Prereq: "2.6.18"
diff -cr --new-file /var/tmp/postfix-2.6.18/src/global/mail_version.h ./src/global/mail_version.h
*** /var/tmp/postfix-2.6.18/src/global/mail_version.h	Wed Dec 12 19:38:32 2012
--- ./src/global/mail_version.h	Sun Feb  3 15:41:46 2013
***************
*** 20,27 ****
    * Patches change both the patchlevel and the release date. Snapshots have no
    * patchlevel; they change the release date only.
    */
! #define MAIL_RELEASE_DATE	"20121213"
! #define MAIL_VERSION_NUMBER	"2.6.18"
  
  #ifdef SNAPSHOT
  # define MAIL_VERSION_DATE	"-" MAIL_RELEASE_DATE
--- 20,27 ----
    * Patches change both the patchlevel and the release date. Snapshots have no
    * patchlevel; they change the release date only.
    */
! #define MAIL_RELEASE_DATE	"20130203"
! #define MAIL_VERSION_NUMBER	"2.6.19"
  
  #ifdef SNAPSHOT
  # define MAIL_VERSION_DATE	"-" MAIL_RELEASE_DATE
diff -cr --new-file /var/tmp/postfix-2.6.18/HISTORY ./HISTORY
*** /var/tmp/postfix-2.6.18/HISTORY	Fri Dec  7 20:21:22 2012
--- ./HISTORY	Sun Feb  3 15:00:52 2013
***************
*** 15670,15681 ****
  	Bugfix (introduced: 20000314): AUTH is not allowed after
  	MAIL. Timo Sirainen.  File: smtpd/smtpd_sasl_proto.c.
  
- 20121003
- 
- 	Bugfix: the postscreen_access_list feature was case-sensitive
- 	in the first character of permit, reject, etc. Reported by
- 	Francis Picabia. File: global/server_acl.c.
- 
  20121010
  
  	Bugfix (introduced: Postfix 2.5): memory leak in program
--- 15670,15675 ----
***************
*** 15696,15698 ****
--- 15690,15703 ----
  	returned by the system getaddrinfo() routine.  Such suffixes
  	mess up the default mynetworks value, host name/address
  	verification and possibly more. File: util/myaddrinfo.c.
+ 
+ 20130131
+ 
+ 	Bugfix: the local(8) delivery agent dereferenced a null
+ 	pointer while delivering to null command (for example, "|"
+ 	in a .forward file).  Reported by Gilles Chehade.
+ 
+ 20130203
+ 
+ 	Bugfix: the 20121010 fix for tls_misc.c was documented but
+ 	not included.
diff -cr --new-file /var/tmp/postfix-2.6.18/src/tls/tls_misc.c ./src/tls/tls_misc.c
*** /var/tmp/postfix-2.6.18/src/tls/tls_misc.c	Tue Apr 24 13:58:08 2012
--- ./src/tls/tls_misc.c	Sun Feb  3 14:59:47 2013
***************
*** 382,389 ****
  	else
  	    include |= code =
  		name_code(protocol_table, NAME_CODE_FLAG_NONE, tok);
! 	if (code == TLS_PROTOCOL_INVALID)
  	    return TLS_PROTOCOL_INVALID;
      }
      myfree(save);
  
--- 382,391 ----
  	else
  	    include |= code =
  		name_code(protocol_table, NAME_CODE_FLAG_NONE, tok);
! 	if (code == TLS_PROTOCOL_INVALID) {
! 	    myfree(save);
  	    return TLS_PROTOCOL_INVALID;
+ 	}
      }
      myfree(save);
  
diff -cr --new-file /var/tmp/postfix-2.6.18/src/util/exec_command.c ./src/util/exec_command.c
*** /var/tmp/postfix-2.6.18/src/util/exec_command.c	Tue Jan 18 20:22:18 2005
--- ./src/util/exec_command.c	Fri Feb  1 16:52:30 2013
***************
*** 63,69 ****
      /*
       * See if this command contains any shell magic characters.
       */
!     if (command[strspn(command, ok_chars)] == 0) {
  
  	/*
  	 * No shell meta characters found, so we can try to avoid the overhead
--- 63,70 ----
      /*
       * See if this command contains any shell magic characters.
       */
!     if (command[strspn(command, ok_chars)] == 0
! 	&& command[strspn(command, SPACE_TAB)] != 0) {
  
  	/*
  	 * No shell meta characters found, so we can try to avoid the overhead