Sendmail, Inc., and the Sendmail Consortium announce the availability of sendmail 8.14.7. This version fixes the handling of NUL characters ('\0') in mail bodies by the MIME conversion functions, which are used even if no explicit conversion is happening, e.g., if MaxMimeHeaderLength is not zero, as well as some other problems. A complete list of changes can be found in the release notes (see below).

Please send bug reports and general feedback to one of the addresses listed at: http://www.sendmail.org/email-addresses.html

The version can be found at

ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.7.tar.gz
ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.7.tar.gz.sig
ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.7.tar.Z
ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.14.7.tar.Z.sig

MD5 signatures:
MD5 (sendmail.8.14.7.tar.gz) = 348eedfab0ed00931f2df94e78f22c43
MD5 (sendmail.8.14.7.tar.gz.sig) = d9241031572f145ebb69f593fee1a1b0
MD5 (sendmail.8.14.7.tar.Z) = ef6a441cc102695a65bfba72b4b90a08
MD5 (sendmail.8.14.7.tar.Z.sig) = f7494f81b2960e1b25679041102385b2
    

You either need the first two files or the third and fourth, i.e., the gzip'ed version or the compressed version and the corresponding sig file. The PGP signature was created using the Sendmail Signing Key/2013, available on the web site (http://sendmail.com/sm/open_source/security/) or on the public key servers.

Since sendmail 8.11 and later includes hooks to cryptography, the following information from OpenSSL applies to sendmail as well.

PLEASE REMEMBER THAT EXPORT/IMPORT AND/OR USE OF STRONG CRYPTOGRAPHY SOFTWARE, PROVIDING CRYPTOGRAPHY HOOKS OR EVEN JUST COMMUNICATING TECHNICAL DETAILS ABOUT CRYPTOGRAPHY SOFTWARE IS ILLEGAL IN SOME PARTS OF THE WORLD. SO, WHEN YOU IMPORT THIS PACKAGE TO YOUR COUNTRY, RE-DISTRIBUTE IT FROM THERE OR EVEN JUST EMAIL TECHNICAL SUGGESTIONS OR EVEN SOURCE PATCHES TO THE AUTHOR OR OTHER PEOPLE YOU ARE STRONGLY ADVISED TO PAY CLOSE ATTENTION TO ANY EXPORT/IMPORT AND/OR USE LAWS WHICH APPLY TO YOU. THE AUTHORS ARE NOT LIABLE FOR ANY VIOLATIONS YOU MAKE HERE. SO BE CAREFUL, IT IS YOUR RESPONSIBILITY.

Hide Release Notes

            SENDMAIL RELEASE NOTES
      $Id: RELEASE_NOTES,v 8.2024 2013/04/19 15:01:58 ca Exp $

    

This listing shows the version of the sendmail binary, the version of the sendmail configuration files, the date of release, and a summary of the changes in that release.

8.14.7/8.14.7   2013/04/21
    Drop support for IPv4-mapped IPv6 addresses to prevent the MTA
        from using a mapped address over a legitimate IPv6 address
        and to enforce the proper semantics over the IPv6
        connection.  Problem noted by Ulrich Sporlein.
    Fix a regression introduced in 8.14.6: the wrong list of
        macros was sent to a milter in the EHLO stage.
        Problem found by Fabrice Bellet, reported via RedHat
        (Jaroslav Skarvada).
    Fix handling of ORCPT parameter for DSNs: xtext decoding
        was not performed and a wrong syntax check was applied
        to the "addr-type" field.  Problem noted by Dan Lukes
        of Obludarium.
    Fix handling of NUL characters in the MIME conversion functions
        so that message bodies containing them will be sent
        on properly. Note: this usually also affects mails
        that are not converted as those functions are used
        for other purposes too.  Problem noted by Elchonon
        Edelson of Lockheed Martin.
    Do not perform "duplicate" elimination of recipients if they
        resolve to the error mailer using a temporary failure
        (4xy) via ruleset 0.  Problem noted by Akira Takahashi
        of IIJ.
    CONTRIB: Updated version of etrn.pl script from John Beck
        of Oracle.
    Portability:
        Unlike gcc, clang doesn't apply full prototypes to K&R
        definitions.

    

Hide Release Notes