-
Notifications
You must be signed in to change notification settings - Fork 22
/
ChangeLog
175 lines (160 loc) · 6.64 KB
/
ChangeLog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
v2.0.0 - April 27, 2020 - COVID Edition
Special thanks to several people exposing the Attachment size limits. This
version includes a new configuration parameter of the data structure, and
commandline argument of the `ytnef` binary, allowing you to override the
default attachment limit of 50MB.
In addition, special thanks to amit777 for providing a PR that adds HTML Message
body export, in the new `-H` option of ytnef.
v1.9.3 - July 20, 2018
Special thanks to @evintila, @bestshow, @bingosxs, and @asarubbo for
submitting high quality bug reports via valgrind, afl, and other tools. And
a special thanks to @ohwgiles for submitting a bunchof patches to fix them!
This version resolves the following CVEs:
* CVE-2017-9470
* CVE-2017-9471
* CVE-2017-9474
* CVE-2017-9058
* CVE-2017-12142
* CVE-2017-12141
* CVE-2017-12144
*
v1.9.2 - February 23, 2017
Thanks to @hannob for finding some Out-of-bound exceptions in memory handline.
* [SECURITY] An invalid memory access (heap overrun) in handling LONG datatypes
* [SECURITY] Missing a check for fields of size 0
* [SECURITY] Potential buffer overrun on incoming Compressed RTF Streams
This version & the previous 1.9.1 resolves the following CVEs:
* CVE-2017-6306
* CVE-2017-6305
* CVE-2017-6304
* CVE-2017-6303
* CVE-2017-6302
* CVE-2017-6301
* CVE-2017-6300
* CVE-2017-6299
* CVE-2017-6298
v1.9.1 - Feb 14, 2017
* BugFix for path handling- label both / and \ as invalid characters inattachments
* Remove lots of exit(-1)'s from the code that would crash calling programs
* [SECURITY] Thanks to EricSesterhennX41 for a patch to fix lots of invalid
memory allocation around corrupted files.
v1.9 - January 2, 2017
* Unify libytnef and ytnef tools into a single build & package (Thanks @jmallach)
* Fix applied for CVE-2010-5109
* Various fixes for errors found via Static Analysis (cppcheck)
* Various memory leaks plugged (Thanks @slonik-v-domene)
* Bugfix for a broken "uniqueness" checker
* Lots of formatting & documentation cleanups
Now that the two packages are unified into a single install & build, I've had
to choose a unifier of Version Numbers. I chose 1.9 .
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v2.7
Mark Paulus -- Better processing of filenames, to eliminate problem-causing characters.
Hilmar - Update to the autoconf scripts to check for a valid ytneflib install during the configuration.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v2.6
Minor Documentation changes.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v2.5
Implemented Recurrence support, using patches & information from Viraj Alankar
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v2.4
Rearranged the ATTENDEE field adding the RSVP & PARTSTAT entries.
Removed the opening & trailing curly braces from the description.
Made the UID uppercase.
Added both CN & MAILTO to ORGANIZER field.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v2.3
Thanks to Jason for pointing me toward jtnef, with which I was finally able to
finish compressed RTF support.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v2.2
Need to start updating this file more often. Sorry guys.
This release adds support for Contact cards with no name field. So now if you
have contact cards with no name, but just a Company, those will work.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v1.15
Made a change to fill spaces in filenames with underscores.
Split the vcard/vcal/vtask code into separate files for better readability.
Converted to automake (Autoconf, etc)
Removed the run-time "endian" detection, in favor of WORD_BIGENDIAN
Placed version information to be automatically generated into config.h
Added an abstraction layer on IO
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v1.14
Made a change to save vCard entries with a .vcard extension instead of a .vcf
extension. This way I can detect it in ytnefprocess.pl and mark it as a type
text/x-vcard instead of text/vcalendar.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v1.13
Fixed a problem in the checking of existence. Should have been
(variableLength*)-1 instead of NULL.. Made MAPI_UNDEFINED to keep this
from happening again. This fixed an issue with segfaulting on certain task
requests when a start/due date wasn't specified.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v1.12
Fixed a problem with recurring calendar entries, occasionally have incorrect
start dates.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v1.11
Fixed a problem with vCalendar entries using C-Style strings instead of
quoted-printable strings.
Fixed a mis-spelled field name in vCalendar entries (DCREATED vs CREATED)
Added support for Start/Due date on Task entries.
Added support for a UID to task entries (untested).
Added support for Private/Public on Task Entries (untested).
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v1.10
Added attendee & organizer fields to Task Entries.
Added support for meeting cancellations.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v1.09
Made the Notes field of vCard's & the summary field of vCalendar entries
quoted-printable.
Added a : to the end of meeting attendees.
Fixed a problem with meeting requests that didn't separate required & optional
participants.
Added code to use C-style \n's instead of quoted-printable encoding in task
requests.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v1.08
Code refactoring in the vCard section to improve readability.
Made the addresses in vCards quoted printable to better support user input.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v1.07
Added the -L option for tnefclean.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v1.06
Fix for the CN & ROLE being reversed in required participants of meetings.
Added the -l option for tnefclean.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v1.05
Added the -F option to enable/disable the RTF attachments.
Integrated patch #666566: Unicode to UTF8 conversion.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v1.04 1-11-2003
Added code to use the PR_SENDER_SEARCH_KEY as the organizer
of vcalendar objects.
Fixed glitch with the From handler & the Message Class handler both
storing in the same namespace.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v1.03 1-5-2003
More endian fixes, now finally works on PowerPC.
Modified the main.c to place the printing in a separate file.
Added support for embedded TNEF streams.
Moved the vCalendar to a separate procedure (for readability)
Added the vCard 2.1 code, with the special X-EVOLUTION extensions
for the extra properties.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v1.02 12-27-2002
More fixes for the Endian problem, additions to the file-reading routines.
Fixed warnings.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v1.01 12-27-2002
Makefile cleanup - Removed references to openGL, Glut, & X libraries.
Additions to help (-h).
Fixes to make it run on Alpha architecture.
First attempt at fixing the Big Endian/Little Endian issue.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
v1.0 12-26-2002
Initial Release