Skip to content

1.02

Latest
Latest

Choose a tag to compare

View all tags
@msimerson msimerson released this 01 Oct 20:42
· 4 commits to master since this release
v1.02
7c04773
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • config.sample/databytes, a 50MB message size limit, advertises SIZE
  • SMTPUTF8 support (RFC 6531), #346, #347
  • A 998 octet cap on SMTP command lines (RFC 5321 4.5.3.1.6)
  • xt/fuzz-address.t: fuzzes Qpsmtpd::Address against an independent parser

Changed

  • dep(perl): 5.32 is now the floor
  • deps(plugin): moved Mail::DMARC, Mail::SPF, Mail::DKIM, GeoIP2, ClamAV::Client, Redis, CDB_File, Date::Parse, File::Tail, Time::TAI64 from PREREQ_PM to recommends
  • postfix: disable $qid debug output (#345)
  • Qpsmtpd::Address::canonify() parses a path as one anchored match of the RFC 5321 grammar, in linear time. Specials such as ", (, < and \ now need quotes. A source route must lead a mailbox. The reason for an unparseable path is now syntax error
  • doc: Changes -> CHANGELOG.md
  • Qpsmtpd::Address: one parser, one serializer. Every way of building or changing an address (new($user, $host), user(), host(), address()) is checked by formatting it and parsing it back with canonify(). new() returns undef and the setters croak on anything else. new(undef, $host) is refused, and the null sender has one form: new() and new('<>') both hold an empty localpart
  • Qpsmtpd::Address::format() quotes a localpart only when it is not a Dot-string, and escapes only " and : <"foo bar"@example.com>
  • Qpsmtpd::Address comparison works on the localpart and domain, and the domain compares case-insensitively (RFC 5321 2.4): a@Example.COM eq a@example.com

Fixed

  • Qpsmtpd::Command: parsing ESMTP parameters was quadratic, now linear
  • uribl: the body-scanning patterns were quadratic in line length
  • Qpsmtpd::Address: a quoted localpart may hold a space, per RFC 5321 qtextSMTP: <"foo bar"@example.com> was rejected
  • Qpsmtpd::Address: reject an unquoted @ in a localpart (#351, #352)
  • Qpsmtpd::Address: address literals follow the RFC 5321 grammar. An IPv4 octet above 255 and malformed IPv6, such as [IPv6:::::::::], were accepted, and the IPv6: tag is now case-insensitive
  • Qpsmtpd::Address: comparing an address against a string that is not a valid path died, and <a@[1.2.3.4]> matched <a@1.2.3.4>
  • Qpsmtpd::Address::new(): an unbracketed arg was split naively on @, bypassing canonify()

Security

  • Qpsmtpd::Address: reject control characters anywhere in a path, per RFC 5321.
  • Qpsmtpd::Address::new(): an address with a newline failed the bracket match

Removed

  • ci: drop 5.16 and 5.26 from testing
  • Mail::SpamAssassin and Math::Complex from the prereq; neither is loaded
Assets 2
Loading