sendmail 8.14.6 available

Claus Assmann <[email protected]> Sun, 23 Dec 2012 15:34:47 -0800 (PST)
Newsgroups gmane.mail.sendmail.announce
Message-ID <[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sendmail, Inc., and the Sendmail Consortium announce the availability
of sendmail 8.14.6. This version fixes a few problems, including:

 o If a server offers two AUTH lines, the MTA would not read them
   after STARTTLS has been used and hence SMTP AUTH for the client
   side would fail.

 o Hostnames are no longer cached internally in a non case
   sensitive way as that may cause addresses to change from
   lower case to upper case or vice versa.

 o It was possible that new queue runners could not be started
   anymore if MaxQueueChildren was set.


A complete list of changes can be found in the release notes (see
below).

Please send bug reports and general feedback to one of the addresses
listed at: http://www.sendmail.org/email-addresses.html

The version can be found at

ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.6.tar.gz
ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.6.tar.gz.sig
ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.6.tar.Z
ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.6.tar.Z.sig

MD5 signatures:
MD5 (sendmail.8.14.6.tar.Z) = fea8951e7ccd0d6150fb63da1fb4c29a
MD5 (sendmail.8.14.6.tar.Z.sig) = 83cb2970fc06dcf842ce72f05938121b
MD5 (sendmail.8.14.6.tar.gz) = 9eeed3d1baecbf4e17d829d2ec005553
MD5 (sendmail.8.14.6.tar.gz.sig) = efb5697ceec739b72d888e95e779daeb

You either need the first two files or the third and fourth,
i.e., the gzip'ed version or the compressed version and the
corresponding sig file. The PGP signature was created using
the Sendmail Signing Key/2012, available on the web site
(http://www.sendmail.com/sm/open_source/download/) or on
the public key servers.

Since sendmail 8.11 and later includes hooks to cryptography, the
following information from OpenSSL applies to sendmail as well.

   PLEASE REMEMBER THAT EXPORT/IMPORT AND/OR USE OF STRONG CRYPTOGRAPHY
   SOFTWARE, PROVIDING CRYPTOGRAPHY HOOKS OR EVEN JUST COMMUNICATING
   TECHNICAL DETAILS ABOUT CRYPTOGRAPHY SOFTWARE IS ILLEGAL IN SOME
   PARTS OF THE WORLD.  SO, WHEN YOU IMPORT THIS PACKAGE TO YOUR
   COUNTRY, RE-DISTRIBUTE IT FROM THERE OR EVEN JUST EMAIL TECHNICAL
   SUGGESTIONS OR EVEN SOURCE PATCHES TO THE AUTHOR OR OTHER PEOPLE
   YOU ARE STRONGLY ADVISED TO PAY CLOSE ATTENTION TO ANY EXPORT/IMPORT
   AND/OR USE LAWS WHICH APPLY TO YOU. THE AUTHORS ARE NOT LIABLE FOR
   ANY VIOLATIONS YOU MAKE HERE. SO BE CAREFUL, IT IS YOUR RESPONSIBILITY.


			SENDMAIL RELEASE NOTES
      $Id: RELEASE_NOTES,v 8.2011 2012/12/21 18:42:16 ca Exp $


This listing shows the version of the sendmail binary, the version
of the sendmail configuration files, the date of release, and a
summary of the changes in that release.

8.14.6/8.14.6	2012/12/23
	Fix a regression introduced in 8.14.5: if a server offers
		two AUTH lines, the MTA would not read them after
		STARTTLS has been used and hence SMTP AUTH for
		the client side would fail.  Problem noted by Lena.
	Do not cache hostnames internally in a non case sensitive way
		as that may cause addresses to change from lower case
		to upper case or vice versa. These header modifications
		can cause problems with milters that rely on receiving
		headers in the same way as they are being sent out such
		as a DKIM signing milter.
	If MaxQueueChildren is set then it was possible that new queue
		runners could not be started anymore because an
		internal counter was subject to a race condition.
	If a milter decreases the timeout it waits for a communication
		with the MTA, the MTA might experience a write() timeout.
		In some situations, the resulting error might have been
		ignored.  Problem noted by Werner Wiethege.
		Note: decreasing the communication timeout in a milter
		should not be done without considering the potential
		problems.
	smfi_setsymlist() now properly sets the list of macros for
		the milter which invoked it, instead of a global
		list for all milters.  Problem reported by
		David Shrimpton of the University of Queensland.
	If Timeout.resolver.retrans is set to a value larger than 20,
		then resolver.retry was temporarily set to 0 for
		gethostbyaddr() lookups. Now it is set to 1 instead.
		Patch from Peter.
	If sendmail could not lock the statistics file due to a system
		error, and sendmail later sends a DSN for a mail that
		triggered such an error, then sendmail tried to access
		memory that was freed before (causing a crash on some
		systems).  Problem reported by Ryan Stone.
	Do not log negative values for size= nor pri= to avoid confusing
		log parsers, instead limit the values to LONG_MAX.
	Account for an API change in newer versions of Cyrus-SASL.
		Patch from Hajimu UMEMOTO from FreeBSD.
	Do not try to resolve link-local addresses for IPv4 (just as it
		is done for IPv6).  Patch from John Beck of Oracle.
	Improve logging of client and server STARTTLS connection failures
		that may be due to incompatible cipher lists by including
		the reason for the failure in a single log line.  Suggested
		by James Carey of Boeing.
	Portability:
		Add support for Darwin 11.x and 12.x (Mac OS X 10.7 and 10.8).
		Add support for SunOS 5.12 (aka Solaris 12). Patch from
		John Beck of Oracle.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (OpenBSD)

iQEcBAEBAgAGBQJQ10J7AAoJEI5a6fvO7vQ7iJoH/RwdM+5AGy/YIWybTRP14OqL
Y4Lx1oIgRu/BFbsFGNtOCIyzDDIy3CHkkbhmeCXcBCI3gI8n7Gpt23fSv3nPRrC2
o/b/GUFawcw2495ofnKdwvQZWRDbRqQeupYYB++9uzNYfHePpPuPc9vzUEEZBjtS
NOBJ9ZBP6mJFkbgmpRL8U6WWQvQbPsK67YBwimy0qgLpFaNamVaVoOMigRoAHhq6
Fk8M8wNkSHLmSunTopNp81GJHlIpmdA2EUvnxrjGRI3Z4oyOfzlI/I1cNQshbOxN
oyebTKs1RofYiQ1HSfwAGOJNLkoqY1WUXSGDK9U99mVFpwNH3fDL/3ybiqMGL8Y=
=9iCX
-----END PGP SIGNATURE-----