[An on-line version of this announcement will be available at http://www.postfix.org/announcements/postfix-3.5.7.html]
Random certificate verification failures with "smtp_tls_connection_reuse = yes", because tlsproxy(8) was using the wrong global TLS context for connections that use DANE or non-DANE trust anchors. Reported by Thorsten Habich.
You can find the updated Postfix source code at the mirrors listed at http://www.postfix.org/.