mail/postfix: update to 3.5.4

Update postfix to 3.5.4.


Fixed in Postfix 3.5.4, 3.4.14:

  * The connection_reuse attribute in smtp_tls_policy_maps always
    resulted in an "invalid attribute name" error. Fix by Thorsten
    Habich.

  * SMTP over TLS connection reuse always failed for Postfix SMTP
    client configurations that specify explicit trust anchors (remote
    SMTP server certificates or public keys). Reported by Thorsten
    Habich.

Fixed in Postfix versions 3.5.4, 3.4.14, 3.3.12, 3.2.17:

  * The Postfix SMTP client's DANE implementation would always send
    an SNI option with the name in a destination's MX record, even
    if the MX record pointed to a CNAME record. MX records that
    point to CNAME records are not conformant with RFC5321, and so
    are rare.

    Based on the DANE survey of ~2 million hosts it was found that
    with the corrected SMTP client behavior, sending SNI with the
    CNAME-expanded name, the SMTP server would not send a different
    certificate. This fix should therefore be safe.
This commit is contained in:
taca 2020-06-30 15:00:45 +00:00
parent 56c5144320
commit 652c5e8d1c
2 changed files with 7 additions and 7 deletions

View file

@ -1,8 +1,8 @@
# $NetBSD: Makefile.common,v 1.27 2020/06/15 15:43:32 taca Exp $ # $NetBSD: Makefile.common,v 1.28 2020/06/30 15:00:45 taca Exp $
# used by mail/postfix/Makefile # used by mail/postfix/Makefile
# used by mail/postfix/Makefile.module # used by mail/postfix/Makefile.module
DISTNAME= postfix-3.5.3 DISTNAME= postfix-3.5.4
CATEGORIES= mail CATEGORIES= mail
MASTER_SITES= ftp://ftp.porcupine.org/mirrors/postfix-release/official/ MASTER_SITES= ftp://ftp.porcupine.org/mirrors/postfix-release/official/
MASTER_SITES+= http://mirrors.isc.org/pub/postfix/official/ MASTER_SITES+= http://mirrors.isc.org/pub/postfix/official/

View file

@ -1,9 +1,9 @@
$NetBSD: distinfo,v 1.186 2020/06/15 15:43:32 taca Exp $ $NetBSD: distinfo,v 1.187 2020/06/30 15:00:45 taca Exp $
SHA1 (postfix-3.5.3.tar.gz) = ae2f78924cc4a7901d4daa32306cfeb1ae4756ef SHA1 (postfix-3.5.4.tar.gz) = ce9d33b41fd9af540ae98c255644c41e2793c306
RMD160 (postfix-3.5.3.tar.gz) = d2bdf0f47def85cd622db45bf204288149196c3d RMD160 (postfix-3.5.4.tar.gz) = 7bd73f124fad2f7f6f0afd03ef01aa81631e0e06
SHA512 (postfix-3.5.3.tar.gz) = 1d020292f244e770353efb634909afdc9ac29b81707547fda1089631febbb8ecdac7c43f6b6ec9bdc4084da2be320bc433064d293811424873062d71d3545235 SHA512 (postfix-3.5.4.tar.gz) = 428c31bc9fea09f260333d6e3707f619424dd21f1f88c5935842b20b008f3a3a1555a962a7b98a0ae6b1c0367587f99064365403923ab1a8895023a10327a442
Size (postfix-3.5.3.tar.gz) = 4611925 bytes Size (postfix-3.5.4.tar.gz) = 4612431 bytes
SHA1 (patch-aa) = c8216f133e202a7bb37682b0dbc1448f021e7c1c SHA1 (patch-aa) = c8216f133e202a7bb37682b0dbc1448f021e7c1c
SHA1 (patch-ag) = c126c572e36bf2bcbd3f6e5d8332a3d26e704109 SHA1 (patch-ag) = c126c572e36bf2bcbd3f6e5d8332a3d26e704109
SHA1 (patch-ai) = 51748ccf92da543f7ff640f36906a29b5db3f6e3 SHA1 (patch-ai) = 51748ccf92da543f7ff640f36906a29b5db3f6e3