Description of problem: Sendmail, Inc., and the Sendmail Consortium announce the availability of sendmail 8.14.4. This version fixes some problems: o some certificate authorities do not properly check the requests they are signing and hence allow spoofing via an embedded NUL in the CN entry. Some checks have been added to deal with "bogus" CNs (see below and doc/op/op.*). o a workaround for a Linux resolver problem has been added to avoid core dumps. o the value of headers, e.g., Precedence, Content-Type, et.al., was not extracted correctly thus preventing them from being recognized properly; leading spaces were not stripped (which was an unintended side effect of an earlier change) and hence comparing them with expected values (e.g., "first-class" for Precedence) did not work. o between 8.11.7 and 8.12.0 the length limitation on a return path was erroneously reduced. Version-Release number of selected component (if applicable): sendmail-8.14.3-10 Actual results: A simple version bump and replacing/updating/removing a few patches should do it. I'll attach an updated Patch3, Patch11 and Patch18. As far as I understand things, Patch20 can be removed as fixed somehow else in upstream. Expected results: Upgrade to 8.14.4... ;-)
Created attachment 381445 [details] sendmail-8.14.4-dynamic.patch
Created attachment 381446 [details] sendmail-8.14.4-makemapman.patch
Created attachment 381447 [details] sendmail-8.14.4-switchfile.patch
I am new package maintainer, thank you for patches, work on progress....
*** Bug 556574 has been marked as a duplicate of this bug. ***
https://koji.fedoraproject.org/koji/taskinfo?taskID=1962369 I will do some more testing before release.
In rawhide, enjoy.