exim4 (4.80-3ubuntu1) quantal; urgency=low
* Merge from Debian unstable. Remaining changes:
- debian/control: Don't declare a Provides: default-mta; in Ubuntu,
we want postfix to be the default.
exim4 (4.80-3) unstable; urgency=low
* Pull 75_openssl_sni.diff from upstream. - Segfault caused by NULL
dereference if Exim is built using OpenSSL, tls_sni is used and a
forced expansion failure is configured.
* Pull 76_tls_dh_min_bits.diff (and the corresponding doc change
77_docsfortls_dh_min_bits.diff) from upstream. Adds a new SMTP transport
option tls_dh_min_bits for setting the minimal size of DH parameters.
* Add macro TLS_DH_MIN_BITS for setting the tls_dh_min_bits smtp transport
option. Closes: #676563
* [lintian] Stop shipping empty directory /usr/share/exim4 in exim4-base.
exim4 (4.80-2) unstable; urgency=low
* [Brown paper bag] actually target unstable in changelog.
exim4 (4.80-1) experimental; urgency=low
* New upstream version, identical to rc7.
* Add a missing piece of documentation to update-exim4.conf.8. DCreadhost
is not only used for rewriting, in satellite setup it is also
the host where local mail is delivered to. (Thanks, Regid Ichira).
Closes: #675712
exim4 (4.80~rc7-1) experimental; urgency=low
* New upstream version.
* Let debian/EDITME.openssl.exim4-light.diff apply again.
exim4 (4.80~rc6-1) experimental; urgency=low
* Ship newly available GnuTLS-FAQ.txt in exim4-base.
* Upstream's handling of GnuTLS DH parameters has changed, hardcoded
parameters (from RFCs are used by default. See
/usr/share/doc/exim4-base/README.UPDATING* for details. Stop shipping
/usr/share/exim4/exim4_refresh_gnutls-params /usr/share/exim4/timeout.pl
and /var/spool/exim4/gnutls-params-2236.
exim4 (4.80~rc5-1) experimental; urgency=low
* New upstream version.
exim4 (4.80~rc4-1) experimental; urgency=low
* New upstream version.
+ Unfuzz 50_localscan_dlopen.dpatch
+ Drop 80_revert_stringformatprintf.diff, superseded upstream.
+ Default DH param size switched to 2236 for NSS compat. Update
generation script and shipped parameters.
exim4 (4.80~rc2-1) experimental; urgency=low
* Fix typo in retry/30_exim4-config (s/frequenzy/frequency/) (Thanks, Regid
Ichira). Closes: #646338
* dpkg-buildflags supersedes hardening-wrapper. set
DEB_BUILD_MAINT_OPTIONS := hardening=+bindnow,+pie to use features enabled
by hardening-wrapper by default. Make sure to always set -Wall.
* List mapppings between debconf choices ("mail sent by smarthost; no local
mail" et al.) and corresponding values of the DC_eximconfig_configtype
macro in update-exim4.conf(8). Closes: #651883
* README.Debian.*: Correct documentation of the lowuid_aliases router. - The
macro is named FIRST_USER_ACCOUNT_UID instead of FIRST_USER_UID. (Thanks,
Yubao Liu) Closes: #653058
* add more verbose help to /etc/default/exim4. Closes: #653272
* Updated French debconf templates translation. (thanks for proofreading,
debian-l10n-french!) Closes: #668475
* Fix typo usualy in update-exim4.conf.8.
* Add source lintian override (debian/source/lintian-overrides) for
binaries-have-file-conflict exim4-daemon-heavy-dbg exim4-daemon-light-dbg.
*-daemon-dbg depends on the respective -daemon, and the daemon-packages
conflict with each other.
* New upstream version:
+ Unfuzz patches
+ Update 66_enlarge-dh-parameters-size.dpatch. This is now a noop if built
against gnutls >= 2.12.
+ Default DH param size is 2432, update generation script and shipped
parameters.
+ Unfuzz/update */EDITME/*. Update debian/example.conf.md5.
+ 80_revert_stringformatprintf.diff. Do not mark string_format() as
PRINTF_FUNCTION(3,4) to allow compilation with -Wformat
-Werror=format-security
+ Sets accept_8bitmime = true by default. Closes: #445013
+ Uses GnuTLS priority string for configuration. (See NEWS.Debian)
Closes: #624041
exim4 (4.77-1) unstable; urgency=low
* Fix typo in exim4-config_files.5. (Thanks, Regid Ichira) Closes: #645283
* New upstream stable release. (No major changes compared to rc4)
* Upload to unstable.
exim4 (4.77~rc4-1) experimental; urgency=low
* New upstream release candidate.
+ drop patches included in this release.
(80_gnutls_certificate_verify_peers2.diff 80_gnutls_initrc.diff
80_TLS1.2-and-TLS1.1-support.diff)
+ New expansion conditions, "inlist", "inlisti".
+ Exim no longer performs string expansion on the second string of
the match_* expansion conditions: "match_address", "match_domain",
"match_ip" & "match_local_part". Named lists can still be used. The
previous behavior made it too easy to create (remotely) vulnerable
configurations. A more detailed rationale and explanation can be found
on
https://lists.exim.org/lurker/message/20111003.122326.fbcf32b7.en.html
+ doc/pcrepattern.txt is not shipped anymore as part of the exim tarball
(and therefore the Debian package suite.)
* Make use of /usr/share/dpkg/buildflags.mk if available.
* Change build system to build each binary variant in a separate copy of
the source tree instead of re-using the copy and moving away the results
after build. The old approach stopped working since upstream added a
dependency on make all to make install. - As we were changing parts of
tree (Local/Makefile) after the build this caused an (incorrect) rebuild
on make install.
exim4 (4.76-4) experimental; urgency=low
* 80_TLS1.2-and-TLS1.1-support.diff (pulled from upstream GIT gnutls_fixes
branch): Enable TLS1.2 and TLS1.1
* 80_gnutls_certificate_verify_peers2.diff, 80_gnutls_initrc.diff (pulled
from upstream GIT gnutls_fixes branch): Use
gnutls_certificate_verify_peers2() instead of
gnutls_certificate_verify_peers(). The deprecated function was dropped in
GnuTLS 3.x. Closes: #624082
-- Clint Byrum <email address hidden> Thu, 14 Jun 2012 15:28:08 -0700