maildrop

This release changes the effective group ID of processes started by maildrop, on some configurations, to maildrop's effective group ID rather than maildrop's parent process' effective group ID. This eliminates a potential privilege escalation if maildrop was invoked by a process with a more privileged effective group ID than maildrop.

This release adds minor performance improvements to the reformail tool. An external program invoked to filter a message that terminated before consuming its standard input is no longer considered an error. Maildrop's license was changed to the GPLv3.

Messages delivered by maildrop will use the
process's inherited umask. The -f option now
allows an empty return address to be specified.
The lockmail utility now drops any group-id
privileges if the setgid bit was added to
lockmail's permissions.

The agent now uses the PCRE library for regular expression pattern matching, with optional reversion to the old built-in legacy pattern matching engine.

This release adds support for setting IMAP keywords with Courier-IMAP 2.1 and higher.