Fedora 18 Update: sendmail-8.14.6-1.fc18

Sat Jan 12 01:31:03 UTC 2013

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-20936
2012-12-25 20:07:59
--------------------------------------------------------------------------------

Name        : sendmail
Product     : Fedora 18
Version     : 8.14.6
Release     : 1.fc18
URL         : http://www.sendmail.org/
Summary     : A widely used Mail Transport Agent (MTA)
Description :
The Sendmail program is a very widely used Mail Transport Agent (MTA).
MTAs send mail from one machine to another. Sendmail is not a client
program, which you use to read your email. Sendmail is a
behind-the-scenes program which actually moves your email over
networks or the Internet to where you want it to go.

If you ever need to reconfigure Sendmail, you will also need to have
the sendmail-cf package installed. If you need documentation on
Sendmail, you can install the sendmail-doc package.

--------------------------------------------------------------------------------
Update Information:

Sendmail, Inc., and the Sendmail Consortium announce the availability of sendmail 8.14.6.

  * Fix a regression introduced in 8.14.5: if a server offers two AUTH lines, the MTA would not read them after STARTTLS has been used and hence SMTP AUTH for the client side would fail.  Problem noted by Lena.
  * Do not cache hostnames internally in a non case sensitive way as that may cause addresses to change from lower case to upper case or vice versa. These header modifications can cause problems with milters that rely on receiving headers in the same way as they are being sent out such as a DKIM signing milter.
  * If MaxQueueChildren is set then it was possible that new queue runners could not be started anymore because an internal counter was subject to a race condition.
  * If a milter decreases the timeout it waits for a communication with the MTA, the MTA might experience a write() timeout. In some situations, the resulting error might have been ignored.  Problem noted by Werner Wiethege. Note: decreasing the communication timeout in a milter should not be done without considering the potential problems.
  * smfi_setsymlist() now properly sets the list of macros for the milter which invoked it, instead of a global list for all milters.  Problem reported by David Shrimpton of the University of Queensland.
  * If Timeout.resolver.retrans is set to a value larger than 20, then resolver.retry was temporarily set to 0 for gethostbyaddr() lookups. Now it is set to 1 instead. Patch from Peter.
  * If sendmail could not lock the statistics file due to a system error, and sendmail later sends a DSN for a mail that triggered such an error, then sendmail tried to access memory that was freed before (causing a crash on some systems).  Problem reported by Ryan Stone.
  * Do not log negative values for size= nor pri= to avoid confusing log parsers, instead limit the values to LONG_MAX.
  * Account for an API change in newer versions of Cyrus-SASL. Patch from Hajimu UMEMOTO from FreeBSD.
  * Do not try to resolve link-local addresses for IPv4 (just as it is done for IPv6).  Patch from John Beck of Oracle.
  * Improve logging of client and server STARTTLS connection failures that may be due to incompatible cipher lists by including the reason for the failure in a single log line.  Suggested by James Carey of Boeing.
  * Portability: Add support for Darwin 11.x and 12.x (Mac OS X 10.7 and 10.8). Add support for SunOS 5.12 (aka Solaris 12). Patch from John Beck of Oracle.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Dec 24 2012 Robert Scheck <robert at fedoraproject.org> - 8.14.6-1
- Upgrade to 8.14.6
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update sendmail' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------