Sendmail 8.12.6
Sendmail, Inc., and the Sendmail Consortium announce the availability of sendmail 8.12.6. Several mostly minor problems have been fixed, e.g., queue selection in case of invalid recipients might have been wrong, a combination of FallbackMXhost and relay_based_on_MX would result in an open relay, owner- envelope splitting was broken if SuperSafe was set to interactive, base64 encoded client authentication data for SMTP AUTH may not work, and the treatment of $#discard for recipients might have been inconsistent. Compared to 8.12.6.Beta1 only some spelling errors have been fixed.
The version can be found at
ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.12.6.tar.gz ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.12.6.tar.Z ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.12.6.tar.sigMD5 signatures:
73e18ea78b2386b774963c8472cbd309 sendmail.8.12.6.tar.gz cebe3fa43731b315908f44889d9d2137 sendmail.8.12.6.tar.Z 8b9c78122044f4e4744fc447eeafef34 sendmail.8.12.6.tar.sig
You only need one of the first two files (either the gzip'ed version or the compressed version). The .sig file contains the PGP signature of the tar file (after uncompressing it). The PGP signature was created using the Sendmail Signing Key/2002, available on the web site (http://www.sendmail.org/) or on the public key servers.
Since sendmail 8.11 and later includes hooks to cryptography, the following information from OpenSSL applies to sendmail as well.
PLEASE REMEMBER THAT EXPORT/IMPORT AND/OR USE OF STRONG CRYPTOGRAPHY SOFTWARE, PROVIDING CRYPTOGRAPHY HOOKS OR EVEN JUST COMMUNICATING TECHNICAL DETAILS ABOUT CRYPTOGRAPHY SOFTWARE IS ILLEGAL IN SOME PARTS OF THE WORLD. SO, WHEN YOU IMPORT THIS PACKAGE TO YOUR COUNTRY, RE-DISTRIBUTE IT FROM THERE OR EVEN JUST EMAIL TECHNICAL SUGGESTIONS OR EVEN SOURCE PATCHES TO THE AUTHOR OR OTHER PEOPLE YOU ARE STRONGLY ADVISED TO PAY CLOSE ATTENTION TO ANY EXPORT/IMPORT AND/OR USE LAWS WHICH APPLY TO YOU. THE AUTHORS ARE NOT LIABLE FOR ANY VIOLATIONS YOU MAKE HERE. SO BE CAREFUL, IT IS YOUR RESPONSIBILITY.
8.12.6/8.12.6 2002/08/26 Do not add the FallbackMXhost (or its MX records) to the list returned by the bestmx map when -z is used as option. Otherwise sendmail may act as an open relay if FallbackMXhost and FEATURE(`relay_based_on_MX') are used together. Problem noted by Alexander Ignatyev. Properly split owner- mailing list messages when SuperSafe is set to interactive. Problem noted by Todd C. Miller of Courtesan Consulting. Make sure that an envelope is queued in the selected queue group even if some recipients are deleted or invalid. Problem found by Chris Adams of HiWAAY Informations Services. Do not send a bounce message if a message is completely collected from the SMTP client. Problem noted by Kari Hurtta of the Finnish Meteorological Institute. Provide an 'install-submit-st' target for sendmail/Makefile to install the MSP statistics file using the file named in the confMSP_STFILE devtools variable. Requested by Jeff Earickson of Colby College. Queue up mail with a temporary error if setusercontext() fails during a delivery attempt. Patch from Todd C. Miller of Courtesan Consulting. Fix handling of base64 encoded client authentication data for SMTP AUTH. Patch from Elena Slobodnik of life medien GmbH. Set the OpenLDAP option LDAP_OPT_RESTART so the client libraries restart interrupted system calls. Problem noted by Luiz Henrique Duma of BSIOne. Prevent a segmentation fault if a program passed a NULL envp using execve(). Document a problem with the counting of queue runners that may cause delays if MaxQueueChildren is set too low. Problem noted by Ian Duplisse of Cable Television Laboratories, Inc. If discarding a message based on a recipient, don't try to look up the recipient in the mailbox database if F=w is set. This allows users to discard bogus recipients when dealing with spammers without tipping them off. Problem noted by Neil Rickert of Northern Illinois University. If applying a header check to a header with unstructured data, e.g., Subject:, then do not run syntax checks that are supposed for addresses on the header content. Count messages rejected/discarded via the check_data ruleset. Portability: Fix compilation on systems which do not allow simple copying of the variable argument va_list. Based on fix from Scott Walters. Fix NSD map open bug. From Michel Bourget of SGI. Add some additional IRIX shells to the default shell list. From Michel Bourget of SGI. Fix compilation issues on Mac OS X 10.2 (Darwin 6.0). NETISO support has been dropped. CONFIG: There was a seemingly minor change in 8.12.4 with respect to handling entries of IP nets/addresses with RHS REJECT. These would be rejected in check_rcpt instead of only being activated in check_relay. This change has been made to avoid potential bogus temporary rejection of relay attempts "450 4.7.1 Relaying temporarily denied. Cannot resolve PTR record for ..." if delay_checks is enabled. However, this modification causes a change of behavior if an IP net/address is listed in the access map with REJECT and a host/domain name is listed with OK or RELAY, hence it has been reversed such that the behavior of 8.12.3 is restored. The original change was made on request of Neil Rickert of Northern Illinois University, the side effect has been found by Stefaan Van Hoornick. CONFIG: Make sure delay_checks works even for sender addresses using the local hostname ($j) or domains in class {P}. Based on patch from Neil Rickert of Northern Illinois University. CONFIG: Fix temporary error handling for LDAP Routing lookups. Fix from Andrzej Filip. CONTRIB: New version of etrn.pl script and external man page (etrn.0) from John Beck of Sun Microsystems. LIBMILTER: Protect a free(3) operation from being called with a NULL pointer. Problem noted by Andrey J. Melnikoff. LIBMILTER: Protect against more interrupted select() calls. Based on patch from Jose Marcio Martins da Cruz of Ecole Nationale Superieure des Mines de Paris. New Files: contrib/etrn.0
