[An on-line version of this announcement will be available at http://www.postfix.org/announcements/postfix-3.6.2.html]
Fixed in Postfix 3.6.2, 3.5.12, 3.4.22, 3.3.19:
In Postfix 3.6, fixed a false "Result too large" (ERANGE) fatal error in the compatibility_level parser, because there was no 'errno = 0' statement before an strtol() call. In Postfix 3.3-3.5, fixed two older latent bugs of this kind (introduced in 1999 and in Postfix 2.11). Problem reported by David Bohman.
(problem introduced in Postfix 3.3) "Null pointer read" error in the cleanup daemon when "header_from_format = standard" (the default as of Postfix 3.3), and email was submitted with /usr/sbin/sendmail without From: header, and an all-space full name was specified in 1) the password file, 2) with "sendmail -F", or 3) with the NAME environment variable. Found by Renaud Metrich.
(problem introduced in Postfix 2.4) False "too many reverse jump" warnings in the showq daemon, because loop detection code was comparing memory addresses instead of queue file names. Reported by Mehmet Avcioglu.
(problem introduced in 1999) The Postfix SMTP server was sending all session transcripts to the error_notice_recipient (default: postmaster), instead of sending transcripts of bounced mail to the bounce_notice_recipient (default: postmaster). Reported by Hans van Zijst.
Fixed in Postfix 3.6.2, 3.5.12, 3.4.22:
The texthash: map implementation broke tls_server_sni_maps, because it did not support multi-file inputs. Reported by Christopher Gurnee, who also found an instance of the missing code in the "postmap -F" source code. File: util/dict_thash.c.
You can find the updated Postfix source code at the mirrors listed at http://www.postfix.org/.