Accepting request 504273 from server:mail

1

OBS-URL: https://build.opensuse.org/request/show/504273
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postfix?expand=0&rev=144

postfix-3.2.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:420726e79622620394fd17799e49268dada7041ea067ca3aa1c8bf155b9aa487
-size 4389547

postfix-3.2.2.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d06849418d119d09366997b2b481bb23f737629769b4e4a52da42fb3ad8b0576
+size 4390318

postfix.changes

@@ -1,3 +1,25 @@
+-------------------------------------------------------------------
+Fri Jun 16 17:45:55 UTC 2017 - michael@stroeder.com
+
+- update to 3.2.2
+  * Security: Berkeley DB versions 2 and later try to read settings
+    from a file DB_CONFIG in the current directory. This undocumented
+    feature may introduce undisclosed vulnerabilities resulting in
+    privilege escalation with Postfix set-gid programs (postdrop,
+    postqueue) before they chdir to the Postfix queue directory,
+    and with the postmap and postalias commands depending on whether
+    the user's current directory is writable by other users. This
+    fix does not change Postfix behavior for Berkeley DB versions
+    < 3, but it does reduce postmap and postalias 'create' performance
+    with Berkeley DB versions 3.0 .. 4.6.
+  * The SMTP server receive_override_options were not restored at
+    the end of an SMTP session, after the options were modified by
+    an smtpd_milter_maps setting of "DISABLE". Milter support
+    remained disabled for the life time of the smtpd process.
+  * After the Postfix 3.2 address/domain table lookup overhaul, the
+    check_sender_access and check_recipient_access features ignored
+    a non-default parent_domain_matches_subdomains setting.
+
 -------------------------------------------------------------------
 Wed Apr 19 20:36:03 UTC 2017 - chris@computersalat.de
 

postfix.spec

@@ -59,7 +59,7 @@
 %define         _unitdir /lib/systemd
 %endif
 Name:           postfix
-Version:        3.2.0
+Version:        3.2.2
 Release:        0
 Summary:        A fast, secure, and flexible mailer
 License:        IPL-1.0