CN comment strings are now null-terminated after sanitization. "Bad address pattern" errors with non-address patterns in namadr_list_match() calls are avoided. A "cleanup -v" panic has been fixed that occurred because the new "SMTP reply" request flag did not have a printable name. Using "Before-queue content filter", RFC3848 information was not added to the headers. A poorly-implemented integer overflow check for TCP MSS calculation had the unexpected effect that people broke Postfix on LP64 systems. Delivery is deferred when a mailbox file is not owned by the recipient.
The Postfix 2.5 "postfix upgrade-configuration"
command now works even with Postfix 2.4 or earlier
versions of the postfix command. When installing
Postfix 2.5.0 without upgrading from an existing
master.cf file, the new master.cf file had an
incorrect process limit for the proxywrite
service. This service is used only by the obscure
"smtp_sasl_auth_cache_name" and
"lmtp_sasl_auth_cache_name" configuration
parameters. Someone needed multi-line support for
header/body Milter replies. The LDAP client's TLS
support was broken in several ways.
TLS (SSL) support was streamlined further. Milter
support was updated from the Sendmail 8.13 feature
set and now includes most of the features
introduced with Sendmail 8.14. Stress-adaptive
configuration was introduced. This allows the
Postfix SMTP server to temporarily adjust its
rules under conditions of overload. The queue
manager scheduler now provides per-transport
scheduling controls and allows for adjustment of
the sensitivity to mail delivery (non-)errors.
Security was improved by introducing a
Postfix-owned data_directory for storage of
randomness, caches, and other non-queue data.