- Update from version 3.10.2 to 3.10.4
- Update of rootfile not required
- Changelog
3.10.4
Fixes for postscreen(8):
Bugfix (defect introduced: postfix-2.2, date 20050203): after detecting
a
lookup table change, and after starting a new postscreen process, the
old
postscreen process logged an ENOTSOCK error while attempting to accept
a
connection on a socket that it was no longer listening on. This error
was
introduced first in the multi_server skeleton code, and was five years
later
duplicated in the event_server skeleton that was created for
postscreen.
Problem reported by Florian Piekert.
Bugfix (defect introduced: Postfix 2.8, date 20101230): after detecting
a cache
table change and before starting a new postscreen process, the old
postscreen
process did not close the postscreen_cache_map, and therefore kept an
exclusive lock that could prevent a new postscreen process from
starting.
Problem reported by Florian Piekert.
Fixes for tlsproxy(8):
Bugfix (defect introduced: Postfix 3.7): incorrect backwards compatible
support
for the legacy configuration parameters tlsproxy_client_level and
tlsproxy_client_policy. This disabled the tlsproxy TLS client role
when a
legacy parameter was set (instead of the newer
tlsproxy_client_security_level
or tlsproxy_client_policy_maps). Reported by John Doe, diagnosed by
Viktor
Dukhovni.
Bugfix (defect introduced: Postfix 3.4): with the TLS client role
disabled by
configuration, the tlsproxy daemon dereferenced a null pointer while
handling
a tlsproxy client request. Reported by John Doe.
Reducing process churn: Postfix daemons no longer automatically restart
after a
btree:, dbm:, hash:, lmdb:, or sdbm: table file modification time
change, when
they opened that table for writing.
Portability: deleted an <openssl/engine.h> build dependency, because the
feature
is being removed from OpenSSL, and Postfix no longer needs it.
Cleanup: with "tls_required_enable = yes", the Postfix SMTP client will
no longer
maintain TLSRPT statistics for messages that contain a "TLS-Required:
no"
header. This can prevent TLSRPT notifications for TLSRPT notifications.
Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
client code
logged "Untrusted TLS connection" (wrong) instead of "Trusted TLS
connection"
(right), for a new or resumed TLS session, when a server offered a
trusted
(valid PKI trust chain) certificate that did not match the expected
server name
pattern. Fix by Viktor Dukhovni.
3.10.3
This release fixes defects that were introduced in Postfix 3.10. These
were
fixed first in the Postfix 3.11 unstable release.
The defects exist only with the default configuration
"tls_required_enable = yes".
Bugfix (defect introduced: Postfix-3.10, date 20250117): include the
current TLS security level in the SMTP connection cache lookup
key for
lookups by next-hop destination, to avoid reusing the same SMTP
connection when sending messages with and without a
"TLS-Required: no"
header. Likewise, include the current TLS security level in the
TLS
session lookup key, to avoid reusing the same TLS session info
when
sending messages with and without a "TLS-Required: no" header.
Bugfix (defect introduced: Postfix-3.10, date 20250117): the
Postfix SMTP
client attempted to look up TLSA records even with
"TLS-Required: no".
This could result in unnecessary failures. Fix by Viktor
Dukhovni &
Wietse.
Signed-off-by: Adolf Belka <[email protected]>
---
lfs/postfix | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/lfs/postfix b/lfs/postfix
index 5dd1a3c98..2bc0174d1 100644
--- a/lfs/postfix
+++ b/lfs/postfix
@@ -26,7 +26,7 @@ include Config
SUMMARY = A fast, secure, and flexible mailer
-VER = 3.10.2
+VER = 3.10.4
THISAPP = postfix-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = postfix
-PAK_VER = 48
+PAK_VER = 49
DEPS =
@@ -72,7 +72,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 =
b75fec52e837d43e0fa5d6ede3f44ccc62144133a2c433f536c566362b20a6a9b8a8cbf8e11f64d84fa751311cc9451158cda0edc212a0e45a9097530f41cea4
+$(DL_FILE)_BLAKE2 =
e0a9b3dbd858e9b2bacb137b886ef35a89220caf91da5bcb90de5fd3df7285645deaff6e58f571cdc75966098cf13190b0315690c270b9f3ed69a21e63d2d3ab
install : $(TARGET)
--
2.51.0
