Tue Jun 30 15:00:45 2020 UTC ()
mail/postfix: update to 3.5.4

Update postfix to 3.5.4.

Fixed in Postfix 3.5.4, 3.4.14:

  * The connection_reuse attribute in smtp_tls_policy_maps always
    resulted in an "invalid attribute name" error. Fix by Thorsten
    Habich.

  * SMTP over TLS connection reuse always failed for Postfix SMTP
    client configurations that specify explicit trust anchors (remote
    SMTP server certificates or public keys). Reported by Thorsten
    Habich.

Fixed in Postfix versions 3.5.4, 3.4.14, 3.3.12, 3.2.17:

  * The Postfix SMTP client's DANE implementation would always send
    an SNI option with the name in a destination's MX record, even
    if the MX record pointed to a CNAME record. MX records that
    point to CNAME records are not conformant with RFC5321, and so
    are rare.

    Based on the DANE survey of ~2 million hosts it was found that
    with the corrected SMTP client behavior, sending SNI with the
    CNAME-expanded name, the SMTP server would not send a different
    certificate. This fix should therefore be safe.


(taca)
diff -r1.27 -r1.28 pkgsrc/mail/postfix/Makefile.common
diff -r1.186 -r1.187 pkgsrc/mail/postfix/distinfo

cvs diff -r1.27 -r1.28 pkgsrc/mail/postfix/Makefile.common (expand / switch to unified diff)

--- pkgsrc/mail/postfix/Makefile.common 2020/06/15 15:43:32 1.27
+++ pkgsrc/mail/postfix/Makefile.common 2020/06/30 15:00:45 1.28
@@ -1,18 +1,18 @@ @@ -1,18 +1,18 @@
1# $NetBSD: Makefile.common,v 1.27 2020/06/15 15:43:32 taca Exp $ 1# $NetBSD: Makefile.common,v 1.28 2020/06/30 15:00:45 taca Exp $
2# used by mail/postfix/Makefile 2# used by mail/postfix/Makefile
3# used by mail/postfix/Makefile.module 3# used by mail/postfix/Makefile.module
4 4
5DISTNAME= postfix-3.5.3 5DISTNAME= postfix-3.5.4
6CATEGORIES= mail 6CATEGORIES= mail
7MASTER_SITES= ftp://ftp.porcupine.org/mirrors/postfix-release/official/ 7MASTER_SITES= ftp://ftp.porcupine.org/mirrors/postfix-release/official/
8MASTER_SITES+= http://mirrors.isc.org/pub/postfix/official/ 8MASTER_SITES+= http://mirrors.isc.org/pub/postfix/official/
9 9
10MAINTAINER= pkgsrc-users@NetBSD.org 10MAINTAINER= pkgsrc-users@NetBSD.org
11HOMEPAGE= http://www.postfix.org/ 11HOMEPAGE= http://www.postfix.org/
12# The postfix license has only very minor diffs from cpl-1.0. 12# The postfix license has only very minor diffs from cpl-1.0.
13LICENSE= cpl-1.0 13LICENSE= cpl-1.0
14#LICENSE= postfix-license 14#LICENSE= postfix-license
15 15
16DISTINFO_FILE= ${PKGDIR}/../../mail/postfix/distinfo 16DISTINFO_FILE= ${PKGDIR}/../../mail/postfix/distinfo
17PATCHDIR= ${PKGDIR}/../../mail/postfix/patches 17PATCHDIR= ${PKGDIR}/../../mail/postfix/patches
18 18

cvs diff -r1.186 -r1.187 pkgsrc/mail/postfix/distinfo (expand / switch to unified diff)

--- pkgsrc/mail/postfix/distinfo 2020/06/15 15:43:32 1.186
+++ pkgsrc/mail/postfix/distinfo 2020/06/30 15:00:45 1.187
@@ -1,10 +1,10 @@ @@ -1,10 +1,10 @@
1$NetBSD: distinfo,v 1.186 2020/06/15 15:43:32 taca Exp $ 1$NetBSD: distinfo,v 1.187 2020/06/30 15:00:45 taca Exp $
2 2
3SHA1 (postfix-3.5.3.tar.gz) = ae2f78924cc4a7901d4daa32306cfeb1ae4756ef 3SHA1 (postfix-3.5.4.tar.gz) = ce9d33b41fd9af540ae98c255644c41e2793c306
4RMD160 (postfix-3.5.3.tar.gz) = d2bdf0f47def85cd622db45bf204288149196c3d 4RMD160 (postfix-3.5.4.tar.gz) = 7bd73f124fad2f7f6f0afd03ef01aa81631e0e06
5SHA512 (postfix-3.5.3.tar.gz) = 1d020292f244e770353efb634909afdc9ac29b81707547fda1089631febbb8ecdac7c43f6b6ec9bdc4084da2be320bc433064d293811424873062d71d3545235 5SHA512 (postfix-3.5.4.tar.gz) = 428c31bc9fea09f260333d6e3707f619424dd21f1f88c5935842b20b008f3a3a1555a962a7b98a0ae6b1c0367587f99064365403923ab1a8895023a10327a442
6Size (postfix-3.5.3.tar.gz) = 4611925 bytes 6Size (postfix-3.5.4.tar.gz) = 4612431 bytes
7SHA1 (patch-aa) = c8216f133e202a7bb37682b0dbc1448f021e7c1c 7SHA1 (patch-aa) = c8216f133e202a7bb37682b0dbc1448f021e7c1c
8SHA1 (patch-ag) = c126c572e36bf2bcbd3f6e5d8332a3d26e704109 8SHA1 (patch-ag) = c126c572e36bf2bcbd3f6e5d8332a3d26e704109
9SHA1 (patch-ai) = 51748ccf92da543f7ff640f36906a29b5db3f6e3 9SHA1 (patch-ai) = 51748ccf92da543f7ff640f36906a29b5db3f6e3
10SHA1 (patch-src_dns_dns__lookup.c) = 036872a0e6e438d0253469ea447c0c9c1de0188d 10SHA1 (patch-src_dns_dns__lookup.c) = 036872a0e6e438d0253469ea447c0c9c1de0188d