' (bugzilla #107). I could not use the
    PQescapeStringConn() function, because it needs a PGconn value as one of
    its arguments.
  * When testing addresses using -bt, indicate those final addresses that
    are duplicates that would not cause an additional delivery. At least one
    person was confused, thinking that -bt output corresponded to deliveries.
    (Suppressing duplicates isn't a good idea as you lose the information
    about possibly different redirections that led to the duplicates.)
  * Applied patch from Erik to use select() instead of poll() in spam.c on
    systems where poll() doesn't work, in particular OS X.
  * Added more information to debugging output for retry time not reached.
  * Applied patch from Arkadiusz Miskiewicz to apply a timeout to read
    operations in malware.c.
  * Applied patch from Magnus Holmgren to include the "h" tag in Domain Keys
    signatures.
  * If write_rejectlog was set false when logging was sent to syslog with
    syslog_duplication set false, log lines that would normally be written
    both the the main log and to the reject log were not written to syslog at
    all.
  * In the default configuration, change the use of "message" in ACL warn
    statements to "add_header".
  * Diagnose a filter syntax error for "seen", "unseen", or "noerror" if not
    not followed by a command (e.g. "seen endif").
  * Recognize SMTP codes at the start of "message" in ACLs and after :fail:
    and :defer: in a redirect router. Add forbid_smtp_code to suppress the
    latter.
  * Added extra conditions to the default value of delay_warning_condition
    so that it is now:
      ${if or { \
          { !eq{$h_list-id:$h_list-post:$h_list-subscribe:}{} } \
          { match{$h_precedence:}{(?i)bulk|list|junk} } \
          { match{$h_auto-submitted:}{(?i)auto-generated|auto-replied} } \
          }{no}{yes}}
    The Auto-Submitted: and various List- headers are standardised, whereas I
    don't think Precedence: ever was.
  * Refactored debugging code in route_finduser() to show more information,
    in particular, the error code if getpwnam() issues one.
  * Added PQsetClientEncoding(conn, "SQL_ASCII") to the pgsql code module.
    This is apparently needed in addition to the     - change above to avoid
    any possible encoding problems.
  * Perl can change the locale. Exim was resetting it after a ${perl call,
    but not after initializing Perl.
  * Added a call to PQsetNoticeProcessor() to catch pgsql "notices" and
    output them only if debugging. By default they are written stderr,
    apparently, which is not desirable.
  * Added Alain Williams' LDAP patch to support setting REFERRALS=off on
    queries.
  * exipick: added --reverse (and -R synonym), --random, --size, --sort and
    --not options
  * exipick: rewrote --help documentation to hopefully make more clear.
  * Made -oMaa and -oMt work with -bh and -bs to pretend the connection is
    authenticated or an ident call has been made. Suppress the default
    values for $authenticated_id and $authenticated_sender (but permit -oMai
    and -oMas) when testing with -bh.
  * Re-jigged the order of the tests in the default configuration so that the
    tests for valid domains and recipients precede the DNS black list and CSA
    tests, on the grounds that those ones are more expensive.
  * Exim was not testing for a space following SMTP commands such as EHLO
    that require one. Thus, EHLORHUBARB was interpreted as a valid command.
    This bug exists in every version of Exim that I still have, right back to
    0.12.
  * (n)wildlsearch lookups are documented as being done case-insensitively.
    However, an attempt to turn on case-sensitivity in a regex key by
    including (?-i) didn't work because the subject string was already
    lowercased, and the effects were non-intuitive. It turns out that a
    one-line patch can be used to allow (?-i) to work as expected.
- fix build requires for older SUSE distributions

-------------------------------------------------------------------
Tue May 30 16:07:30 CEST 2006 - poeml@suse.de

- upstream 4.62
  . The ${readsocket expansion item now supports Internet domain sockets as well
    as Unix domain sockets. 
  . If a redirect router sets up file or pipe deliveries for more than one
    incoming address, and the relevant transport has batch_max set greater than
    one, a batch delivery now occurs.
  . The appendfile transport has a new option called maildirfolder_create_regex.
  . An option called disable_ipv6, to disable the use of IPv6 completely.
  . An increase in the number of ACL variables to 20 of each type.
  . A change to use $auth1, $auth2, and $auth3 in authenticators instead of $1,
    $2, $3, (though those are still set) because the numeric variables get used
    for other things in complicated expansions.
  . The default for rfc1413_query_timeout has been changed from 30s to 5s.
  . It is possible to use setclassresources() on some BSD OS to control the
    resources used in pipe deliveries.
  . A new ACL modifier called add_header, which can be used with any verb.
  . More errors are detectable in retry rules.
  . Support for SQLite.
  . Support for IGNOREQUOTA in LMTP.
  . Extensions to the "submission mode" features.
  . Support for Client SMTP Authorization (CSA).
  . Support for ratelimiting hosts and users.
  . New expansion items to help with the BATV "prvs" scheme.
  . A "match_ip" condition, that matches an IP address against a list.
  - numerous bug fixes and minor changes
- add eximstats-html subpackage, which, if installed and enabled in
  /etc/sysconfig/exim, puts HTML reports of the 'eximstats' log
  analyzer into /srv/www/eximstats
- try to adapt BuildRequires and suse specific rpm macros to build
  on Fedora Core

-------------------------------------------------------------------
Wed Mar  8 17:16:33 CET 2006 - poeml@suse.de

- build as non-root user

-------------------------------------------------------------------
Wed Jan 25 21:35:47 CET 2006 - mls@suse.de

- converted neededforbuild to BuildRequires

-------------------------------------------------------------------
Tue Oct 25 14:34:09 CEST 2005 - rhafer@suse.de

- added LDAP_DEPRECATED to CFLAGS to build correctly with
  OpenLDAP 2.3

-------------------------------------------------------------------
Fri Sep  2 15:39:15 CEST 2005 - poeml@suse.de

- link against external pcre library (patch from Debian) [#112647]

-------------------------------------------------------------------
Sat Aug 13 10:56:12 CEST 2005 - ro@suse.de

- fix file list 

-------------------------------------------------------------------
Thu Aug 11 16:06:51 CEST 2005 - poeml@suse.de

- the permissions files are now maintained centrally and packaged
  in the permissions package [#66304]
- add run_permissions macro and verifyscript

-------------------------------------------------------------------
Fri Jul 29 10:43:47 CEST 2005 - poeml@suse.de

- remove world read/execute permissions from /var/log/exim, so log
  files are not readable regardless of how logrotate deals with
  them, or dealt with them in the past. Give group ownership to
  group mail, so exim still can chdir() after dropping permissions.
  [#99167]

-------------------------------------------------------------------
Tue Jun 21 00:46:39 CEST 2005 - ro@suse.de

- build with fPIE/pie 

-------------------------------------------------------------------
Wed May 18 17:35:49 CEST 2005 - poeml@suse.de

- update to 4.51
  This release contains some new features, but a lot of the changes
  fix bugs of varying severity. See doc/ChangeLog.

-------------------------------------------------------------------
Mon Feb 21 17:23:57 CET 2005 - poeml@suse.de

- update to 4.50.  This release includes the merging of the exiscan
  patch into the main source. Thus, compile with the new
  WITH_CONTENT_SCAN=yes and add WITH_OLD_DEMIME=yes for backwards
  compatibility (old demime condition)
- update filelist of documentation files

-------------------------------------------------------------------
Mon Jan 17 10:38:56 CET 2005 - poeml@suse.de

- update to 4.44
- update exiscan to 4.44-28

-------------------------------------------------------------------
Sat Jan 15 21:19:28 CET 2005 - schwab@suse.de

- Use <owner>:<group> in permissions file.

-------------------------------------------------------------------
Tue Jan 11 15:34:07 CET 2005 - poeml@suse.de

- security fixes:
  - CAN-2005-0021 host_aton() Buffer Overflow Vulnerability
    [#49675]
  - CAN-2005-0022 auth_spa_server() Buffer Overflow Vulnerability
    SPA support is not compiled in. Fix added nevertheless [#49676]

-------------------------------------------------------------------
Fri Dec 10 21:47:47 CET 2004 - poeml@suse.de

- update to 4.43
- update exiscan to 4.43-28

-------------------------------------------------------------------
Tue Sep 28 23:11:15 CEST 2004 - poeml@suse.de

- if a service named greylistd is started, start it before exim 

-------------------------------------------------------------------
Mon Sep  6 15:41:18 CEST 2004 - poeml@suse.de

- update to 4.42
- update exiscan to 4.42-27

-------------------------------------------------------------------
Mon May 10 23:32:42 CEST 2004 - poeml@suse.de

- update to 4.34
- update exiscan to 4.34-21

-------------------------------------------------------------------
Sun May  9 20:14:07 CEST 2004 - poeml@suse.de

- update to 4.33
- update exiscan to 4.33-20
- add patch against buffer overflow with header name when
  headers_check_syntax is enabled (CAN-2004-0400) [#40126]
  http://www.exim.org/pipermail/exim-users/Week-of-Mon-20040503/071126.html

-------------------------------------------------------------------
Tue Apr 27 20:43:27 CEST 2004 - poeml@suse.de

- update exiscan to 4.32-19 due to crash bug in -18 affecting the
  MIME ACL.

-------------------------------------------------------------------
Sun Apr 25 15:57:26 CEST 2004 - poeml@suse.de

- update to 4.32
- update exiscan to 4.32-18
- new file /usr/sbin/exipick

-------------------------------------------------------------------
Fri Mar 19 10:10:08 CET 2004 - mmj@suse.de

- Remove superflous backup files

-------------------------------------------------------------------
Wed Mar  3 19:31:08 CET 2004 - poeml@suse.de

- update exiscan to 4.30-16. Major new feature: the MIME ACL.

-------------------------------------------------------------------
Wed Feb 25 23:17:54 CET 2004 - poeml@suse.de

- update to 4.30
- update exiscan to 4.30-14
- compile with support for LDAP lookups 
- add openldap2-devel cyrus-sasl-devel to #neededforbuild
- compile with support for cdb, dnsdb, passwd lookups
- compile with support for mailstore and mbx mailboxes
- compile with -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 so large
  files can be handled

-------------------------------------------------------------------
Wed Feb  4 15:17:56 CET 2004 - mmj@suse.de

- Lower rfc1413_query_timeout to 5 seconds instead of 30

-------------------------------------------------------------------
Wed Nov 19 11:15:23 CET 2003 - poeml@suse.de

- fix comments in sysconfig.exim (Kevin Ivory) [#32575]

-------------------------------------------------------------------
Tue Nov 18 15:51:21 CET 2003 - poeml@suse.de

- logrotate configuration: removed postrotate reloading, since it's
  not needed; add missingok; make report mails configurable via
  sysconfig/exim (Kevin Ivory) [#32575]

-------------------------------------------------------------------
Mon Sep  8 12:00:40 CEST 2003 - poeml@suse.de

- exim.rc: delete <feedback@suse.de> address

-------------------------------------------------------------------
Tue Aug 26 14:52:29 CEST 2003 - poeml@suse.de

- don't remove empty log files in %preun, since it's actually run
  after %post in update mode [#29368]

-------------------------------------------------------------------
Mon Aug 18 17:40:23 CEST 2003 - poeml@suse.de

- update to 4.22, which fixes a few bugs in 4.21
- improve start section of init script. Don't start multiple
  processes; don't disrupt mail transfer

-------------------------------------------------------------------
Fri Aug 15 03:52:55 CEST 2003 - poeml@suse.de

- update to 4.21. many changes, see NewStuff and ChangeLog file!
  - prevent possible overflow in HELO/EHLO command by
    (a) rewrite of the offending code in a cleaner fashion.
    (b) If an incoming SMTP command contains a NULL character, it
        is rejected as invalid.
  - sieve support (rfc 3028)
  - support for saslauthd authentication
  - cramtest.pl utility updated
  - eximstats 1.28 (addition of -nt option)
  - If a DNS black list lookup found a CNAME record, but there were
    no A records associated with the domain it pointed at, Exim
    crashed.
  - add new Auto-Submitted header on e.g. bounces
  - new option syslog_duplication
  - more flexible way to specify listening addresses/ports
- use -Wall
- add -fno-strict-aliasing, due to warnings about code where
  dereferencing type-punned pointers will break strict aliasing
- add activation metadata to sysconfig template [#28874]
- add patch for IPv6 breakage until 4.22 is out
- don't use startproc to start exim. It can't distinguish the
  parent daemon from queue runners or other children [#28082]

-------------------------------------------------------------------
Wed Jul 30 16:51:00 CEST 2003 - poeml@suse.de

- new macros for stop/restart of services on rpm update/removal

-------------------------------------------------------------------
Wed May 21 09:19:13 CEST 2003 - coolo@suse.de

- avoid empty %pre
- avoid absolute symlinks below /usr

-------------------------------------------------------------------
Thu May 15 00:50:04 CEST 2003 - poeml@suse.de

- update to 4.20
  - bug fixes
  - upgraded to PCRE 4.2
  - upgraded eximstats to 1.27
  - added versioning to the local_scan() API
  - Added acl_smtp_helo
  - added the "discard" verb to ACLs.
  - for building, DESTDIR can be used now instead of ROOT 
  - behaviour of -t in the presence of Resent- headers has been
    changed for compatibility
  - added new syslog facilities:
    (i)  SYSLOG_LOGS_PID and LONG_SYSLOG_LINES in src/EDITME.
    (ii) syslog_facility and syslog_processname main options.
  - the documentation was brought up to date.
- update exiscan patch to exiscan-acl-4.20-02
- remove filelist hack from %clean, since now we have rpm4 :-)
- create logfiles from %post, not in the init script [#24262]

-------------------------------------------------------------------
Tue Apr 22 13:53:06 CEST 2003 - poeml@suse.de

- update to 4.14. As always, there are lots of minor fixes and
  cleanups. New features include MySQL lookups over Unix domain
  sockets, the ability to en/disable parts of the configuration
  file with ".if", new options for fine-tuning the behavior with
  respect to unknown SMTP commands, announcing of AUTH and
  pipelining, and lots of new expansion operators.
- remove the obsolete (3.x style) %s in pidfile name
- the eximstats utility contains an official manpage, so we can
  drop Andreas' version from the manpages tar ball
- add Tom Kistner's exiscan patch 
- include the exiqgrep script
- improve the logrotate configuration, so the eximstats report is
  sent upon rotation (weekly), and not every night. Sending the
  report can be disabled by touching /var/log/exim/no_report_mail.

-------------------------------------------------------------------
Thu Apr 10 00:37:27 CEST 2003 - ro@suse.de

- fix deprecated tail call syntax (-1) 

-------------------------------------------------------------------
Thu Feb 13 12:49:28 CET 2003 - lmuelle@suse.de

- fix typo in sysconfig metadata

-------------------------------------------------------------------
Wed Feb 12 15:12:33 CET 2003 - mmj@suse.de

- Add sysconfig metadata [#22641]

-------------------------------------------------------------------
Wed Dec 18 13:07:56 CET 2002 - poeml@suse.de

- update to 4.12 (more bug fixes: lookup search bug, too many
  non-mail commands bug, and others)
- package the installed exim.conf as configure.default, since it
  has all substitutions done (since 4.11, SYSTEM_ALIASES_FILE is
  replaced at install time)

-------------------------------------------------------------------
Wed Dec 11 12:51:39 CET 2002 - poeml@suse.de

- update to 4.11, with security and bug fixes. The more important
  changes are: 
  - [in short] Make exim cope with strace -f
  - Make sure Exim doesn't overrun the buffer if an oversize packet
    is received from a nameserver.
  - Exim crashed on an attempt to check senders or sender domains
    in an ACL other than after RCPT or DATA. It's now a temporary
    error.
  - Minor security problem involving pid_file_path (admin user
    could get root) has been fixed.
  - If an ACL that was read from a file was used in more than one
    message in a single SMTP transaction, Exim could crash or
    misbehave in arbitrary ways. [...]
  - A similar problem to 127: memory corruption could occur for
    multiple messages in one SMTP connection if the data from DNS
    black list lookups was being used in log or user messages, e.g.
    references to $dnslists_text.
  For the complete list of changes, see 
  ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/ChangeLogs/ 
- remove rmail symlink as it conflicts with rmail from the uucp
  package

-------------------------------------------------------------------
Mon Nov 11 15:31:46 CET 2002 - poeml@suse.de

- use #neededforbuild macro 'x-devel-packages' instead of xf86
- add man pages, provided by Andreas Metzler 
- add some symlinks that exim might be called under

-------------------------------------------------------------------
Tue Aug 13 20:07:30 CEST 2002 - poeml@suse.de

- remove stupid arch-dependant path from filelist

-------------------------------------------------------------------
Tue Aug 13 19:06:33 CEST 2002 - poeml@suse.de

- mv exim.conf to /etc/exim/
- add scripts for conversion of 3.xx config files
- add symbolic link "runq" (same as exim -q)
- use %defattr

-------------------------------------------------------------------
Mon Aug 12 16:17:18 CEST 2002 - poeml@suse.de

- improve logrotate configuration
- fix PreReq
- install exim.8 manpage and gzip the remaining documentation
- Moved log file creation from %post to rcexim

-------------------------------------------------------------------
Tue Aug  6 12:57:10 MEST 2002 - draht@suse.de

- added /etc/permissions.d/exim for setuid /usr/sbin/exim

-------------------------------------------------------------------
Fri Aug  2 21:55:31 CEST 2002 - poeml@suse.de

- package created (4.10)