user/henk/code/exim.git - [no description]

Age	Commit message (Expand)	Author
2021-05-27	CVE-2020-28007: Link attack in Exim's log directory	Qualys Security Advisory
2021-05-27	CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Avoid modification of constant data in dkim handling	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Leave a clean smtp_out input buffer even in case of read error	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Always exit when LOG_PANIC_DIE is set	Qualys Security Advisory
2021-05-27	CVE-2020-28012: Missing close-on-exec flag for privileged pipe	Qualys Security Advisory
2021-05-27	CVE-2020-28024: Heap buffer underflow in smtp_ungetc()	Qualys Security Advisory
2021-05-27	CVE-2020-28009: Integer overflow in get_stdinput()	Qualys Security Advisory
2021-05-27	CVE-2020-28015+28021: New-line injection into spool header file	Qualys Security Advisory
2021-05-27	CVE-2020-28026: Line truncation and injection in spool_read_header()	Heiko Schlittermann (HS12-RIPE)
2021-05-27	CVE-2020-28022: Heap out-of-bounds read and write in extract_option()	Heiko Schlittermann (HS12-RIPE)
2021-05-27	CVE-2020-28017: Integer overflow in receive_add_recipient()	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Refuse negative and large store allocations	Heiko Schlittermann (HS12-RIPE)
2021-05-27	CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()	Heiko Schlittermann (HS12-RIPE)
2021-05-27	CVE-2020-28011: Heap buffer overflow in queue_run()	Qualys Security Advisory
2021-05-27	CVE-2020-28010: Heap out-of-bounds write in main()	Heiko Schlittermann (HS12-RIPE)
2021-05-27	CVE-2020-28018: Use-after-free in tls-openssl.c	Qualys Security Advisory
2021-05-27	CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()	Qualys Security Advisory
2021-05-27	CVE-2020-28014, CVE-2021-27216: PID file handling	Heiko Schlittermann (HS12-RIPE)
2021-05-27	Add priv.c: reworked version of priv dropping code	Heiko Schlittermann (HS12-RIPE)
2021-05-27	CVE-2020-28008: Assorted attacks in Exim's spool directory	Heiko Schlittermann (HS12-RIPE)
2021-05-27	CVE-2020-28019: Failure to reset function pointer after BDAT error	Jeremy Harris
2021-05-27	SECURITY: smtp_out: Leave a clean input buffer, even in case of read error	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Avoid modification of constant data	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Avoid memory corruption in dkim handling	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Avoid decrement of dkim_collect_input if already at 0	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Check overrun rcpt_count integer	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Fix safeguard against upward traversal in msglog files.	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Don't miss the very last byte when reading long lines from -H	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: off-by-one in smtp transport (read response)	Heiko Schlittermann (HS12-RIPE)
2021-05-27	Start documenting the things we changed incompatibly.	Phil Pennock
2021-05-27	Inline four often-called new functions	Phil Pennock
2021-05-27	Fixes for compilation	Jeremy Harris
2021-05-27	SECURITY: rework BDAT receive function handling	Phil Pennock
2021-05-27	SECURITY: fix SMTP verb option parsing	Phil Pennock
2021-05-27	SECURITY: Avoid integer overflow on too many recipients	Phil Pennock
2021-05-27	SECURITY: default recipients_max to 50,000	Phil Pennock
2021-05-27	SECURITY: a second negative store guard	Phil Pennock
2021-05-27	SECURITY: refuse too small store allocations	Phil Pennock
2021-05-27	SECURITY: fix Qualys CVE-2020-PFPZA	Phil Pennock
2021-05-27	SECURITY: fix Qualys CVE-2020-PFPSN	Phil Pennock
2021-05-27	SECURITY: fix Qualys CVE-2020-SLCWD	Phil Pennock
2021-05-27	SECURITY: pick up more argv length checks	Phil Pennock
2021-05-27	SECURITY: length limits on many cmdline options	Phil Pennock
2021-05-27	Re-ran the conversion of all DH parameters	Phil Pennock
2021-05-27	gen_pkcs3: Terminate string before calling BH_hex2bn()	Simon Arlott
2021-05-27	Default config: reject on too many bad RCPT	Phil Pennock
2021-05-27	Handle SIGINT as we do with SIGTERM	Heiko Schlittermann (HS12-RIPE)
2021-05-27	Enforce pid_file_path start at "/"	Heiko Schlittermann (HS12-RIPE)
2021-05-27	testsuite: tidy logs/4520 and confs/4520	Heiko Schlittermann (HS12-RIPE)