delta/exim4.git - git.exim.org: exim.git

	Commit message (Expand)	Author	Age	Files	Lines
*	Fix tainted message for fakerejectexim-4.94+fixes	Jeremy Harris	2021-07-10	2	-1/+7
*	Named Queues: fix immediate-delivery. Bug 2743	Jeremy Harris	2021-05-12	5	-2/+21
*	Merge branch 'exim-4.94+fixes' of ssh://git.exim.org/home/git/exim into exim-...	Heiko Schlittermann (HS12-RIPE)	2021-05-09	4	-4/+7
\|\
\| *	Fix ${ipv6norm:}	Jeremy Harris	2021-05-04	4	-4/+7
* \|	Cleanup docs on cve-2020-qualys, point to the Exim websiteexim-4.94.1	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-0/+2
* \|	rewrite: revert to unchecked result of parse_extract_address()	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-1/+17
* \|	Honour the outcome of parse_extract_address(), testsuite 471	Heiko Schlittermann (HS12-RIPE)	2021-04-28	6	-16/+111
* \|	CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()	Qualys Security Advisory	2021-04-28	3	-3/+5
* \|	Remove merge artifact	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-1/+0
* \|	Update upgrade notes and source about use of seteuid()	Heiko Schlittermann (HS12-RIPE)	2021-04-28	2	-10/+14
* \|	CVE-2020-28007: Link attack in Exim's log directory	Qualys Security Advisory	2021-04-28	5	-182/+234
* \|	CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-3/+3
* \|	SECURITY: Avoid modification of constant data in dkim handling	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-5/+5
* \|	SECURITY: Leave a clean smtp_out input buffer even in case of read error	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-1/+2
* \|	SECURITY: Always exit when LOG_PANIC_DIE is set	Qualys Security Advisory	2021-04-28	2	-0/+5
* \|	CVE-2020-28012: Missing close-on-exec flag for privileged pipe	Qualys Security Advisory	2021-04-28	2	-0/+8
* \|	CVE-2020-28024: Heap buffer underflow in smtp_ungetc()	Qualys Security Advisory	2021-04-28	2	-0/+6
* \|	CVE-2020-28009: Integer overflow in get_stdinput()	Qualys Security Advisory	2021-04-28	1	-1/+18
* \|	CVE-2020-28015+28021: New-line injection into spool header file	Qualys Security Advisory	2021-04-28	1	-5/+18
* \|	CVE-2020-28026: Line truncation and injection in spool_read_header()	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-16/+32
* \|	CVE-2020-28022: Heap out-of-bounds read and write in extract_option()	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-9/+14
* \|	CVE-2020-28017: Integer overflow in receive_add_recipient()	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-6/+6
* \|	SECURITY: Refuse negative and large store allocations	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-6/+12
* \|	CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-6/+1
* \|	CVE-2020-28011: Heap buffer overflow in queue_run()	Qualys Security Advisory	2021-04-28	1	-4/+10
* \|	CVE-2020-28010: Heap out-of-bounds write in main()	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-6/+3
* \|	CVE-2020-28018: Use-after-free in tls-openssl.c	Qualys Security Advisory	2021-04-28	1	-4/+0
* \|	CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()	Qualys Security Advisory	2021-04-28	1	-1/+1
* \|	CVE-2020-28014, CVE-2021-27216: PID file handling	Heiko Schlittermann (HS12-RIPE)	2021-04-28	4	-43/+149
* \|	Add priv.c: reworked version of priv dropping code	Heiko Schlittermann (HS12-RIPE)	2021-04-28	14	-73/+81
* \|	CVE-2020-28008: Assorted attacks in Exim's spool directory	Heiko Schlittermann (HS12-RIPE)	2021-04-28	11	-57/+77
* \|	CVE-2020-28019: Failure to reset function pointer after BDAT error	Jeremy Harris	2021-04-28	1	-1/+14
* \|	SECURITY: smtp_out: Leave a clean input buffer, even in case of read error	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-2/+3
* \|	SECURITY: Avoid modification of constant data	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-8/+9
* \|	SECURITY: Avoid memory corruption in dkim handling	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-6/+8
* \|	SECURITY: Avoid decrement of dkim_collect_input if already at 0	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-1/+1
* \|	SECURITY: Check overrun rcpt_count integer	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-1/+5
* \|	SECURITY: Fix safeguard against upward traversal in msglog files.	Heiko Schlittermann (HS12-RIPE)	2021-04-28	2	-1/+3
* \|	SECURITY: Don't miss the very last byte when reading long lines from -H	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-1/+1
* \|	SECURITY: off-by-one in smtp transport (read response)	Heiko Schlittermann (HS12-RIPE)	2021-04-28	1	-2/+2
* \|	Start documenting the things we changed incompatibly.	Phil Pennock	2021-04-28	1	-0/+18
* \|	Inline four often-called new functions	Phil Pennock	2021-04-28	2	-6/+6
* \|	Fixes for compilation	Jeremy Harris	2021-04-28	15	-257/+309
* \|	SECURITY: rework BDAT receive function handling	Phil Pennock	2021-04-28	3	-19/+55
* \|	SECURITY: fix SMTP verb option parsing	Phil Pennock	2021-04-28	2	-2/+6
* \|	SECURITY: Avoid integer overflow on too many recipients	Phil Pennock	2021-04-28	2	-0/+12
* \|	SECURITY: default recipients_max to 50,000	Phil Pennock	2021-04-28	4	-3/+5
* \|	SECURITY: a second negative store guard	Phil Pennock	2021-04-28	1	-0/+7
* \|	SECURITY: refuse too small store allocations	Phil Pennock	2021-04-28	2	-1/+14
* \|	SECURITY: fix Qualys CVE-2020-PFPZA	Phil Pennock	2021-04-28	2	-0/+8