Changelog for sendmail-debugsource-8.14.7-165.4.i586.rpm :
Thu Aug 8 14:00:00 2013 wernerAATTsuse.de
- Use /etc/os-release instead of /etc/SuSE-release (bnc#833953)

Mon Jul 15 14:00:00 2013 wernerAATTsuse.de
- New rpm had removed \"prereq\" flag from installation script bits
that is that `Requires(prereq)\' is not valid anymore :(((

Sun Jun 16 14:00:00 2013 jengelhAATTinai.de
- sendmail-8.14.7.dif forces the use of SSL and SASL libraries,
so make sure the BuildRequires are there

Fri Jun 14 14:00:00 2013 jengelhAATTinai.de
- Add sendmail-db6.diff to fix compile abort with db >= 5

Tue May 28 14:00:00 2013 fcrozatAATTsuse.com
- Fix errors in systemd services (bnc#820858).

Tue Apr 23 14:00:00 2013 wernerAATTsuse.de
- Remove FAQ.sendmail-8.14 but use a html link to upstream support

Tue Apr 23 14:00:00 2013 wernerAATTsuse.de
- Update to sendmail 8.14.7

* Drop support for IPv4-mapped IPv6 addresses to prevent the MTA
from using a mapped address over a legitimate IPv6 address
and to enforce the proper semantics over the IPv6
connection. Problem noted by Ulrich Sporlein.

* Fix a regression introduced in 8.14.6: the wrong list of
macros was sent to a milter in the EHLO stage.
Problem found by Fabrice Bellet, reported via RedHat
(Jaroslav Skarvada).

* Fix handling of ORCPT parameter for DSNs: xtext decoding
was not performed and a wrong syntax check was applied
to the \"addr-type\" field. Problem noted by Dan Lukes
of Obludarium.

* Fix handling of NUL characters in the MIME conversion functions
so that message bodies containing them will be sent
on properly. Note: this usually also affects mails
that are not converted as those functions are used
for other purposes too. Problem noted by Elchonon
Edelson of Lockheed Martin.

* Do not perform \"duplicate\" elimination of recipients if they
resolve to the error mailer using a temporary failure
(4xy) via ruleset 0. Problem noted by Akira Takahashi
of IIJ.

* CONTRIB: Updated version of etrn.pl script from John Beck
of Oracle.
- Update to sendmail 8.14.6

* Fix a regression introduced in 8.14.5: if a server offers
two AUTH lines, the MTA would not read them after
STARTTLS has been used and hence SMTP AUTH for
the client side would fail. Problem noted by Lena.

* Do not cache hostnames internally in a non case sensitive way
as that may cause addresses to change from lower case
to upper case or vice versa. These header modifications
can cause problems with milters that rely on receiving
headers in the same way as they are being sent out such
as a DKIM signing milter.

* If MaxQueueChildren is set then it was possible that new queue
runners could not be started anymore because an
internal counter was subject to a race condition.

* If a milter decreases the timeout it waits for a communication
with the MTA, the MTA might experience a write() timeout.
In some situations, the resulting error might have been
ignored. Problem noted by Werner Wiethege.
Note: decreasing the communication timeout in a milter
should not be done without considering the potential
problems.

* smfi_setsymlist() now properly sets the list of macros for
the milter which invoked it, instead of a global
list for all milters. Problem reported by
David Shrimpton of the University of Queensland.

* If Timeout.resolver.retrans is set to a value larger than 20,
then resolver.retry was temporarily set to 0 for
gethostbyaddr() lookups. Now it is set to 1 instead.
Patch from Peter.

* If sendmail could not lock the statistics file due to a system
error, and sendmail later sends a DSN for a mail that
triggered such an error, then sendmail tried to access
memory that was freed before (causing a crash on some
systems). Problem reported by Ryan Stone.

* Do not log negative values for size= nor pri= to avoid confusing
log parsers, instead limit the values to LONG_MAX.

* Account for an API change in newer versions of Cyrus-SASL.
Patch from Hajimu UMEMOTO from FreeBSD.

* Do not try to resolve link-local addresses for IPv4 (just as it
is done for IPv6). Patch from John Beck of Oracle.

* Improve logging of client and server STARTTLS connection failures
that may be due to incompatible cipher lists by including
the reason for the failure in a single log line. Suggested
by James Carey of Boeing.
- Drop sendmail-8.14.5-auth2.patch0 as this is part of 8.14.6
- Add sendmail-8.14.7-warning.patch to avoid useless gcc warning
- Refresh sendmail-8.14.7-select.dif
- Refresh sendmail-8.14.7.dif

Fri Oct 26 14:00:00 2012 cooloAATTsuse.com
- explicit buildrequire on groff, called from spec file

Thu Oct 11 14:00:00 2012 cooloAATTsuse.com
- buildrequire netcfg explicitly

Fri Jul 13 14:00:00 2012 wernerAATTsuse.de
- Make if build even with older distributions

Fri Jul 13 14:00:00 2012 wernerAATTsuse.de
- Use UTF-8 messages

Fri Jul 13 14:00:00 2012 wernerAATTsuse.de
- Do not depend on broken umask in rpm scriptlets

Tue Jun 19 14:00:00 2012 wernerAATTsuse.de
- Make SuSEconfig.sendmail a standalone update script (fate#313548)

Fri May 25 14:00:00 2012 wernerAATTsuse.de
- Help to do systemctl the obvoisly (bnc#754544)

Thu Feb 9 13:00:00 2012 cfarrellAATTsuse.com
- license update: SUSE-Sendmail
SUSE- proprietary prefix added until Sendmail is accepted as valid SPDX
license at http://www.spdx.org/licenses

Mon Nov 21 13:00:00 2011 wernerAATTsuse.de
- Allow sendmail to authenticate as client to various mail servers
in TLS mode even if servers send 2 headers (bnc#731658)

Thu Aug 18 14:00:00 2011 wernerAATTsuse.de
- Expand systemd configuration at build time

Fri Aug 12 14:00:00 2011 wernerAATTsuse.de
- Use Pre exec files for configuration on the fly

Thu Aug 11 14:00:00 2011 wernerAATTsuse.de
- Socket activation does not work for sendmail even with -bs
on the command line of sendmail and StandardInput=socket

Mon Aug 8 14:00:00 2011 wernerAATTsuse.de
- The approach of using makefiles requires make for sendmail

Fri Aug 5 14:00:00 2011 wernerAATTsuse.de
- Make /var/run a ghost entry in spec as this is a tmpfs now and
create it at start of sendmail if it does not exist (bnc#710279)
- First try of using systemd unit configration files for both
sendmail MTA and sendmail MT client. Try to start them on
demand using systemd unit socket files for both local and remote
network as well as systemd unit path file for local mail queue

Tue May 31 14:00:00 2011 wernerAATTsuse.de
- Update to sendmail 8.14.5

* Do not cache SMTP extensions across connections as the cache is
based on hostname which may not be a unique identifier for a
server, i.e., different machines may have the same hostname but
provide different SMTP extensions. Problem noted by Jim Hermann.

* Avoid an out-of-bounds access in case a resolver reply for a DNS
map lookup returns a size larger than 1K. Based on a patch
from Dr. Werner Fink of SuSE.

* If a job is aborted using the interrupt signal (e.g., control-C
from the keyboard), perform minimal cleanup to avoid invoking
functions that are not signal-safe. Note: in previous versions
the mail might have been queued up already and would be
delivered subsequently, now an interrupt will always remove the
queue files and thus prevent delivery.

* Per RFC 6176, when operating as a TLS client, do not offer SSLv2.

* Since TLS session resumption is never used as a client, disable
use of RFC 4507-style session tickets.

* Work around gcc4 versions which reverse 25 years of history and
no longer align char buffers on the stack, breaking calls to
resolver functions on strict alignment platforms.
Found by Stuart Henderson of OpenBSD.

* Read at most two AUTH lines from a server greeting (up to two
lines are read because servers may use \"AUTH mechs\" and
\"AUTH=mechs\"). Otherwise a malicious server may exhaust the
memory of the client. Bug report by Nils of MWR InfoSecurity.

* Avoid triggering an assertion in the OpenLDAP code when the
connection to an LDAP server is lost while making a query.
Problem noted and patch provided by Andy Fiddaman.

* If ConnectOnlyTo is set and sendmail is compiled with NETINET6
it would try to use an IPv6 address if an IPv4 (or unparseable)
address is specified.

* If SASLv2 is used, make sure that the macro {auth_authen} is
stored in xtext format to avoid problems with parsing it.
Problem noted by Christophe Wolfhugel.

* CONFIG: FEATURE(`ldap_routing\') in 8.14.4 tried to add a missing
- T that is required, but failed for some cases that did
not use LDAP. This change has been undone until a better
solution can be implemented. Problem found by Andy Fiddaman.

* CONTRIB: qtool.pl: Deal with H entries that do not have a letter
between the question marks. Patch from Stefan Christensen.

* DOC: Use a better description for the -i option in sendmail.
Patch from Mitchell Berger.
- Add defines for nanaosleep and socklen_t for linux in conf.h

Tue Dec 7 13:00:00 2010 cooloAATTnovell.com
- prereq init scripts network and syslog

Thu Sep 30 14:00:00 2010 rhaferAATTnovell.com
- Removed version-specific libdb-4_5-devel from BuildRequires to be
able to build against newer libdb Versions.

Fri Jul 16 14:00:00 2010 wernerAATTsuse.de
- Newer killproc sends only SIGTERM as required by LSB if -TERM is
specified on the command line. Use the default which is SIGTERM
followed by SIGKILL if the timeout of 5 seconds is reached.

Fri Feb 5 13:00:00 2010 wernerAATTsuse.de
- Use upstream patch for bnc#559517

Wed Jan 27 13:00:00 2010 wernerAATTsuse.de
- Update to bug fix release sendmail 8.14.4

* Handle bogus certificates containing NUL characters
in CNs by placing a string indicating a bad certificate
in the {cn_subject} or {cn_issuer} macro. Patch inspired
by Matthias Andree\'s changes for fetchmail.

* During the generation of a queue identifier an integer overflow
could occur which might result in bogus characters
being used. Based on patch from John Vannoy of
Pepperdine University.

* Prevent a crash when a hostname lookup returns a seemingly
valid result which contains a NULL pointer (this seems
to be happening on some Linux versions).

* Fix overflow of an internal array when parsing some replies
from a milter. Problem found by Scott Rotondo

* Fix handling of `b\' modifier for DaemonPortOptions on little
endian machines for loopback address. Patch from
John Beck of Sun Microsystems.

* Fix a potential memory leak in libsmdb/smdb1.c found by parfait.
Based on patch from Jonathan Gray of OpenBSD.

* Fix memory leak that occurred when smfi_setsymlist()
was used. Based on patch by Dan Lukes.
- Add patch to avoid overflow of buffer for DNS resolver (bnc#559517)