summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2019-09-26GnuTLS: full-chain OCSP stapling. Bug 1466Jeremy Harris
2019-09-22DNS: do not skip initial two components of SRV & TLSA lookups before ↵Simon Arlott
checking name syntax. The introduction of DKIM added _ to the permitted chars, so those components will pass.
2019-09-22DMARC: promote the support from Experimental to mainlineJeremy Harris
2019-09-22Fix taint-checking on SolarisJeremy Harris
2019-09-21GnuTLS: fix build on older librariesJeremy Harris
2019-09-21GnuTLS: fix build on intermediate-age librariesJeremy Harris
Broken-by: e54893330b
2019-09-20GnuTLS: fix non-OCSP bulidJeremy Harris
Broken-by: 7613df821d
2019-09-20GnuTLS: Move to more-modern stapling APIJeremy Harris
2019-09-19Fix taint-checking on SolarisJeremy Harris
2019-09-19Build: Solaris workaroundsMartin Preen
2019-09-17Docs: Adjust on TLSA, dnssec_request_domainsHeiko Schlittermann (HS12-RIPE)
2019-09-16Consistent logging, always use DKIM instead of mixed DKIM/PDKIMHeiko Schlittermann (HS12-RIPE)
2019-09-10Refuse to open a msglog file with .. in the path.Jeremy Harris
Recent exploits have use this as a step for overwriting system files, and msglog file should always be under the spooldir, so add this as a defence-in-depth tactic
2019-09-10tidyingJeremy Harris
2019-09-08Fix unaligned access (more cleanly) in DNS regative-cachingJeremy Harris
2019-09-08Fix unaligned access in DNS negative-cachingJeremy Harris
2019-09-08string.c: do not interpret '\\' before '\0' (CVE-2019-15846)Heiko Schlittermann (HS12-RIPE)
Add documents about CVE-2019-15846 Add testcase for CVE-2019-15846 Update Changelog Add Announcements (cherry picked from commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f4, 6693563381 and cdc7f9a966)
2019-09-05Support TTL from SOA for NXDOMAIN & NODATA cache entries for dnslists. Bug 1395Jeremy Harris
2019-09-05Build: do not override the system "cc", on Linux and OpenBSDJeremy Harris
2019-09-05tidyingJeremy Harris
2019-09-04Fix taint-checking on FreeBSDJeremy Harris
2019-09-03tidyingJeremy Harris
2019-09-02Build: another go at Solaris workaroundsJeremy Harris
2019-09-01Support TTL from SOA for NXDOMAIN & NODATA cache entries. Bug 1395Jeremy Harris
2019-08-30Always check return from tls_export_cert()Heiko Schlittermann (HS12-RIPE)
Invert the meaning of the return.
2019-08-29Testcase for handling of -H files for excessive long '-KEY' linesHeiko Schlittermann (HS12-RIPE)
Thanks to Qualys for their analysis. This bug was fixed independently by JGH. Tidy.
2019-08-27Fix ${domain:} for a bare local-part input. Bug 2375Jeremy Harris
Broken-by: e2ff8e24f4
2019-08-19typosJeremy Harris
2019-08-19Build: workaround inlining problems on SolarisJeremy Harris
2019-08-19taint SNI values supplied by clientJeremy Harris
2019-08-19Build: workaround inlining problems on SolarisJeremy Harris
2019-08-19taint nonrcpt names read from spoolJeremy Harris
2019-08-19inliningJeremy Harris
2019-08-15Appendfile: when evaluating quota use attemd to link countsJeremy Harris
2019-08-13SPF: split library init from per-connection initJeremy Harris
2019-08-13DMARC: Use exim facilities for DNS lookupsJeremy Harris
This enables teststing with the testsuite
2019-08-13DNS: use tainted memory for all lookupsJeremy Harris
2019-08-13SPF: use exim facilities for DNS lookupsJeremy Harris
This enables testing with the testsuite
2019-08-11DKIM: preferences for verify algorithmsJeremy Harris
2019-08-10Routers: make retry_use_local_part default true when any non-domain ↵Jeremy Harris
condition is present. Bug 2408
2019-08-10Fix ipv6-less buildJeremy Harris
Broken-by: de2e5b3dc6
2019-08-10DKIM: use tainted mem for dns lookupJeremy Harris
2019-08-10constifyJeremy Harris
2019-08-04Lookups: support IPv6 addresses in the spf lookup type. Bug 2378Jeremy Harris
2019-08-03Callouts: filter smtp response for bad chars before using in our smtp ↵Jeremy Harris
response. Bug 2409
2019-08-03compiler quieteningJeremy Harris
2019-08-03Fix bogus taint coding in setenvJeremy Harris
This probably only affects Solaris; where it broke the build
2019-08-03Build: workaround inlining problems on SolarisJeremy Harris
Also fix for difference in syscall types for munmap()
2019-08-02preallocate store for configJeremy Harris
2019-08-02Auth: handle socket read errors in Dovecot authenticatorBruce Lee
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-04 03:43:47 +0000