2.4.3
        Fix bug #SF3400670: Send ADSP failure reports when rejecting
                a message.
        Fix bug #SF3419149: Add MaximumSignedBytes to opendkim-config.h.
        Fix bug #SF3441240: Appy ReportBccAddress when generating ADSP
                reports.
        Fix bug #SF3447199: Fix logic preventing the application of the
                BodyLengthDB.
        Fix Authentication-Results generation with "AddAllSignatureResults"
                enabled.
        Fix a crash bug when trying to handle certain malformed header fields
                in verify-only mode.
        Improve error checking in the callback provided to libunbound to
                avoid crashes.
        Cope with versions of Sleepycat DB that crash when asking for a file
                descriptor for in-memory databases.
        Don't override "On-NoSignature" when "Quarantine" is set.
        Ignore header field names that contain semi-colons, as they produce
                syntactically invalid signatures.
        LIBOPENDKIM: Fix bug #SF3465400: Don't use "new" as a parameter name
                in dkim.h since that's an error for C++.
        LIBOPENDKIM: NOERROR is the same as NXDOMAIN for the purposes of
                the ADSP existence check.  Problem noted by Todd Nagengast.
        LIBOPENDKIM: Return DKIM_STAT_SYNTAX from dkim_header() if the header
                field name contained a semi-colon.
        LIBAR: After computing a timeout, if the fractional seconds portion
                adds to exactly a second, convert that amount to seconds.
                Previous versions only converted when the fractional portion
                exceeded a second.  This led to threads that spin
                indefinitely.  Problem noted by Todd Lyons and Gary Mills;
                forensic evidence revealing the problem at long last provided
                by Todd Lyons.
        STATS: Fix a crash bug in opendkim-importstats due to improper handling
                of NULL returns from SQL.

2.4.2
        Don't apply BodyLengthDB when not signing.
        LIBOPENDKIM: Update for draft-kucherawy-dkim-atps-06.
        LIBOPENDKIM: Terminate the strings returned by dkim_sig_getsubstring()
                and dkim_sig_getidentity() whenever possible.
        CONTRIB: Change "chkconfig" instruction in RHEL init script,
                and a minor tweak to the RPM spec file.

2.4.1           2011/06/28
        Fix bug #SF3312691: Add "-e" command line switch to extract a value
                from configuration.
        Fix bug #SF3324488: Accommodate postfix's job ID generation by moving
                the BodyLengthDB check down to EOH.
        Fix bug #SF3327106: Fix mode-based short-circuit logic.
        Patch #SF3321766: Remove "-d" from usage message (not implemented).
        Print database error strings instead of just return codes in
                query test mode, and clean up error strings when extracting
                them from the layers below.
        Minor fixes related to use of OpenDBX.
        LIBOPENDKIM: Fix bug #SF3328330: Correct generation of "z=" tags.
        LIBOPENDKIM: Patch #SF3313534: Improve thread-safe use of OpenSSL
                in dkim_init() and dkim_free().
        LIBOPENDKIM: Patch #SF3314269: Change all uses of off_t to ssize_t,
                as the former is reserved for use with filesystem APIs.
        LIBOPENDKIM: Make the user context pointer (void) rather than
                (const void) since the caller is allowed to change it.
        LIBOPENDKIM: Proper handling of DKIM_CBSTAT_ERROR from the prescreen
                and final callbacks.
        LIBOPENDKIM: Fix up initialization under _FFR_OVERSIGN.
        BUILD: Adjust gprof code to accomodate systems that put profiling
                output in <binary>.gmon rather than gmon.out.

2.4.0           2011/06/06
        Feature request #SF3060140: Extension of odkim.sign() to include
                maximum signed byte count.
        Feature request #SF3171865: Add _FFR_LUA_GLOBALS, enabling a
                mechanism to maintain state between Lua scripts.
        Feature request #SF3241982: Optionally add an Authentication-Results
                field for all signatures present, not just the first good one.
        Feature request #SF3256630: Add _FFR_RATE_LIMIT, enabling hooks for
                post-verification rate controls.
        Feature request #SF3290461: Add optional support for querying a
                memcache daemon via libmemcached.
        Feature request #SF3299041: Be tougher on use of the "l=" tag by
                removing "BodyLengths", renaming "BodyLengthDBFile" to
                "BodyLengthDB", and allowing pattern matches.  This
                effectively activates _FFR_BODYLENGTH_DB as well.
        Feature request #SF3303911: Add "DisableADSP" setting.
        In the stats recording code, only check for a domain match for
                signatures that don't have errors (i.e., short circuit if
                sigerror is not zero).
        LIBOPENDKIM: Feature request #SF2969516: Teach dkim_chunk() about
                DKIM_LIBFLAGS_FIXCRLF.
        LIBOPENDKIM: Feature request #SF3123731: Extend FixCRLF to cover
                header fields.
        LIBOPENDKIM: Feature request #SF3151534: Extract DKIM reputation
                support to its own library.
        LIBOPENDKIM: Feature request #SF3279589: Add _FFR_XTAGS, adding
                support for generic extension tags in signatures.
        LIBOPENDKIM: Feature request #SF3300738: Add dkim_sig_getqueries()
                and dkim_policy_getqueries() to assist API consumers that
                have their own DNS mechanisms not directly adaptable to ours.
        LIBOPENDKIM: Return an error from dkim_getsighdr() or
                dkim_getsighdr_d() if called after a key load failure.
        LIBAR: Check that the descriptor's write socket is writable before
                calling ar_sendquery() when trying to identify open requests
                that need retransmission.
        STATS: Feature request #SF3066106: Add "opendkim-anonstats" tool.
        CONTRIB: Paths in init/redhat/opendkim are now auto-generated.
        Activate _FFR_MAXVERIFY.


(pettai)