Versie 3.7.2 van Postfix is uitgekomen. Postfix is een door de Nederlander Wietse Venema ontwikkelde mailserver, als alternatief voor Sendmail. Het is ontwikkeld met snelheid en veiligheid in gedachten, maar ook een eenvoudige bediening. Op deze pagina is een schat aan informatie over het programma te vinden. De aankondiging van deze uitgave ziet er als volgt uit: Postfix stable release 3.7.2 This reverts an overly complex change in the postscreen SMTP engine (made during Postfix 3.7 development), and replaces it with much simpler code. The bad change was crashing postscreen on some systems after receiving malformed input (for example, a TLS “hello” message). Workarounds are at the end of this text. Under conditions described below, the postscreen program attempted to read through an uninitialized ‘const’ pointer. The pointer value depended on the compiler type and compiler options, but crucially, it did not depend on network inputs. The conditions were that 1) postscreen was enabled (not the default), 2) SMTPUTF8 support was enabled (the default), and 3) postscreen received non-UTF8 input, for example, a TLS or RDP (remote desktop) handshake request. Depending on compiler details, the result of the read operation could be “uninteresting”, a combined memory leak and file handle leak, or a postscreen crash with a segmentation violation (signal 11). The segmentation violation result was observed by Michael Grimm while running Postfix 3.7 and 3.8 on a FreeBSD 13.1 pre-release version, while the result was “uninteresting” with FreeBSD 13.0 (both systems use Clang instead of GCC). The result was also “uninteresting” on Fedora Linux with GCC, and on a few older systems with GCC. Workarounds:
