-----BEGIN PGP SIGNED MESSAGE-----

Sendmail, Inc., and the Sendmail Consortium announce the availability
of sendmail 8.12.3. This version fixes a long-standing MIME (7 to
8-bit) conversion bug and several smaller problems, e.g., a possible
communication problem between the MTA and libmilter, a bug in
handling (invalid) addresses containing 8-bit characters, a possible
problem with small timeouts being lost on slow machines if itimers
are used, and the handling of the 421 reply code and timeouts in
the SMTP delivery code. There are two changes in the msp feature
that may change the behavior: MX lookups are turned on for the SMTP
mailers and hence `[localhost]' is used as default instead of
`localhost', and confTIME_ZONE is set to USE_TZ in submit.mc. A
complete list of changes can be found in the release notes below.

The version can be found at:

ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.12.3.tar.gz
ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.12.3.tar.Z
ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.12.3.tar.sig

MD5 signatures:

5f376123cf75b51d95b9ca4caf386fdb sendmail.8.12.3.tar.gz
a6d0cc806e3810cd2f8caa061ebd888e sendmail.8.12.3.tar.Z
0a09a7543c284ca2228e116ad82e8576 sendmail.8.12.3.tar.sig

You only need one of the first two files (either the gzip'ed version or the
compressed version). The .sig file contains the PGP signature of the tar
file (after uncompressing it). The PGP signature was created using the
Sendmail Signing Key/2002, available on the web site
(http://www.sendmail.org/) or on the public key servers.

Since sendmail 8.11 and later includes hooks to cryptography, the
following information from OpenSSL applies to sendmail as well.

   PLEASE REMEMBER THAT EXPORT/IMPORT AND/OR USE OF STRONG CRYPTOGRAPHY
   SOFTWARE, PROVIDING CRYPTOGRAPHY HOOKS OR EVEN JUST COMMUNICATING
   TECHNICAL DETAILS ABOUT CRYPTOGRAPHY SOFTWARE IS ILLEGAL IN SOME
   PARTS OF THE WORLD. SO, WHEN YOU IMPORT THIS PACKAGE TO YOUR
   COUNTRY, RE-DISTRIBUTE IT FROM THERE OR EVEN JUST EMAIL TECHNICAL
   SUGGESTIONS OR EVEN SOURCE PATCHES TO THE AUTHOR OR OTHER PEOPLE
   YOU ARE STRONGLY ADVISED TO PAY CLOSE ATTENTION TO ANY EXPORT/IMPORT
   AND/OR USE LAWS WHICH APPLY TO YOU. THE AUTHORS ARE NOT LIABLE FOR
   ANY VIOLATIONS YOU MAKE HERE. SO BE CAREFUL, IT IS YOUR RESPONSIBILITY.

                        SENDMAIL RELEASE NOTES
      $Id: RELEASE_NOTES,v 8.1296 2002/04/05 19:17:34 ca Exp $

This listing shows the version of the sendmail binary, the version
of the sendmail configuration files, the date of release, and a
summary of the changes in that release.

8.12.3/8.12.3 2002/04/05
        NOTICE: In general queue files should not be moved if queue groups
                are used. In previous versions this could cause mail
                not to be delivered if a queue file is repeatedly moved
                by an external process whenever sendmail moved it back
                into the right place. Some precautions have been taken
                to avoid moving queue files if not really necessary.
                sendmail may use links to refer to queue files and it
                may store the path of data files in queue files. Hence
                queue files should not be moved unless those internals
                are understood and the integrity of the files is not
                compromised. Problem noted by Anne Bennett of Concordia
                University.
        If an error mail is created, and the mail is split across different
                queue directories, and SuperSafe is off, then write the mail
                to disk before splitting it, otherwise an assertion is
                triggered. Problem tracked down by Henning Schmiedehausen
                of INTERMETA.
        Fix possible race condition that could cause sendmail to forget
                running queues. Problem noted by Jeff Wasilko of smoe.org.
        Handle bogus qf files better without triggering assertions.
                Problem noted by Guy Feltin.
        Protect against interrupted select() call when enforcing Milter
                read and write timeouts. Patch from Gurusamy Sarathy of
                ActiveState.
        Matching queue IDs with -qI should be case sensitive. Problem
                noted by Anne Bennett of Concordia University.
        If privileges have been dropped, don't try to change group ID to
                the RunAsUser group. Problem noted by Neil Rickert of
                Northern Illinois University.
        Fix SafeFileEnvironment path munging when the specified path
                contains a trailing slash. Based on patch from Dirk Meyer
                of Dinoex.
        Do not limit sendmail command line length to SM_ARG_MAX (usually
                4096). Problem noted by Allan E Johannesen of Worcester
                Polytechnic Institute.
        Clear full name of sender for each new envelope to avoid bogus data
                if several mails are sent in one session and some of them
                do not have a From: header. Problem noted by Bas Haakman.
        Change timeout check such that cached information about a connection
                will be immediately invalid if ConnectionCacheTimeout is zero.
                Based on patch from David Burns of Portland State University.
        Properly count message size for mailstats during mail collection.
                Problem noted by Werner Wiethege.
        Log complete response from LMTP delivery agent on failure. Based on
                patch from by Motonori Nakamura of Kyoto University.
        Provide workaround for getopt() implementations that do not catch
                missing arguments.
        Fix the message size calculation if the message body is replaced by
                a milter filter and buffered file I/O is being used.
                Problem noted by Sergey Akhapkin of Dr.Web.
        Do not honor SIGUSR1 requests if running with extra privileges.
                Problem noted by Werner Wiethege.
        Prevent a file descriptor leak on mail delivery if the initial
                connect fails and DialDelay is set. Patch from Servaas
                Vandenberghe of Katholieke Universiteit Leuven.
        Properly deal with a case where sendmail is called by root running
                a set-user-ID (non-root) program. Problem noted by Jon
                Lusky of ISS Atlanta.
        Avoid leaving behind stray transcript (xf) files if multiple queue
                directories are used and mail is sent to a mailing list
                which has an owner- alias. Problem noted by Anne Bennett
                of Concordia University.
        Fix class map parsing code if optional key is specified. Problem
                found by Mario Nigrovic.
        The SMTP daemon no longer tries to fix up improperly dot-stuffed
                incoming messages. A leading dot is always stripped by the
                SMTP receiver regardless of whether or not it is followed by
                another dot. Problem noted by Jordan Ritter of darkridge.com.
        Fix corruption when doing automatic MIME 7-bit quoted-printable or
                base64 encoding to 8-bit text. Problem noted by Mark
                Elvers.
        Correct the statistics gathered for total number of connections.
                Instead of being the exact same number as the total number
                of messages (T line in mailstats) it now represents the
                total number of TCP connections.
        Be more explicit about syntax errors in addresses, especially
                non-ASCII characters, and properly create DSNs if necessary.
                Problem noted by Leena Heino of the University of Tampere.
        Prevent small timeouts from being lost on slow machines if itimers
                are used. Problem noted by Suresh Ramasubramanian.
        Prevent a race condition on child cleanup for delivery to files.
                Problem noted by Fletcher Mattox of the University of
                Texas.
        Change the SMTP error code for temporary map failures from 421
                to 451.
        Do not assume that realloc(NULL, size) works on all OS (this was
                only done in one place: queue group creation). Based on
                patch by Bryan Costales.
        Initialize Timeout.iconnect in the code to prevent randomly short
                timeouts. Problem noted by Bradley Watts of AT&T Canada.
        Do not try to send a second SMTP QUIT command if the remote
                responds to a MAIL command with a 421 reply or on I/O
                errors. By doing so, the host was marked as having a
                temporary problem and other mail destined for that host was
                queued for the next queue run. Problem noted by Fletcher
                Mattox of the University of Texas, Allan E Johannesen of
                Worcester Polytechnic Institute, Larry Greenfield of CMU,
                and Neil Rickert of Northern Illinois University.
        Ignore error replies from the SMTP QUIT command (including servers
                which drop the connection instead of responding to the
                command).
        Portability:
                Check LDAP_API_VERSION to determine if ldap_memfree() is
                        availble.
                Define HPUX10 when building on HP-UX 10.X. That platform
                        now gets the proper _PATH_SENDMAIL and SMRSH_CMDDIR
                        settings. Patch from Elias Halldor Agustsson of
                        Skyrr.
                Fix dependency building on Mac OS X and Darwin. Problem
                        noted by John Beck.
                Preliminary support for the sparc64 port of FreeBSD 5.0.
                Add /sbin/sh as an acceptable user shell on HP-UX. From
                        Rajesh Somasund of Hewlett-Packard.
        CONFIG: Add FEATURE(`authinfo') to allow a separate database for
                SMTP AUTH information. This feature was actually added in
                8.12.0 but a release note was not included.
        CONFIG: Do not bounce mail if FEATURE(`ldap_routing')'s bounce
                parameter is set and the LDAP lookup returns a temporary
                error.
        CONFIG: Honor FEATURE(`relay_hosts_only') when using
                FEATURE(`relay_mail_from', `domain'). Problem noted by
                Krzysztof Oledzki.
        CONFIG: FEATURE(`msp') now disables any type of alias
                initialization as aliases are not needed for the MSP.
        CONFIG: Allow users to override RELAY_MAILER_ARGS when FEATURE(`msp')
                is in use. Patch from Andrzej Filip.
        CONFIG: FEATURE(`msp') uses `[localhost]' as default instead of
                `localhost' and turns on MX lookups for the SMTP mailers.
                This will only have an effect if a parameter is specified,
                i.e., an MX lookup will be performed on the hostname unless
                it is embedded in square brackets. Problem noted by
                Theo Van Dinter of Collective Technologies.
        CONFIG: Set confTIME_ZONE to USE_TZ in submit.mc (TimeZoneSpec= in
                submit.cf) to use $TZ for time stamps. This is a compromise
                to allow for the proper time zone on systems where the
                default results in misleading time stamps. That is, syslog
                time stamps and Date headers on submitted mail will use the
                user's $TZ setting. Problem noted by Mark Roth of the
                University of Illinois at Urbana-Champaign, solution proposed
                by Neil Rickert of Northern Illinois University.
        CONFIG: Mac OS X (Darwin) ships with mail.local as non-set-user-ID
                binary. Adjust local mailer flags accordingly. Problem
                noted by John Beck.
        CONTRIB: Add a warning to qtool.pl to not move queue files around
                if queue groups are used.
        CONTRIB: buildvirtuser: Add -f option to force rebuild.
        CONTRIB: smcontrol.pl: Add -f option to specify control socket.
        CONTRIB: smcontrol.pl: Add support for 'memdump' command.
                Suggested by Bryan Costales.
        DEVTOOLS: Add dependency generation for test programs.
        LIBMILTER: Remove conversion of port number for the socket
                structure that is passed to xxfi_connect(). Notice:
                this fix requires that sendmail and libmilter have both
                this change, mixing versions may lead to wrong port
                values depending on the endianness of the involved systems.
                Problem noted by Gisle Aas of ActiveState.
        LIBMILTER: If smfi_setreply() sets a custom reply code of '4XX' but
                SMFI_REJECT is returned, ignore the custom reply. Do the
                same if '5XX' is used and SMFI_TEMPFAIL is returned.
        LIBMILTER: Install include files in ${INCLUDEDIR}/libmilter/ as
                required by mfapi.h. Problem noted by Jose Marcio Martins
                da Cruz of Ecole Nationale Superieure des Mines de Paris.
        LIBSM: Add SM_CONF_LDAP_MEMFREE as a configuration define. Set
                this to 1 if your LDAP client libraries include
                ldap_memfree().
        LIBSMDB: Avoid a file creation race condition for Berkeley DB 1.X
                and NDBM on systems with the O_EXLOCK open(2) flag.
        SMRSH: Fix compilation problem on some operating systems. Problem
                noted by Christian Krackowizer of schuler technodat GmbH.
        VACATION: Allow root to operate on user vacation databases. Based
                on patch from Greg Couch of the University of California,
                San Francisco.
        VACATION: Don't ignore -C option. Based on patch by Bryan Costales.
        VACATION: Clarify option usage in the man page. Problem noted by
                Joe Barbish.
        New Files:
                libmilter/docs/smfi_setbacklog.html

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (OpenBSD)
Comment: For info see http://www.gnupg.org

iQCVAwUBPK4CQs8etQMiMnoBAQE4wQP9HlveUjw2Ix74EdGbP+43PkG1Di1e19/5
3JfX74fXuAngKaJMf7pmY31UPziTtSctP7IsxDPGz2pfQeSngzcARmADO5A46oIh
OqN0x+FcKHYpirlhchICEbLV9UDgHdNgiMpBkOsUSfC2OBhDJQQYtlo5R+UTDKYI
dZG/jvZs6Bk=
=rtzh
-----END PGP SIGNATURE-----

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]