Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package postfix for openSUSE:Factory checked in at 2022-10-18 12:44:11 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/postfix (Old) and /work/SRC/openSUSE:Factory/.postfix.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "postfix" Tue Oct 18 12:44:11 2022 rev:219 rq:1009796 version:3.7.3 Changes: -------- --- /work/SRC/openSUSE:Factory/postfix/postfix-bdb.changes 2022-08-10 17:14:07.325836739 +0200 +++ /work/SRC/openSUSE:Factory/.postfix.new.2275/postfix-bdb.changes 2022-10-18 12:44:13.325617487 +0200 @@ -1,0 +2,19 @@ +Sun Oct 9 12:00:55 UTC 2022 - Michael Str??der <mich...@stroeder.com> + +- update to 3.7.3 + * Fixed a bug where some messages were not delivered after + "warning: Unexpected record type 'X'. + * Workaround: in a TLS server disable Postfix's 1-element internal session + cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes. + * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 3.4.26) + introduced a missing msg_panic() argument (in code that never executes). + * Code health: Postfix 3.3.0 introduced an uninitialized verify_append() + request status in case of a null original recipient address. + * Postfix 3.5.0 introduced debug logging noise in map_search_create(). + +------------------------------------------------------------------- +Tue Sep 6 09:17:20 UTC 2022 - Ludwig Nussel <lnus...@suse.de> + +- own /var/spool/mail (boo#1179574) + +------------------------------------------------------------------- postfix.changes: same change Old: ---- postfix-3.7.2.tar.gz postfix-3.7.2.tar.gz.asc New: ---- postfix-3.7.3.tar.gz postfix-3.7.3.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ postfix-bdb.spec ++++++ --- /var/tmp/diff_new_pack.Pzy8p2/_old 2022-10-18 12:44:14.225619536 +0200 +++ /var/tmp/diff_new_pack.Pzy8p2/_new 2022-10-18 12:44:14.229619545 +0200 @@ -56,7 +56,7 @@ %endif %bcond_without ldap Name: postfix-bdb -Version: 3.7.2 +Version: 3.7.3 Release: 0 Summary: A fast, secure, and flexible mailer License: IPL-1.0 OR EPL-2.0 @@ -274,6 +274,8 @@ mkdir -p %{buildroot}/%{pf_html_directory} mkdir -p %{buildroot}%{_includedir}/postfix mkdir -p %{buildroot}%{_sysconfdir}/pam.d +mkdir -p %{buildroot}/var/spool/mail +ln -s spool/mail %{buildroot}/var/mail install -m 644 postfix-SUSE/smtp %{buildroot}%{_sysconfdir}/pam.d/smtp mkdir -p %{buildroot}%{_fillupdir} sed -e 's;@lib@;%{_lib};g' postfix-SUSE/sysconfig.postfix > %{buildroot}%{_fillupdir}/sysconfig.postfix @@ -551,6 +553,8 @@ %if 0%{?suse_version} >= 1330 %{_sysusersdir}/postfix-user.conf %endif +%dir %attr(1777,root,root) /var/spool/mail +/var/mail %if %{with lmdb} %files lmdb ++++++ postfix.spec ++++++ --- /var/tmp/diff_new_pack.Pzy8p2/_old 2022-10-18 12:44:14.277619654 +0200 +++ /var/tmp/diff_new_pack.Pzy8p2/_new 2022-10-18 12:44:14.281619663 +0200 @@ -42,7 +42,7 @@ %bcond_without libnsl %bcond_without ldap Name: postfix -Version: 3.7.2 +Version: 3.7.3 Release: 0 Summary: A fast, secure, and flexible mailer License: IPL-1.0 OR EPL-2.0 @@ -289,6 +289,8 @@ mkdir -p %{buildroot}/%{pf_html_directory} mkdir -p %{buildroot}%{_includedir}/%{name} mkdir -p %{buildroot}%{_sysconfdir}/pam.d +mkdir -p %{buildroot}/var/spool/mail +ln -s spool/mail %{buildroot}/var/mail install -pm 0644 %{name}-SUSE/smtp %{buildroot}%{_sysconfdir}/pam.d/smtp mkdir -p %{buildroot}%{_fillupdir} sed -e 's;@lib@;%{_lib};g' %{name}-SUSE/sysconfig.%{name} > %{buildroot}%{_fillupdir}/sysconfig.%{name} @@ -587,6 +589,8 @@ %dir %attr(0730,%{name},maildrop) /%{pf_queue_directory}/maildrop %dir %attr(0710,%{name},maildrop) /%{pf_queue_directory}/public %{_sysusersdir}/postfix-user.conf +%dir %attr(1777,root,root) /var/spool/mail +/var/mail %files devel %{_includedir}/%{name}/ ++++++ postfix-3.7.2.tar.gz -> postfix-3.7.3.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-3.7.2/HISTORY new/postfix-3.7.3/HISTORY --- old/postfix-3.7.2/HISTORY 2022-04-28 01:36:44.000000000 +0200 +++ new/postfix-3.7.3/HISTORY 2022-10-07 23:00:33.000000000 +0200 @@ -26354,3 +26354,47 @@ Clang instead of GCC. The result was also "uninteresting" on Linux-based systems that use GCC, or on a few older systems that use GCC. + +20220719 + + Cleanup: Postfix 3.5.0 introduced debug logging noise in + map_search_create(). Files: global/map_search.c. + +20220724 + + Workaround: in a TLS server disable Postfix's 1-element + internal session cache, to work around an OpenSSL 3.0 + regression that broke TLS handshakes. It is rarely useful. + Report by Spil Oss, fix by Viktor Dukhovni. File: + tls/tls_server.c. + +20220905 + + Cleanup: Postfix 3.3.0 introduced an uninitialized + verify_append() request status in case of a null original + recipient address. File: global/verify.c. + +20220906 + + Cleanup: Postfix 3.7.1 introduced a missing msg_panic() + argument (in code that never executes). File: + cleanup/cleanup_milter.c. + +20221006 + + Bugfix (introduced: Postfix 3.7.0). A message could falsely + be flagged as corrupt with "warning: Unexpected record type + 'X'". Such messages were moved to the "corrupt" queue directory, + where they may still be found. See below for instructions to + deal with these falsely flagged messages. + + This could happen for messages with 5000 or more recipients, + or with fewer recipients on a busy mail server. Problem + reported by Frank Brendel, reproduced by John Alex. Files: + qmgr/qmgr_message.c, oqmgr/qmgr_message.c. + + A file in the "corrupt" queue directory may be inspected + with the command "postcat /var/spool/postfix/corrupt/<filename>. + If delivery of the file is still desired, the file can be + moved back to /var/spool/postfix/incoming after updating + Postfix and executing "postfix reload". diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-3.7.2/RELEASE_NOTES new/postfix-3.7.3/RELEASE_NOTES --- old/postfix-3.7.2/RELEASE_NOTES 2022-02-05 17:02:48.000000000 +0100 +++ new/postfix-3.7.3/RELEASE_NOTES 2022-10-08 00:42:46.000000000 +0200 @@ -25,6 +25,26 @@ the software under the license of their choice. Those who are more comfortable with the IPL can continue with that license. +Bugfix for messages not delivered after "warning: Unexpected record type 'X' +============================================================================ + +Due to a bug introduced in Postfix 3.7.0, a message could falsely +be flagged as corrupt with "warning: Unexpected record type 'X'". + +Such messages were moved to the "corrupt" queue directory, where +they may still be found. See below for instructions to deal with +these falsely flagged messages. + +This could happen for messages with 5000 or more recipients, or +with fewer recipients on a busy mail server. The problem was first +reported by Frank Brendel, reproduced by John Alex. + +A file in the "corrupt" queue directory may be inspected with the +command "postcat /var/spool/postfix/corrupt/<filename>. If delivery +of the file is still desired, the file can be moved back to +/var/spool/postfix/incoming after updating Postfix and executing +"postfix reload". + Major changes - configuration ----------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-3.7.2/src/cleanup/cleanup_milter.c new/postfix-3.7.3/src/cleanup/cleanup_milter.c --- old/postfix-3.7.2/src/cleanup/cleanup_milter.c 2022-04-17 23:57:47.000000000 +0200 +++ new/postfix-3.7.3/src/cleanup/cleanup_milter.c 2022-09-06 21:42:02.000000000 +0200 @@ -530,7 +530,7 @@ msg_panic("%s: %s is empty", myname, VAR_MILT_HEAD_CHECKS); if (cleanup_milter_hbc_checks) - msg_panic("%s: cleanup_milter_hbc_checks is not null"); + msg_panic("%s: cleanup_milter_hbc_checks is not null", myname); cleanup_milter_hbc_checks = hbc_header_checks_create(VAR_MILT_HEAD_CHECKS, var_milt_head_checks, NO_MIME_HDR_NAME, NO_MIME_HDR_VALUE, @@ -538,7 +538,7 @@ &call_backs); if (cleanup_milter_hbc_reply) - msg_panic("%s: cleanup_milter_hbc_reply is not null"); + msg_panic("%s: cleanup_milter_hbc_reply is not null", myname); cleanup_milter_hbc_reply = vstring_alloc(100); } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-3.7.2/src/global/mail_version.h new/postfix-3.7.3/src/global/mail_version.h --- old/postfix-3.7.2/src/global/mail_version.h 2022-04-28 01:39:05.000000000 +0200 +++ new/postfix-3.7.3/src/global/mail_version.h 2022-10-07 23:02:17.000000000 +0200 @@ -20,8 +20,8 @@ * Patches change both the patchlevel and the release date. Snapshots have no * patchlevel; they change the release date only. */ -#define MAIL_RELEASE_DATE "20220427" -#define MAIL_VERSION_NUMBER "3.7.2" +#define MAIL_RELEASE_DATE "20221007" +#define MAIL_VERSION_NUMBER "3.7.3" #ifdef SNAPSHOT #define MAIL_VERSION_DATE "-" MAIL_RELEASE_DATE diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-3.7.2/src/global/map_search.c new/postfix-3.7.3/src/global/map_search.c --- old/postfix-3.7.2/src/global/map_search.c 2020-03-08 15:51:31.000000000 +0100 +++ new/postfix-3.7.3/src/global/map_search.c 2022-10-07 20:17:09.000000000 +0200 @@ -188,7 +188,6 @@ MAP_SEARCH_CREATE_RETURN(0); } } - msg_info("split_nameval(\"%s\"", attr_name_val); if ((const_err = split_nameval(attr_name_val, &attr_name, &attr_value)) != 0) { msg_warn("malformed map attribute in '%s': '%s'", diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-3.7.2/src/global/verify.c new/postfix-3.7.3/src/global/verify.c --- old/postfix-3.7.2/src/global/verify.c 2021-12-19 15:46:14.000000000 +0100 +++ new/postfix-3.7.3/src/global/verify.c 2022-10-07 20:30:36.000000000 +0200 @@ -108,6 +108,8 @@ if (recipient->orig_addr[0]) req_stat = verify_clnt_update(recipient->orig_addr, vrfy_stat, my_dsn.reason); + else + req_stat = VRFY_STAT_OK; /* Two verify updates for one verify request! */ if (req_stat == VRFY_STAT_OK && strcmp(recipient->address, recipient->orig_addr) != 0) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-3.7.2/src/oqmgr/qmgr_message.c new/postfix-3.7.3/src/oqmgr/qmgr_message.c --- old/postfix-3.7.2/src/oqmgr/qmgr_message.c 2021-11-13 15:56:41.000000000 +0100 +++ new/postfix-3.7.3/src/oqmgr/qmgr_message.c 2022-10-07 00:29:44.000000000 +0200 @@ -465,9 +465,15 @@ message->rflags |= QMGR_READ_FLAG_SEEN_ALL_NON_RCPT; break; } - /* Examine non-recipient records in extracted segment. */ - if (vstream_fseek(message->fp, message->data_offset - + message->data_size, SEEK_SET) < 0) + + /* + * Examine non-recipient records in the extracted + * segment. Note that this skips to the message start + * record, because the handler for that record changes + * the expectations for allowed record types. + */ + if (vstream_fseek(message->fp, message->data_offset, + SEEK_SET) < 0) msg_fatal("seek file %s: %m", VSTREAM_PATH(message->fp)); continue; } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-3.7.2/src/qmgr/qmgr_message.c new/postfix-3.7.3/src/qmgr/qmgr_message.c --- old/postfix-3.7.2/src/qmgr/qmgr_message.c 2021-11-13 15:57:06.000000000 +0100 +++ new/postfix-3.7.3/src/qmgr/qmgr_message.c 2022-10-07 00:28:33.000000000 +0200 @@ -505,9 +505,15 @@ message->rflags |= QMGR_READ_FLAG_SEEN_ALL_NON_RCPT; break; } - /* Examine non-recipient records in extracted segment. */ - if (vstream_fseek(message->fp, message->data_offset - + message->data_size, SEEK_SET) < 0) + + /* + * Examine non-recipient records in the extracted + * segment. Note that this skips to the message start + * record, because the handler for that record changes + * the expectations for allowed record types. + */ + if (vstream_fseek(message->fp, message->data_offset, + SEEK_SET) < 0) msg_fatal("seek file %s: %m", VSTREAM_PATH(message->fp)); continue; } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/postfix-3.7.2/src/tls/tls_server.c new/postfix-3.7.3/src/tls/tls_server.c --- old/postfix-3.7.2/src/tls/tls_server.c 2021-12-19 16:00:25.000000000 +0100 +++ new/postfix-3.7.3/src/tls/tls_server.c 2022-10-07 21:48:11.000000000 +0200 @@ -751,6 +751,7 @@ sizeof(server_session_id_context)); SSL_CTX_set_session_cache_mode(server_ctx, SSL_SESS_CACHE_SERVER | + SSL_SESS_CACHE_NO_INTERNAL | SSL_SESS_CACHE_NO_AUTO_CLEAR); if (cachable) { app_ctx->cache_type = mystrdup(props->cache_type);