Postfix 2.2 patchlevel 10 available
[email protected] (Wietse Venema) Thu, 6 Apr 2006 17:13:24 -0400 (EDT)
| Newsgroups | gmane.mail.postfix.announce |
|---|---|
| Message-ID | <20060406211324.6D734BC16D__47665.6471648768$1144358139$gmane$org@spike.porcupine.org> |
Postfix version 2.2 patch 10 fixes minor problems, as usual.
This is the stable Postfix release. It does not change except for
bugfixes, portability, and emergencies. New features are added to
the experimental release which then becomes the next stable release.
Highlight of changes (more details below the signature):
- "sendmail -t" did not remove the CR from lines ending in CRLF.
- Workaround for fatal errors in PCRE maps when an expression in
() matches empty text (the PCRE library returns an inappropriate
error code).
- Fixes for non-security bugs that Coverity found in code that
handles impossible error conditions.
Beware: Coverity's claim of "17 original defects" in Postfix includes
14 false positives; that is, 14 are bugs in Coverity, not in Postfix.
Inflated claims like this may make their own product look good, but
they are hamful for the reputation of open source projects.
Soon on mirrors listed at http://www.postfix.org/download.html
5012 Apr 6 16:44 postfix-2.2-patch10.gz
375808 Apr 5 15:15 postfix-2.2.10.HISTORY
19753 Mar 9 2005 postfix-2.2.10.RELEASE_NOTES
2443513 Apr 5 16:43 postfix-2.2.10.tar.gz
280 Apr 5 16:43 postfix-2.2.10.tar.gz.sig
As well as ftp://ftp.porcupine.org/mirrors/postfix-release/index.html
Wietse
Change history:
20060310
Workaround: null-terminate the input after stripping CR,
and before passing the input to the MIME processor. Leandro
Santi. The fix, a rewrite of the MIME processor input
handling, is too much change for a stable release. File:
sendmail/sendmail.c.
20060315
Workaround: the PCRE library reports an inappropriate error
code (invalid substring) when $number refers to a valid ()
expression that matches the null string. This caused fatal
run-time errors. File: dict_pcre.c.
20060324
Bugfix: mis-placed parenthesis in SMTP before-filter error
test. A filter timeout was mis-reported as lost connection.
Found in code review. File: smtpd/smtpd_proxy.c.
20060403
Bugfix: the pipe-to-command error message was lost when
the command could not be executed. File: global/pipe_command.c.
20060404
Bugfix in sanity check: after reading a record from the
address verification database, a sanity check did not reject
a record with all-zero time stamp fields. Such records
are never written; the test is there just in case something
is broken, so that Postfix will not blindly march on and
create chaos. The sanity check tested pointer values,
instead of dereferencing the pointers. Found by Coverity.
File: verify/verify.c.
Bugfix in sanity check: when the maildir delivery routine
opens an output file it looks up the file attributes via
the file handle it just got. There is a sanity check that
detects if the attribute lookup fails, an error that never
happens. The code that handles the impossible error did
not close the output file. This would cause a virtual or
local delivery agent to waste up to 100 file descriptors.
But for that error to happen the system would have to be
so sick that you would have more serious problems than a
file descriptor leak. Found by Coverity. Files:
local/maildir.c, virtual/maildir.c.