Sendmail, Inc., and the Sendmail Consortium announce the availability of sendmail 8.14.6. This version fixes a few problems, including:

• If a server offers two AUTH lines, the MTA would not read them after STARTTLS has been used and hence SMTP AUTH for the client side would fail.
• Hostnames are no longer cached internally in a non case sensitive way as that may cause addresses to change from lower case to upper case or vice versa.
• It was possible that new queue runners could not be started anymore if MaxQueueChildren was set.

A complete list of changes can be found in the release notes (see below).

Please send bug reports and general feedback to one of the addresses listed at one of the following addresses.

The version can be found at

ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.6.tar.gz
ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.6.tar.gz.sig
ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.6.tar.Z
ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.6.tar.Z.sig

MD5 signatures:

MD5 (sendmail.8.14.6.tar.Z) = fea8951e7ccd0d6150fb63da1fb4c29a
MD5 (sendmail.8.14.6.tar.Z.sig) = 83cb2970fc06dcf842ce72f05938121b
MD5 (sendmail.8.14.6.tar.gz) = 9eeed3d1baecbf4e17d829d2ec005553
MD5 (sendmail.8.14.6.tar.gz.sig) = efb5697ceec739b72d888e95e779daeb

You either need the first two files or the third and fourth, i.e., the gzip'ed version or the compressed version and the corresponding sig file. The PGP signature was created using the Sendmail Signing Key/2012, available on the web site (http://www.sendmail.com/sm/open_source/download/) or on the public key servers.

Since sendmail 8.11 and later includes hooks to cryptography, the following information from OpenSSL applies to sendmail as well.

ERRATA:

• (2013-01-18)
  The wrong list of macros is sent to a milter in the EHLO stage. Problem found by Fabrice Bellet, reported via RedHat (Jaroslav Skarvada).

A patch (signature) is available.

PLEASE REMEMBER THAT EXPORT/IMPORT AND/OR USE OF STRONG CRYPTOGRAPHY SOFTWARE, PROVIDING CRYPTOGRAPHY HOOKS OR EVEN JUST COMMUNICATING TECHNICAL DETAILS ABOUT CRYPTOGRAPHY SOFTWARE IS ILLEGAL IN SOME PARTS OF THE WORLD. SO, WHEN YOU IMPORT THIS PACKAGE TO YOUR COUNTRY, RE-DISTRIBUTE IT FROM THERE OR EVEN JUST EMAIL TECHNICAL SUGGESTIONS OR EVEN SOURCE PATCHES TO THE AUTHOR OR OTHER PEOPLE YOU ARE STRONGLY ADVISED TO PAY CLOSE ATTENTION TO ANY EXPORT/IMPORT AND/OR USE LAWS WHICH APPLY TO YOU.

THE AUTHORS ARE NOT LIABLE FOR ANY VIOLATIONS YOU MAKE HERE. SO BE CAREFUL, IT IS YOUR RESPONSIBILITY.

Show Release Notes