Sendmail

Release Notes: SMTP extensions are no longer cached across connections, as the cache is based on hostname, which may not be a unique identifier for a server, i.e. different machines may have the same hostname but provide different SMTP extensions. Out-of-bounds access is avoided in case a resolver reply for a DNS map lookup returns a size larger than 1K. The interrupt signal handler has been cleaned up to avoid invoking functions that are not signal-safe. At most, two AUTH lines are read from a server to avoid a memory exhaustion DoS attack against the client.

Release Notes: This version fixed a problem where some certificate authorities do not properly check the requests they are signing and hence allow spoofing via an embedded NUL in the CN entry. A workaround for a Linux resolver problem has been added to avoid core dumps. A bug where the value of headers, e.g., Precedence, Content-Type, et.al., was not extracted correctly thus preventing them from being recognized properly was fixed. An erroneous reduction of the length limitation on a return path was fixed.

Release Notes: The MTA accessed storage after it free()d it. This was a regression introduced in 8.14.2. The libmilter state engine did not deal correctly with milters that requested the omission of protocol steps during the negotiation callback.

Release Notes: This release fixes some problems. For example, fixes were made for a bug in the milter function smfi_chgfrom() which could cause the loss of a message body, the handling of queued messages with 8 bit characters in From: or To: header which could be "mistaken" for internal control characters during a queue run and trigger various consistency checks, and the handling of lines longer than MAXLINE-1 characters in certain cases.

Release Notes: If a milter rejected a recipient, the MTA still kept it in its list of recipients, and delivered to it if the transaction was accepted. The new DaemonPortOptions that begin with a lower case character can now be set.