Prereq: "2.8.13"
diff -cr --new-file /var/tmp/postfix-2.8.13/src/global/mail_version.h ./src/global/mail_version.h
*** /var/tmp/postfix-2.8.13/src/global/mail_version.h	Wed Dec 12 19:38:48 2012
--- ./src/global/mail_version.h	Sun Feb  3 15:44:37 2013
***************
*** 20,27 ****
    * Patches change both the patchlevel and the release date. Snapshots have no
    * patchlevel; they change the release date only.
    */
! #define MAIL_RELEASE_DATE	"20121213"
! #define MAIL_VERSION_NUMBER	"2.8.13"
  
  #ifdef SNAPSHOT
  # define MAIL_VERSION_DATE	"-" MAIL_RELEASE_DATE
--- 20,27 ----
    * Patches change both the patchlevel and the release date. Snapshots have no
    * patchlevel; they change the release date only.
    */
! #define MAIL_RELEASE_DATE	"20130203"
! #define MAIL_VERSION_NUMBER	"2.8.14"
  
  #ifdef SNAPSHOT
  # define MAIL_VERSION_DATE	"-" MAIL_RELEASE_DATE
diff -cr --new-file /var/tmp/postfix-2.8.13/HISTORY ./HISTORY
*** /var/tmp/postfix-2.8.13/HISTORY	Fri Dec  7 20:16:56 2012
--- ./HISTORY	Sun Feb  3 15:02:05 2013
***************
*** 16876,16878 ****
--- 16876,16889 ----
  	20101108 change that removes datalink suffixes in the SMTP
  	and QMQP servers, but we leave that code alone.  File:
  	util/myaddrinfo.c.
+ 
+ 20130131
+ 
+ 	Bugfix: the local(8) delivery agent dereferenced a null
+ 	pointer while delivering to null command (for example, "|"
+ 	in a .forward file).  Reported by Gilles Chehade.
+ 
+ 20130203
+ 
+ 	Bugfix: the 20121010 fix for tls_misc.c was documented but
+ 	not included.
diff -cr --new-file /var/tmp/postfix-2.8.13/src/tls/tls_misc.c ./src/tls/tls_misc.c
*** /var/tmp/postfix-2.8.13/src/tls/tls_misc.c	Tue Apr 24 13:25:28 2012
--- ./src/tls/tls_misc.c	Sun Feb  3 14:58:57 2013
***************
*** 453,460 ****
  	else
  	    include |= code =
  		name_code(protocol_table, NAME_CODE_FLAG_NONE, tok);
! 	if (code == TLS_PROTOCOL_INVALID)
  	    return TLS_PROTOCOL_INVALID;
      }
      myfree(save);
  
--- 453,462 ----
  	else
  	    include |= code =
  		name_code(protocol_table, NAME_CODE_FLAG_NONE, tok);
! 	if (code == TLS_PROTOCOL_INVALID) {
! 	    myfree(save);
  	    return TLS_PROTOCOL_INVALID;
+ 	}
      }
      myfree(save);
  
diff -cr --new-file /var/tmp/postfix-2.8.13/src/util/exec_command.c ./src/util/exec_command.c
*** /var/tmp/postfix-2.8.13/src/util/exec_command.c	Tue Jan 18 20:22:18 2005
--- ./src/util/exec_command.c	Fri Feb  1 16:52:30 2013
***************
*** 63,69 ****
      /*
       * See if this command contains any shell magic characters.
       */
!     if (command[strspn(command, ok_chars)] == 0) {
  
  	/*
  	 * No shell meta characters found, so we can try to avoid the overhead
--- 63,70 ----
      /*
       * See if this command contains any shell magic characters.
       */
!     if (command[strspn(command, ok_chars)] == 0
! 	&& command[strspn(command, SPACE_TAB)] != 0) {
  
  	/*
  	 * No shell meta characters found, so we can try to avoid the overhead