Prepare 0.8.4 release

fix(transport-sendmail): Stop argument parsing before destination addresses
2020-11-11 17:46:42 +01:00 · 2020-11-11 17:43:05 +01:00
4 changed files with 12 additions and 2 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,12 @@
+<a name="v0.8.4"></a>
+### v0.8.4 (2020-11-11)
+
+#### Bug Fixes
+
+* **transport**
+
+  * **SECURITY**: Prevent argument injection in sendmail transport
+
 <a name="v0.8.2"></a>
 ### v0.8.2 (2018-05-03)

--- a/lettre/Cargo.toml
+++ b/lettre/Cargo.toml
@@ -1,7 +1,7 @@
 [package]

 name = "lettre"
-version = "0.8.2" # remember to update html_root_url
+version = "0.8.4" # remember to update html_root_url
 description = "Email client"
 readme = "README.md"
 homepage = "http://lettre.at"
--- a/lettre/src/lib.rs
+++ b/lettre/src/lib.rs
@@ -4,7 +4,7 @@
 //! emails have to implement `SendableEmail`.
 //!

-#![doc(html_root_url = "https://docs.rs/lettre/0.8.2")]
+#![doc(html_root_url = "https://docs.rs/lettre/0.8.4")]
 #![deny(missing_docs, missing_debug_implementations, missing_copy_implementations, trivial_casts,
        trivial_numeric_casts, unsafe_code, unstable_features, unused_import_braces,
        unused_qualifications)]
--- a/lettre/src/sendmail/mod.rs
+++ b/lettre/src/sendmail/mod.rs
@@ -46,6 +46,7 @@ impl<'a, T: Read + 'a> EmailTransport<'a, T, SendmailResult> for SendmailTranspo
                    Some(address) => address.to_string(),
                    None => "\"\"".to_string(),
                },
+                "--",
                &to_addresses.join(" "),
            ])
            .stdin(Stdio::piped())
Author	SHA1	Message	Date
Alexis Mousset	58026d8318	Prepare 0.8.4 release	2020-11-11 17:46:42 +01:00
Alexis Mousset	d86900e37e	fix(transport-sendmail): Stop argument parsing before destination addresses	2020-11-11 17:43:05 +01:00