Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
2009-12-30 Sendmail 8.14.4 is available.
1 view
Skip to first unread message
Andrzej Adam Filip
Jan 3, 2010, 2:35:25 AM1/3/10
to
http://www.sendmail.org/releases/8.14.4
This version fixes some problems:
* some certificate authorities do not properly check the requests they
are signing and hence allow spoofing via an embedded NUL in the CN
entry. Some checks have been added to deal with "bogus" CNs (see below
and doc/op/op.*).
* a workaround for a Linux resolver problem has been added to avoid
core dumps.
* the value of headers, e.g., Precedence, Content-Type, et.al., was
not extracted correctly thus preventing them from being recognized
properly; leading spaces were not stripped (which was an unintended
side effect of an earlier change) and hence comparing them with
expected values (e.g., "first-class" for Precedence) did not work.
* between 8.11.7 and 8.12.0 the length limitation on a return path was
erroneously reduced.
[...]
This version fixes some problems:
* some certificate authorities do not properly check the requests they
are signing and hence allow spoofing via an embedded NUL in the CN
entry. Some checks have been added to deal with "bogus" CNs (see below
and doc/op/op.*).
* a workaround for a Linux resolver problem has been added to avoid
core dumps.
* the value of headers, e.g., Precedence, Content-Type, et.al., was
not extracted correctly thus preventing them from being recognized
properly; leading spaces were not stripped (which was an unintended
side effect of an earlier change) and hence comparing them with
expected values (e.g., "first-class" for Precedence) did not work.
* between 8.11.7 and 8.12.0 the length limitation on a return path was
erroneously reduced.
[...]
--
[pl>en Andrew] Andrzej Adam Filip : an...@onet.eu : Andrze...@gmail.com
Women sometimes forgive a man who forces the opportunity, but never a man
who misses one.
-- Charles De Talleyrand-Perigord
0 new messages