From 34f68e2d16b9e69d1dfff588c51b71ff48978a0f6b1616d0229fe8139258c5b0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michael=20Str=C3=B6der?= Date: Mon, 12 Apr 2021 18:08:05 +0000 Subject: [PATCH] Accepting request 884703 from home:stroeder:network Update to 3.5.10 with security fixes OBS-URL: https://build.opensuse.org/request/show/884703 OBS-URL: https://build.opensuse.org/package/show/server:mail/postfix?expand=0&rev=409 --- postfix-3.5.10.tar.gz | 3 +++ postfix-3.5.10.tar.gz.asc | 7 +++++++ postfix-3.5.9.tar.gz | 3 --- postfix-3.5.9.tar.gz.asc | 7 ------- postfix-bdb.changes | 18 ++++++++++++++++++ postfix-bdb.spec | 2 +- postfix.changes | 18 ++++++++++++++++++ postfix.spec | 2 +- 8 files changed, 48 insertions(+), 12 deletions(-) create mode 100644 postfix-3.5.10.tar.gz create mode 100644 postfix-3.5.10.tar.gz.asc delete mode 100644 postfix-3.5.9.tar.gz delete mode 100644 postfix-3.5.9.tar.gz.asc diff --git a/postfix-3.5.10.tar.gz b/postfix-3.5.10.tar.gz new file mode 100644 index 0000000..e747303 --- /dev/null +++ b/postfix-3.5.10.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:5bb4d7d72d7512b58f3a31426dcbd394fd354e0a43de21da89466b057a0228f8 +size 4621130 diff --git a/postfix-3.5.10.tar.gz.asc b/postfix-3.5.10.tar.gz.asc new file mode 100644 index 0000000..c71482a --- /dev/null +++ b/postfix-3.5.10.tar.gz.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.0.18 (FreeBSD) + +iFcDBQBgcxhnDAtZDoDKFacRCtagAP4umj05h3oJQmQPtJuCrJ383eRGoljQLvkc +kifkMp+vzwD+LjAFR73rQ7rI+Za6BQq8ALKnrcYwBSJEXpRGvm6iSlw= +=1LQK +-----END PGP SIGNATURE----- diff --git a/postfix-3.5.9.tar.gz b/postfix-3.5.9.tar.gz deleted file mode 100644 index 731c32c..0000000 --- a/postfix-3.5.9.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:51ced5a3165a415beba812b6c9ead0496b7172ac6c3beb654d2ccd9a1b00762b -size 4620852 diff --git a/postfix-3.5.9.tar.gz.asc b/postfix-3.5.9.tar.gz.asc deleted file mode 100644 index 27ff915..0000000 --- a/postfix-3.5.9.tar.gz.asc +++ /dev/null @@ -1,7 +0,0 @@ ------BEGIN PGP SIGNATURE----- -Version: GnuPG v2.0.18 (FreeBSD) - -iFcDBQBgBFwoDAtZDoDKFacRCvzhAP4yix6R51EeNGV+lGfzsS2NEgDnoGvdoXIp -m8O0ocFIXAD9HgylqBBdTnAm3PnDawYVJS6vWPUKJRGrqjwnTJ4Ikqc= -=ncG3 ------END PGP SIGNATURE----- diff --git a/postfix-bdb.changes b/postfix-bdb.changes index 4028bcc..eb5da91 100644 --- a/postfix-bdb.changes +++ b/postfix-bdb.changes @@ -1,3 +1,21 @@ +------------------------------------------------------------------- +Mon Apr 12 09:00:22 UTC 2021 - Michael Ströder + +- Update to 3.5.10 with security fixes: + * Missing null pointer checks (introduced in Postfix 3.4) after + an internal I/O error during the smtp(8) to tlsproxy(8) handshake. + Found by Coverity, reported by Jaroslav Skarvada. Based on a + fix by Viktor Dukhovni. + * Null pointer bug (introduced in Postfix 3.0) and memory leak + (introduced in Postfix 3.4) after an inline: table syntax error + in main.cf or master.cf. Found by Coverity, reported by Jaroslav + Skarvada. Based on a fix by Viktor Dukhovni. + * Incomplete null pointer check (introduced: Postfix 2.10) after + truncated HaProxy version 1 handshake message. Found by Coverity, + reported by Jaroslav Skarvada. Fix by Viktor Dukhovni. + * Missing null pointer check (introduced: Postfix alpha) after + null argv[0] value. + ------------------------------------------------------------------- Wed Mar 10 15:12:11 UTC 2021 - Peter Varkoly diff --git a/postfix-bdb.spec b/postfix-bdb.spec index 5b0e2d2..825cd45 100644 --- a/postfix-bdb.spec +++ b/postfix-bdb.spec @@ -56,7 +56,7 @@ %endif %bcond_without ldap Name: postfix-bdb -Version: 3.5.9 +Version: 3.5.10 Release: 0 Summary: A fast, secure, and flexible mailer License: IPL-1.0 OR EPL-2.0 diff --git a/postfix.changes b/postfix.changes index 4028bcc..eb5da91 100644 --- a/postfix.changes +++ b/postfix.changes @@ -1,3 +1,21 @@ +------------------------------------------------------------------- +Mon Apr 12 09:00:22 UTC 2021 - Michael Ströder + +- Update to 3.5.10 with security fixes: + * Missing null pointer checks (introduced in Postfix 3.4) after + an internal I/O error during the smtp(8) to tlsproxy(8) handshake. + Found by Coverity, reported by Jaroslav Skarvada. Based on a + fix by Viktor Dukhovni. + * Null pointer bug (introduced in Postfix 3.0) and memory leak + (introduced in Postfix 3.4) after an inline: table syntax error + in main.cf or master.cf. Found by Coverity, reported by Jaroslav + Skarvada. Based on a fix by Viktor Dukhovni. + * Incomplete null pointer check (introduced: Postfix 2.10) after + truncated HaProxy version 1 handshake message. Found by Coverity, + reported by Jaroslav Skarvada. Fix by Viktor Dukhovni. + * Missing null pointer check (introduced: Postfix alpha) after + null argv[0] value. + ------------------------------------------------------------------- Wed Mar 10 15:12:11 UTC 2021 - Peter Varkoly diff --git a/postfix.spec b/postfix.spec index 581e64f..cfa0097 100644 --- a/postfix.spec +++ b/postfix.spec @@ -42,7 +42,7 @@ %bcond_without libnsl %bcond_without ldap Name: postfix -Version: 3.5.9 +Version: 3.5.10 Release: 0 Summary: A fast, secure, and flexible mailer License: IPL-1.0 OR EPL-2.0