Update postfix to 3.2.2.

pkgsrc change: Add support for NetBSD 8.

This announcement (June 13, 2017) includes changes that were released
with an earlier update (June 10, 2017). The announcement was postponed
to avoid confusion due to repeated notification.

Fixed in all supported releases:

  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    < 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.

Fixed in Postfix 3.2 and later:

  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.

  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.

3 files changed, 21 insertions, 14 deletions

diff --git a/mail/postfix/Makefile.common b/mail/postfix/Makefile.common
index 7841e6341ae..161b2a21e34 100644
--- a/mail/postfix/Makefile.common
+++ b/mail/postfix/Makefile.common
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile.common,v 1.9 2017/04/24 20:11:40 fhajny Exp $
+# $NetBSD: Makefile.common,v 1.10 2017/06/17 08:02:22 taca Exp $
 # used by mail/postfix/Makefile
 # used by mail/postfix/Makefile.module
 
-DISTNAME=	postfix-3.2.0
+DISTNAME=	postfix-3.2.2
 CATEGORIES=	mail
 MASTER_SITES=	ftp://ftp.porcupine.org/mirrors/postfix-release/official/
 MASTER_SITES+=	http://postfix.it-austria.net/releases/official/
diff --git a/mail/postfix/distinfo b/mail/postfix/distinfo
index 44ded4726e5..091dc28a997 100644
--- a/mail/postfix/distinfo
+++ b/mail/postfix/distinfo
@@ -1,10 +1,10 @@
-$NetBSD: distinfo,v 1.170 2017/04/24 20:11:40 fhajny Exp $
+$NetBSD: distinfo,v 1.171 2017/06/17 08:02:22 taca Exp $
 
-SHA1 (postfix-3.2.0.tar.gz) = ce95aa5288735970abf806b719a09d517294e071
-RMD160 (postfix-3.2.0.tar.gz) = c4e685ceb90690a751664cb5dc84f47bb2dbc40f
-SHA512 (postfix-3.2.0.tar.gz) = bfaa4b2125758833997b399bb2f095475924c1e51fba752e631ad73494d8764458548541d175ef8a1ed6566e9dac569f963e0651e1500aa19595f9062b8e86ce
-Size (postfix-3.2.0.tar.gz) = 4389547 bytes
+SHA1 (postfix-3.2.2.tar.gz) = 1a0d01e79ced46b38e8bd5b7a726a1622cf1bc07
+RMD160 (postfix-3.2.2.tar.gz) = 9509e48da474d214771d96c2aa8563ea5ccd13a1
+SHA512 (postfix-3.2.2.tar.gz) = 9432fa8b181db99b8e2d72b2a0f640d1456b10c42615f0a002638f7f788d748b8bb55cd36409a368ac4f6d22033d1d059728fa33980fb93d465b6dfd5ae26418
+Size (postfix-3.2.2.tar.gz) = 4390318 bytes
 SHA1 (patch-aa) = c8216f133e202a7bb37682b0dbc1448f021e7c1c
-SHA1 (patch-ag) = 1288ac987056f5c93a05e46148ce2ef1c50ade38
+SHA1 (patch-ag) = 88a1534b56dd51edcd7a5bde2172beaf0d6a0e70
 SHA1 (patch-ai) = b909daf44016b8ee4e258791b5e0193879871aaa
 SHA1 (patch-src_dns_dns__lookup.c) = b04d35b1df1b60409c903d2fb5bafb16b848523d
diff --git a/mail/postfix/patches/patch-ag b/mail/postfix/patches/patch-ag
index 797fc5a2354..da9fffab3b8 100644
--- a/mail/postfix/patches/patch-ag
+++ b/mail/postfix/patches/patch-ag
@@ -1,12 +1,12 @@
-$NetBSD: patch-ag,v 1.37 2016/11/04 17:10:10 sevan Exp $
+$NetBSD: patch-ag,v 1.38 2017/06/17 08:02:22 taca Exp $
 
-* Add support for NetBSD 7.
+* Add support for NetBSD 8.
 * Only define HAS_DB if it hasn't been defined.
 * Add support for FreeBSD 11 and 12.
 
---- src/util/sys_defs.h.orig	2016-05-15 16:39:11.000000000 +0000
+--- src/util/sys_defs.h.orig	2017-02-02 01:31:15.000000000 +0000
 +++ src/util/sys_defs.h
-@@ -26,6 +26,7 @@
+@@ -30,12 +30,13 @@
  #if defined(FREEBSD2) || defined(FREEBSD3) || defined(FREEBSD4) \
      || defined(FREEBSD5) || defined(FREEBSD6) || defined(FREEBSD7) \
      || defined(FREEBSD8) || defined(FREEBSD9) || defined(FREEBSD10) \
@@ -14,7 +14,14 @@ $NetBSD: patch-ag,v 1.37 2016/11/04 17:10:10 sevan Exp $
      || defined(BSDI2) || defined(BSDI3) || defined(BSDI4) \
      || defined(OPENBSD2) || defined(OPENBSD3) || defined(OPENBSD4) \
      || defined(OPENBSD5) || defined(OPENBSD6) \
-@@ -45,7 +46,9 @@
+     || defined(NETBSD1) || defined(NETBSD2) || defined(NETBSD3) \
+     || defined(NETBSD4) || defined(NETBSD5) || defined(NETBSD6) \
+-    || defined(NETBSD7) \
++    || defined(NETBSD7) || defined(NETBSD8) \
+     || defined(EKKOBSD1) || defined(DRAGONFLY)
+ #define SUPPORTED
+ #include <sys/param.h>
+@@ -48,7 +49,9 @@
  #define DEF_MAILBOX_LOCK "flock, dotlock"
  #define HAS_SUN_LEN
  #define HAS_FSYNC
@@ -24,7 +31,7 @@ $NetBSD: patch-ag,v 1.37 2016/11/04 17:10:10 sevan Exp $
  #define HAS_SA_LEN
  #define NATIVE_DB_TYPE	"hash"
  #if (defined(__NetBSD_Version__) && __NetBSD_Version__ >= 104250000)
-@@ -1268,6 +1271,8 @@ extern int h_errno;
+@@ -1250,6 +1253,8 @@ extern int h_errno;
  #define DEF_SMTP_CACHE_DEMAND	0
  #endif