Sat Jan 28 09:28:31 2023 UTC ()
mail/postfix: update to 3.7.4

Postfix 3.7.4 (2023-01-22)

  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP
    protocol implements application-level framing, and is therefore not
    affected by TLS truncation attacks. Fix by Viktor Dukhovni.

  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return
    lazily-bound handles for digest implementations. In sufficiently
    hostile configurations, Postfix could mistakenly believe that a digest
    algorithm is available, and fail when it is not. A similar workaround
    may be needed for EVP_get_cipherbyname(). Fix by Viktor Dukhovni.

  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should
    evaluate the argument only if there was no prior error. Found during
    code review.

  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a
    segmentation violation when postscreen_dnsbl_threshold < 1. It
    should reject such input with a fatal error instead. Discovered by
    Benny Pedersen.

  * Bitrot: fixes for linker warnings from newer Darwin (MacOS)
    versions. Viktor Dukhovni.

  * Portability: Linux 6 support.

  * Added missing documentation that cidr:, pcre: and regexp: tables
    support inline specification only in Postfix 3.7 and later.


(taca)
diff -r1.338 -r1.339 pkgsrc/mail/postfix/Makefile
diff -r1.42 -r1.43 pkgsrc/mail/postfix/Makefile.common
diff -r1.203 -r1.204 pkgsrc/mail/postfix/distinfo
diff -r1.32 -r1.33 pkgsrc/mail/postfix-sqlite/Makefile
diff -r1.45 -r1.46 pkgsrc/mail/postfix/patches/patch-ai

cvs diff -r1.338 -r1.339 pkgsrc/mail/postfix/Makefile (expand / switch to context diff)
--- pkgsrc/mail/postfix/Makefile 2022/11/23 16:20:33 1.338
+++ pkgsrc/mail/postfix/Makefile 2023/01/28 09:28:30 1.339
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.338 2022/11/23 16:20:33 adam Exp $
+# $NetBSD: Makefile,v 1.339 2023/01/28 09:28:30 taca Exp $
 
-PKGREVISION= 1
 .include "../../mail/postfix/Makefile.common"
 
 COMMENT=	Fast, easy to administer, and secure mail transfer agent

cvs diff -r1.42 -r1.43 pkgsrc/mail/postfix/Makefile.common (expand / switch to context diff)
--- pkgsrc/mail/postfix/Makefile.common 2022/10/15 20:34:57 1.42
+++ pkgsrc/mail/postfix/Makefile.common 2023/01/28 09:28:30 1.43
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile.common,v 1.42 2022/10/15 20:34:57 triaxx Exp $
+# $NetBSD: Makefile.common,v 1.43 2023/01/28 09:28:30 taca Exp $
 # used by mail/postfix/Makefile
 # used by mail/postfix/Makefile.module
 
-DISTNAME=	postfix-3.7.3
+DISTNAME=	postfix-3.7.4
 CATEGORIES=	mail
 MASTER_SITES=	ftp://ftp.porcupine.org/mirrors/postfix-release/official/
 

cvs diff -r1.203 -r1.204 pkgsrc/mail/postfix/distinfo (expand / switch to context diff)
--- pkgsrc/mail/postfix/distinfo 2022/10/15 20:34:57 1.203
+++ pkgsrc/mail/postfix/distinfo 2023/01/28 09:28:30 1.204
@@ -1,11 +1,11 @@
-$NetBSD: distinfo,v 1.203 2022/10/15 20:34:57 triaxx Exp $
+$NetBSD: distinfo,v 1.204 2023/01/28 09:28:30 taca Exp $
 
-BLAKE2s (postfix-3.7.3.tar.gz) = fc7c1d8c281a88f221ffb51e04fd562508c92fa29e39d6167978ec23f4d96721
-SHA512 (postfix-3.7.3.tar.gz) = 4ceedd1b7b364f47a3becc041cf29a48aea54e38306fd1227c5a7c25894831fb5c37150d99d781d237175e58da21ac53887c97d99bb6b715c4988777596ee890
-Size (postfix-3.7.3.tar.gz) = 4825380 bytes
+BLAKE2s (postfix-3.7.4.tar.gz) = e89a5cf0be8daf875aa244a30cb8ef54d3bb20873ca212f10767800306e8a4e2
+SHA512 (postfix-3.7.4.tar.gz) = 972738291b960c90fe83861d55b1288900416167adb353418956e69bcc709a6daf84fbfde11d573eebba030654d27abc8d55f90661a2b880ccfb3a334064c236
+Size (postfix-3.7.4.tar.gz) = 4833834 bytes
 SHA1 (patch-aa) = c8216f133e202a7bb37682b0dbc1448f021e7c1c
 SHA1 (patch-ag) = 8ab3cfafa63056f9a7f096da7e55bcccab965180
-SHA1 (patch-ai) = c042f6cf94cbb7301e9e04707dd6eda59ccbbcef
+SHA1 (patch-ai) = 3d143532e1e9a149c6c06e2efadcd34f6f72e82d
 SHA1 (patch-src_smtpd_Makefile.in) = 8133f9cceb0c1c0250d6543cb060c66288571722
 SHA1 (patch-src_smtpd_pfilter.c) = c747d2f3584f694eb7b73b19118b4d8b450cfe7f
 SHA1 (patch-src_smtpd_pfilter.h) = 153b516da89d709d293c6086c2f126791bd945d6

cvs diff -r1.32 -r1.33 pkgsrc/mail/postfix-sqlite/Makefile (expand / switch to context diff)
--- pkgsrc/mail/postfix-sqlite/Makefile 2022/11/23 16:20:34 1.32
+++ pkgsrc/mail/postfix-sqlite/Makefile 2023/01/28 09:28:30 1.33
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.32 2022/11/23 16:20:34 adam Exp $
+# $NetBSD: Makefile,v 1.33 2023/01/28 09:28:30 taca Exp $
 #
 
 COMMENT=		Postfix SMTP server SQLite backend module
-PKGREVISION=		1
 
 POSTFIX_LIB=		sqlite
 POSTFIX_LIBDIR=		src/global

cvs diff -r1.45 -r1.46 pkgsrc/mail/postfix/patches/patch-ai (expand / switch to context diff)
--- pkgsrc/mail/postfix/patches/patch-ai 2022/07/21 15:08:39 1.45
+++ pkgsrc/mail/postfix/patches/patch-ai 2023/01/28 09:28:30 1.46
@@ -1,4 +1,4 @@
-$NetBSD: patch-ai,v 1.45 2022/07/21 15:08:39 taca Exp $
+$NetBSD: patch-ai,v 1.46 2023/01/28 09:28:30 taca Exp $
 
 1) Add shlib definitions for NetBSD 5; the build system must be
 hard-coded per OS per version.  Not yet reported upstream.
@@ -9,7 +9,7 @@
 
 4) Add blocklist(3) support.
 
---- makedefs.orig	2022-01-23 20:53:41.000000000 +0000
+--- makedefs.orig	2023-01-15 23:29:39.000000000 +0000
 +++ makedefs
 @@ -339,6 +339,15 @@ case "$SYSTEM.$RELEASE" in
  		: ${SHLIB_ENV="LD_LIBRARY_PATH=`pwd`/lib"}
@@ -126,7 +126,7 @@
  		for name in nsl resolv $GDBM_LIBS
  		do
  		    for lib in /usr/lib64 /lib64 /usr/lib /lib
-@@ -667,24 +602,6 @@ EOF
+@@ -667,24 +602,6 @@ Linux.[3456].*)	SYSTYPE=LINUX$RELEASE_MA
  		;;
       GNU.0*|GNU/kFreeBSD.[567]*)
  		SYSTYPE=GNU0
@@ -151,7 +151,7 @@
  		for name in nsl resolv
  		do
  		    for lib in /usr/lib64 /lib64 /usr/lib /lib
-@@ -715,26 +632,14 @@ EOF
+@@ -715,26 +632,14 @@ Linux.[3456].*)	SYSTYPE=LINUX$RELEASE_MA
  HP-UX.A.09.*)	SYSTYPE=HPUX9
  		SYSLIBS=-ldbm
  		CCARGS="$CCARGS -DMISSING_USLEEP -DNO_SNPRINTF"
@@ -178,22 +178,22 @@
  		;;
  ReliantUNIX-?.5.43) SYSTYPE=ReliantUnix543
  		RANLIB=echo
-@@ -776,12 +681,12 @@ ReliantUNIX-?.5.43) SYSTYPE=ReliantUnix5
+@@ -782,12 +687,12 @@ ReliantUNIX-?.5.43) SYSTYPE=ReliantUnix5
  		esac
  		: ${SHLIB_CFLAGS=-fPIC}
  		: ${SHLIB_SUFFIX=.dylib}
--		: ${SHLIB_LD='cc -shared -Wl,-flat_namespace -Wl,-undefined,dynamic_lookup -Wl,-install_name,@rpath/${LIB}'}
-+		: ${SHLIB_LD='${CC} -shared -Wl,-flat_namespace -Wl,-undefined,dynamic_lookup -Wl,-install_name,@rpath/${LIB}'}
+-		: ${SHLIB_LD="cc -shared -Wl,-flat_namespace ${NOFIXUP}-Wl,-undefined,dynamic_lookup "'-Wl,-install_name,@rpath/${LIB}'}
++		: ${SHLIB_LD='${CC} '"-shared -Wl,-flat_namespace ${NOFIXUP}-Wl,-undefined,dynamic_lookup "'-Wl,-install_name,@rpath/${LIB}'}
  		: ${SHLIB_RPATH='-Wl,-rpath,${SHLIB_DIR}'}
                  # In MacOS/X 10.11.x /bin/sh unsets DYLD_LIBRARY_PATH, so we
                  # have export it into postfix-install indirectly!
  		: ${SHLIB_ENV="DYLD_LIBRARY_PATH=`pwd`/lib SHLIB_ENV_VAR=DYLD_LIBRARY_PATH SHLIB_ENV_VAL=`pwd`/lib"}
--		: ${PLUGIN_LD='cc -shared -Wl,-flat_namespace -Wl,-undefined,dynamic_lookup'}
-+		: ${PLUGIN_LD='${CC} -shared -Wl,-flat_namespace -Wl,-undefined,dynamic_lookup'}
+-		: ${PLUGIN_LD="cc -shared -Wl,-flat_namespace ${NOFIXUP}-Wl,-undefined,dynamic_lookup"}
++		: ${PLUGIN_LD='${CC} '"-shared -Wl,-flat_namespace ${NOFIXUP}-Wl,-undefined,dynamic_lookup"}
  		;;
      dcosx.1*)	SYSTYPE=DCOSX1
  		RANLIB=echo
-@@ -805,6 +710,21 @@ ReliantUNIX-?.5.43) SYSTYPE=ReliantUnix5
+@@ -811,6 +716,21 @@ ReliantUNIX-?.5.43) SYSTYPE=ReliantUnix5
  esac
  
  #