Postfix 2.2 patchlevel 10 available

[email protected] (Wietse Venema) Thu, 6 Apr 2006 17:13:24 -0400 (EDT)
Newsgroups gmane.mail.postfix.announce
Message-ID <20060406211324.6D734BC16D__47665.6471648768$1144358139$gmane$org@spike.porcupine.org>
Postfix version 2.2 patch 10 fixes minor problems, as usual.  

This is the stable Postfix release. It does not change except for
bugfixes, portability, and emergencies. New features are added to
the experimental release which then becomes the next stable release.

Highlight of changes (more details below the signature):

- "sendmail -t" did not remove the CR from lines ending in CRLF.

- Workaround for fatal errors in PCRE maps when an expression in
() matches empty text (the PCRE library returns an inappropriate
error code).

- Fixes for non-security bugs that Coverity found in code that
handles impossible error conditions.

Beware: Coverity's claim of "17 original defects" in Postfix includes
14 false positives; that is, 14 are bugs in Coverity, not in Postfix.
Inflated claims like this may make their own product look good, but
they are hamful for the reputation of open source projects.

Soon on mirrors listed at http://www.postfix.org/download.html

     5012 Apr  6 16:44 postfix-2.2-patch10.gz
   375808 Apr  5 15:15 postfix-2.2.10.HISTORY
    19753 Mar  9  2005 postfix-2.2.10.RELEASE_NOTES
  2443513 Apr  5 16:43 postfix-2.2.10.tar.gz
      280 Apr  5 16:43 postfix-2.2.10.tar.gz.sig

As well as ftp://ftp.porcupine.org/mirrors/postfix-release/index.html

	Wietse

Change history:

20060310

	Workaround: null-terminate the input after stripping CR,
	and before passing the input to the MIME processor. Leandro
	Santi. The fix, a rewrite of the MIME processor input
	handling, is too much change for a stable release. File:
	sendmail/sendmail.c.

20060315

	Workaround: the PCRE library reports an inappropriate error
	code (invalid substring) when $number refers to a valid ()
	expression that matches the null string. This caused fatal
	run-time errors.  File: dict_pcre.c.

20060324

	Bugfix: mis-placed parenthesis in SMTP before-filter error
	test. A filter timeout was mis-reported as lost connection.
	Found in code review.  File: smtpd/smtpd_proxy.c.

20060403
	Bugfix: the pipe-to-command error message was lost when
	the command could not be executed. File: global/pipe_command.c.

20060404

	Bugfix in sanity check: after reading a record from the
	address verification database, a sanity check did not reject
	a record with all-zero time stamp fields.  Such records
	are never written; the test is there just in case something
	is broken, so that Postfix will not blindly march on and
	create chaos. The sanity check tested pointer values,
	instead of dereferencing the pointers.  Found by Coverity.
	File:  verify/verify.c.

	Bugfix in sanity check: when the maildir delivery routine
	opens an output file it looks up the file attributes via
	the file handle it just got.  There is a sanity check that
	detects if the attribute lookup fails, an error that never
	happens. The code that handles the impossible error did
	not close the output file. This would cause a virtual or
	local delivery agent to waste up to 100 file descriptors.
	But for that error to happen the system would have to be
	so sick that you would have more serious problems than a
	file descriptor leak.  Found by Coverity.  Files:
	local/maildir.c, virtual/maildir.c.