user/henk/code/exim.git - [no description]

Age	Commit message (Expand)	Author
2021-06-04	debug: fix openssl output	Jeremy Harris
2021-06-03	DKIM: under GnuTLS, permit weak algorithms	Jeremy Harris
2021-05-28	tidying	Jeremy Harris
2021-05-28	tidying	Jeremy Harris
2021-05-28	Logging: avoid pause during log-open under testsuite	Jeremy Harris
2021-05-28	Fix dmarc build	Jeremy Harris
2021-05-27	Fix BDAT issue for body w/o trailing CRLF (again Bug 1974)	Heiko Schlittermann (HS12-RIPE)
2021-05-27	rewrite: revert to unchecked result of parse_extract_address()	Heiko Schlittermann (HS12-RIPE)
2021-05-27	Honour the outcome of parse_extract_address(), testsuite 471	Heiko Schlittermann (HS12-RIPE)
2021-05-27	Update upgrade notes and source about use of seteuid()	Heiko Schlittermann (HS12-RIPE)
2021-05-27	CVE-2020-28007: Link attack in Exim's log directory	Qualys Security Advisory
2021-05-27	CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Avoid modification of constant data in dkim handling	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Leave a clean smtp_out input buffer even in case of read error	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Always exit when LOG_PANIC_DIE is set	Qualys Security Advisory
2021-05-27	CVE-2020-28012: Missing close-on-exec flag for privileged pipe	Qualys Security Advisory
2021-05-27	CVE-2020-28024: Heap buffer underflow in smtp_ungetc()	Qualys Security Advisory
2021-05-27	CVE-2020-28009: Integer overflow in get_stdinput()	Qualys Security Advisory
2021-05-27	CVE-2020-28015+28021: New-line injection into spool header file	Qualys Security Advisory
2021-05-27	CVE-2020-28026: Line truncation and injection in spool_read_header()	Heiko Schlittermann (HS12-RIPE)
2021-05-27	CVE-2020-28022: Heap out-of-bounds read and write in extract_option()	Heiko Schlittermann (HS12-RIPE)
2021-05-27	CVE-2020-28017: Integer overflow in receive_add_recipient()	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Refuse negative and large store allocations	Heiko Schlittermann (HS12-RIPE)
2021-05-27	CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()	Heiko Schlittermann (HS12-RIPE)
2021-05-27	CVE-2020-28011: Heap buffer overflow in queue_run()	Qualys Security Advisory
2021-05-27	CVE-2020-28010: Heap out-of-bounds write in main()	Heiko Schlittermann (HS12-RIPE)
2021-05-27	CVE-2020-28018: Use-after-free in tls-openssl.c	Qualys Security Advisory
2021-05-27	CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()	Qualys Security Advisory
2021-05-27	CVE-2020-28014, CVE-2021-27216: PID file handling	Heiko Schlittermann (HS12-RIPE)
2021-05-27	Add priv.c: reworked version of priv dropping code	Heiko Schlittermann (HS12-RIPE)
2021-05-27	CVE-2020-28008: Assorted attacks in Exim's spool directory	Heiko Schlittermann (HS12-RIPE)
2021-05-27	CVE-2020-28019: Failure to reset function pointer after BDAT error	Jeremy Harris
2021-05-27	SECURITY: smtp_out: Leave a clean input buffer, even in case of read error	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Avoid modification of constant data	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Avoid memory corruption in dkim handling	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Avoid decrement of dkim_collect_input if already at 0	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Check overrun rcpt_count integer	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Fix safeguard against upward traversal in msglog files.	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: Don't miss the very last byte when reading long lines from -H	Heiko Schlittermann (HS12-RIPE)
2021-05-27	SECURITY: off-by-one in smtp transport (read response)	Heiko Schlittermann (HS12-RIPE)
2021-05-27	Start documenting the things we changed incompatibly.	Phil Pennock
2021-05-27	Inline four often-called new functions	Phil Pennock
2021-05-27	Fixes for compilation	Jeremy Harris
2021-05-27	SECURITY: rework BDAT receive function handling	Phil Pennock
2021-05-27	SECURITY: fix SMTP verb option parsing	Phil Pennock
2021-05-27	SECURITY: Avoid integer overflow on too many recipients	Phil Pennock
2021-05-27	SECURITY: default recipients_max to 50,000	Phil Pennock
2021-05-27	SECURITY: a second negative store guard	Phil Pennock
2021-05-27	SECURITY: refuse too small store allocations	Phil Pennock
2021-05-27	SECURITY: fix Qualys CVE-2020-PFPZA	Phil Pennock