bogofilter 1.3.0.beta3 now available, more bugfixes and robustness

[Matthias Andree]

Greetings,

bogofilter 1.3.0.beta3 is now available from
https://sourceforge.net/projects/bogofilter/files/bogofilter-current/bogofilter-1.3.0.beta/
https://gitlab.com/bogofilter/bogofilter/-/releases/bogofilter-1.3.0.beta3
(on gitlab, use the .tar.xz file and its detached GnuPG signature!)

Regards,
Matthias Andree

========================================================================
1.3.0beta3

	2025-04-04
	* Fix recursion of RFC-2047 header word decoding

	  We used to detect RFC-2047 words in the lexer, which it would
	  decode and then push back to the lexer's input buffer. This
	  could cause it to be subjected to another pass of RFC-2047 decoding,
	  which is technically incorrect and also inefficient.

	  RFC-2047 decoding now happens when reading the input lines,
	  outside the lexer, so it only happens once.

	  Originally, this bug report set out to also fix pushback buffer
	  overflows, but that fact had been fixed as a desired side effect
	  of earlier other fixes. Fixes Gitlab #3, which had been
	  standing for far too long and originated in SourceForge Bug 85.

	2025-04-03
	* Several Lexer optimizations all over the place that
	  should improve efficiency and avoid going into slow
	  modes on corrupt inputs.  The tokenizer should no longer
	  try to match anything beyond 2 kBytes of input as single token.
	  Also, response to messages with malformed MIME boundaries,
	  specifically a lack of preceding blank line,
	  should be better now.

	2025-03-23
	* Fix another decoding/lexer bug that would terminate
	  lexing the input prematurely if a single byte from
	  a multi-byte sequence (say, the 1st byte from UTF-8)
	  was alone on a quoted-printable line that wants a
	  continuation.  Fixes issue #11, reported by Jonathan Kamens.

=----------------------------------------------------------------------=
PRIOR TEST ISSUE:

1.3.0beta2

	2025-03-22
	* Fix the remaining decoding/Unicode conversion bug 
	  from issue #7 (Gitlab), reported by Jonathan Kamens.
	* Switch source code to C99.
	* Fix pathological performance on binary inputs mislabeled
	  as text, as in t.passthrough-truncation, by breaking off
	  several tokens at NUL bytes.  t.passthrough-truncation
	  is now roughly two orders of magnitude faster.

	2025-03-22
	* Fix the remaining decoding/Unicode conversion bug 
	  from issue #7 (Gitlab), reported by Johnathan Kamens.
	* Switch source code to C99.
	* Fix pathological performance on binary inputs mislabelled
	  as text, as in t.passthrough-truncation, by breaking off
	  several tokens at NUL bytes.  t.passthrough-truncation
	  is now roughly two orders of magnitude faster.

========================================================================
WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING
=----------------------------------------------------------------------=
POTENTIAL FOR DATA CORRUPTION DURING UPDATES

If you plan to upgrade your database library, if only as a side effect
of an operating system upgrade, DO HEED the relevant documentation, for
instance, the doc/README.db file.  You may need to prepare the upgrade
with the old version of the software.

Otherwise, you may cause irrecoverable damage to your databases.

DO backup your databases before making the upgrade.
========================================================================
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://www.bogofilter.org/pipermail/bogofilter/attachments/20250404/0a9d112f/attachment.sig>