Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package postfix for openSUSE:Factory checked 
in at 2022-10-18 12:44:11
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/postfix (Old)
 and      /work/SRC/openSUSE:Factory/.postfix.new.2275 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "postfix"

Tue Oct 18 12:44:11 2022 rev:219 rq:1009796 version:3.7.3

Changes:
--------
--- /work/SRC/openSUSE:Factory/postfix/postfix-bdb.changes      2022-08-10 
17:14:07.325836739 +0200
+++ /work/SRC/openSUSE:Factory/.postfix.new.2275/postfix-bdb.changes    
2022-10-18 12:44:13.325617487 +0200
@@ -1,0 +2,19 @@
+Sun Oct  9 12:00:55 UTC 2022 - Michael Str??der <mich...@stroeder.com>
+
+- update to 3.7.3
+  * Fixed a bug where some messages were not delivered after
+    "warning: Unexpected record type 'X'.
+  * Workaround: in a TLS server disable Postfix's 1-element internal session
+    cache, to work around an OpenSSL 3.0 regression that broke TLS handshakes.
+  * Code health: the fix for milter_header_checks (3.7.1, 3.6.6, 3.5.16, 
3.4.26)
+    introduced a missing msg_panic() argument (in code that never executes).
+  * Code health: Postfix 3.3.0 introduced an uninitialized verify_append()
+    request status in case of a null original recipient address.
+  * Postfix 3.5.0 introduced debug logging noise in map_search_create().
+
+-------------------------------------------------------------------
+Tue Sep  6 09:17:20 UTC 2022 - Ludwig Nussel <lnus...@suse.de>
+
+- own /var/spool/mail (boo#1179574)
+
+-------------------------------------------------------------------
postfix.changes: same change

Old:
----
  postfix-3.7.2.tar.gz
  postfix-3.7.2.tar.gz.asc

New:
----
  postfix-3.7.3.tar.gz
  postfix-3.7.3.tar.gz.asc

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ postfix-bdb.spec ++++++
--- /var/tmp/diff_new_pack.Pzy8p2/_old  2022-10-18 12:44:14.225619536 +0200
+++ /var/tmp/diff_new_pack.Pzy8p2/_new  2022-10-18 12:44:14.229619545 +0200
@@ -56,7 +56,7 @@
 %endif
 %bcond_without ldap
 Name:           postfix-bdb
-Version: 3.7.2
+Version: 3.7.3
 Release:        0
 Summary:        A fast, secure, and flexible mailer
 License:        IPL-1.0 OR EPL-2.0
@@ -274,6 +274,8 @@
 mkdir -p %{buildroot}/%{pf_html_directory}
 mkdir -p %{buildroot}%{_includedir}/postfix
 mkdir -p %{buildroot}%{_sysconfdir}/pam.d
+mkdir -p %{buildroot}/var/spool/mail
+ln -s spool/mail %{buildroot}/var/mail
 install -m 644 postfix-SUSE/smtp %{buildroot}%{_sysconfdir}/pam.d/smtp
 mkdir -p %{buildroot}%{_fillupdir}
 sed -e 's;@lib@;%{_lib};g' postfix-SUSE/sysconfig.postfix > 
%{buildroot}%{_fillupdir}/sysconfig.postfix
@@ -551,6 +553,8 @@
 %if 0%{?suse_version} >= 1330
 %{_sysusersdir}/postfix-user.conf
 %endif
+%dir %attr(1777,root,root) /var/spool/mail
+/var/mail
 
 %if %{with lmdb}
 %files lmdb

++++++ postfix.spec ++++++
--- /var/tmp/diff_new_pack.Pzy8p2/_old  2022-10-18 12:44:14.277619654 +0200
+++ /var/tmp/diff_new_pack.Pzy8p2/_new  2022-10-18 12:44:14.281619663 +0200
@@ -42,7 +42,7 @@
 %bcond_without libnsl
 %bcond_without ldap
 Name:           postfix
-Version:        3.7.2
+Version:        3.7.3
 Release:        0
 Summary:        A fast, secure, and flexible mailer
 License:        IPL-1.0 OR EPL-2.0
@@ -289,6 +289,8 @@
 mkdir -p %{buildroot}/%{pf_html_directory}
 mkdir -p %{buildroot}%{_includedir}/%{name}
 mkdir -p %{buildroot}%{_sysconfdir}/pam.d
+mkdir -p %{buildroot}/var/spool/mail
+ln -s spool/mail %{buildroot}/var/mail
 install -pm 0644 %{name}-SUSE/smtp %{buildroot}%{_sysconfdir}/pam.d/smtp
 mkdir -p %{buildroot}%{_fillupdir}
 sed -e 's;@lib@;%{_lib};g' %{name}-SUSE/sysconfig.%{name} > 
%{buildroot}%{_fillupdir}/sysconfig.%{name}
@@ -587,6 +589,8 @@
 %dir %attr(0730,%{name},maildrop) /%{pf_queue_directory}/maildrop
 %dir %attr(0710,%{name},maildrop) /%{pf_queue_directory}/public
 %{_sysusersdir}/postfix-user.conf
+%dir %attr(1777,root,root) /var/spool/mail
+/var/mail
 
 %files devel
 %{_includedir}/%{name}/

++++++ postfix-3.7.2.tar.gz -> postfix-3.7.3.tar.gz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/postfix-3.7.2/HISTORY new/postfix-3.7.3/HISTORY
--- old/postfix-3.7.2/HISTORY   2022-04-28 01:36:44.000000000 +0200
+++ new/postfix-3.7.3/HISTORY   2022-10-07 23:00:33.000000000 +0200
@@ -26354,3 +26354,47 @@
        Clang instead of GCC. The result was also "uninteresting"
        on Linux-based systems that use GCC, or on a few older
        systems that use GCC.
+
+20220719
+
+       Cleanup: Postfix 3.5.0 introduced debug logging noise in
+       map_search_create(). Files: global/map_search.c.
+
+20220724
+
+       Workaround: in a TLS server disable Postfix's 1-element
+       internal session cache, to work around an OpenSSL 3.0
+       regression that broke TLS handshakes. It is rarely useful.
+       Report by Spil Oss, fix by Viktor Dukhovni. File:
+       tls/tls_server.c.
+
+20220905
+
+       Cleanup: Postfix 3.3.0 introduced an uninitialized
+       verify_append() request status in case of a null original
+       recipient address.  File: global/verify.c.
+
+20220906
+
+       Cleanup: Postfix 3.7.1 introduced a missing msg_panic()
+       argument (in code that never executes). File:
+       cleanup/cleanup_milter.c.
+
+20221006
+
+       Bugfix (introduced: Postfix 3.7.0). A message could falsely
+       be flagged as corrupt with "warning: Unexpected record type
+       'X'". Such messages were moved to the "corrupt" queue directory,
+       where they may still be found. See below for instructions to
+       deal with these falsely flagged messages.
+
+       This could happen for messages with 5000 or more recipients,
+       or with fewer recipients on a busy mail server. Problem
+       reported by Frank Brendel, reproduced by John Alex. Files:
+       qmgr/qmgr_message.c, oqmgr/qmgr_message.c.
+
+       A file in the "corrupt" queue directory may be inspected
+       with the command "postcat /var/spool/postfix/corrupt/<filename>.
+       If delivery of the file is still desired, the file can be
+       moved back to /var/spool/postfix/incoming after updating
+       Postfix and executing "postfix reload".
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/postfix-3.7.2/RELEASE_NOTES 
new/postfix-3.7.3/RELEASE_NOTES
--- old/postfix-3.7.2/RELEASE_NOTES     2022-02-05 17:02:48.000000000 +0100
+++ new/postfix-3.7.3/RELEASE_NOTES     2022-10-08 00:42:46.000000000 +0200
@@ -25,6 +25,26 @@
 the software under the license of their choice. Those who are more
 comfortable with the IPL can continue with that license.
 
+Bugfix for messages not delivered after "warning: Unexpected record type 'X'
+============================================================================
+
+Due to a bug introduced in Postfix 3.7.0, a message could falsely
+be flagged as corrupt with "warning: Unexpected record type 'X'".
+
+Such messages were moved to the "corrupt" queue directory, where
+they may still be found. See below for instructions to deal with
+these falsely flagged messages.
+
+This could happen for messages with 5000 or more recipients, or
+with fewer recipients on a busy mail server. The problem was first
+reported by Frank Brendel, reproduced by John Alex.
+
+A file in the "corrupt" queue directory may be inspected with the
+command "postcat /var/spool/postfix/corrupt/<filename>. If delivery
+of the file is still desired, the file can be moved back to
+/var/spool/postfix/incoming after updating Postfix and executing
+"postfix reload".
+
 Major changes - configuration
 -----------------------------
 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/postfix-3.7.2/src/cleanup/cleanup_milter.c 
new/postfix-3.7.3/src/cleanup/cleanup_milter.c
--- old/postfix-3.7.2/src/cleanup/cleanup_milter.c      2022-04-17 
23:57:47.000000000 +0200
+++ new/postfix-3.7.3/src/cleanup/cleanup_milter.c      2022-09-06 
21:42:02.000000000 +0200
@@ -530,7 +530,7 @@
        msg_panic("%s: %s is empty", myname, VAR_MILT_HEAD_CHECKS);
 
     if (cleanup_milter_hbc_checks)
-       msg_panic("%s: cleanup_milter_hbc_checks is not null");
+       msg_panic("%s: cleanup_milter_hbc_checks is not null", myname);
     cleanup_milter_hbc_checks =
        hbc_header_checks_create(VAR_MILT_HEAD_CHECKS, var_milt_head_checks,
                                 NO_MIME_HDR_NAME, NO_MIME_HDR_VALUE,
@@ -538,7 +538,7 @@
                                 &call_backs);
 
     if (cleanup_milter_hbc_reply)
-       msg_panic("%s: cleanup_milter_hbc_reply is not null");
+       msg_panic("%s: cleanup_milter_hbc_reply is not null", myname);
     cleanup_milter_hbc_reply = vstring_alloc(100);
 }
 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/postfix-3.7.2/src/global/mail_version.h 
new/postfix-3.7.3/src/global/mail_version.h
--- old/postfix-3.7.2/src/global/mail_version.h 2022-04-28 01:39:05.000000000 
+0200
+++ new/postfix-3.7.3/src/global/mail_version.h 2022-10-07 23:02:17.000000000 
+0200
@@ -20,8 +20,8 @@
   * Patches change both the patchlevel and the release date. Snapshots have no
   * patchlevel; they change the release date only.
   */
-#define MAIL_RELEASE_DATE      "20220427"
-#define MAIL_VERSION_NUMBER    "3.7.2"
+#define MAIL_RELEASE_DATE      "20221007"
+#define MAIL_VERSION_NUMBER    "3.7.3"
 
 #ifdef SNAPSHOT
 #define MAIL_VERSION_DATE      "-" MAIL_RELEASE_DATE
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/postfix-3.7.2/src/global/map_search.c 
new/postfix-3.7.3/src/global/map_search.c
--- old/postfix-3.7.2/src/global/map_search.c   2020-03-08 15:51:31.000000000 
+0100
+++ new/postfix-3.7.3/src/global/map_search.c   2022-10-07 20:17:09.000000000 
+0200
@@ -188,7 +188,6 @@
                    MAP_SEARCH_CREATE_RETURN(0);
                }
            }
-           msg_info("split_nameval(\"%s\"", attr_name_val);
            if ((const_err = split_nameval(attr_name_val, &attr_name,
                                           &attr_value)) != 0) {
                msg_warn("malformed map attribute in '%s': '%s'",
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/postfix-3.7.2/src/global/verify.c 
new/postfix-3.7.3/src/global/verify.c
--- old/postfix-3.7.2/src/global/verify.c       2021-12-19 15:46:14.000000000 
+0100
+++ new/postfix-3.7.3/src/global/verify.c       2022-10-07 20:30:36.000000000 
+0200
@@ -108,6 +108,8 @@
        if (recipient->orig_addr[0])
            req_stat = verify_clnt_update(recipient->orig_addr, vrfy_stat,
                                          my_dsn.reason);
+       else
+           req_stat = VRFY_STAT_OK;
        /* Two verify updates for one verify request! */
        if (req_stat == VRFY_STAT_OK
            && strcmp(recipient->address, recipient->orig_addr) != 0)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/postfix-3.7.2/src/oqmgr/qmgr_message.c 
new/postfix-3.7.3/src/oqmgr/qmgr_message.c
--- old/postfix-3.7.2/src/oqmgr/qmgr_message.c  2021-11-13 15:56:41.000000000 
+0100
+++ new/postfix-3.7.3/src/oqmgr/qmgr_message.c  2022-10-07 00:29:44.000000000 
+0200
@@ -465,9 +465,15 @@
                        message->rflags |= QMGR_READ_FLAG_SEEN_ALL_NON_RCPT;
                        break;
                    }
-                   /* Examine non-recipient records in extracted segment. */
-                   if (vstream_fseek(message->fp, message->data_offset
-                                     + message->data_size, SEEK_SET) < 0)
+
+                   /*
+                    * Examine non-recipient records in the extracted
+                    * segment. Note that this skips to the message start
+                    * record, because the handler for that record changes
+                    * the expectations for allowed record types.
+                    */
+                   if (vstream_fseek(message->fp, message->data_offset,
+                                     SEEK_SET) < 0)
                        msg_fatal("seek file %s: %m", 
VSTREAM_PATH(message->fp));
                    continue;
                }
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/postfix-3.7.2/src/qmgr/qmgr_message.c 
new/postfix-3.7.3/src/qmgr/qmgr_message.c
--- old/postfix-3.7.2/src/qmgr/qmgr_message.c   2021-11-13 15:57:06.000000000 
+0100
+++ new/postfix-3.7.3/src/qmgr/qmgr_message.c   2022-10-07 00:28:33.000000000 
+0200
@@ -505,9 +505,15 @@
                        message->rflags |= QMGR_READ_FLAG_SEEN_ALL_NON_RCPT;
                        break;
                    }
-                   /* Examine non-recipient records in extracted segment. */
-                   if (vstream_fseek(message->fp, message->data_offset
-                                     + message->data_size, SEEK_SET) < 0)
+
+                   /*
+                    * Examine non-recipient records in the extracted
+                    * segment. Note that this skips to the message start
+                    * record, because the handler for that record changes
+                    * the expectations for allowed record types.
+                    */
+                   if (vstream_fseek(message->fp, message->data_offset,
+                                     SEEK_SET) < 0)
                        msg_fatal("seek file %s: %m", 
VSTREAM_PATH(message->fp));
                    continue;
                }
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/postfix-3.7.2/src/tls/tls_server.c 
new/postfix-3.7.3/src/tls/tls_server.c
--- old/postfix-3.7.2/src/tls/tls_server.c      2021-12-19 16:00:25.000000000 
+0100
+++ new/postfix-3.7.3/src/tls/tls_server.c      2022-10-07 21:48:11.000000000 
+0200
@@ -751,6 +751,7 @@
                                       sizeof(server_session_id_context));
        SSL_CTX_set_session_cache_mode(server_ctx,
                                       SSL_SESS_CACHE_SERVER |
+                                      SSL_SESS_CACHE_NO_INTERNAL |
                                       SSL_SESS_CACHE_NO_AUTO_CLEAR);
        if (cachable) {
            app_ctx->cache_type = mystrdup(props->cache_type);

Reply via email to