MX Patches and Compatibility Information

MANDATORY SECURITY UPDATE NOTICE

ECO kits have been issued for: MX V5.3 | MX V5.2 | MX V5.1A | MX V5.1 | MX V4.2 to address a potential security issue.

MadGoat Software strongly recommends either upgrading to MX V5.4, which is not affected by the issue, or the immediate installation of these ECOs.

A kit with patched images is also available for MX V4.2.

MX V5.4

MX V5.4 is the latest release.  It is compatible with OpenVMS VAX V5.5 and later, OpenVMS Alpha V6.2 and later, and OpenVMS Industry Standard 64 V8.2.

The following Engineering Change Orders (ECOs) are available for MX V5.4:

• ECO 01 Description
• ECO Kit - Recommended

Contains corrections for a memory leak in the message queue library that causes the FLQ Manager to stop processing queue cleanups.  Also contains a correction for the SMTP agent which caused it to treat any non-success response to the DATA command as a severe error.

MX V5.3

MX V5.3 is compatible with OpenVMS VAX V5.5 through V7.3-1, and OpenVMS Alpha V6.2 through V7.3-1.

The following Engineering Change Orders (ECOs) are available for MX V5.3:

• ECO 12 Description
• ECO kit - Optional

Contains corrections for error handling and message origin identification in the SMTP-over-DECnet server.  Also includes all fixes from prior ECOs.

• ECO 11 Description
• ECO kit - Optional

Contains some enhancements in debug logging of authentication transactions in the SMTP server.  Also includes all fixes from prior ECOs.

• ECO 10 Description
• ECO kit - Optional

Contains improvements for handling queue entry deletion errors in the SMTP server.  Also includes all fixes from prior ECOs.

• ECO 09 Description
• ECO kit - Optional

Contains corrections for "transient" DNS errors being reported for invalid-domain-name lookups; also improves RBL lookups to reduce the likelihood of failure if a black-hole list DNS server becomes unreachable.  Also includes all fixes from prior ECOs.

• ECO 08 Description
• ECO kit - Optional

Contains an update to enhance invalid-domain-name anti-spam checking to allow for successful translation of names to addresses that you configure as invalid (see the readme file in the kit for more info), to handle the new DNS redirection some TLD servers are performing for invalid addresses.  Also includes all fixes from prior ECOs.

• ECO 07 Description
• ECO kit - Optional

Contains an update to support using a logical name to specify the IP address to which the SMTP server binds its listener socket.  Also includes all fixes from prior ECOs.

• ECO 06 Description
• ECO kit - Optional

Contains a fix for mail header generation that could sometimes confuse VMS MAIL.  Also includes all fixes from prior ECOs.

• ECO 05 Description
• ECO kit - Optional

Contains a fix for automatic From: header insertion in MX_SITE_IN.  Also includes all fixes from prior ECOs.

• ECO 04 Description
• ECO kit - Optional

Contains fixes for EXQUOTA handling in local delivery and for possible REJMAN database corruption during simultaneous access by REJMAN and the SMTP server under heavy load.  Also includes all fixes from prior ECOs.

• ECO 03 Description
• ECO kit - Optional

Contains fixes for handling of addresses with MX_LOCAL_FORWARDER and the MX_SITE_NAME_CONVERSION customization interface.  Sites using either of these features should apply this update.  Also includes all fixes from prior ECOs.

• ECO 02 Description
• SECURITY UPDATE - MANDATORY

This update is strongly recommended for all MX V5.3 installations, to correct a potential security vulnerability in MX V5.3.  All fixes from ECO 01 are also included in this kit.

MX V5.2

The following Engineering Change Order (ECO) is available for MX V5.2:

• ECO 09 Description
• SECURITY UPDATE - MANDATORY

All changes from ECOs issued earlier are included in these kits.

MX V5.1A

The following Engineering Change Order (ECO) is available for MX V5.1A:

• ECO 06 Description
• SECURITY UPDATE - MANDATORY

All changes from ECOs issued earlier are included in these kits.

MX V5.1

The following Engineering Change Order (ECO) is available for MX V5.1:

• ECO 17 Description
• SECURITY UPDATE - MANDATORY

All changes from ECOs issued earlier are included in these kits.

MX V4.2

The following kit contains replacement images for MX V4.2 that addresses the security issue:

• Update kit Description
• SECURITY UPDATE - MANDATORY

All changes from ECOs issued earlier are included in these kits.

HOME |
Copyright © MadGoat Software.  All Rights Reserved.