Update postfix to 3.2.2.

pkgsrc change: Add support for NetBSD 8.

This announcement (June 13, 2017) includes changes that were released
with an earlier update (June 10, 2017). The announcement was postponed
to avoid confusion due to repeated notification.

Fixed in all supported releases:

  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    < 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.

Fixed in Postfix 3.2 and later:

  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.

  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.
This commit is contained in:
taca 2017-06-17 08:02:22 +00:00
parent 7108914b0f
commit 02ab692e85
3 changed files with 21 additions and 14 deletions

View file

@ -1,8 +1,8 @@
# $NetBSD: Makefile.common,v 1.9 2017/04/24 20:11:40 fhajny Exp $
# $NetBSD: Makefile.common,v 1.10 2017/06/17 08:02:22 taca Exp $
# used by mail/postfix/Makefile
# used by mail/postfix/Makefile.module
DISTNAME= postfix-3.2.0
DISTNAME= postfix-3.2.2
CATEGORIES= mail
MASTER_SITES= ftp://ftp.porcupine.org/mirrors/postfix-release/official/
MASTER_SITES+= http://postfix.it-austria.net/releases/official/

View file

@ -1,10 +1,10 @@
$NetBSD: distinfo,v 1.170 2017/04/24 20:11:40 fhajny Exp $
$NetBSD: distinfo,v 1.171 2017/06/17 08:02:22 taca Exp $
SHA1 (postfix-3.2.0.tar.gz) = ce95aa5288735970abf806b719a09d517294e071
RMD160 (postfix-3.2.0.tar.gz) = c4e685ceb90690a751664cb5dc84f47bb2dbc40f
SHA512 (postfix-3.2.0.tar.gz) = bfaa4b2125758833997b399bb2f095475924c1e51fba752e631ad73494d8764458548541d175ef8a1ed6566e9dac569f963e0651e1500aa19595f9062b8e86ce
Size (postfix-3.2.0.tar.gz) = 4389547 bytes
SHA1 (postfix-3.2.2.tar.gz) = 1a0d01e79ced46b38e8bd5b7a726a1622cf1bc07
RMD160 (postfix-3.2.2.tar.gz) = 9509e48da474d214771d96c2aa8563ea5ccd13a1
SHA512 (postfix-3.2.2.tar.gz) = 9432fa8b181db99b8e2d72b2a0f640d1456b10c42615f0a002638f7f788d748b8bb55cd36409a368ac4f6d22033d1d059728fa33980fb93d465b6dfd5ae26418
Size (postfix-3.2.2.tar.gz) = 4390318 bytes
SHA1 (patch-aa) = c8216f133e202a7bb37682b0dbc1448f021e7c1c
SHA1 (patch-ag) = 1288ac987056f5c93a05e46148ce2ef1c50ade38
SHA1 (patch-ag) = 88a1534b56dd51edcd7a5bde2172beaf0d6a0e70
SHA1 (patch-ai) = b909daf44016b8ee4e258791b5e0193879871aaa
SHA1 (patch-src_dns_dns__lookup.c) = b04d35b1df1b60409c903d2fb5bafb16b848523d

View file

@ -1,12 +1,12 @@
$NetBSD: patch-ag,v 1.37 2016/11/04 17:10:10 sevan Exp $
$NetBSD: patch-ag,v 1.38 2017/06/17 08:02:22 taca Exp $
* Add support for NetBSD 7.
* Add support for NetBSD 8.
* Only define HAS_DB if it hasn't been defined.
* Add support for FreeBSD 11 and 12.
--- src/util/sys_defs.h.orig 2016-05-15 16:39:11.000000000 +0000
--- src/util/sys_defs.h.orig 2017-02-02 01:31:15.000000000 +0000
+++ src/util/sys_defs.h
@@ -26,6 +26,7 @@
@@ -30,12 +30,13 @@
#if defined(FREEBSD2) || defined(FREEBSD3) || defined(FREEBSD4) \
|| defined(FREEBSD5) || defined(FREEBSD6) || defined(FREEBSD7) \
|| defined(FREEBSD8) || defined(FREEBSD9) || defined(FREEBSD10) \
@ -14,7 +14,14 @@ $NetBSD: patch-ag,v 1.37 2016/11/04 17:10:10 sevan Exp $
|| defined(BSDI2) || defined(BSDI3) || defined(BSDI4) \
|| defined(OPENBSD2) || defined(OPENBSD3) || defined(OPENBSD4) \
|| defined(OPENBSD5) || defined(OPENBSD6) \
@@ -45,7 +46,9 @@
|| defined(NETBSD1) || defined(NETBSD2) || defined(NETBSD3) \
|| defined(NETBSD4) || defined(NETBSD5) || defined(NETBSD6) \
- || defined(NETBSD7) \
+ || defined(NETBSD7) || defined(NETBSD8) \
|| defined(EKKOBSD1) || defined(DRAGONFLY)
#define SUPPORTED
#include <sys/param.h>
@@ -48,7 +49,9 @@
#define DEF_MAILBOX_LOCK "flock, dotlock"
#define HAS_SUN_LEN
#define HAS_FSYNC
@ -24,7 +31,7 @@ $NetBSD: patch-ag,v 1.37 2016/11/04 17:10:10 sevan Exp $
#define HAS_SA_LEN
#define NATIVE_DB_TYPE "hash"
#if (defined(__NetBSD_Version__) && __NetBSD_Version__ >= 104250000)
@@ -1268,6 +1271,8 @@ extern int h_errno;
@@ -1250,6 +1253,8 @@ extern int h_errno;
#define DEF_SMTP_CACHE_DEMAND 0
#endif