Change log for exim4 package in Debian

exim4 (4.80~rc7-1) experimental; urgency=low


  * New upstream version.
  * Let debian/EDITME.openssl.exim4-light.diff apply again.

 -- Andreas Metzler <email address hidden>  Tue, 29 May 2012 19:33:07 +0200

exim4 (4.80~rc6-1) experimental; urgency=low


  * Ship newly available GnuTLS-FAQ.txt in exim4-base.
  * Upstream's handling of GnuTLS DH parameters has changed, hardcoded
    parameters (from RFCs are used by default. See
    /usr/share/doc/exim4-base/README.UPDATING* for details. Stop shipping
    /usr/share/exim4/exim4_refresh_gnutls-params /usr/share/exim4/timeout.pl
    and /var/spool/exim4/gnutls-params-2236.

 -- Andreas Metzler <email address hidden>  Sun, 27 May 2012 18:46:48 +0200

exim4 (4.80~rc5-1) experimental; urgency=low


  * New upstream version.

 -- Andreas Metzler <email address hidden>  Thu, 24 May 2012 20:20:24 +0200

exim4 (4.80~rc4-1) experimental; urgency=low


  * New upstream version.
    + Unfuzz 50_localscan_dlopen.dpatch
    + Drop 80_revert_stringformatprintf.diff, superseded upstream.
    + Default DH param size switched to 2236 for NSS compat. Update
      generation script and shipped parameters.

 -- Andreas Metzler <email address hidden>  Mon, 21 May 2012 20:00:18 +0200

exim4 (4.80~rc2-1) experimental; urgency=low


  * Fix typo in retry/30_exim4-config (s/frequenzy/frequency/) (Thanks, Regid
    Ichira). Closes: #646338
  * dpkg-buildflags supersedes hardening-wrapper. set
    DEB_BUILD_MAINT_OPTIONS := hardening=+bindnow,+pie to use features enabled
    by hardening-wrapper by default. Make sure to always set -Wall.
  * List mapppings between debconf choices ("mail sent by smarthost; no local
    mail" et al.) and corresponding values of the DC_eximconfig_configtype
    macro in update-exim4.conf(8). Closes: #651883
  * README.Debian.*: Correct documentation of the lowuid_aliases router. - The
    macro is named FIRST_USER_ACCOUNT_UID instead of FIRST_USER_UID. (Thanks,
    Yubao Liu) Closes: #653058
  * add more verbose help to /etc/default/exim4. Closes: #653272
  * Updated French debconf templates translation. (thanks for proofreading,
    debian-l10n-french!) Closes: #668475
  * Fix typo usualy in update-exim4.conf.8.
  * Add source lintian override (debian/source/lintian-overrides) for
    binaries-have-file-conflict exim4-daemon-heavy-dbg exim4-daemon-light-dbg.
    *-daemon-dbg depends on the respective -daemon, and the daemon-packages
    conflict with each other.
  * New upstream version:
    + Unfuzz patches
    + Update 66_enlarge-dh-parameters-size.dpatch. This is now a noop if built
      against gnutls >= 2.12.
    + Default DH param size is 2432, update generation script and shipped
      parameters.
    + Unfuzz/update */EDITME/*. Update debian/example.conf.md5.
    + 80_revert_stringformatprintf.diff. Do not mark string_format() as
      PRINTF_FUNCTION(3,4) to allow compilation with -Wformat
      -Werror=format-security
    + Sets accept_8bitmime = true by default. Closes: #445013
    + Uses GnuTLS priority string for configuration. (See NEWS.Debian)
      Closes: #624041

 -- Andreas Metzler <email address hidden>  Sun, 20 May 2012 15:57:15 +0200

exim4 (4.77-1) unstable; urgency=low


  * Fix typo in exim4-config_files.5. (Thanks, Regid Ichira) Closes: #645283
  * New upstream stable release. (No major changes compared to rc4)
  * Upload to unstable.

 -- Andreas Metzler <email address hidden>  Sat, 22 Oct 2011 18:00:11 +0200

exim4 (4.77~rc4-1) experimental; urgency=low


  * New upstream release candidate.
    + drop patches included in this release.
      (80_gnutls_certificate_verify_peers2.diff 80_gnutls_initrc.diff
      80_TLS1.2-and-TLS1.1-support.diff)
    + New expansion conditions, "inlist", "inlisti".
    + Exim no longer performs string expansion on the second string of
      the match_* expansion conditions: "match_address", "match_domain",
      "match_ip" & "match_local_part". Named lists can still be used.  The
      previous behavior made it too easy to create (remotely) vulnerable
      configurations. A more detailed rationale and explanation can be found
      on 
      https://lists.exim.org/lurker/message/20111003.122326.fbcf32b7.en.html
    + doc/pcrepattern.txt is not shipped anymore as part of the exim tarball
      (and therefore the Debian package suite.)
  * Make use of /usr/share/dpkg/buildflags.mk if available.
  * Change build system to build each binary variant in a separate copy of
    the source tree instead of re-using the copy and moving away the results
    after build. The old approach stopped working since upstream added a
    dependency on make all to make install. - As we were changing parts of
    tree (Local/Makefile) after the build this caused an (incorrect) rebuild
    on make install.

 -- Andreas Metzler <email address hidden>  Sat, 08 Oct 2011 13:07:35 +0200

exim4 (4.69-9+lenny4) stable-security; urgency=high


  * Non-maintainer upload by the Security Team.
  * Fix regression: exim -bf no longer works as untrusted user.
    Closes: #611572

 -- Stefan Fritsch <email address hidden>  Sun, 30 Jan 2011 21:37:49 +0100

exim4 (4.76-4) experimental; urgency=low


  * 80_TLS1.2-and-TLS1.1-support.diff (pulled from upstream GIT gnutls_fixes
    branch): Enable TLS1.2 and TLS1.1
  * 80_gnutls_certificate_verify_peers2.diff, 80_gnutls_initrc.diff  (pulled
    from upstream GIT gnutls_fixes branch): Use
    gnutls_certificate_verify_peers2() instead of
    gnutls_certificate_verify_peers(). The deprecated function was dropped in
    GnuTLS 3.x. Closes: #624082

 -- Andreas Metzler <email address hidden>  Sun, 18 Sep 2011 12:08:29 +0200

exim4 (4.76-3) unstable; urgency=low


  * [exim4-base.cron.daily] Correct invocation of mail(1), options need to be
    specified before arguments for compatibility with heirloom-mailx (Thanks,
    Andreas Schiweck). Closes: #629314
  * [exim4-base.exim4.init] Use echo instead of log_failure_msg for the panic
    log warning. Closes: #629610
  * [exim4-base.postinst] Also take care of ratelimit db on bdbd upgrades.
    Closes: #630985
  * Update Debian exim webpage URL. Closes: #641126
  * Do not run upgrade test for 4.67-5 on exim4.conf.template if split config
    is used and vice versa. Closes: #577633
  * [lintian] Do not specify priority in binary package stanzas, unless it
    deviates from the source package priority setting.
  * [lintian] Drop unused lintian override binary-without-manpage
    usr/sbin/exim.
  * [lintian] Improve on short descriptions of *-dbg packages.

 -- Andreas Metzler <email address hidden>  Sun, 18 Sep 2011 11:49:13 +0200

Available diffs

• diff from 4.76-2 to 4.76-3 (3.4 KiB)

exim4 (4.72-6+squeeze2) stable-security; urgency=low
  * [83_dkimexpand.diff] Pulled from upstream git. Do not use string expansion    on DKIM domain or identity. CVE-2011-1407. -- Andreas Metzler <email address hidden>  Thu, 12 May 2011 19:05:10 +0200

exim4 (4.76-2) unstable; urgency=low
  * debian/rules: Remove test/ and test-stamp on clean.  * Handle BerkeleyDB upgrades more gracefully. Instead of checking Debian    version numbers compare DB-version of old exim (stored by postinst in    /var/lib/exim4/berkeleydbvers.txt) with currently used DB-version    (hardcoded at build time in exim4-base.postinst).  * [exim4-base.postinst exim4-config.postinst] Do away with unnecessary    chowns by dropping them or limiting to upgrades from 4.30. -- Andreas Metzler <email address hidden>  Sun, 29 May 2011 18:21:03 +0200

exim4 (4.76-1) unstable; urgency=low
  * New upstream version.  * Drop 80_match_isinlist.diff (included upstream). -- Andreas Metzler <email address hidden>  Mon, 09 May 2011 19:12:09 +0200

exim4 (4.76~RC1-3) experimental; urgency=low
  * 80_match_isinlist.diff pulled from upstream git. -- Andreas Metzler <email address hidden>  Sun, 08 May 2011 14:44:20 +0200

exim4 (4.76~RC1-1) experimental; urgency=low
  * New upstream version.  * Drop superfluous patches. 80_ldap_require_cert-work.diff    81_negatebool.diff 82_dkimpercent.diff  * [Lintian] Fix grammar error in manpage (spelling-error-in-manpage    update-exim4defaults.8.gz allows to allows one to).  * [debian/minimaltest]: Added. Try to run a minimal functionality test after    building exim. (Currently only supported if the build-system has a    Debian-exim user.) -- Andreas Metzler <email address hidden>  Fri, 06 May 2011 20:27:56 +0200

exim4 (4.75-3) unstable; urgency=high
  * [debian/rules] Fix dependencies and targets, speeding up package build.    Previously everything was compiled twice.  * Patches pulled from upstream git:    +81_negatebool.diff Negating the $bool expansion condition did not work.    +82_dkimpercent.diff dkim sig logged to paniclog. Closes: #624670 -- Andreas Metzler <email address hidden>  Fri, 06 May 2011 20:08:51 +0200

exim4 (4.75-2) unstable; urgency=low
  * clamav socket on Debian is clamd:/var/run/clamav/clamd.ctl, fix    configuration example accordingly. (Thanks, Roman V. Nikolaev)    Closes: #622111  * Use on libdb5.1-dev (instead of 4.8), zap hints db on upgrade from <=    4.75-1. Closes: #621388  * Enable hardening options. (Last difference to Ubuntu except for not being    the default-mta there.) Closes: #542726 -- Andreas Metzler <email address hidden>  Sat, 16 Apr 2011 14:45:36 +0200

exim4 (4.75-1) unstable; urgency=low
  * New upstream version.  * 80_ldap_require_cert-work.diff Pulled from upstream git. The new    ldap_require_cert option would segfault if used. -- Andreas Metzler <email address hidden>  Mon, 28 Mar 2011 19:24:55 +0200

exim4 (4.75~rc3-1) experimental; urgency=low
  * New upstream version. -- Andreas Metzler <email address hidden>  Thu, 03 Mar 2011 19:10:06 +0100

exim4 (4.75~rc2-1) experimental; urgency=low
  * New upstream version.    + Fixes exiqgrep "Line mismatch" error on messages without size info.      Closes: #528625    + Restore default SIGPIPE handler for child_open_uid. Closes: #573779  * Enable verbose compilation. -- Andreas Metzler <email address hidden>  Sun, 27 Feb 2011 11:59:45 +0100

exim4 (4.74-2) unstable; urgency=low
  * Upload to unstable. -- Andreas Metzler <email address hidden>  Thu, 24 Feb 2011 19:02:07 +0100

exim4 (4.72-6) unstable; urgency=high
  * 80_4.74_filtertesting.diff: Do not abort when setgid fails if privileges    were dropped. This fixes a regression from 4.72-2, it was not possible to    test filter files with exim4 -bf anymore. -- Andreas Metzler <email address hidden>  Mon, 31 Jan 2011 19:05:48 +0100

exim4 (4.74-1) experimental; urgency=low
  * 4.74 release, should build on hurd again.  * Fix some lintian --pedantic issues: copyright-refers-to-symlink-license    maintainer-script-without-set-e debian-control-has-unusual-field-spacing -- Andreas Metzler <email address hidden>  Sat, 29 Jan 2011 15:39:51 +0100

exim4 (4.72-5) unstable; urgency=medium
  * 80_4.74_deliverylogging.patch (Pulled from upstream git): If a non-debug    daemon was invoked with a non-whitelisted macro, then logs from after    attempting delivery would be silently lost, including for successful    delivery.  This log-loss bug was introduced as part of the security    lockdown for fixing CVE-2010-4345. Closes: #610611 -- Andreas Metzler <email address hidden>  Sat, 29 Jan 2011 14:33:36 +0100

exim4 (4.74~rc2-1) experimental; urgency=low
  * In spf example use spf-tools-perl's spfquery instead of the one from    libmail-spf-query-perl. Do not try to use unimplemented best-guess    support. Update Suggests accordingly. Closes: #608336  * Add headers in ACL by using the add_header modifier instead of "message".    (This modifier has been available since 4.61.) Closes: #609308  * New upstream version.    + includes the fix for CVE-2011-0017    + If a non-debug daemon was invoked with a non-whitelisted macro, then      logs from after attempting delivery would be silently lost, including      for successful delivery.  This log-loss bug was introduced in 4.73      as part of the security lockdown. Closes: #610611    + Update some patches. -- Andreas Metzler <email address hidden>  Sun, 23 Jan 2011 14:02:36 +0100

exim4 (4.72-4) unstable; urgency=medium
  * In spf example use spf-tools-perl's spfquery instead of the one from    libmail-spf-query-perl. Do not try to use unimplemented best-guess    support. Update Suggests accordingly. Closes: #608336  * 80_4.74_CVE-2011-0017.patch (Pulled from upstream git): Check return    values of setgid/setuid. This is a privilege escalation vulnerability    whereby the Exim run-time user can cause root to append content of the    attacker's choosing to arbitrary files. -- Andreas Metzler <email address hidden>  Sat, 22 Jan 2011 17:48:19 +0100

exim4 (4.69-9+lenny1) stable-security; urgency=high
  * Non-maintainer upload by the Security Team.  * Fix SMTP file descriptors being leaked to processes invoked with ${run...}  * Fix memory corruption issue in string_format(). CVE-2010-4344  * Fix potential memory pool corruption issue in internal_lsearch_find(). -- Stefan Fritsch <email address hidden>  Fri, 10 Dec 2010 13:25:07 +0100

exim4 (4.73~rc1-1) experimental; urgency=low
  * New upstream release candidate.  * Drop included patches. 80_4.73rc1_*, 40_dkimnotinpaniclog.diff.  * Update 31_eximmanpage.dpatch.  * exim4 now uses INSTREAM (added in clamav 0.95) instead of STREAM when    talking to clamav. exim4-daemon-heavy therefore Breaks: clamav-daemon    (<< 0.95).  * Unfuzz EDITME*diff.  * Dependency changes:    + Drop exim4-config's conflicts with bash (<< 2.05). This was relevant      pre-sarge.    + Drop exim4-daemon-* dependency on exim4-base (>> 4.71-2). This one is      superfluous because of of the dependency on       exim4-base (>= ${Upstream-Version}).    + exim4-config breaks instead of conflicts with pre-DKIM (i.e. << 4.69.1)      exim4-daemon.    + exim4-base breaks instead of conflicts with <<${Upstream-Version} daemon      packages.   * Add Vcs-Svn and Vcs-Browser fields to debian/control.   * Build depend on libmysqlclient-dev | libmysqlclient15-dev instead of      libmysqlclient15-dev. libmysqlclient-dev is not a virtual package     anymore. Closes: #590218   * Use db_settitle unconditionally, even etch supports this. Drop unneeded     lintian override exim4-config: settitle-requires-versioned-depends. -- Andreas Metzler <email address hidden>  Mon, 27 Dec 2010 19:48:19 +0100

exim4 (4.72-3) unstable; urgency=low
  * [README.Debian*] Correct command for manual paniclog rotation. (Thanks,    Jörg Sommer) Closes: #602188  * 67_unnecessaryCopt.diff: Do not use exim's -C option in utility scripts.    This would not work with ALT_CONFIG_PREFIX.  * Pull changes related to fixing CVE-2010-4345 from exim 4.73 rc1.    Closes: #606527    + 1_cfile_norw_eximuid: Don't allow a configure file which is writeable by      the Exim user or group.    + 2_permcheck_configurefile: Check configure file permissions even for      non-default files if still privileged.    + 3_remove_ALT_CONFIG_ROOT_ONLY: Remove ALT_CONFIG_ROOT_ONLY build option,      effectively making it always true.    + 4_FD_CLOEXEC: Set FD_CLOEXEC on SMTP sockets after forking in the      daemon, to ensure  that rogue child processes cannot use them.    + 5_TRUSTED_CONFIG_LIST: Add TRUSTED_CONFIG_LIST compile option.    + 6_nonroot_system_filter_user: If the system filter needs to be run as      root, let that be explicitly configured.  The default is now the Exim      run-time user.    + 7_filter_D_option: Add a (compiletime) whitelist of acceptable values      for the -D option.    + 8_updatedocumentation: Update documentation to reflect the changes.  * Build with WHITELIST_D_MACROS=OUTGOING. Post patch 7_filter_D_option exim    will not regain root privileges (usually necessary for local delivery) if    the -D option was used. Macro identifiers listed in WHITELIST_D_MACROS are    exempted from this restriction. mailscanner (4.79.11-2.2) uses -DOUTGOING.  * Build with TRUSTED_CONFIG_LIST=/etc/exim4/trusted_configs. Post patch    3_remove_ALT_CONFIG_ROOT_ONLY exim will not re-gain root privileges    (usually necessary for local delivery) if the -C option was used. This    makes it impossible to start a fully functional damon with an alternate    configuration file. /etc/exim4/trusted_configs (can) contain a list of    filenames (one per line, full path given) to which this restriction does    not apply. -- Andreas Metzler <email address hidden>  Sun, 26 Dec 2010 15:13:08 +0100

exim4 (4.72-2) unstable; urgency=low


  [ Marc Haber ]
  * Apply patch to russian (ru) debconf template, thanks to Тим
    Алексеевский and Tim Alexeevsky. Closes: #576202
  * fix exim4-config_files man page, mention
    {host|sender}_local_deny_exceptions instead of
    local_{host|sender}_whitelist. Thanks to Fabien André in #578176
  * add !acl = acl_local_deny_exceptions to defer stanzas in SPF code.
    Thanks to Fabien André. Closes: #578176
  * Re-work config.autogenerated header to more exactly reflect
    configuration source. (mh) Closes: #593984
  
  [ Andreas Metzler ]
  * Fix getopt invocation to make update-exim4.conf.template -o work. (Thank
    you Matthew W. S. Bell) Closes: #590333
  * 40_dkimnotinpaniclog.diff pulled from upstream git. Stop logging
    non-critical DKIM errors in paniclog. Closes: #567876
  * Debconf translations:
    - Danish. Closes: #592792

 -- Andreas Metzler <email address hidden>  Sat, 30 Oct 2010 13:38:26 +0200

exim4 (4.72-1) unstable; urgency=low


  * New upstream release. (Identical to the git snapshot previously 
    uploaded to experimental.)

 -- Andreas Metzler <email address hidden>  Thu, 03 Jun 2010 17:42:52 +0200

exim4 (4.72~20100529-1) experimental; urgency=low


  * Git snapshot 20100529.
    + Fix documentation for exipick -bpra. #574778
    + CVE-2010-2024: Protect against symlink attacks on MBX lockfile in /tmp.
      (Debian's default configuration does not use MBX format, but the
      exim4-daemon-heavy binary supports MBX.)
    + CVE-2010-2023 Prevent hardlink attack on mbox sticky mail directory.
      (Probably not relevant for Debian systems at all, since the mail spool
      is 2775 root:mail.)
    + Dovecot authenticator ignores unknown keywords, making it compatible
      with version 1.1 of Dovecot authentication protocol. (= dovecot 2.0).
    See Changelog for complete list.
   * Drop patches included upstream: 36_typoinexipick.diff
     20_PDKIM-Upgrade-PolarSSL.diff.

 -- Andreas Metzler <email address hidden>  Sun, 30 May 2010 14:01:52 +0200

exim4 (4.71-4) unstable; urgency=low


  * Drop unneeded lintian overrides.
    + description-contains-homepage
    + debian/source.lintian-overrides dbg-package-missing-depends exim4-dbg.
    + partially-translated-question
    + maintainer-script-needs-depends-on-update-inetd
    + possible-bashism-in-maintainer-script
    + binary-without-manpage
    + possible-debconf-note-abuse
    + changelog-not-compressed-with-max-compression
  * Lintian informational hints:
    + hyphen-used-as-minus-sign. debian/manpages/exim4-config_files.5
      debian/manpages/update-exim4.conf.8 debian/manpages/exiwhat.8
  * Use dh_lintian.
  * Fix sourcing of lsb-functions in init-script. Test for existence of
    /usr/lib/exim4/exim4 first. Unconditionally read /lib/lsb/init-functions.
    If they are not present the package's dependencies are not installed.
    Bump dependency on lsb-base to 3.0-6. (log_action_*)
  * Update reference to spec.txt in README.Debian. Closes: #568051
  * Invoke spfquery as spfquery.mail-spf-query-perl. There are three different
    implementations of spfquery in Debian, with incompatible commandline
    switches and different exit codes. Closes: #573956

 -- Andreas Metzler <email address hidden>  Thu, 25 Mar 2010 17:34:30 +0100

exim4 (4.71-3) unstable; urgency=low


  * exim4-base.cron.daily: Do not run exim_tidydb on Berkeley DB logfiles.
    Closes: #501892
  * exim4-base.postinst: If exim_dumpdb fails to read a hints-db also remove
    Berkeley DB logfiles.
  * Switch to Berkeley DB 4.8 (from 4.6). Zap hints db on upgrade. Temporarily
    make -daemon packages depend on exim4-base >> 4.71-2. (This can be removed
    after the next upstream release.)
    Closes: #548479
  * control: Drop bzip2 from Build-Depends. Use line-wrapping for
    Build-Depends.
  * 36_typoinexipick.diff: Fix a typo in exipick manpage. (Lintian).
  * exim4-base.postinst: Redirect status message to stderr.

 -- Andreas Metzler <email address hidden>  Fri, 01 Jan 2010 13:41:44 +0100

exim4 (4.71-2) unstable; urgency=low


  * Pulled from upstream: 20_PDKIM-Upgrade-PolarSSL.diff. Update files copied
    from PolarSSL to 0.12.1.
  * Add example file to set smarthost from /etc/network/interfaces (mh)
  * Add DKIM_* macros on remote smtp transports for setting the corresponding
    dkim_* options.
  * Upload to unstable.

 -- Andreas Metzler <email address hidden>  Sat, 12 Dec 2009 13:24:21 +0100

exim4 (4.70~rc4-1) experimental; urgency=low


  * New upstream version.

 -- Andreas Metzler <email address hidden>  Wed, 11 Nov 2009 19:04:35 +0100

exim4 (4.70~cvs+20091030-1) experimental; urgency=low


  * New upstream snapshot.

 -- Andreas Metzler <email address hidden>  Sat, 31 Oct 2009 10:08:55 +0100

exim4 (4.70~cvs+20091026-1) experimental; urgency=low


  * New snapshot.
    + Fixes segfault in dovecot authenticator. Closes: #551106
    + Improved documentation regarding certifacte verification on outgoing
      SMTP connections. Closes: #544472
  * Drop 40_boolean_redefine_protect.dpatch - included upstream.
  * Drop unapplied superfluous patches from diff: 36_pcre 37_exiwhatpsmisc.

 -- Andreas Metzler <email address hidden>  Mon, 26 Oct 2009 16:09:32 +0100

exim4 (4.70~cvs+20091017-1) experimental; urgency=low


  * Fix syntax errors in README.Debian.xml. (Thank's, Daniel Leidert)
  * New upstream cvs snapshot.
    + Drop unnecessary patches: 36_pcre 37_exiwhatpsmisc.
    + Close dovecot socket after wrong password was given. Closes: #515503
    + Standalone DKIM support. Obsoletes and therefore 
      Closes: #486437,#459883
  * Drop upstream URL from package descriptions. Closes: #471425
  * [patches/00_unpack.dpatch] Drop workaround for tar 1.14, even oldstable
    has 1.16. Closes: #486436.
  * Do not set 'tls_try_verify_hosts = *' by default anymore. Some clients
    (e.g Outlook) will terminate the SSL connection when the server presents
    the long list of accepted TLS certificates after STARTTLS. If TLS
    certificate validation of clients is needed you'll need to set
    MAIN_TLS_TRY_VERIFY_HOSTS again and point MAIN_TLS_VERIFY_CERTIFICATES to
    a file containing only the accepted certificates.
    Closes: #515999, #316522, #482012
  * Add debian/README.source. (Policy 3.8.3)
  * Fix typo in update-exim4.conf.8.
    Thanks to Calum Mackay. Closes: #543354
  * Listen on IPv6 loopback interface by default. (Only applies to fresh
    installations.) Closes: #544292
  * upstream default configure file explicitly disables dkim in some
    instances. Merge into Debian config and update debian/example.conf.md5.
    Bump Conflicts of exim4-config package.

 -- Andreas Metzler <email address hidden>  Sat, 17 Oct 2009 14:26:54 +0200

exim4 (4.69-11) unstable; urgency=medium


  * Build-Depend on lynx-cur|lynx instead of lynx. (lynx is just a dummy
    package currently, and due its strict dependencies uninstallable until
    the most recent version of lynx-cur has been built.)
  * Work around sed's improved unicode support, not accepting latin1
    characters as pattern delimiters in UTF-8 locales anymore. Closes: #527445
    + [update-exim4.conf] Go for / as separator instead. - This might have
      served a purpose in earlier releases with free-form replacements but is
      just overcomplicated now.
    + [update-exim4defaults]: The tricky bits for exim options are the
      ones that take a filename as argument (e.g. -C and -oX) or -D for
      overriding macros. Use LC_CTYPE=C.
    + [exim4-config.config] The sed commands deals with (lists of) hostnames
      and IP(v6) addresses and nets. Use LC_CTYPE=C.

 -- Andreas Metzler <email address hidden>  Sun, 10 May 2009 10:15:34 +0200

exim4 (4.69-10) unstable; urgency=low


  [ Andreas Metzler ]
  * Use macro CONFDIR in lowuid_aliases router, too. Closes: #507124
  * Disable shell filename expansion in update-exim4.conf using set -f.
    Closes: #515668
  * Stop using set -u in update-exim4.conf. With version 4.0 bash changed its
    behavior to throw an error on expansion of $* or $@ with set -u if no
    positional parameters were given. Working around this is obnoxious and
    harms readability, imho doing away with set -u's benefits. Closes: #518752
  * Allow setting outgoing smtp helo/ehlo by setting
    REMOTE_SMTP_HELO_DATA macro directly. Previously this was just supposed
    to be used as a helper macro for REMOTE_SMTP_HELO_FROM_DNS.
    REMOTE_SMTP_HELO_FROM_DNS overrides a manual REMOTE_SMTP_HELO_DATA data
    setting. Closes: #514113
  * [README.Debian] Bring documentation for Diffie-Hellman parameters up to
    current practice, mainly by deleting most of the outdated docs.
    Closes: #508749
  * [exim4 init-script]. Modify check for smtp inetd entry to use an anchored
    pattern, matching "smtp" but not "smtp-foo". Closes: #516146
  * exim4-daemon-light now Provides: default-mta. See #508644.
  * Ship both transport-filter.pl and ratelimit.pl in 
    /usr/share/doc/exim4-base/examples. Closes: #518836
  * [lintian] Add ${misc:Depends} to all Depends.
  * [lintian] Add override for dbg-package-missing-depends exim4-dbg.
  * Sync debian/control with override file by moving *-dbg to section debug.
  * Fix grammar error in update-exim4.conf.8. (Thank's, Gerfried Fuchs)
    Closes: #525248

  [ Christian Perrier ]
  * Debconf translations:
    - Asturian. Closes: #511624
    - Belarusian. Closes: #516049
    - Kazakh added. Closes: #520996
    - Slovak. Closes: #523447
    - Bengali added.

 -- Andreas Metzler <email address hidden>  Sat, 02 May 2009 09:05:56 +0200

exim4 (4.69-9) unstable; urgency=medium


  * [update-exim4.conf]: Use POSIX character classes [:alnum:] or explicit
    listing ("ABCDEF..") instead of a-z, since the latter does not work as
    expected in some locales. Closes: #500691

 -- Andreas Metzler <email address hidden>  Tue, 30 Sep 2008 20:12:27 +0200