OpenSMTPD官网安全更新（2023-11-16）

安全更新

OpenSMTPD is a FREE implementation of the SMTP protocol with some common extensions. It allows ordinary machines to exchange e-mails with systems speaking the SMTP protocol. It implements a fairly large part of RFC5321 and can already cover a large range of use-cases.<br/><br/>It runs on OpenBSD, NetBSD, FreeBSD, DragonFlyBSD, Linux and OSX.<br/><br/>The archives are now available from the main site at www.OpenSMTPD.org<br/><br/>We would like to thank the OpenSMTPD community for their help in testing the snapshots, reporting bugs, contributing code and packaging for other systems.<br/><br/>This is a minor release with multiple bug fixes.<br/><br/>Dependencies note:<br/>==================<br/><br/>This release builds with LibreSSL, or OpenSSL &amp;gt;= 1.1.<br/><br/>It&amp;#039;s preferable to depend on LibreSSL as OpenSMTPD is written and tested with that dependency. OpenSSL library is considered as a best effort target TLS library and provided as a commodity, LibreSSL has become our target TLS library.<br/><br/><br/>Changes in this release:<br/>========================<br/><br/> - Fixed potential crash with LibreSSL versions prior 3.8 due to<br/> `arc4random_buf()` symbol clash.<br/><br/> - Fixed manpage install path; reintroduced `--with-mantype`<br/><br/> - Fixed typo in the configure help string: it&amp;#039;s `--without-libbsd`<br/><br/> - Fixed a couple of issues on MacOS:<br/> - Fixed typo that resulted in the re-declaration of `strlcpy()` and `strlcat()`<br/> - Cast `suseconds_t` to long for `*printf`<br/> - Fixed `res_hnok()` and `b64_{pton,ntop}()` discovery<br/><br/><br/>Checksums:<br/>==========<br/><br/>```<br/>SHA256 (opensmtpd-7.4.0p1.tar.gz) = 9e82a2ec9419e181d4ca27d8e3ebe5d129fded5ba84022ff4d11a73f8edb70b5<br/>```<br/><br/>Verify:<br/>=======<br/><br/>Starting with version 5.7.1, releases are signed with signify(1).<br/><br/>You can obtain the public key from our website, check with our community that it has not been altered on its way to your machine.<br/><br/>```<br/>$ wget https://www.opensmtpd.org/archives/opensmtpd-20181026.pub<br/>```<br/><br/>Once you are confident the key is correct, you can verify the release as described below:<br/><br/>1. download both release tarball and matching signature file to same directory:<br/><br/>```<br/>$ wget https://www.opensmtpd.org/archives/opensmtpd-7.4.0p1.sum.sig<br/>$ wget https://www.opensmtpd.org/archives/opensmtpd-7.4.0p1.tar.gz<br/>```<br/><br/>2. use `signify` to verify that signature file is properly signed and that the checksum matches the release tarball you downloaded:<br/><br/>```<br/>$ signify -C -e -p opensmtpd-20181026.pub -x opensmtpd-7.4.0p1.sum.sig<br/>Signature Verified<br/>opensmtpd-7.4.0p1.tar.gz: OK<br/>```<br/><br/>If you don&amp;#039;t get an OK message, then something is not right and you should not install without first understanding why it failed.<br/><br/><br/>Support:<br/>========<br/><br/>You are encouraged to register to our general purpose mailing-list: http://www.opensmtpd.org/list.html<br/><br/>The &amp;quot;Official&amp;quot; IRC channel for the project is at: #opensmtpd @ irc.libera.chat<br/><br/><br/>Support us:<br/>===========<br/><br/>The project is maintained by volunteers, you can support us by:<br/><br/>- donating time to help test development branch during development cycle<br/>- donating money to either one of the OpenBSD or OpenSMTPD project<br/>- sponsoring developers through direct donations or patreon<br/>- sponsoring developers through contracts to write features<br/><br/>Get in touch with us by e-mail or on IRC for more informations.<br/><br/><br/>Reporting Bugs:<br/>===============<br/><br/>Please read http://www.opensmtpd.org/report.html<br/>Security bugs should be reported directly to security@opensmtpd.org<br/>Other bugs may be reported to bugs@opensmtpd.org

暂无

暂无

暂无

暂无

https://github.com/OpenSMTPD/OpenSMTPD/releases/tag/7.4.0p1