------------------------------------------------------------------- Fri Jul 12 18:22:21 UTC 2019 - Benoît Monin - update to version 1.8.5: * Fixed OAUTHBEARER. * Support for TLS client certificates via PKCS11 devices, e.g. smart cards. * Various small bug fixes and improvements. - fix sh scripts shebang, in addition to bash scripts ------------------------------------------------------------------- Wed Apr 24 18:48:28 UTC 2019 - Benoît Monin - update to version 1.8.4 * Added support for the OAUTHBEARER authentication method. * Several minor bug fixes. ------------------------------------------------------------------- Thu Feb 14 20:48:32 UTC 2019 - Benoît Monin - update to version 1.8.3 (boo#1125420) * CVE-2019-8337 This version fixes a security problem that affects version 1.8.2 (older versions are not affected): when the new default value system for tls_trust_file is used, the result of certificate verification was not properly checked. ------------------------------------------------------------------- Wed Feb 13 14:58:51 UTC 2019 - Tomas Cech - use GnuTLS instead of OpenSSL https://marlam.de/msmtp/news/openssl-discouraged/ ------------------------------------------------------------------- Wed Jan 16 19:20:38 UTC 2019 - Benoît Monin - update to version 1.8.2: * To simplify TLS setup, the tls_trust_file command has a new default value 'system' that selects the system default trust. * To simplify setup, a new option '--configure ' was added that automatically generates a configuration file for a given mail address. - additional changes from version 1.8.1: * Fixed our TLS code to support TLS 1.3 with GnuTLS. - additional changes from version 1.8.0: * A minimal SMTP server called msmtpd was added that listens on the local host and pipes mails to msmtp (or another program). It is intended to be used with system services that cannot be configured to call msmtp directly. You can disable it with the configure option --without-msmtpd. * Using OpenSSL is discouraged and may not be supported in the future. Please use GnuTLS instead. The reasons are explained here: https://marlam.de/msmtp/news/openssl-discouraged/ * As using GNU SASL is most likely unnecessary, it is disabled by default now. Since everything uses TLS nowadays and thus can use PLAIN authentication, you really only need it for GSSAPI. * If your system requires a library for IDN support, libidn2 is now used instead of the older libidn. * The CRAM-MD5 authentication method is marked as obsolete / insecure and will not be chosen automatically anymore. * The passwordeval command does not require the password to be terminated by a new line character anymore. * The new logfile_time_format command allows to customize log file time stamps. * Builtin default port numbers are now used instead of consulting /etc/services. * Support for DJGPP and for systems lacking vasprintf(), mkstemp(), or tmpfile() is removed. - additional changes from version 1.6.8: * Add --source-ip option and source_ip command to bind the outgoing connection to a specific source IP address. * Enable SNI for TLS - additional changes from version 1.6.7: * Add support for ~/.config/msmtp/config as configuration file * Add network timeout handling on Windows * Fix command line handling of SHA256 TLS fingerprints * Fix SIGPIPE handling (affects at least Mac OS X) * Add french translation, and update german translation - update Url and Source to marlam.de, see: https://marlam.de/msmtp/news/project-moved/ - update the keyring, the previous one has been revoked - switch to libidn2 to match msmtp requirement - configure with openssl as tls library ------------------------------------------------------------------- Sat Mar 10 14:05:08 UTC 2018 - benoit.monin@gmx.fr - fix bash scripts shebang ------------------------------------------------------------------- Sun Mar 26 19:29:42 UTC 2017 - dev+novell@devmotion.de - Keyring integration only for recent openSUSE and CentOS ------------------------------------------------------------------- Sun Mar 26 19:14:20 UTC 2017 - dev+novell@devmotion.de - Replace pkgconfig dependencies ------------------------------------------------------------------- Sun Mar 26 19:07:02 UTC 2017 - dev+novell@devmotion.de - Add keyring integration ------------------------------------------------------------------- Mon Nov 14 22:09:00 UTC 2016 - benoit.monin@gmx.fr - update to version 1.6.6: * This version fixes a memory leak and a double-free in msmtp_read_headers(). The double-free was triggered by read errors. - remove reference to msmtp-fix-newopenssl.patch: this patch was removed 5 years ago. ------------------------------------------------------------------- Tue May 31 19:26:18 UTC 2016 - benoit.monin@gmx.fr - update to version 1.6.5: * Support SHA256 fingerprints for tls_fingerprint, and mark both SHA1 and MD5 as deprecated. ------------------------------------------------------------------- Tue Feb 2 19:07:10 UTC 2016 - benoit.monin@gmx.fr - update to version 1.6.4: * The system default policy is used with GnuTLS instead of a hardcoded one. ------------------------------------------------------------------- Sun Nov 29 13:12:48 UTC 2015 - benoit.monin@gmx.fr - update to version 1.6.3: * A bug in SOCKS support was fixed. * Handling non-fatal errors in TLS handshakes was fixed. - fix info installation for suse package: * properly requires %install_info_prereq * call %install_info_delete in preun, not postun ------------------------------------------------------------------- Fri Apr 24 19:10:07 UTC 2015 - benoit.monin@gmx.fr - update to version 1.6.2: * A bug was fixed that prevented consecutive Bcc headers from being removed properly. - add tarball signature and keyring ------------------------------------------------------------------- Mon Jan 5 19:11:11 UTC 2015 - benoit.monin@gmx.fr - update to version 1.6.1: * The new configure option --with-tls replaces --with-ssl. * A new configure option --disable-gai-idn was added. - additional changes from 1.6.0: * Support for SOCKS proxies was added. This allows msmtp to be used with Tor. * GNOME Keyring support now uses libsecret instead of libgnome-keyring. It is now documented how to use secret-tool to manage passwords for msmtp; the obsolete msmtp-gnome-tool script is removed. * Configuration file security is now only checked if the file actually contains secrets such as passwords. * The GSSAPI authentication method is not chosen automatically anymore, you have to request it manually if you really want to use it. * From: and Date: headers are now added to mails if necessary, for compatibility with sendmail, postfix, exim, and other MTAs. This can be disabled with the add_missing_from_header and add_missing_date_header commands. * Libidn is not required for IDN support anymore on systems where getaddrinfo() supports the AI_IDN flag and the GnuTLS version is >= 3.4.0. * The new remove_bcc_headers command replaces the old keepbcc command (but the old command is still supported for compatibility). * SSLv3 is disabled, and the obsolete tls_force_sslv3 command and --tls-force-sslv3 option have no effect anymore. - add xz as BuildRequires: source archive format is now tar.xz - switch gnome keyring support to libsecret - remove msmtp-gnome-tool.py: deleted upstream - remove README.msmtp-gnome-tool: deleted upstream - remove Mutt+msmtp.txt: deleted upstream ------------------------------------------------------------------- Tue Jul 29 19:14:32 UTC 2014 - benoit.monin@gmx.fr - update to version 1.4.32: * A recipient list on the command line is now parsed as if it appeared in a mail header. ------------------------------------------------------------------- Mon Jan 13 20:49:38 UTC 2014 - benoit.monin@gmx.fr - rework the path lookup for the vim syntax file: fix fedora and redhat build ------------------------------------------------------------------- Sun Dec 29 14:13:09 UTC 2013 - benoit.monin@gmx.fr - update to version 1.4.31: * Updated the msmtpq script. * Fixed building of the documentation with texinfo >= 5.0. - additional changes from version 1.4.30: * Fix a bug in msmtp_read_addresses() that was introduced in version 1.4.29 by fixing a problem in the wrong way. - additional changes from version 1.4.29: * Fix bugs in msmtp_read_addresses(), including a crash. * Removed autotools files that are automatically copied by 'autoreconf -i' from repository. * Properly require an argument to --passwordeval. Fixes a crash when none is given. * Replace old service name "ssmtp" with current one: "smtps". ------------------------------------------------------------------- Wed Nov 20 14:46:40 CET 2013 - tbehrens@suse.com - use valid spelling for keyring enabling macro ------------------------------------------------------------------- Fri Apr 19 12:46:40 UTC 2013 - mrueckert@suse.de - we dont use the unversion path anymore for installing the extension: use requires_eq for requiring vim. ------------------------------------------------------------------- Wed Apr 17 11:57:50 UTC 2013 - idonmez@suse.com - /usr/share/vim/current is a symlink, resolve it before putting any file under there. ------------------------------------------------------------------- Sat Oct 20 15:37:38 UTC 2012 - benoit.monin@gmx.fr - create a -mta subpackage, providing smtp_daemon. - build msmtp with -fPIE/pie. ------------------------------------------------------------------- Tue Jun 5 15:12:56 UTC 2012 - puzel@suse.com - update to version 1.4.28: - Update autotools files. - Improve error message on connection failures in some IPv6/IPv4 situations. - Improve documentation of EHLO issues. - Bug fix: expand tilde for the aliases command. ------------------------------------------------------------------- Tue Jan 10 11:09:26 UTC 2012 - mrueckert@suse.de - update to version 1.4.27: - No significant changes. - additional changes from vrsion 1.4.26: - A new version of the msmtpq script fixes serious bugs. To update to the new version of the script, you need to remove the old msmtpQ symlink, change msmtpQ to msmtpq in your MUA config, and use msmtp-queue for queue management. - additional changes from version 1.4.25: - DIGEST-MD5 authentication is not considered secure any longer. See RFC 6331. - Support for alias expansion was added. See the aliases command and --aliases option. - add support for building with gnome-keyring (disabled by default) call build with --with-gnome-keyring to enable it - make sure compiler cmdlines are listed (make V=1) - handle rename from upstream: msmtpQ is gone. the new script is called msmtp-queue - installed msmtp-gnome-tool.py and related readme ------------------------------------------------------------------- Mon Sep 19 08:37:21 UTC 2011 - wr@rosenauer.org - update to version 1.4.24 - fixes SCRAM-SHA-1 authentication via GNU SASL - cleanup that updates the build system and removes old cruft and unnecessary complexity, without changing the functionality of the program - spec cleanup ------------------------------------------------------------------- Mon Jan 10 14:24:09 UTC 2011 - gber@opensuse.org - update to version 1.4.22 - avoid different account selection behaviour in --pretend mode, and print more informational messages about account selection in --pretend and --debug mode - add a new passwordeval command and --passwordeval option, to set the password from the output of a command - a few documentation improvements - report platform in --version output - fix building with newer OpenSSL versions - updated find_alias_for_msmtp.sh script - fixed building without TLS/SSL support - removed obsolete msmtp-fix-newopenssl.patch ------------------------------------------------------------------- Mon Apr 19 16:13:36 CEST 2010 - meissner@suse.de - fix build with new openSSL ------------------------------------------------------------------- Sun Mar 21 11:03:36 UTC 2010 - pascal.bleser@opensuse.org - update to version 1.4.20 - adds support for the authentication mechanism SCRAM-SHA-1 via GNU SASL (only on openSUSE >= 11.2) - the new command tls_fingerprint allows one to trust one particular TLS certificate, in case tls_trust_file cannot be used for some reason - the new script msmtp-gnome-tool.py manages Gnome Keyring passwords for msmtp (currently disabled in this build) - moved documentation files to a -doc subpackage ------------------------------------------------------------------- Fri Nov 20 15:28:11 UTC 2009 - mrueckert@suse.de - update to version 1.4.19 - When using OpenSSL, msmtp now correctly handles NUL characters in the Common Name and Subject Alternative Name fields of certificates. This fixes a security problem. Note that msmtp is not affected by this problem if GnuTLS is used. (bnc#557181) - Disable security checks on the user configuration file when run as root. Fixes Debian bug #534829. - additional changes from version 1.4.18: - mostly code worker - additional changes from version 1.4.17: - Msmtp now also reads SYSCONFDIR/netrc if the password was not found in ~/.netrc. - Support for the GNOME keyring was added by Satoru SATOH. - additional changes from version 1.4.16: - mostly code rework - additional changes from version 1.4.15: - The configuration command tls_crl_file was added. This allows to use certificate revocation lists (CRLs) during certificate verification. - The configuration command tls_min_dh_prime_bits was added. This may be needed to use TLS/SSL with servers that use a small Diffie-Hellman (DH) prime size. - The configuration command tls_priorities was added. This allows to fine tune TLS/SSL session parameters. ------------------------------------------------------------------- Sat Sep 6 18:32:26 CEST 2008 - mrueckert@suse.de - update to version 1.4.16 - Changed all scripts to '#!/usr/bin/env bash' instead of '#!/bin/sh' or '#!/bin/bash', because they use bash features that are not available in POSIX /bin/sh and because bash might not live in /bin, e.g. on BSD systems. This is a quick fix for Debian bug #489635. - Accept both 250 and 251 in return of the RCPT TO command, as required by RFC 2821 sections 4.3.2 and 3.4. Reported and fixed by Matthias Bernhardt. Thanks! - Fix scripts/msmtpqueue/msmtp-runqueue.sh. An error made while applying a patch accidently broke it. Reported by Thomas Weber. Thanks! (this obsoletes msmtp-runqueue.sh.patch) - additional changes from version 1.4.15 - Added the new tls_crl_file configuration command and the corresponding --tls-crl-file option. - Added the new tls_min_dh_prime_bits configuration command and the corresponding --tls-min-dh-prime-bits option. This closes Debian bug #440344. - Added the new tls_priorities configuration command and the corresponding --tls-priorities option. - Gnulib upate to 2008-06-02. Use getpass-gnu instead of getpass module. - Add msmtpq scripts by Chris Gianniotis to the scripts directory. Suggest them as a replacement in the README of the msmtpqueue scripts. - Do not let getpass() read from stdin, because we read the mail from there. Reported by Karol Lewandowski. Thanks! - Updated the set_sendmail script by Gautam Iyer. Thanks! - Return EX_TEMPFAIL instead of EX_DATAERR in case of 4xx replies to the MAIL FROM, RCPT TO and DATA commands. Reported by Kent Vinther Friis. Thanks! - install msmtpq ------------------------------------------------------------------- Wed May 7 11:37:36 CEST 2008 - cthiel@suse.de - fix msmtp-runqueue.sh ------------------------------------------------------------------- Tue Mar 18 16:49:28 CET 2008 - mrueckert@suse.de - update to version 1.4.14 - The -t option now properly supports Resent-* headers. - The --read-envelope-from option was added. It allows to read the envelope from address from the From header. - The environment variables SMTPSERVER and EMAIL can be used to configure msmtp for simple use cases. - Support for the Mac OS X keychain was added by Jay Soffian. ------------------------------------------------------------------- Sat Aug 4 06:55:56 CEST 2007 - mrueckert@suse.de - update to version 1.4.13 - Added the set_sendmail.sh script by Gautam Iyer to the new scripts subdirectory. - Added the msmtpqueue scripts to the new scripts subdirectory. - Make the search of an account by the envelope from address case insensitive. Problem reported and fixed by Brandon Philips. - Update the license of the source code to GPLv3 or later, and change the license of the documentation to the GFDLv1.2 or later. - Gnulib update to 2007-07-15. - no longer use the external msmtpqueue package. ------------------------------------------------------------------- Sun Jun 17 10:21:08 CEST 2007 - bwalle@suse.de - update to version 1.4.12: o Handle MAILER-DAEMON correctly o documentation updates o Require tls_trust_file or tls_certcheck=off for TLS sessions o Do not use NTLM authentication automatically o Gnulib update o bug fixes - update to msmtpqueue 0.5: o Added the msmtp-listqueue.sh script ------------------------------------------------------------------- Tue Apr 10 05:21:45 CEST 2007 - mrueckert@suse.de - update to 1.4.11: - Require either tls_trust_file or tls_certcheck=off for TLS sessions, so that msmtp is not silently vulnerable to man-in-the-middle attacks. - Do not use NTLM authentication automatically anymore unless TLS is active. NTLM is not an open standard and must therefore be considered broken. - Gnulib update 2007-04-07. ------------------------------------------------------------------- Sun Jan 21 22:22:11 CET 2007 - mrueckert@suse.de - update to 1.4.10: - Updated copyright info to 2007. - Gnulib update to 2007-01-10. - From mpop: Switch to autoconf-2.61 and automake-1.10, to avoid problems with configure trying to run "sh /usr/bin/install" where /usr/bin/install is not a shell script on NetBSD. Reported by Jeremy C. Reed. - From mpop: Remove the obsolete "extern int errno;" declaration. It does not conform to POSIX and causes trouble. Thanks to Jeremy C. Reed for the patch. - Added AC_SYS_LARGEFILE to configure.ac, for large file support. Removed the unnecessary AC_C_CONST and AC_HEADER_STDC. ------------------------------------------------------------------- Mon Nov 6 18:14:08 CET 2006 - mrueckert@suse.de - update to version 1.4.9: Some minor build problems were fixed, and the gnulib portability library was updated. ------------------------------------------------------------------- Mon Aug 21 03:59:11 CEST 2006 - mrueckert@suse.de - Update to version 1.4.7: o added option to enforce SSLv3 o many small bugfixes ------------------------------------------------------------------- Sun Jun 18 09:49:45 CEST 2006 - mrueckert@suse.de - Update to version 1.4.6: o idn support o many small changes for details see /usr/share/doc/packages/msmtp/ChangeLog o small cleanup for the spec file - added msmtpqueue-0.4 as part to the msmtp package (no need for an own script for 2 shell script) Adds basic queueing capabilities to msmtp - build with -fstack-protector on > 10.0 ------------------------------------------------------------------- Wed Jan 25 21:38:26 CET 2006 - mls@suse.de - converted neededforbuild to BuildRequires ------------------------------------------------------------------- Wed Oct 19 11:31:59 CEST 2005 - arvin@suse.de - updated to version 1.4.4 ------------------------------------------------------------------- Mon Jul 18 10:20:25 CEST 2005 - arvin@suse.de - updated to version 1.4.3 ------------------------------------------------------------------- Mon Jul 11 11:16:00 CEST 2005 - arvin@suse.de - initial package with version 1.4.2