[no description] https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc_2011Q4 2012-02-29T19:32:08Z 2012-02-29T19:32:08Z spz spz 2012-02-29T19:32:08Z urn:sha1:f1ce0f68212bc7d12e70c3fa658d66f66f80776d mail/postfix: build fix Revisions pulled up: - mail/postfix/distinfo 1.141 - mail/postfix/patches/patch-ag 1.33 - mail/postfix/patches/patch-ai 1.27 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Mon Feb 27 03:01:30 UTC 2012 Modified Files: pkgsrc/mail/postfix: distinfo pkgsrc/mail/postfix/patches: patch-ag patch-ai Log Message: Build fix for NetBSD 6.0_BETA. To generate a diff of this commit: cvs rdiff -u -r1.140 -r1.141 pkgsrc/mail/postfix/distinfo cvs rdiff -u -r1.32 -r1.33 pkgsrc/mail/postfix/patches/patch-ag cvs rdiff -u -r1.26 -r1.27 pkgsrc/mail/postfix/patches/patch-ai 2011-11-07T15:36:07Z taca taca 2011-11-07T15:36:07Z urn:sha1:d1abdd30917f46f8d483dc386b60dfa309818752 Postfix stable release 2.8.7 is available. This contains a workaround for a problem that is fixed in Postfix 2.9. * The postscreen daemon, which is not enabled by default, sent non-compliant SMTP responses (220- followed by 421) when it could not give a connection to a real smtpd process. These responses caused some remote SMTP clients to return mail as undeliverable. The workaround is to hang up after sending 220- without sending the 421 "sorry" reply; this is harmless. The complete fix involves too much change for a stable release: send the 220 greeting, wait for the EHLO command, then send the 421 "sorry" reply and hang up. 2011-10-25T14:31:10Z taca taca 2011-10-25T14:31:10Z urn:sha1:fa9578e970497b6f168936072ca5071292756237 Postfix stable release 2.8.6, 2.7.7, 2.6.13 and 2.5.16 are available. These contain fixes that are also included with the Postfix 2.9 experimental release. * The Postfix SMTP daemon sent "bare" newline characters instead of <CR><LF> when a header_checks REJECT pattern matched multi-line header. This bug was introduced with Postfix 1.1. * The Postfix SMTP daemon sent "bare" newline characters instead of <CR><LF> when an smtpd_proxy_filter returned a multi-line response. This bug was introduced with Postfix 2.1. * For compatibility with future EAI (email address internationalization) implementations, the Postfix MIME processor no longer enforces the strict_mime_encoding_domain check on unknown message subtypes such as message/global*. This check is disabled by default. * The Postfix master daemon could report a panic error ("master_spawn: at process limit") after the process limit for some service was reduced with "postfix reload". This bug existed in all Postfix versions. You can find the updated Postfix source code at the mirrors listed at http://www.postfix.org/. 2011-09-03T15:18:20Z taca taca 2011-09-03T15:18:20Z urn:sha1:38f9fc90b1c83baeca1adc63285552e30bd1d04d [An on-line version of this announcement will be available at http://www.postfix.org/announcements/postfix-2.8.5.html] Postfix stable release 2.8.5, 2.7.6, 2.6.12, and 2.5.15 are available. These contain fixes and workarounds for the Postfix Milter client that were already included with the Postfix 2.9 experimental release. * The Postfix Milter client logged a "milter miltername: malformed reply" error when a Milter sent an SMTP response without enhanced status code (i.e. "XXX Text" instead of "XXX X.X.X Text"). * The Postfix Milter client sent a random {client_connections} macro value when the remote SMTP client was not subject to any smtpd_client_* limit. As a workaround, it now sends a zero value instead. 2011-07-27T06:04:54Z taca taca 2011-07-27T06:04:54Z urn:sha1:e83bf32499b90e27326e7fc7fb535bdbf0f343a2 Postfix stable release 2.8.4 is available. This contains fixes and workarounds that were already included with the Postfix 2.9 experimental release. Where applicable these fixes will also be made available for the legacy releases Postfix 2.5..2.7. * Performance: a high load of DSN success notification requests could slow down the queue manager. Solution: make the trace client asynchronous, just like the bounce and defer clients. * The local(8) delivery agent ignored table lookup errors in mailbox_command_maps, mailbox_transport_maps, fallback_transport_maps and (while bouncing mail to alias) alias owner lookup. * Workaround: dbl.spamhaus.org rejects lookups with "No IP queries" even if the name has an alphanumerical prefix. We play safe, and skip both RHSBL and RHSWL queries for names ending in a numerical suffix. * The "sendmail -t" command reported "protocol error" instead of "file too large", "no space left on device" etc. * The Postfix Milter client reported a temporary error instead of "file too large" in three cases. * Linux kernel version 3 support. Linus Torvalds has reset the counters for reasons not related to changes in code. You can find the updated Postfix source code at the mirrors listed at http://www.postfix.org/. 2011-06-10T21:57:06Z obache obache 2011-06-10T21:57:06Z urn:sha1:b96416deff95c76a4f4c269176c760972726f403 2011-05-10T13:38:23Z taca taca 2011-05-10T13:38:23Z urn:sha1:06257a4615a3c609312439d6444effca7e082e35 * pkgsrc change: remoe mysql4 from PKG_OPTIONS. Securiy release for Memory corruption in Postfix SMTP server Cyrus SASL support: http://www.postfix.org/CVE-2011-1720.html 20110411 Cleanup: postscreen(8) and verify(8) daemons now lock their respective cache file exclusively upon open, to avoid massive cache corruption by unsupported sharing. Files: util/dict.h, util/dict_open.c, verify/verify.c, postscreen/postscreen.c. 20110414 Bugfix (introduced with Postfix SASL patch 20000314): don't reuse a server SASL handle after authentication failure. Problem reported by Thomas Jarosch of Intra2net AG. File: smtpd/smtpd_proto.c. 2011-03-22T09:37:27Z taca taca 2011-03-22T09:37:27Z urn:sha1:8980531939b2da6d8f4764e0697b9992610aac7f Postfix stable release 2.8.2 is available. This release has minor fixes that are already in the experimental (2.9) release. - Bugfix: postscreen DNSBL scoring error. When a client disconnected and then reconnected before all DNSBL results for the earlier session arrived, DNSBL results for the earlier session would be added to the score for the later session. This is very unlikely to have affected any legitimate mail. - Workaround: the SMTP client did not support mail to [ipv6:ipv6addr]. - Portability: FreeBSD closefrom() was back-ported to FreeBSD 7, breaking FreeBSD 7.x support retroactively. - Portability: the SUN compiler had trouble with a pointer expression of the form ``("text1" "text2") + constant'' so we don't try to be so clever. 2011-02-26T08:58:59Z tron tron 2011-02-26T08:58:59Z urn:sha1:1808db7bf2f3268fc30ad772bb4488bbc8d7ec5b Postfix stable release 2.8.0 is available. This release continues the move towards improving code and documentation, and making the system better prepared for changes in the threat environment. The postscreen daemon (a zombie blocker in front of Postfix) is now included with the stable release. postscreen now supports TLS and can log the rejected sender, recipient and helo information. See the POSTSCREEN_README file for recommended usage scenarios. Support for DNS whitelisting (permit_rhswl_client), and for pattern matching to filter the responses from DNS white/blacklist servers (e.g., reject_rhsbl_client zen.spamhaus.org=127.0.0.[1..10]). Improved message tracking across SMTP-based content filters; the after-filter SMTP server can log the before-filter queue ID (the XCLIENT protocol was extended). Read-only support for sqlite databases. See sqlite_table(5) and SQLITE_README. Support for 'footers' that are appended to SMTP server "reject" responses. See "smtpd_reject_footer" in the postconf(5) manpage. This update was tested by Takahiro Kambe. 2010-11-28T18:14:10Z tron tron 2010-11-28T18:14:10Z urn:sha1:207a951c94bf0a1536a3be87065c0a8cd7c9a5a2 - Postfix no longer automatically appends the system default CA (certificate authority) certificates, when it reads the CA certificates specified with {smtp, lmtp, smtpd}_tls_CAfile or with {smtp, lmtp, smtpd}_tls_CApath. This prevents third-party certificates from getting mail relay permission with the permit_tls_all_clientcerts feature. Unfortunately, this change may cause compatibility problems with configurations that rely on certificate verification for other purposes. To get the old behavior, specify "tls_append_default_CA = yes". - A prior fix for compatibility with Postfix < 2.3 was incomplete. When pipe-to-command delivery fails with a signal, mail is now correctly deferred, instead of being returned to sender. - Poor smtpd_proxy_filter TCP performance over loopback (127.0.0.1) connections was fixed by adapting the output buffer size to the MTU. - The SMTP server no longer applies the reject_rhsbl_helo feature to non-domain forms such as network addresses. This would cause false positives with dbl.spamhaus.org. - The Postfix SMTP server failed to deliver a "421" response and hang up the connection after Milter error. Instead, the server delivered a "503 Access denied" response and left the connection open, due to some Postfix 1.1 workaround for RFC 2821. - The milter_header_checks parser failed to enable any of the actions that have no effect on message delivery (warn, replace, prepend, ignore, dunno, and ok).