[An on-line version of this announcement will be available at https://www.postfix.org/announcements/postfix-3.7.1.html]
Fixed in Postfix 3.7, 3.6, 3.5, 3.4:
(problem introduced: Postfix 2.7) The milter_header_checks maps are now opened before the cleanup(8) server enters the chroot jail. Problem reported by Jesper Dybdal.
In an internal client module, "host or service not found" was a fatal error, causing the milter_default_action setting to be ignored. It is now a non-fatal error, just like a failure to connect. Problem reported by Christian Degenkolb.
The proxy_read_maps default value was missing up to 27 parameter names. The corresponding lookup tables were not automatically authorized for use with the proxymap(8) service. The parameter names were ending in _checks, _reply_footer, _reply_filter, _command_filter, and _delivery_status_filter.
(problem introduced: Postfix 3.0) With dynamic map loading enabled, an attempt to create a map with "postmap regexp:path" would result in a bogus error message "Is the postfix-regexp package installed?" instead of "unsupported map type for this operation". This happened with all non-dynamic map types (static, cidr, etc.) that have no 'bulk create' support. Problem reported by Greg Klanderman.
Additionally, the following were fixed in Postfix 3.7:
In PCRE_README, "pcre2 --libs" should be "pcre2 --libs8". Problem reported by Carlos Velasco.
Documented in the postlogd(8) daemon manpage that the Postfix ≥ 3.7 postlog(1) command can run with setgid permissions.
You can find the updated Postfix source code at the mirrors listed at https://www.postfix.org/.