libmilter-doc-8.15.2-150000.8.12.1 < > , \ĉ e&p9|N#
SՄ!ӠǛ+YfE8*hߠk`樵X_;nCk9%^h9G~nD)X, 4R]l <
ڐASPFF/Ӊ y6"$U#uF)"O2%lsx!,*X p Iĥ"٘-ux"si ֔E/戰_e)+ >~'7 le!c4dmm $ > ; S ? S d % R ) J S i | 5 x 5 5
L 5 5 U 5
5 ` 5 i 5 r 5 l | ( 8 $ ! 9 ! : ! F H G H 5 H I 5 I Jh 5 X J Y J \ J 5 ] K 5 ^ O b OT c O d Px e P} f P l P u P 5 v Qh z Sy S S S S C libmilter-doc 8.15.2 150000.8.12.1 BSD Sendmail Content Management API (milter) Sendmail's Content Management API (milter) provides third-party programs to
access mail messages as they are being processed by the Mail Transfer Agent
(MTA), allowing them to examine and modify message content and
meta-information. Filtering policies implemented by Milter-conformant filters
may then be centrally configured and composed in an end-user's MTA
configuration file.
"sendmail" is a trademark of Sendmail, Inc. e&h01-ch4c NSUSE Linux Enterprise 15 SUSE LLC Sendmail https://www.suse.com/ Documentation/HTML http://www.sendmail.org/ linux noarch 3 S K S
G o 0 @ ~ = @ q
*
& 3 a S
z ; |
? D
bA큤 e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e&e& cd39961f83fccabf8eca8961c5352b9c57afa0ce2c8b314b861ee7befe9a3b28 b9dcd01e73d9ea7b6487ad9c41774d7e479e278e47245629c7d49bfda2684309 e5013ab42fa300827023f78d87267893c81ff4c76c7451de90b2554aaec34c3c 906a3f17f5417159a933be4b62fff4bd2ad84e197306c808e32d2e59430d1d7f 47005f8297256b0ed99a5cb4907ecd7a4d6438059b7491bdf03778caed558257 67949edd6692433034ee10f926d325e0c80b8bbe3f1ac825836d3dcdbb1280a5 939f392a09421502c82c8bd28bd8e4fa3d830fb0d6ed786c0d4858b5abf568de fbb96a20caee7c0879563835ab14bc8fbeb4cc68cc8feda131541bc147d01b83 17f3c80e2df5524d2ab24d948146ac3d7bdebce26b50d709dbf2d010298543f0 ff28b740adc9fb795a1c3f91564663630114421100c8fe304bf5723e4e2028cb 7d4c598231b8d6c053b8fbfc03b9198771d93d2961745b7e153999c03f6a9578 2c34997362c5049e75d741b34e79892b553ba136ecaa7058efa1706079305c36 ac5468f449480a5bc7df4b34ed8ffe7b14d74dc52ab06197bb80cec4b4b536c9 321b3cd1ef8ceb087daa84e14f3c08ea52a192792672489c890357c8f57e2171 8b6b0b42f3e55d32e3835bbd5158ad80e63f26cee9ac6e4d2e75e48ff366d286 a05c811a814d761016979a87ea3fd6ca98044dbc0d8664486eaed139fba2091c 6e015040f4e904c54b7ec462c7764ba19301f051b9abf824cf7cae5db827ceff 0d2921cddaf222bd36ac297695289ff9c39fcb8f036c83c305b7196d8e6ad009 5f25d8a4074f118e14272cce7709b1629f1ff10cabdae83b6b0012646c40c1b6 91432204ca58a95c1efb1db4ef50af21a1dcc75332e2da041809f5f3acd92127 27c8115eaee520cc2918b383897e8b0c797d1c4a7af1838f86a55e67b55138e5 165944c3899c9bb8b5b714c8097af3abb2f2eff9231cb1db09ee6bbf6f3a7575 f4489aa741c9b01de03286425e80d22f97839c355fa015765a737dcd4061954d dbaffcc562d82fe96f9b8305cd7b3fbceaefec436241d822f517b6c7b64101b5 bf0c6f5774db98a640f9efc69514315b6947e0f65c2e536ecfe68d4e455ecaa6 98b5d91348d904884f5c9e177a6258d3f972c7fe8d63706543c87750324c10ea 969d3fe90a8b59d6a59bc0c373a5b431dee36b735ea3184a4f4daa9097c89711 1ffe71dc66c42845879db8f3e26d5ec47fe0d8f78eef79c3c7d59f865ae413f1 edbdb174bbb760a35732f6ef497fbbcd26068fbc0dca0c46167142f04e17bd70 ea61ab23598a7f1b37e4a4acd79dcd941d22ca991940ce3c1c7d35bf225888ef 637454dc22495b00a8a43ed24d88f447acd94c7d7ce03ad97be248a553ec77d4 8c39f0124ecc18bcf32bad212755c4c6ef5ffe51ec234f33cbf32140a01763be 5f382c74ea05fc1e00aea06b4d13b81b1d9e91fa1bc23194ae8b75b788400b35 4298094f63778eec52740c627ec7ba16db3db948f6763f17876704bca5fda381 ed2e2e0267f226e83a200c681b80ca5191b901bd0bdf65cc34de6e6cb4ccdb8f d11cf075cd3e1a0fc19d67716754218c50e0aef144a2277d011f7af18d0f1b3d 007c45b8536c2b91efd253ca680a7445d111eafdedb0e9c5ff199cbf3edbcbaf cb01b863616723ca576a168d62c375c31bcc3fa01d67e3b7e8caa21f28892736 f8c19ec5832ecf075626f5ef0ba665321c9ede37418159d505cef60a6be69f3c f39e83d9d4a797130ce5bdeac75c1bd645886664512490e6c46ca6b972edaf70 ef19ca1afdb2f8e01ff82299b1d44d6cfde311de2c21749e47e9b55036d1c191 84e4bb62a0f1036bcc72a9fc1660d6463b075059961895f549c23baa88740cd9 088ecf3eb8cb4f0492fc13173600ce3871e53f451e7b303174af509a28944b2f ee15576c5e1f0bed1c1ef73faf9f18aa693a9d536f6a223c31a10a743126cdc1 866ff73c82afdc390ffd7cc190f4a5e002897cf00c96a4cfb084b2afff290df1 7718571fe1ae050a6a5e69f78bd807180c12d17cca118afee790909ad2e91a18 a89bd295b6d3dd3bdd538a7963539f424fe67f24a38f9d863c0930b7b7db29c4 2e288e53ffa7c4cc1e90cfacc76053edadb29f1674d393c4d68acc3af82b7cd6 fa9e754dd75cf288bb81f30e05f221e1989bdec7e36a7100d0befb71c7128a04 41ebc4353fc521b9b4653859866a7240d6ae4aee83760029d3932556b5147b6a fa8d0a101cab68ae76e271a2b5160a7a8bbe66f6fb36be4db9f8e8948ba12369 47128d37b40ec12acaf3249bd4c3f31284a471aec24bfba1c5e4eba567cdca60 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root sendmail-8.15.2-150000.8.12.1.src.rpm libmilter-doc
libmilter1_0 rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 e@cW^2@]f@]c@]K@]v>]:@\/J[[ @[LZ&@Z @Z@ZC@ZY@YoIYR@XXX@XӸXO@X@W
W@WbWbW=W@W@V]werner@suse.de werner@suse.de werner@suse.de dimstar@opensuse.org werner@suse.de werner@suse.de werner@suse.de matthias.gerstner@suse.com werner@suse.de jengelh@inai.de werner@suse.de bwiedemann@suse.com werner@suse.de rbrown@suse.com werner@suse.de vcizek@suse.com kukuk@suse.de werner@suse.de werner@suse.de werner@suse.de werner@suse.de jengelh@inai.de werner@suse.de werner@suse.de kukuk@suse.de werner@suse.de dimstar@opensuse.org tchvatal@suse.com tchvatal@suse.com werner@suse.de werner@suse.de werner@suse.de werner@suse.de - Port back fix for CVE-2023-51765 (bsc#1218351) for SLE-15 - Remove maybe perilous shell script code from sm-client.pre
(boo#1202937, bsc#1204696, CVE-2022-31256) - Add upstream patch 8.15.2.mci.p0 (boo#1164084)
* If sendmail tried to reuse an SMTP session which had already been
closed by the server, then the connection cache could have invalid
information about the session. One possible consequence was that
STARTTLS was not used even if offered. - BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
Allow OBS to shortcut through the -mini flavors. - Avoid recursion trouble in spec file cause by undefined _lto_cflags - Add patch sendmail-8.15.2-glibc-2.30.patch
* The former deprecated macro RES_USE_INET6 is gone with glibc 2.30 - Use FAT LTO objects in order to provide proper static library. - removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
firewalld, see [1].
[1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html - Remove alias to mail-transfer-agent.target (boo#1116675) - Replace exec rm by delete/print. - Remove left over from last patch
- Group daemon is required - Add sendmail-8.15.2-reproducible.patch to make package build reproducible - Add _FFR_TLS_EC m4 macro definition for site configuration as
well (boo#1070065) - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - Apply former patches only if openssl 1.1.0+ are installed - support build with openssl 1.1 (bsc#1067222)
* add patches from Fedora:
sendmail-8.15.2-openssl-1.1.0-fix.patch
sendmail-8.15.2-openssl-1.1.0-ecdhe-fix.patch (rh#1473971) - Add libnsl-devel build requires for glibc obsoleting libnsl - Change requirements for libmilter and sendmail-devel as
the library is also used by other MTA like postfix (boo#1049188) - Require user and group mail - Add bitdomain and uudomain to possible targets for refresh - Change spec file name scheme used for getting soname down into
libmilter - Replace a find|xargs rm by -delete - New package libmilter1_0 for the shared library version of
libmilter, the Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package - Require m4 at build time - Don't use insserv together with systemd - Use _unitdir macro instead asking pkg config of systemd - Fix License: Even https://spdx.org/licenses/Sendmail.html lists
"Sendmail" as the valid identifier. Same as
http://license.opensuse.org/ does. "Sendmail License" is in the
column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
+ sendmail: W: suse-missing-rclink sendmail:
- Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
+ sendmail: W: suse-missing-rclink sendmail-client
- Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
+ sendmail: W: suse-wrong-suse-capitalisation:
- Rename README.SuSE to README.SUSE (fix spelling also inside
the file).
+ sendmail: W: permissions-dir-without-slash
- Fix permissions and permissions.paranoid inside
sendmail-suse.tar.bz2.
+ sendmail: W: systemd-service-without-service_del_postun:
- Add corresponding macros to postun script when not building
with sysvinit support.
+ sendmail: W: systemd-service-without-service_add_pre:
- Add corresponding macros to pre script when not building
with sysvinit support. - Drop unused patch:
* sendmail-8.14.7-warning.patch - Split uucp to separate package, no technical reason for it to not
stand on its own
- Drop uucp related patches:
+ uucp-1.07-contrib.dif
+ uucp-1.07-cu.patch
+ uucp-1.07-grade.patch
+ uucp-1.07-lockdev.patch
+ uucp-1.07.dif
+ uucp-texinfo-5.0.patch
+ drop_ftime.patch - Do not use http://license.opensuse.org/ as reference for the Sendmail
license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html - Avoid warning from chkstat due slash on directory path as last character - Update to sendmail 8.15.2 (boo#975416)
* If FEATURE(`nopercenthack') is used then some bogus input triggered
a recursion which was caught and logged as
SYSERR: rewrite: excessive recursion (max 50) ...
Fix based on patch from Ondrej Holas.
* DHParameters now by default uses an included 2048 bit prime.
The value 'none' previously caused a log entry claiming
there was an error "cannot read or set DH parameters".
Also note that this option applies to the server side only.
* The U= mailer field didn't accept group names containing hyphens,
underbars, or periods. Based on patch from David Gwynne
of the University of Queensland.
* CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
Patch from Lars-Johan Liman of Netnod Internet Exchange.
* CONFIG: New option UseCompressedIPv6Addresses to select between
compressed and uncompressed IPv6 addresses. The default
value depends on the compile-time option IPV6_FULL:
For 1 the default is False, for 0 it is True, thus
preserving the current behaviour. Based on patch from
John Beck of Oracle.
* CONFIG: Account for IPv6 localhost addresses in
FEATURE(`block_bad_helo'). Suggested by Andrey Chernov
from FreeBSD and Robert Scheck from the Fedora Project.
* CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
* LIBMILTER: Deal with more invalid protocol data to avoid potential
crashes. Problem noted by Dimitri Kirchner.
* LIBMILTER: Allow a milter to specify an empty macro list ("", not
NULL) in smfi_setsymlist() so no macro is sent for the
selected stage.
* MAKEMAP: A change to check TrustedUser in fewer cases which was
made in 2013 caused a potential regression when makemap
was run as root (which should not be done anyway).
* SECURITY: Properly set the close-on-exec flag for file descriptors
(except stdin, stdout, and stderr) before executing mailers.
* If header rewriting fails due to a temporary map lookup failure,
queue the mail for later retry instead of sending it
without rewriting the header. Note: this is done
while the mail is being sent and hence the transaction
is aborted, which only works for SMTP/LMTP mailers
hence the handling of temporary map failures is
suppressed for other mailers. SMTP/LMTP servers may
complain about aborted transactions when this problem
occurs.
See also "DNS Lookups" in sendmail/TUNING.
* Incompatible Change: Use uncompressed IPv6 addresses by default,
i.e., they will not contain "::". For example,
instead of ::1 it will be 0:0:0:0:0:0:0:1. This
permits a zero subnet to have a more specific match,
such as different map entries for IPv6:0:0 vs IPv6:0.
This change requires that configuration data
(including maps, files, classes, custom ruleset,
etc) must use the same format, so make certain such
configuration data is updated before using 8.15.
As a very simple check search for patterns like
'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
the prior format can be retained by compiling with:
APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
in your devtools/Site/site.config.m4 file.
* If a connection to the MTA is dropped by the client before its
hostname can be validated, treat it as "may be forged",
so that the unvalidated hostname is not passed to a
milter in xxfi_connect().
* Add a timeout for communication with socket map servers
which can be specified using the -d option.
* Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
numeric logins even if HESIOD is enabled.
- sendmail 8.15.1
* The new option CertFingerprintAlgorithm specifies the finger-
print algorithm (digest) to use for the presented cert.
If the option is not set, md5 is used and the macro
{cert_md5} contains the cert fingerprint.
However, if the option is set, the specified algorithm
(e.g., sha1) is used and the macro {cert_fp} contains
the cert fingerprint.
That is, as long as the option is not set, the behaviour
does not change, but otherwise, {cert_md5} is superseded
by {cert_fp} even if you set CertFingerprintAlgorithm
to md5.
* The options ServerSSLOptions and ClientSSLOptions can be used
to set SSL options for the server and client side
respectively. See SSL_CTX_set_options(3) for a list.
Note: this change turns on SSL_OP_NO_SSLv2 and
SSL_OP_NO_TICKET for the client. See doc/op/op.me
for details.
* The option CipherList sets the list of ciphers for STARTTLS.
See ciphers(1) for possible values.
* Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
if a CRLFfile is in use (and LogLevel is 14 or higher.)
* Store a more specific TLS protocol version in ${tls_version}
instead of a generic one, e.g., TLSv1 instead of
TLSv1/SSLv3.
* Properly set {client_port} value on little endian machines.
Patch from Kelsey Cummings of Sonic.net.
* Per RFC 3848, indicate in the Received: header whether SSL or
SMTP AUTH was negotiated by setting the protocol clause
to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
* If the 'C' flag is listed as TLSSrvOptions the requirement for the
TLS server to have a cert is removed. This only works
under very specific circumstances and should only be used
if the consequences are understood, e.g., clients
may not work with a server using this.
* The options ClientCertFile, ClientKeyFile, ServerCertFile, and
ServerKeyFile can take a second file name, which must be
separated from the first with a comma (note: do not use
any spaces) to set up a second cert/key pair. This can
be used to have certs of different types, e.g., RSA
and DSA.
* A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
address. It returns the string for the PTR lookup, but
without trailing {ip6,in-addr}.arpa.
* New operation mode 'C' just checks the configuration file, e.g.,
sendmail -C new.cf -bC
will perform a basic syntax/consistency check of new.cf.
* The mailer flag 'I' is deprecated and will be removed in a
future version.
* Allow local (not just TCP) socket connections to the server, e.g.,
O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
can be used.
* If the new option MaxQueueAge is set to a value greater than zero,
entries in the queue will be retried during a queue run
only if the individual retry time has been reached which
is doubled for each attempt. The maximum retry time is
limited by the specified value.
* New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
to relax requirement for DefaultAuthInfo file.
* Reset timeout after receiving a message to appropriate value if
STARTTLS is in use. Based on patch by Kelsey Cummings
of Sonic.net.
* Report correct error messages from the LDAP library for a range of
small negative return values covering those used by OpenLDAP.
* Fix compilation with Berkeley DB 5.0 and 6.0. Patch from
Allan E Johannesen of Worcester Polytechnic Institute.
* CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
nospecial which describes whether to disallow "%" in the
local part of an address.
* DEVTOOLS: Fix regression in auto-detection of libraries when only
shared libraries are available. Problem reported by
Bryan Costales.
* LIBMILTER: Mark communication socket as close-on-exec in case
a user's filter starts other applications.
Based on patch from Paul Howarth.
- Modified patches
sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
sendmail-8.14.7-select.dif
sendmail-8.14.8-m4header.patch
sendmail-fd-passing-libmilter.patch
Removed patches
sendmail-db6.diff
sendmail-8.14.7-warning.patch - Do not enforce dependencies like for amavis and saslauthd h01-ch4c 1706632884
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 8.15.2-150000.8.12.1 libmilter api.html design.html figure1.fig figure1.jpg figure1.ps figure2.fig figure2.jpg figure2.ps index.html installation.html other.html overview.html sample.html smfi_addheader.html smfi_addrcpt.html smfi_addrcpt_par.html smfi_chgfrom.html smfi_chgheader.html smfi_delrcpt.html smfi_getpriv.html smfi_getsymval.html smfi_insheader.html smfi_main.html smfi_opensocket.html smfi_progress.html smfi_quarantine.html smfi_register.html smfi_replacebody.html smfi_setbacklog.html smfi_setconn.html smfi_setconn.html.fdmilt smfi_setdbg.html smfi_setmlreply.html smfi_setpriv.html smfi_setreply.html smfi_setsymlist.html smfi_settimeout.html smfi_stop.html smfi_version.html xxfi_abort.html xxfi_body.html xxfi_close.html xxfi_connect.html xxfi_data.html xxfi_envfrom.html xxfi_envrcpt.html xxfi_eoh.html xxfi_eom.html xxfi_header.html xxfi_helo.html xxfi_negotiate.html xxfi_unknown.html /usr/share/doc/packages/sendmail/ /usr/share/doc/packages/sendmail/libmilter/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:32316/SUSE_SLE-15_Update/459e8a927e6f28d05f588e7f641b75e4-sendmail.SUSE_SLE-15_Update drpm xz 5 x86_64-suse-linux directory HTML document, ASCII text FIG image text, version 3.2, ASCII text JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Image generated by Aladdin Ghostscript (device=ppmraw)", baseline, precision 8, 301x190, frames 3 PostScript document text conforming DSC level 2.0 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Image generated by Aladdin Ghostscript (device=ppmraw)", baseline, precision 8, 562x305, frames 3 C source, ASCII text
taC{{n? utf-8 fa3eeb291c1bfbbb5d5afae9bc6d5c690990f6c3e28bace51069c65dded0268e ? P 7zXZ
! t/] "k%r=dJcz2
D*Y[XMFɻ\*ܥ6.-\٩aƹOHFB \߀Oб*.q^EKUqH EYQz?*zQ}x_rs V?S
#+=n)兊UH{뺉s}/s(w+O,coDqXTػu'iJE}T4
h;=%-7fwo$]DU*7'fC+[,*} Hr0]VXiV/V Vޅs?xtOr 55Kv;i# 2d1wq6\ -սocah03Nف:gӣͧ蕦n]`OeO:Z LD5`2CxYYk Ms^n>3P
WսGB[(fTCò\ % Gf$b=$FwW9@Ғ8 wi'
@ـ\vv,^bZ[$}RtMı`Ā~\Lu7µnH$%8#?
=ǁKQyRT̛W< eOuLS$h%yr8Jg,S՟Tl7
5
^@.f)J8H
A|.u}$Cyb*4_o#Xy9e$L7 i+jntaLs;{bD^wR߫!VtwG* 2J Y<7.D\w2mK^ Gzd2Z&$kؾ ~}Q{3/
滳LԔϿvv=:oxB2-w
X*:{Hʽ oȅ᳁d B
^uW|c,K4rU^wt$Jka`,13 =i){g99?DFyNoh