Skip to content

Latest commit

 

History

History
135 lines (77 loc) · 3.73 KB

CHANGELOG.md

File metadata and controls

135 lines (77 loc) · 3.73 KB

Changelog

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[1.1.4] - 2024-08-30

Fixed

  • Fixed x/net issue. Close connections when receiving too many headers, CVE-2023-45288

[1.1.3] - 2024-01-24

Fixed

[1.1.2] - 2023-05-12

Fixed

[1.1.1] - 2023-05-10

Fixed

  • Fixed regexCaptureGroup() index navigation issue. Thanks @chiappone for the bug report.

[1.1.0] - 2023-02-20

Added

  • Added ability to explore ValidatorResult.SmtpDebug

[1.0.5] - 2023-02-20

Updated

  • Updated x/crypto dependency

Fixed

  • Fixed x/crypto issue. Vulnerable to panic via SSH server, CVE-2021-43565
  • Fixed x/crypto issue. Use of a Broken or Risky Cryptographic Algorithm in golang.org/x/crypto/ssh, CVE-2022-27191
  • Fixed x/crypto issue. Panic in malformed certificate, CVE-2020-7919
  • Fixed x/crypto issue. Improper Verification of Cryptographic Signature, CVE-2020-9283

[1.0.4] - 2023-02-19

Added

  • Added tag script for new release tagging

Updated

  • Updated go to 1.20.1
  • Updated x/net dependency
  • Updated releasing script (auto deploy to GitHub/Go Packages)
  • Updated CircleCI config
  • Updated project license

Fixed

  • Updated x/net dependency. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests, CVE-2022-41723

[1.0.3] - 2022-12-26

Added

Fixed

  • Fixed typos in project's codebase
  • Fixed new project's linter issues

Updated

  • Updated CircleCI config

[1.0.2] - 2022-11-20

  • Updated dependencies

[1.0.1] - 2022-10-27

  • Updated dependencies

[1.0.0] - 2022-10-13

  • Updated minimal go version to 1.19
  • Updated dependencies
  • Updated circleci config
  • Updated package documentation

[0.1.4] - 2022-05-31

Fixed

  • Updated yaml.v3 indirect dependency. An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input, CVE-2022-28948

[0.1.3] - 2022-03-02

Added

  • Added changelog

Updated

  • Updated ConfigurationAttr#validate, tests
  • Updated golangci config
  • Updated package documentation

[0.1.2] - 2022-02-28

Fixed

  • Fixed linters issues

[0.1.1] - 2022-02-28

Added

  • Added codecov

[0.1.0] - 2022-02-28

Added

  • First release of truemail-go.