[pkgsrc/trunk]: pkgsrc/mail/postfix mail/postfix: update to 3.5.4

[taca <taca%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/90f796abc6e8
branches:  trunk
changeset: 435094:90f796abc6e8
user:      taca <taca%pkgsrc.org@localhost>
date:      Tue Jun 30 15:00:45 2020 +0000

description:
mail/postfix: update to 3.5.4

Update postfix to 3.5.4.


Fixed in Postfix 3.5.4, 3.4.14:

  * The connection_reuse attribute in smtp_tls_policy_maps always
    resulted in an "invalid attribute name" error. Fix by Thorsten
    Habich.

  * SMTP over TLS connection reuse always failed for Postfix SMTP
    client configurations that specify explicit trust anchors (remote
    SMTP server certificates or public keys). Reported by Thorsten
    Habich.

Fixed in Postfix versions 3.5.4, 3.4.14, 3.3.12, 3.2.17:

  * The Postfix SMTP client's DANE implementation would always send
    an SNI option with the name in a destination's MX record, even
    if the MX record pointed to a CNAME record. MX records that
    point to CNAME records are not conformant with RFC5321, and so
    are rare.

    Based on the DANE survey of ~2 million hosts it was found that
    with the corrected SMTP client behavior, sending SNI with the
    CNAME-expanded name, the SMTP server would not send a different
    certificate. This fix should therefore be safe.

diffstat:

 mail/postfix/Makefile.common |   4 ++--
 mail/postfix/distinfo        |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (32 lines):

diff -r 851ac2ee68b8 -r 90f796abc6e8 mail/postfix/Makefile.common
--- a/mail/postfix/Makefile.common      Tue Jun 30 14:56:36 2020 +0000
+++ b/mail/postfix/Makefile.common      Tue Jun 30 15:00:45 2020 +0000
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile.common,v 1.27 2020/06/15 15:43:32 taca Exp $
+# $NetBSD: Makefile.common,v 1.28 2020/06/30 15:00:45 taca Exp $
 # used by mail/postfix/Makefile
 # used by mail/postfix/Makefile.module
 
-DISTNAME=      postfix-3.5.3
+DISTNAME=      postfix-3.5.4
 CATEGORIES=    mail
 MASTER_SITES=  ftp://ftp.porcupine.org/mirrors/postfix-release/official/
 MASTER_SITES+= http://mirrors.isc.org/pub/postfix/official/
diff -r 851ac2ee68b8 -r 90f796abc6e8 mail/postfix/distinfo
--- a/mail/postfix/distinfo     Tue Jun 30 14:56:36 2020 +0000
+++ b/mail/postfix/distinfo     Tue Jun 30 15:00:45 2020 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.186 2020/06/15 15:43:32 taca Exp $
+$NetBSD: distinfo,v 1.187 2020/06/30 15:00:45 taca Exp $
 
-SHA1 (postfix-3.5.3.tar.gz) = ae2f78924cc4a7901d4daa32306cfeb1ae4756ef
-RMD160 (postfix-3.5.3.tar.gz) = d2bdf0f47def85cd622db45bf204288149196c3d
-SHA512 (postfix-3.5.3.tar.gz) = 1d020292f244e770353efb634909afdc9ac29b81707547fda1089631febbb8ecdac7c43f6b6ec9bdc4084da2be320bc433064d293811424873062d71d3545235
-Size (postfix-3.5.3.tar.gz) = 4611925 bytes
+SHA1 (postfix-3.5.4.tar.gz) = ce9d33b41fd9af540ae98c255644c41e2793c306
+RMD160 (postfix-3.5.4.tar.gz) = 7bd73f124fad2f7f6f0afd03ef01aa81631e0e06
+SHA512 (postfix-3.5.4.tar.gz) = 428c31bc9fea09f260333d6e3707f619424dd21f1f88c5935842b20b008f3a3a1555a962a7b98a0ae6b1c0367587f99064365403923ab1a8895023a10327a442
+Size (postfix-3.5.4.tar.gz) = 4612431 bytes
 SHA1 (patch-aa) = c8216f133e202a7bb37682b0dbc1448f021e7c1c
 SHA1 (patch-ag) = c126c572e36bf2bcbd3f6e5d8332a3d26e704109
 SHA1 (patch-ai) = 51748ccf92da543f7ff640f36906a29b5db3f6e3