CVS commit: pkgsrc/mail/postfix

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Sat Jun 17 08:02:22 UTC 2017

Modified Files:
        pkgsrc/mail/postfix: Makefile.common distinfo
        pkgsrc/mail/postfix/patches: patch-ag

Log Message:
Update postfix to 3.2.2.

pkgsrc change: Add support for NetBSD 8.

This announcement (June 13, 2017) includes changes that were released
with an earlier update (June 10, 2017). The announcement was postponed
to avoid confusion due to repeated notification.

Fixed in all supported releases:

  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    < 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.

Fixed in Postfix 3.2 and later:

  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.

  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.


To generate a diff of this commit:
cvs rdiff -u -r1.9 -r1.10 pkgsrc/mail/postfix/Makefile.common
cvs rdiff -u -r1.170 -r1.171 pkgsrc/mail/postfix/distinfo
cvs rdiff -u -r1.37 -r1.38 pkgsrc/mail/postfix/patches/patch-ag

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/postfix/Makefile.common
diff -u pkgsrc/mail/postfix/Makefile.common:1.9 pkgsrc/mail/postfix/Makefile.common:1.10
--- pkgsrc/mail/postfix/Makefile.common:1.9     Mon Apr 24 20:11:40 2017
+++ pkgsrc/mail/postfix/Makefile.common Sat Jun 17 08:02:22 2017
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile.common,v 1.9 2017/04/24 20:11:40 fhajny Exp $
+# $NetBSD: Makefile.common,v 1.10 2017/06/17 08:02:22 taca Exp $
 # used by mail/postfix/Makefile
 # used by mail/postfix/Makefile.module
 
-DISTNAME=      postfix-3.2.0
+DISTNAME=      postfix-3.2.2
 CATEGORIES=    mail
 MASTER_SITES=  ftp://ftp.porcupine.org/mirrors/postfix-release/official/
 MASTER_SITES+= http://postfix.it-austria.net/releases/official/

Index: pkgsrc/mail/postfix/distinfo
diff -u pkgsrc/mail/postfix/distinfo:1.170 pkgsrc/mail/postfix/distinfo:1.171
--- pkgsrc/mail/postfix/distinfo:1.170  Mon Apr 24 20:11:40 2017
+++ pkgsrc/mail/postfix/distinfo        Sat Jun 17 08:02:22 2017
@@ -1,10 +1,10 @@
-$NetBSD: distinfo,v 1.170 2017/04/24 20:11:40 fhajny Exp $
+$NetBSD: distinfo,v 1.171 2017/06/17 08:02:22 taca Exp $
 
-SHA1 (postfix-3.2.0.tar.gz) = ce95aa5288735970abf806b719a09d517294e071
-RMD160 (postfix-3.2.0.tar.gz) = c4e685ceb90690a751664cb5dc84f47bb2dbc40f
-SHA512 (postfix-3.2.0.tar.gz) = bfaa4b2125758833997b399bb2f095475924c1e51fba752e631ad73494d8764458548541d175ef8a1ed6566e9dac569f963e0651e1500aa19595f9062b8e86ce
-Size (postfix-3.2.0.tar.gz) = 4389547 bytes
+SHA1 (postfix-3.2.2.tar.gz) = 1a0d01e79ced46b38e8bd5b7a726a1622cf1bc07
+RMD160 (postfix-3.2.2.tar.gz) = 9509e48da474d214771d96c2aa8563ea5ccd13a1
+SHA512 (postfix-3.2.2.tar.gz) = 9432fa8b181db99b8e2d72b2a0f640d1456b10c42615f0a002638f7f788d748b8bb55cd36409a368ac4f6d22033d1d059728fa33980fb93d465b6dfd5ae26418
+Size (postfix-3.2.2.tar.gz) = 4390318 bytes
 SHA1 (patch-aa) = c8216f133e202a7bb37682b0dbc1448f021e7c1c
-SHA1 (patch-ag) = 1288ac987056f5c93a05e46148ce2ef1c50ade38
+SHA1 (patch-ag) = 88a1534b56dd51edcd7a5bde2172beaf0d6a0e70
 SHA1 (patch-ai) = b909daf44016b8ee4e258791b5e0193879871aaa
 SHA1 (patch-src_dns_dns__lookup.c) = b04d35b1df1b60409c903d2fb5bafb16b848523d

Index: pkgsrc/mail/postfix/patches/patch-ag
diff -u pkgsrc/mail/postfix/patches/patch-ag:1.37 pkgsrc/mail/postfix/patches/patch-ag:1.38
--- pkgsrc/mail/postfix/patches/patch-ag:1.37   Fri Nov  4 17:10:10 2016
+++ pkgsrc/mail/postfix/patches/patch-ag        Sat Jun 17 08:02:22 2017
@@ -1,12 +1,12 @@
-$NetBSD: patch-ag,v 1.37 2016/11/04 17:10:10 sevan Exp $
+$NetBSD: patch-ag,v 1.38 2017/06/17 08:02:22 taca Exp $
 
-* Add support for NetBSD 7.
+* Add support for NetBSD 8.
 * Only define HAS_DB if it hasn't been defined.
 * Add support for FreeBSD 11 and 12.
 
---- src/util/sys_defs.h.orig   2016-05-15 16:39:11.000000000 +0000
+--- src/util/sys_defs.h.orig   2017-02-02 01:31:15.000000000 +0000
 +++ src/util/sys_defs.h
-@@ -26,6 +26,7 @@
+@@ -30,12 +30,13 @@
  #if defined(FREEBSD2) || defined(FREEBSD3) || defined(FREEBSD4) \
      || defined(FREEBSD5) || defined(FREEBSD6) || defined(FREEBSD7) \
      || defined(FREEBSD8) || defined(FREEBSD9) || defined(FREEBSD10) \
@@ -14,7 +14,14 @@ $NetBSD: patch-ag,v 1.37 2016/11/04 17:1
      || defined(BSDI2) || defined(BSDI3) || defined(BSDI4) \
      || defined(OPENBSD2) || defined(OPENBSD3) || defined(OPENBSD4) \
      || defined(OPENBSD5) || defined(OPENBSD6) \
-@@ -45,7 +46,9 @@
+     || defined(NETBSD1) || defined(NETBSD2) || defined(NETBSD3) \
+     || defined(NETBSD4) || defined(NETBSD5) || defined(NETBSD6) \
+-    || defined(NETBSD7) \
++    || defined(NETBSD7) || defined(NETBSD8) \
+     || defined(EKKOBSD1) || defined(DRAGONFLY)
+ #define SUPPORTED
+ #include <sys/param.h>
+@@ -48,7 +49,9 @@
  #define DEF_MAILBOX_LOCK "flock, dotlock"
  #define HAS_SUN_LEN
  #define HAS_FSYNC
@@ -24,7 +31,7 @@ $NetBSD: patch-ag,v 1.37 2016/11/04 17:1
  #define HAS_SA_LEN
  #define NATIVE_DB_TYPE        "hash"
  #if (defined(__NetBSD_Version__) && __NetBSD_Version__ >= 104250000)
-@@ -1268,6 +1271,8 @@ extern int h_errno;
+@@ -1250,6 +1253,8 @@ extern int h_errno;
  #define DEF_SMTP_CACHE_DEMAND 0
  #endif