# changelog

author: Stuart Gathman <stuart@bmsi.com> 0.8.17-1
changelog:
  - report keysize of DKIM signatures.
  - simple DKIM milter as another sample
  - basic DKIM signing support
  - Implement DKIM policy in access file.  
  - Parse Authentication-Results header to get dkim result for feedback mail.  
  - Let DKIM confirm domain for missing or neutral SPF result.


author: Stuart Gathman <stuart@bmsi.com> 0.8.18-1
changelog:
  - Test cases and bug fixes for spfmilter
  - Configure untrapped_exception policy for spfmilter
  - Reject numeric HELO for spfmilter
  - from_words from file feature for bms milter
  - ban mailbox, not entire domain, for configured email_providers
  - Use pysqlite (included in python) for greylist database
  - banned_domains and ips moved back to logdir for bms milter
  - straighten out datadir vs logdir for bms milter


author: Stuart Gathman <stuart@gathman.org> 0.8.18-3
changelog:
  - Use daemonize instead of start.sh, which is gone from pymilter
  - Fix typo in maskip logic for greylisting


author: Stuart D. Gathman <stuart@gathman.org> 17.3-8
changelog:
  - Add release to main package dependencies
  - More man pages
  - Restore missing cjdns-resume.service
  - Add empty config to be owned by package


author: Stuart D. Gathman <stuart@gathman.org> 17.3-9
changelog:
  - Strip /8 from IPs printed by cjdns-online
  - Add GPL3+ to cjdns-online
  - ghost /etc/cjdroute.conf
  - Include _isa formula in subpackage requires.


author: Stuart D. Gathman <stuart@gathman.org> 17.3-11
changelog:
  - Patch some bugs in traceroute and symlink to /usr/bin/cjdns-traceroute
  - man page for cjdns-traceroute, sessionStats
  - switch to libsodium instead of nacl


author: Stuart D. Gathman <stuart@gathman.org> 17.3-12
changelog:
  - Run modprobe only if /dev/tun not present - fixes running on openVZ
  - Select nacl/libsodium with a macro
  - Switch back to nacl for platforms that support it
  - man page for peerStats


author: Stuart D. Gathman <stuart@gathman.org> 17.3-13
changelog:
  - man page for cjdnslog
  - Fix running on Fedora as well as openVZ. :-P
  - Make cjdns exclusive to nodejs_arches. Rafael Fonseca <rdossant@redhat.com>


author: Stuart D. Gathman <stuart@gathman.org> 17.4-1
changelog:
  - Update to 17.4 upstream release
  - Remove cap3 patch, as it is incorporated upstream
  - Remove Constant.js patch, as it is incorporated upstream


author: Stuart D. Gathman <stuart@gathman.org> 17.4-3
changelog:
  - Remove cjdns-resume.service patch, incorporated upstream
  - Add --interface option to cjdns-online.sh


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 19.1-7
changelog:
  - Python 2 binary package renamed to python2-cjdns
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Iryna Shcherbina <ishcherb@redhat.com> - 20.1-3
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Stuart D. Gathman <stuart@gathman.org> 2.3.0-5
changelog:
  - Add bundle option to allow installing binary rpms on EL7
  - Move openas2-server configs to /etc/openas2


author: Stuart D. Gathman <stuart@gathman.org> 2.3.1-1
changelog:
  - Update to 2.3.1
  - move data to /var/spool/openas2
  - add flag to enable tests at build time
  - add flag to enable SentryLogger plugin


author: Stuart D. Gathman <stuart@gathman.org> 2.6.1-3
changelog:
  - Some changes recommended by mizdebsk from #fedora-java
  - Use %bcond_with
  - Remove /var/run/openas2, Provides
  - Add logrotate to delete old log files


author: Stuart D. Gathman <stuart@gathman.org> 2.6.1-6
changelog:
  - Set db_directory to /var/lib/openas2/db in sample config
  - Include hsqldb patches in SRPM even when not active
  - Use __requires_exclude instead of bogus Provides for bundling


author: Stuart Gathman <stuart@bmsi.com> 1.3.2-1
changelog:
  - Flag spams deleted from quarantine without discarding
  - Detect messages added to quarantine after it was displayed


author: Stuart Gathman <stuart@bmsi.com> 0.9.3-1
changelog:
  - Handle source route in Milter.utils.parse_addr()
  - Fix default arg in chgfrom.
  - Disable negotiate callback for libmilter < 8.14.3 (1,0,1)


author: Stuart Gathman <stuart@bmsi.com> 0.9.5-1
changelog:
  - Print milter.error for invalid callback return type.
    (Since stacktrace is empty, the TypeError exception is confusing.)
  - Fix milter-template.py
  - Tweak Milter.utils.addr2bin and Milter.dynip to handle IP6


author: Stuart Gathman <stuart@bmsi.com> 0.9.7-1
changelog:
  - Raise RuntimeError when result != CONTINUE for @noreply and @nocallback
  - Remove redundant table in miltermodule
  - Fix CNAME chain duplicating TXT records in Milter.dns (from pyspf).


author: Stuart Gathman <stuart@bmsi.com> 0.9.8-1
changelog:
  - Add Milter.test module for unit testing milters.
  - Fix typo that prevented setsymlist from being active.
  - Change untrapped exception message to:
  - "pymilter: untrapped exception in milter app"


author: Stuart Gathman <stuart@gathman.org> 1.0-1
changelog:
  - Allow ACCEPT as untrapped exception policy
  - Optional dir for getaddrset and getaddrdict in Milter.config
  - Show registered milter name in untrapped exception message.
  - Include selinux subpackage
  - Provide Milter.greylist export and Milter.greylist import to migrate data


author: Stuart Gathman <stuart@gathman.org> 1.0-2
changelog:
  - Remove start.sh to track EPEL repository, suggest daemonize as replacement
  - Selinux subpackage should not care about pymilter version


author: Stuart Gathman <stuart@gathman.org> 1.0.2-1
changelog:
  - Fix the last setsymlist misspelling.  Support in test framework and tests.
  - Add @symlist decorator.
  - Change body callback and a few other APIs to use bytes instead of str.


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.0-6
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
  >>>>>>> 021796e51e5919812f1c300d1830ef9ed378db2d


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0-8
changelog:
  - Python 2 binary package renamed to python2-pymilter
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 1.0-13
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Move_usr_bin_python_into_separate_package)


author: Stuart Gathman <stuart@bmsi.com> 1.0-1
changelog:
  - Foundation for python milter envfrom rewriting (in progress)
  - Python 2.6
  - Depend on pymilter for dirs, even though we don't
    really need it for anything else until envfrom rewriting is done.


author: Stuart Gathman <stuart@gathman.org> 1.0.2-1
changelog:
  - Fix daemon to run in python2
  - Move daemons to /usr/libexec/milter so they get bin_t selinux label


author: Stuart Gathman <stuart@bmsi.com> 1.4.20-1
changelog:
  - RPM release for CentOS-6.2
    Features:
  - Experimental support for the new Chameleon templating engine.
    We now have two configurable templating engines, the old Zope TAL
    templates (called zopetal in the config) and the new Chameleon (called
    chameleon in the config). A new config-option "template_engine" under
    [main] can take these config-options, the default is zopetal.
    Thanks to Cheer Xiao for the idea of making this configurable *and*
    for the actual implementation! (Ralf)
    WARNING: Chameleon support is highly experimental and *not* recommended for
    production use. It has known performance issues and i18n is not yet
    functioning. It's still under active development. Only use this feature if
    you want to experiment with Chameleon and/or help with Roundup
    developement. If you found a bug in Chameleon support, please report after
    testing against latest Roundup source from the Mercurial repository.
  - issue2550678: Allow pagesize=-1 which returns all results.
    Suggested and implemented by John Kristensen. 
    Tested by Satchidanand Haridas. (Bernhard)
  - Allow to turn off translation of generated html options in menu method
    of LinkHTMLProperty and MultilinkHTMLProperty -- default is
    translation as it used to be (Ralf)
  - Sending of OpenPGP encrypted mail to all users or selected users (via
    roles) is now working. (Ralf)
  - Add config-option "nosy" to messages_to_author setting in [nosy]
    section of config: This will send a message to the author only
    in the case where the author is on the nosy-list (either added
    earlier or via the add_author setting). Current config-options
    for this setting will send / not send to author without considering
    the nosy list. (Ralf)
    Bugs:
  - issue2550730: FAQ has broken link to Zope book. Reported and fixed by
    John Rouillard.(Bernhard)
  - issue2550728: remove buggy parentheses in TAL/DummyEngine.py.
    Reported and fixed by Ralf Hemmecke. (Bernhard)
  - issue2550715: IndexError when requesting non-existing file via http.
    Reported and fixed by Cedric Krier. (Bernhard)
  - issue2550712: exportcsvaction errors poorly when given invalid columns.
    Reported by Will Kahn-Greene, fixed by Cedric Krier. (Bernhard)
  - issue2550695: 'No sort or group' settings not retained when editing queries.
    Reported and fixed by John Kristensen. Tested by Satchidanand Haridas. 
    (Bernhard)
  - Fix matching of incoming email addresses to the alternate_addresses
    field of a user -- this would match substrings, e.g. if the user has
    discuss-support@example.com as an alternate email and an incoming mail
    is addressed to support@example.com this would (wrongly) match. (Ralf)
  - issue2550729: Fix password history display for anydbm backend, thanks
    to Ralf Hemmecke for reporting. (Ralf)
  - OpenPGP support is again working (pyme API has changed significantly) and
    we now have a regression test. We now take care that bounce-messages
    for incoming encrypted mails or mails where the policy dictates that
    outgoing traffic should be encrypted is actually OpenPGP encrypted. (Ralf)
  - Ignore confirm set() fields by themselves in the absence of non-"confirm"
    values; otherwise a bare confirm field can be used to change the a
    password. Reported by Cam Blackwood. (Ralf)
  - Updated version of simplified Chinese message file by Cheer Xiao:
    Corrected some mistakes, added a few more items and did some
    formating. (Ralf)
  - Fix xmlrpc URL parsing so that passwords may contain a ':' character
    (Ralf)
  - Be more tolerant when parsing RFC2047 encoded mail headers. Use
    backported version of my proposed changes to
    email.header.decode_header in http://bugs.python.org/issue1079
    (Ralf)
  - issue2550684 Fix XSS vulnerability when username contains HTML code,
    thanks to Thomas Arendsen Hein for reporting and patch. (Ralf)
  - issue2550711 Fix XSS vulnerability in @action parameter,
    thanks to "om" for reporting. (Ralf)
  - issue2550535 In some cases even when keep_quoted_text=yes is
    configured we would strip quoted sections. This hit the python
    bug-tracker especially for python interpreter examples with leading
    '>>>' strings. The fix is slightly different compared to the proposal
    as this broke keep_quoted_text=no in certain cases. We also fix a bug
    where keep_quoted_text=no would drop the last line of a non-quoted
    section if there wasn't an empty line between the next quotes. (Ralf)
  - issue2431638 wrong registration link in bounce mail for non-registered
    users reported *years* ago by anonymous (Ralf)
  - Fix doc/upgrading.txt which produces errors with latest docutils about
    wrong block structure. Fix .gitignore in doc directory. Thanks to
    Cheer Xiao for the patches. (Ralf)
  - Fix wrong execute permissions on some files, thanks to Cheer Xiao for
    the patch. (Ralf)
  - Fix override of TemplatingUtils in instance.py, thanks to Cheer Xiao
    for the patch. (Ralf)
  - Fix another XSS with the "otk" parameter, thanks to Jesse Ruderman for
    reporting. (Ralf)
  - Mark cookies HttpOnly and -- if https is used -- secure. Fixes
    issue2550689, but is untested if this really works in browsers.
    Thanks to Joseph Myers for reporting. (Ralf)
  - Fix another XSS with the ok- and error message, see issue2550724. We
    solve this differently from the proposals in the bug-report by not
    allowing *any* html-tags in ok/error messages anymore. Thanks to 
    David Benjamin for the bug-report and to Ezio Melotti for several
    proposed fixes. (Ralf)


