summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2021-05-27CVE-2020-28014, CVE-2021-27216: PID file handlingHeiko Schlittermann (HS12-RIPE)
2021-05-27Add priv.c: reworked version of priv dropping codeHeiko Schlittermann (HS12-RIPE)
2021-05-27CVE-2020-28008: Assorted attacks in Exim's spool directoryHeiko Schlittermann (HS12-RIPE)
2021-05-27CVE-2020-28019: Failure to reset function pointer after BDAT errorJeremy Harris
2021-05-27SECURITY: smtp_out: Leave a clean input buffer, even in case of read errorHeiko Schlittermann (HS12-RIPE)
2021-05-27SECURITY: Avoid modification of constant dataHeiko Schlittermann (HS12-RIPE)
2021-05-27SECURITY: Avoid memory corruption in dkim handlingHeiko Schlittermann (HS12-RIPE)
2021-05-27SECURITY: Avoid decrement of dkim_collect_input if already at 0Heiko Schlittermann (HS12-RIPE)
2021-05-27SECURITY: Check overrun rcpt_count integerHeiko Schlittermann (HS12-RIPE)
2021-05-27SECURITY: Fix safeguard against upward traversal in msglog files.Heiko Schlittermann (HS12-RIPE)
2021-05-27SECURITY: Don't miss the very last byte when reading long lines from -HHeiko Schlittermann (HS12-RIPE)
2021-05-27SECURITY: off-by-one in smtp transport (read response)Heiko Schlittermann (HS12-RIPE)
2021-05-27Start documenting the things we changed incompatibly.Phil Pennock
2021-05-27Inline four often-called new functionsPhil Pennock
2021-05-27Fixes for compilationJeremy Harris
2021-05-27SECURITY: rework BDAT receive function handlingPhil Pennock
2021-05-27SECURITY: fix SMTP verb option parsingPhil Pennock
2021-05-27SECURITY: Avoid integer overflow on too many recipientsPhil Pennock
2021-05-27SECURITY: default recipients_max to 50,000Phil Pennock
2021-05-27SECURITY: a second negative store guardPhil Pennock
2021-05-27SECURITY: refuse too small store allocationsPhil Pennock
2021-05-27SECURITY: fix Qualys CVE-2020-PFPZAPhil Pennock
2021-05-27SECURITY: fix Qualys CVE-2020-PFPSNPhil Pennock
2021-05-27SECURITY: fix Qualys CVE-2020-SLCWDPhil Pennock
2021-05-27SECURITY: pick up more argv length checksPhil Pennock
2021-05-27SECURITY: length limits on many cmdline optionsPhil Pennock
2021-05-27Re-ran the conversion of all DH parametersPhil Pennock
2021-05-27gen_pkcs3: Terminate string before calling BH_hex2bn()Simon Arlott
2021-05-27Default config: reject on too many bad RCPTPhil Pennock
2021-05-27Handle SIGINT as we do with SIGTERMHeiko Schlittermann (HS12-RIPE)
2021-05-27Enforce pid_file_path start at "/"Heiko Schlittermann (HS12-RIPE)
2021-05-27testsuite: tidy logs/4520 and confs/4520Heiko Schlittermann (HS12-RIPE)
2021-05-27tidyHeiko Schlittermann (HS12-RIPE)
2021-05-25Use separate line in Received: header for timestampJeremy Harris
2021-05-18Docs: assorted fixesu34
2021-05-18Docs: typoHeiko Schlittermann (HS12-RIPE)
2021-05-17Fix host_name_lookup (Close 2747)Heiko Schlittermann (HS12-RIPE)
2021-05-12Named Queues: fix immediate-delivery. Bug 2743Jeremy Harris
2021-05-11OpenBSD: remove redundant platform defineJeremy Harris
2021-05-11TLS DANE to multiple recipients w/ different DNSSec statusHeiko Schlittermann (HS12-RIPE)
2021-05-11Fix DANE + SNI handling (Bug 2265)Heiko Schlittermann (HS12-RIPE)
2021-05-08DNS: Better handling of SOA when negative-caching lookupsJeremy Harris
2021-05-05wipJeremy Harris
2021-05-04Debug: output dmarc library versionJeremy Harris
2021-05-04Fix ${ipv6norm:}Jeremy Harris
2021-04-27Docs: typo. Closes 2713Heiko Schlittermann (HS12-RIPE)
2021-04-25tidyingJeremy Harris
2021-04-25Testsuite: tidyingJeremy Harris
2021-04-25Taint: enforce untainted ACL text lineJeremy Harris
2021-04-21Fix time usage on non-subtick-resolution platformsSimon Arlott