s/qmail 4.0 CHANGE log
======================

Older changes can be found in CHANGELOG_V3.

Version	Descripition
--------------------

4.0.00	Initial version, removed SRS, fixed SPF.
4.0.01	Recovered SRS and added srsforward + srsreverse
				as compile option; still depending on librsrs2.
				Added man pages for srsforward + srsreverse.
				Fixed columnt (buf incorrectly used).	
B(2)		Changed 'puts' to 'out'; where applicable.
				Fixed dnsq call in qmail-smtpd concerning 
				lookup type "M" -> 'M', "A" -> 'A' (char ).
B(3)		Fixed missing timestamp for mails in maildir.c 
				making qmail-pop3d behaving erratic.
				Substituted put -> out almost everywhere.
				Fixed wrong 'identity' in Received header ('unknown')
				due to misplaced 'if' nesting.
				Streamlined qmail-authuser to support APOP auth
				even for Unix system accounts (tx Drew).
				Fixed wrong CAPA announcement in qmail-popup 
				(APOP instead of UIDL).
4.0.02	Removed dependency on libsrs2 providing srs2.[c|h]
				natively together with sha1[_hmac].[c|h].
				Complete refactoring of sha1 and sha1_hmac.
				Included Drew W's enhancements for Dovecot auth 
				in qmail-authuser.
				Fixed bug in IPv4/IPv6 matching for spf_mx.
4.0.03	Enhanced qmail-authuser.
				Redone srsforward and srsreverse + man pages.
				Fixed qmail-smtpd to cope with new DNS resolver
				behaviour (in particular for SPF segfaulting for bounces).
Final		Streamlined man pages.
4.0.04	SMTPUT8 is now triggered via environment variable UTF8 for 
				qmail-smtpd.
				Fixed segfaulting qmail-smtpd in case of multiple recipients
				in the RCPT TO dialog.
				qmail-smtpd exits now if Auth and Auth not announced or PAM missing.
4.0.05	Fixed bug in qmail-remote with wrong CNAME address mangling (tx. Leah).
				Removed SMTPUTF8 compiler flags in qmail-remote and qmail-smtpam
				which now auto-detect UTF8 encoded addresses.
4.0.06	Fixed qmail-smtpd segfaulting while wrongly evalute 'fakehelo' for SPF.
				Added compatibility for other tcpserver/sslserver programs 
				calling qmail-smtpd and different IPv6 environment variables (4Leah).
4.0.07	Straightend some code in SPF evalution which might prevent it (tx Leah).
				Fixed bug returning wrong SPF results in case a TXT but no SPF record is given.
				Fixed qmail-remote potentially not binding to IPv4 addresses (tx. MB).
				Fixed qmail-authuser insuffient handle of passwords using crypt (tx. MB).
4.0.08	Fix for qmail-vmailuser not respecting vpopmail's home dir (tx. Ueli H.).
				Changed qmail-remote to cope better with fehQlibs-15 and IPv4 qualification.
				Fixed CVE-2011-0411: Pipelining command injection for qmail-smtpd.
				Fixed the Guninski CVE-2005-1513 (in fehQlibs-15): Buffer overflow
				if size of mail > 4 GByte.
4.0.09	Reworked fix for CVE-2011-0411 to provide a general solution. (tx. Fabian)
				Applied fix to qmail-popup as well.
4.0.10	GCC 10 refactoring (together with fehQlibs-15b).
				qmail-remote now recognizes a MX retrieved IP to be itself and skips it.
4.0.10a Fixes defect [20230303#1/4.2.22].
EOL for 4.0
