msmtp: news archive

• November 14, 2016: msmtp 1.6.6 is released!
  This version fixes a memory leak and a double-free in msmtp_read_headers(). The double-free was triggered by read errors.
• May 31, 2016: msmtp 1.6.5 is released!
  The TLS certificate fingerprinting feature now uses SHA256 fingerprints.
• February 1, 2016: msmtp 1.6.4 is released!
  This release now uses the system default policy with GnuTLS instead of a hardcoded one.
• November 15, 2015: msmtp 1.6.3 is released!
  This release fixes a bug in SOCKS proxy support and the handling of non-fatal errors in TLS handshakes.
  Note that starting from this version, we do not provide binaries for Windows platforms anymore.
• April 24, 2015: msmtp 1.6.2 is released!
  This release fixes a bug that prevented consecutive Bcc headers from being removed properly. It is recommended to upgrade.
  You can also apply change 38bc299a from the git repository to versions 1.4.x if you do not want to upgrade to 1.6.x yet.
• January 5, 2015: msmtp 1.6.1 is released!
  This release fixes a problem on platforms where glibc does not support Internationalized Domain Names (IDN).
• December 30, 2014: msmtp 1.6.0 is released!
  This is the new stable release. The 1.4.x series is put to rest after nearly 10 years. But do not worry: 1.6.0 is fully compatible with 1.4.x. Noteworthy changes since 1.4.32:
  • Support for SOCKS proxies was added. This allows msmtp to be used with Tor.
  • GNOME Keyring support now uses libsecret instead of libgnome-keyring. Consequently, secret-tool can be used to manage passwords for msmtp; the obsolete msmtp-gnome-tool script is removed.
  • Libidn is not required for IDN support anymore on systems where getaddrinfo() supports the AI_IDN flag and the GnuTLS version is >= 3.4.0.
  • SSLv3 is disabled.
  • From and Date headers are now added to mails if necessary for compatibility, but this new behavior can be disabled.
  • The new remove_bcc_headers command replaces the old keepbcc command.
  • The GSSAPI authentication method is not chosen automatically anymore, you have to request it manually if you want it.
  • Configuration file permissions are now only checked if the file actually contains secrets such as passwords. (If you still store passwords in the configuration file, consider using a key ring or the the passwordeval command instead.)
  • The documentation was updated and improved.
  Enjoy!
• December 17, 2014: msmtp 1.6.0rc3 is released!
  This is the third release candidate for the next stable version 1.6.0. Changes since 1.6.0rc2:
  • Libsecret support was improved further
  • The vim syntax file was updated
  • A few minor problems were fixed
  Please test!
• December 9, 2014: msmtp 1.6.0rc2 is released!
  This is the second release candidate for the next stable version 1.6.0. Changes since 1.6.0rc1:
  • Adding missing From and Date headers can now be disabled if necessary.
  • Gnome Keyring passwords can now be managed with secret-tool (part of libsecret).
  • Configuration file security checks are now only performed if the file actually contains passwords (which is not necessary anymore since we have passwordeval and key ring support).
  Please test!
• December 2, 2014: msmtp 1.6.0rc1 is released!
  This is a release candidate for the next stable version 1.6.0. It contains a few more new features and changes than usual, but is still compatible to versions 1.4.x. The most important changes are:
  • Support for SOCKS proxies was added. This allows msmtp to be used with Tor.
  • SSLv3 is disabled
  • From: and Date: headers are now added to mails if necessary
  • Gnome Keyring support now uses libsecret
  • Libidn is not required for IDN support anymore on new systems
  Please test!
• March 9, 2014: msmtp 1.4.32 is released!
  This release parses command line recipient addresses as if they appeared in mail headers, which gives more flexibility and increases compatibility.
• April 22, 2013: msmtp 1.4.31 is released!
  This release includes a new version of the msmtpq script and fixes building the documentation with texinfo version 5.x.
• October 21, 2012: msmtp 1.4.30 is released!
  This release fixes a bug introduced in version 1.4.29 that broke the -t/--read-recipients option when --read-envelope-from was used.
  If you use version 1.4.29, please update. Sorry for the inconvenience.
• September 3, 2012: msmtp 1.4.29 is released!
  This release fixes a few bugs. See the ChangeLog for details.
• May 1, 2012: msmtp 1.4.28 is released!
  This release fixes a few minor problems. See the ChangeLog for details.
• January 7, 2012: msmtp 1.4.27 is released!
  This version fixes a problem with configurations that use OpenSSL and at the same time do not use GNU SASL. (If you use a different configuration, there's no reason to upgrade.)
• November 27, 2011: msmtp 1.4.26 is released!
  This release updates the msmtpq script.
  To use the new version of the script, you need to remove the old msmtpQ symlink, change msmtpQ to msmtpq in your MUA config, and use msmtp-queue for queue management.
• October 16, 2011: msmtp 1.4.25 is released!
  This release adds support for alias expansion. Additionally, a few problems were fixed, and DIGEST-MD5 authentication is now marked as deprecated (see RFC 6331).
• April 27, 2011: msmtp 1.4.24 is released!
  This is a cleanup release that updates the build system and removes old cruft and unnecessary complexity, without changing the functionality of the program.
• January 17, 2011: msmtp 1.4.23 is released!
  This release fixes SCRAM-SHA-1 authentication via GNU SASL.
  If you use a version of msmtp that supports SCRAM-SHA-1 authentication via libgsasl (see the output of msmtp --version), then an update is recommended.
• December 30, 2010: msmtp 1.4.22 is released!
  This release adds a passwordeval command that allows to set the password to the output of a program invocation.
• July 3, 2010: msmtp 1.4.21 is released!
  This minor update mainly fixes build problems with newer OpenSSL versions and with disabled TLS/SSL support.
• March 20, 2010: msmtp 1.4.20 is released!
  This release adds support for authentication mechanism SCRAM-SHA-1 via GNU SASL. The new command tls_fingerprint allows one to trust one particular TLS certificate, in case tls_trust_file cannot be used for some reason. The new script msmtp-gnome-tool.py manages Gnome Keyring passwords for msmtp.
• October 24, 2009: msmtp 1.4.19 is released!
  This release contains a security fix: When using OpenSSL, NUL characters in the Common Name or Subject Alternative Name fields of certificates are now handled properly. This fixes the problem described here. Note that msmtp is not affected by this problem if GnuTLS is used.
• September 8, 2009: msmtp 1.4.18 is released!
  This release fixes some minor problems and updates the example scripts.
  
• December 27, 2008: msmtp 1.4.17 is released!
  This release adds support for storing passwords in the GNOME keyring.
  Update: The binary for Windows contained a bug and was replaced by version 1.4.17+20081227.
• July 28, 2008: msmtp 1.4.16 is released!
  This release accepts the 251 response to the RCPT TO command (rarely used today) and fixes some portability problems with the example scripts.
• June 7, 2008: msmtp 1.4.15 is released!
  The following changes are noteworthy in this release:
  • TLS/SSL configurability is improved by the new commands tls_crl_file, tls_priorities, and tls_min_dh_prime_bits.
  • The msmtpq scripts were added. They are intended to replace the msmtpqueue scripts in a future release. Additionally, the set_sendmail script was updated.
  • Some minor bugs were fixed.
• March 13, 2008: msmtp 1.4.14 is released!
  Noteworthy changes in this release include the following:
  • The -t option now properly supports Resent-* headers.
  • The new --read-envelope-from option allows to read the envelope from address from the From header.
  • The environment variables SMTPSERVER and EMAIL can be used to configure msmtp for simple use cases.
  • Support to store passwords using the Mac OS X keychain was added by Jay Soffian.
• January 28, 2008: Chris Gianniotis wrote a shell script that manages a mail queue for msmtp. It combines and extends the functionality of the msmtpqueue scripts. You can find it in this mail on the msmtp-users list.
• September 18, 2007: The LinuxUser Magazine (in german) has an article about mpop in issue 10/2007, to be released on September 20, 2007. Mpop shares much of its source code with msmtp. The article was written by Andreas Kneib.
  The magazine already ran an article by the same author on msmtp in issue 04/2005.
• August 1, 2007: msmtp 1.4.13 is released!
  Useful scripts are now distributed in the scripts subdirectory. Currently included are the msmtpqueue scripts and a set_sendmail.sh script by Gautam Iyer.
  The automatic selection of an account based on the envelope from address is now case insensitive.
  The license was updated to GPLv3 or later (source code) and GFDLv1.2 or later (documentation).
• June 16, 2007: msmtp 1.4.12 is released!
  The documentation was improved and a minor bug was fixed.
• May 6, 2007: msmtpqueue 0.5 is released!
  This release adds the msmtp-listqueue.sh script, contributed by Andreas Kneib.
• April 9, 2007: msmtp 1.4.11 is released!
  This release makes the default behaviour more secure: TLS now requires either tls_trust_file (highly recommended) or a disabled tls_certcheck. NTLM authentication is not used automatically without TLS anymore.
• January 21, 2007: msmtp 1.4.10 is released!
  A few build and installation problems were fixed. No other changes were made.
• November 6, 2006: msmtp 1.4.9 is released!
  This release fixes yet another build problem.
• November 5, 2006: msmtp 1.4.8 is released!
  Some minor build problems were fixed, and the gnulib portability library was updated.
  Using OpenSSL on Mac OS X works again.
• August 20, 2006: msmtp 1.4.7 is released!
  Minor bugs were fixed, and some portability issues were solved.
  The configuration command tls_force_sslv3 was added. This is needed to use TLS/SSL with some old and broken servers.
• June 17, 2006: msmtp 1.4.6 is released!
  This release contains a long list of small changes, many of them taken from the latest mpop release.
  Optional support for Internationalized Domain Names (IDN) was added.
  The options to the configure script have changed! See the first few paragraphs of INSTALL for details.
• December 12, 2005: msmtp 1.4.5 is released!
  Only a few minor tweaks were made.
  The bigger news is that the development finally moved to a public CVS repository on SourceForge. Everyone is invited to participate!
• 2005-08-15: msmtp 1.4.4 released!
  This release adds support for the sendmail -F option. Several minor improvements were made.
  Please note: Previous versions of msmtp carried the additional note that "compiling, linking, and/or using OpenSSL is allowed". This is no longer the case, because msmtp uses gnulib modules that are released under the GNU GPL, and the note above does not apply to these modules.
  It is still OK to download the msmtp sources and build binaries that are linked against OpenSSL, but it may be problematic to distribute those binaries (I'm not a lawyer, so I'm not sure about this).
  If you want to avoid the OpenSSL licensing problems, consider using GnuTLS. It's the default anyway.
• 2005-07-16: msmtp 1.4.3 released!
  This release allows empty envelope-from addresses by introducing a new command auto_from (and option --auto-from) to enable or disable automatic envelope-from addresses. Please update your configuration file and/or scripts if you use automatic envelope-from addresses!
  This closes Debian bug #318138. The fix was suggested by Julien Louis. Thanks!
• 2005-07-07: msmtpqueue 0.4 released!
  msmtp-runqueue.sh now uses a lock file. msmtp-enqueue.sh can now start msmtp-runqueue.sh immediately if the system is online. Both changes were contributed by Frank Thieme. Thanks!
• 2005-07-07: msmtp 1.4.2 released!
  Native language support (NLS) was added. Currently the only supported language besides english is german, but it is easy to add more translations.
  The connection timeout setting was replaced by a general network timeout setting (the old command and option are still supported).
  Some code cleanups were made.
• 2005-05-27: msmtp 1.4.1 released!
  This release fixes a serious bug: msmtp failed to properly detect certain output errors. When GnuTLS support was compiled in, this could lead to corrupted mails being sent. Thanks to Jesse Michael for identifying, reporting, and fixing this.
  In addition, this release contains several minor improvements; see the ChangeLog for details.
• 2005-04-03: msmtp 1.4.0 released!
  This is the new stable release of msmtp.
  When upgrading from 1.2.4, note that:
  • Authentication is not enabled automatically anymore. Insert the command "auth on" into account definitions that need it.
  • Some command line options have changed.
  Summary of new features since 1.2.4:
  • Sendmail compatible command line options, including -t, -N, and -R
  • New long options to configure almost everything on the command line
  • Optional account selection with -f/--from
  • Support for a system wide configuration file
  • Optional automatic construction of envelope from addresses
  • More flexible account definitions
  • Configurable connection timeouts
  • Improved log file logging
  • Syslog logging
  • Improved TLS/SSL support
  • Support for LMTP
  • Support for the EXTERNAL and GSSAPI authentication methods
  • Support for .netrc and password prompting
  • Rewritten documentation, available in various formats
  New since 1.3.9:
  • No new features, but minor improvements mainly regarding interoperability and performance. And some minor bug fixes.
• 2005-03-15: msmtp 1.3.9 released!
  One more release in the 1.3.x series because two new features were added: LMTP support and .netrc support.
  These are the last feature additions in this series; the next release will hopefully be 1.4.0.
• 2005-02-24: msmtp 1.3.8 released!
  No new features, but lots of minor cleanups, improvements and fixes. See the ChangeLog for details.
  I'm preparing the new stable 1.4.0 release, so if you find any problems in 1.3.8, please send a mail. You can also send any suggestions about feature enhancements or other improvements that you would like to see in 1.4.0.
• 2005-02-13: msmtp 1.3.7 released!
  New in this release:
  • Account specialisation; see documentation of the account command
  • Security checks for the user configuration file
  • Configurable connection timeout
  • It is possible to be prompted for a password instead of storing it in the configuration file
• 2005-02-06: msmtp 1.3.6 released!
  Several improvements:
  • Rewritten documentation: Texinfo, HTML, PDF formats available in addition to the man page
  • A new "defaults" command to set default values for all accounts. Thanks to Jim Fohlin for the idea!
  • Several bug fixes, including build fixes for various platforms
  An update is recommended!
  You need GnuTLS >= 1.2.0 if you want GnuTLS support.
• 2005-01-24: msmtp 1.3.5 released!
  New features:
  • Support for an optional system wide configuration file
  • An envelope from address will be generated if none is given
  • Syslog logging
• 2005-01-17: msmtp 1.3.4 released!
  The built-in CRAM-MD5 code works again. Various cleanups and bugfixes were made.
• 2005-01-09: msmtp 1.3.3 released!
  New in this version: RMQS support and TLS certificate information output support.
  Updated binaries for DOS and Windows are also available.
  Beware: If you want to use GnuTLS, you need the not yet released version 1.1.23 or 1.2.0. You can use the daily snapshots after 2005-01-05 from http://josefsson.org/daily/gnutls/.
• 2005-01-01: New GNU SASL version
  Simon Josefsson released GNU SASL 0.2.4 today. This release has full support for all authentication methods supported by msmtp: PLAIN, CRAM-MD5, DIGEST-MD5, GSSAPI, LOGIN, and NTLM.
• 2004-12-29: msmtp 1.3.2 released!
  This release fixes a segfault bug (reported by Jan Kanty Palus) and has various minor improvements.
• 2004-12-24: msmtp 1.3.1 released!
  Sorry, 1.3.0 had some serious errors with the -t option. These were fixed.
  I should also point out that you need gsasl or libgsasl >=0.2.3 if you want GNU SASL support, and that GNU SASL's DIGEST-MD5 method currently does not work (it is disabled by default in 0.2.3).
• 2004-12-24: msmtp 1.3.0 released!
  A new development version with lots of new features:
  • Sendmail compatible command line options (including -t)
  • Almost all settings can be set or changed on the command line
  • Choose account by -f option (simplifies usage with Mutt)
  • GSSAPI authentication with GNU SASL >=0.2.3
  Beware: you need to activate authentication with "auth on" in the configuration file; it is not sufficient to just set user name and password anymore.
• 2004-10-29: New binaries of msmtp 1.2.4 for Win32 available
  The old binaries worked only on WinXP and newer systems. Thanks to Thomas Davies for reporting this.
  The new file msmtp-1.2.4-win32-1.zip contains additional binaries that should run on any Windows version.
• 2004-10-10: msmtp 1.2.4 is released!
  This release contains a lot of minor cleanups and improvements, but no important bug fixes and no new features.