sendmail 8.14.8 available
Claus Assmann <[email protected]> Sun, 26 Jan 2014 07:46:14 -0800 (PST)
| Newsgroups | gmane.mail.sendmail.announce |
|---|---|
| Message-ID | <[email protected]> |
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Proofpoint, Inc., and the Sendmail Consortium announce the availability
of sendmail 8.14.8. This version fixes some problems, mostly related
to IPv6. See below for details.
Please send bug reports and general feedback to one of the addresses
listed at: http://www.sendmail.org/email-addresses.html
The version can be found at
ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.8.tar.gz
ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.8.tar.gz.sig
ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.8.tar.Z
ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.8.tar.Z.sig
MD5 signatures:
05233f847c54743c4f5e9fe14ab226b0 sendmail.8.14.8.tar.Z
79ec997ab33148e8e863c10c5b59ce81 sendmail.8.14.8.tar.Z.sig
73bfc621c75dbdd3d719e54685d92577 sendmail.8.14.8.tar.gz
df7566ddc55e4551eea87b826a793dc2 sendmail.8.14.8.tar.gz.sig
You either need the first two files or the third and fourth,
i.e., the gzip'ed version or the compressed version and the
corresponding sig file. The PGP signature was created using
the Sendmail Signing Key/2014, available on the web site
(http://www.sendmail.com/sm/open_source/download/) or on
the public key servers.
Since sendmail 8.11 and later includes hooks to cryptography, the
following information from OpenSSL applies to sendmail as well.
PLEASE REMEMBER THAT EXPORT/IMPORT AND/OR USE OF STRONG CRYPTOGRAPHY
SOFTWARE, PROVIDING CRYPTOGRAPHY HOOKS OR EVEN JUST COMMUNICATING
TECHNICAL DETAILS ABOUT CRYPTOGRAPHY SOFTWARE IS ILLEGAL IN SOME
PARTS OF THE WORLD. SO, WHEN YOU IMPORT THIS PACKAGE TO YOUR
COUNTRY, RE-DISTRIBUTE IT FROM THERE OR EVEN JUST EMAIL TECHNICAL
SUGGESTIONS OR EVEN SOURCE PATCHES TO THE AUTHOR OR OTHER PEOPLE
YOU ARE STRONGLY ADVISED TO PAY CLOSE ATTENTION TO ANY EXPORT/IMPORT
AND/OR USE LAWS WHICH APPLY TO YOU. THE AUTHORS ARE NOT LIABLE FOR
ANY VIOLATIONS YOU MAKE HERE. SO BE CAREFUL, IT IS YOUR RESPONSIBILITY.
SENDMAIL RELEASE NOTES
$Id: RELEASE_NOTES,v 8.2043 2014/01/23 20:27:19 ca Exp $
This listing shows the version of the sendmail binary, the version
of the sendmail configuration files, the date of release, and a
summary of the changes in that release.
8.14.8/8.14.8 2014/01/26
Properly initialize all OpenSSL algorithms for versions before
OpenSSL 0.9.8o. Without this SHA2 algorithms may not
work properly, causing for example failures for certs
that use sha256WithRSAEncryption as signature algorithm.
When looking up hostnames, ensure only to return those records
for the requested family (AF_INET or AF_INET6).
On system that have NEEDSGETIPNODE and NETINET6
this may have failed and cause delivery problems.
Problem noted by Kees Cook.
A new mailer flag '!' is available to suppress an MH hack
that drops an explicit From: header if it is the
same as what sendmail would generate.
Add an FFR (for future release) to use uncompressed IPv6 addresses,
i.e., they will not contain "::". For example, instead
of ::1 it will be 0:0:0:0:0:0:0:1. This means that
configuration data (including maps, files, classes,
custom ruleset, etc) have to use the same format.
This will be turned on in 8.15. It can be enabled in 8.14
by compiling with:
APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
in your devtools/Site/site.config.m4 file.
Add an additional case for the WorkAroundBrokenAAAA check when
dealing with broken nameservers by ignoring SERVFAIL
errors returned on T_AAAA (IPv6) lookups at delivery time.
Problem noted by Pavel Timofeev of OCS.
If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
setusercontext() on deliveries as a different user.
Patch from Edward Tomasz Napierala from FreeBSD.
Avoid compiler warnings from a change in Cyrus-SASL 2.1.25.
Patch from Hajimu UMEMOTO from FreeBSD.
Add support for DHParameters 2048-bit primes.
CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
in FEATURE(`block_bad_helo'). Suggested by Andrey Chernov.
LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
Patch from Bill Parker.
LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
fail. Patch from John Beck of Oracle.
Portability:
Add support for Darwin 12.x and 13.x (Mac OS X 10.8 and 10.9).
On Linux use socklen_t as the type for the 3rd argument
for getsockname/getpeername if the glibc version is at
least 2.1.
Added Files:
devtools/OS/Darwin.12.x
devtools/OS/Darwin.13.x
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQEcBAEBAgAGBQJS4rEgAAoJEGHeEezidjpz3A4H/2467KUykTWEcCJIYrUIG28m
72/CKbyZp2wAp3H1MydzmB+disRdBImWV6rxssdInukDFbuSmMfZVM24BcgdjIah
QrSeUnmV6Xp8FGcGZzIPiNdJz/xroUGiAqX7ujG4lqr2DmBWMj1f5AuPbJBx0iZ5
HheDonlR/bqVkz39Gesb60ImZrpScLIjRaZow4tFYSSy4lYMcJBpaa7Kpuji2AnK
UZbXVjLna3sI35cXFNdzM+VBkIGDdguB/DJTvkLXydffIy1Bz/jyHTy7HwC/nemn
zRG36F6PiUrwHzJEqkaJpYObXpFfwYrlkk6pw/ZMPyHHP9EAV6CE/CjqSUVOIAI=
=NHgN
-----END PGP SIGNATURE-----