Hello community, here is the log from the commit of package postfix for openSUSE:11.3 checked in at Tue May 10 11:10:30 CEST 2011.
-------- --- old-versions/11.3/UPDATES/all/postfix/postfix.changes 2011-03-15 12:02:46.000000000 +0100 +++ 11.3/postfix/postfix.changes 2011-05-10 10:09:06.000000000 +0200 @@ -1,0 +2,5 @@ +Mon May 2 14:19:38 UTC 2011 - [email protected] + +- bnc#689021 - VUL-0: postfix memory corruption + +------------------------------------------------------------------- calling whatdependson for 11.3-i586 New: ---- bnc#689021.diff ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ postfix.spec ++++++ --- /var/tmp/diff_new_pack.ksWLTW/_old 2011-05-10 11:09:54.000000000 +0200 +++ /var/tmp/diff_new_pack.ksWLTW/_new 2011-05-10 11:09:54.000000000 +0200 @@ -22,7 +22,7 @@ Name: postfix Summary: A fast, secure, and flexible mailer Version: 2.7.1 -Release: 2.<RELEASE4> +Release: 2.<RELEASE6> License: IBM Public License .. Group: Productivity/Networking/Email/Servers Url: http://www.postfix.org/ @@ -40,6 +40,7 @@ Patch11: %{name}-2.6.1-vda-ng.patch Patch12: %{name}-2.6.1-vda-ng-64bit.patch Patch13: bnc#677792.diff +Patch14: bnc#689021.diff BuildRoot: %{_tmppath}/%{name}-%{version}-build PreReq: %insserv_prereq %fillup_prereq PreReq: /usr/bin/getent @@ -173,6 +174,7 @@ %patch12 -p1 %endif %patch13 +%patch14 # --------------------------------------------------------------------------- %build ++++++ bnc#689021.diff ++++++ *** src/smtpd/smtpd_sasl_proto.c Wed Jan 5 15:16:53 2011 --- src/smtpd/smtpd_sasl_proto.c Tue Apr 19 18:37:00 2011 *************** *** 184,189 **** --- 184,210 ---- return (-1); } + /* Don't reuse the SASL handle after authentication failure. */ + #ifndef SMTPD_FLAG_AUTH_USED + #define SMTPD_FLAG_AUTH_USED (1<<15) + #endif + #ifndef XSASL_TYPE_CYRUS + #define XSASL_TYPE_CYRUS "cyrus" + #endif + if (state->flags & SMTPD_FLAG_AUTH_USED) { + smtpd_sasl_deactivate(state); + #ifdef USE_TLS + if (state->tls_context != 0) + smtpd_sasl_activate(state, VAR_SMTPD_SASL_TLS_OPTS, + var_smtpd_sasl_tls_opts); + else + #endif + smtpd_sasl_activate(state, VAR_SMTPD_SASL_OPTS, + var_smtpd_sasl_opts); + } else if (strcmp(var_smtpd_sasl_type, XSASL_TYPE_CYRUS) == 0) { + state->flags |= SMTPD_FLAG_AUTH_USED; + } + /* * All authentication failures shall be logged. The 5xx reply code from * the SASL authentication routine triggers tar-pit delays, which help to ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
