Hello community, here is the log from the commit of package postfix for openSUSE:Factory checked in at Tue Oct 11 17:16:40 CEST 2011.
-------- --- openSUSE:Factory/postfix/postfix.changes 2011-09-23 12:41:36.000000000 +0200 +++ /mounts/work_src_done/STABLE/postfix/postfix.changes 2011-10-09 06:33:42.000000000 +0200 @@ -1,0 +2,16 @@ +Sun Oct 9 04:30:54 UTC 2011 - [email protected] + + - Use SSL_MODE_RELEASE_BUFFERS if available, see + SSL_CTX_set_mode man page and + http://www.imperialviolet.org/2010/06/25/overclocking-ssl.html + for the full details. + +------------------------------------------------------------------- +Tue Sep 6 14:49:47 UTC 2011 - [email protected] + +- update to 2.8.5 + * Bugfix: allow for Milters that send an SMTP server reply + without RFC 3463 enhanced status code. Reported by Vladimir + Vassiliev. File: milter/milter8.c. + +------------------------------------------------------------------- calling whatdependson for head-i586 Old: ---- postfix-2.8.4.tar.bz2 New: ---- postfix-2.8.5-ssl-release-buffers.patch postfix-2.8.5.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ postfix.spec ++++++ --- /var/tmp/diff_new_pack.PaxSMT/_old 2011-10-11 17:16:34.000000000 +0200 +++ /var/tmp/diff_new_pack.PaxSMT/_new 2011-10-11 17:16:34.000000000 +0200 @@ -15,13 +15,12 @@ # Please submit bugfixes or comments via http://bugs.opensuse.org/ # -# norootforbuild Name: postfix Summary: A fast, secure, and flexible mailer -Version: 2.8.4 -Release: 7 +Version: 2.8.5 +Release: 1 License: IBM Public License .. Group: Productivity/Networking/Email/Servers Url: http://www.postfix.org/ @@ -39,6 +38,7 @@ Patch11: %{name}-2.8.3-master.cf.patch Patch12: %{name}-2.8.3-post-install.patch Patch20: %{name}-vda-v10-2.8.3.patch +Patch21: postfix-2.8.5-ssl-release-buffers.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build PreReq: %insserv_prereq %fillup_prereq PreReq: /usr/bin/getent @@ -148,6 +148,7 @@ %patch11 -p1 %patch12 -p1 %patch20 -p1 +%patch21 # --------------------------------------------------------------------------- %build ++++++ postfix-2.8.5-ssl-release-buffers.patch ++++++ --- src/tls/tls_client.c.orig +++ src/tls/tls_client.c @@ -372,6 +372,12 @@ TLS_APPL_STATE *tls_client_init(const TL return (0); } + /* Keep memory usage as low as possible */ + +#ifdef SSL_MODE_RELEASE_BUFFERS + SSL_CTX_set_mode(client_ctx, SSL_MODE_RELEASE_BUFFERS); +#endif + /* * See the verify callback in tls_verify.c */ --- src/tls/tls_server.c.orig +++ src/tls/tls_server.c @@ -381,6 +381,11 @@ TLS_APPL_STATE *tls_server_init(const TL tls_print_errors(); return (0); } + + /* Keep memory usage as low as possible */ +#ifdef SSL_MODE_RELEASE_BUFFERS + SSL_CTX_set_mode(server_ctx, SSL_MODE_RELEASE_BUFFERS); +#endif /* * See the verify callback in tls_verify.c ++++++ postfix-2.8.4.tar.bz2 -> postfix-2.8.5.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-2.8.4/HISTORY new/postfix-2.8.5/HISTORY --- old/postfix-2.8.4/HISTORY 2011-06-16 00:37:26.000000000 +0200 +++ new/postfix-2.8.5/HISTORY 2011-08-31 22:02:02.000000000 +0200 @@ -16634,3 +16634,17 @@ IP queries" even if the name has an alphanumerical prefix. We play safe, and skip both RHSBL and RHSWL queries for names ending in a numerical suffix. File: smtpd/smtpd_check.c. + +20110811 + + Workaround: report a {client_connections} Milter macro value + of zero instead of garbage, when the remote SMTP client is + not subject to any smtpd_client_* limits. Problem reported + by Christian Roessner. File: smtpd/smtpd_state.c, + proto/MILTER_README.html. + +20110831 + + Bugfix: allow for Milters that send an SMTP server reply + without RFC 3463 enhanced status code. Reported by Vladimir + Vassiliev. File: milter/milter8.c. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-2.8.4/README_FILES/MILTER_README new/postfix-2.8.5/README_FILES/MILTER_README --- old/postfix-2.8.4/README_FILES/MILTER_README 2010-03-24 00:31:39.000000000 +0100 +++ new/postfix-2.8.5/README_FILES/MILTER_README 2011-08-31 21:53:24.000000000 +0200 @@ -339,8 +339,11 @@ |_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _|_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _|_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ | |{client_addr} |Always |Client IP address | |_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _|_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _|_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ | - |{client_connections}|CONNECT |Connection concurrency for| - | | |this client | + | | |Connection concurrency for| + | | |this client (zero if the | + |{client_connections}|CONNECT |client is excluded from | + | | |all smtpd_client_* | + | | |limits). | |_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _|_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _|_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ | | | |Client hostname | | | |When address -> name | diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-2.8.4/html/MILTER_README.html new/postfix-2.8.5/html/MILTER_README.html --- old/postfix-2.8.4/html/MILTER_README.html 2010-03-24 00:31:39.000000000 +0100 +++ new/postfix-2.8.5/html/MILTER_README.html 2011-08-31 21:53:23.000000000 +0200 @@ -559,7 +559,8 @@ address </td> </tr> <tr> <td> {client_connections} </td> <td> CONNECT </td> <td> -Connection concurrency for this client </td> </tr> +Connection concurrency for this client (zero if the client is +excluded from all smtpd_client_* limits). </td> </tr> <tr> <td> {client_name} </td> <td> Always </td> <td> Client hostname <br> When address → name lookup or name → address diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-2.8.4/proto/MILTER_README.html new/postfix-2.8.5/proto/MILTER_README.html --- old/postfix-2.8.4/proto/MILTER_README.html 2010-03-24 00:31:22.000000000 +0100 +++ new/postfix-2.8.5/proto/MILTER_README.html 2011-08-31 21:50:21.000000000 +0200 @@ -559,7 +559,8 @@ address </td> </tr> <tr> <td> {client_connections} </td> <td> CONNECT </td> <td> -Connection concurrency for this client </td> </tr> +Connection concurrency for this client (zero if the client is +excluded from all smtpd_client_* limits). </td> </tr> <tr> <td> {client_name} </td> <td> Always </td> <td> Client hostname <br> When address → name lookup or name → address diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-2.8.4/src/global/mail_version.h new/postfix-2.8.5/src/global/mail_version.h --- old/postfix-2.8.4/src/global/mail_version.h 2011-07-06 22:51:21.000000000 +0200 +++ new/postfix-2.8.5/src/global/mail_version.h 2011-09-02 23:57:19.000000000 +0200 @@ -20,8 +20,8 @@ * Patches change both the patchlevel and the release date. Snapshots have no * patchlevel; they change the release date only. */ -#define MAIL_RELEASE_DATE "20110706" -#define MAIL_VERSION_NUMBER "2.8.4" +#define MAIL_RELEASE_DATE "20110902" +#define MAIL_VERSION_NUMBER "2.8.5" #ifdef SNAPSHOT # define MAIL_VERSION_DATE "-" MAIL_RELEASE_DATE diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-2.8.4/src/milter/milter8.c new/postfix-2.8.5/src/milter/milter8.c --- old/postfix-2.8.4/src/milter/milter8.c 2011-04-28 16:09:30.000000000 +0200 +++ new/postfix-2.8.5/src/milter/milter8.c 2011-08-31 15:04:19.000000000 +0200 @@ -1255,11 +1255,13 @@ MILTER8_DATA_BUFFER, milter->buf, MILTER8_DATA_END) != 0) MILTER8_EVENT_BREAK(milter->def_reply); + /* XXX Enforce this for each line of a multi-line reply. */ if ((STR(milter->buf)[0] != '4' && STR(milter->buf)[0] != '5') || !ISDIGIT(STR(milter->buf)[1]) || !ISDIGIT(STR(milter->buf)[2]) || (STR(milter->buf)[3] != ' ' && STR(milter->buf)[3] != '-') - || STR(milter->buf)[4] != STR(milter->buf)[0]) { + || (ISDIGIT(STR(milter->buf)[4]) + && (STR(milter->buf)[4] != STR(milter->buf)[0]))) { msg_warn("milter %s: malformed reply: %s", milter->m.name, STR(milter->buf)); milter8_conf_error(milter); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-2.8.4/src/smtpd/smtpd_state.c new/postfix-2.8.5/src/smtpd/smtpd_state.c --- old/postfix-2.8.4/src/smtpd/smtpd_state.c 2011-01-06 16:12:49.000000000 +0100 +++ new/postfix-2.8.5/src/smtpd/smtpd_state.c 2011-08-31 21:50:21.000000000 +0200 @@ -84,6 +84,7 @@ state->service = mystrdup(service); state->buffer = vstring_alloc(100); state->addr_buf = vstring_alloc(100); + state->conn_count = state->conn_rate = 0; state->error_count = 0; state->error_mask = 0; state->notify_mask = name_mask(VAR_NOTIFY_CLASSES, mail_error_masks, continue with "q"... Remember to have fun... -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
