Accepting request 733151 from server:mail

- Backport deprecated-RES_INSECURE1.patch in order to fix
  boo#1149705.

- bsc#1120757 L3: File Permissions->Paranoid can cause a system hang
  Break loop if postfix has no permission in spool directory.
  - add postfix-avoid-infinit-loop-if-no-permission.patch

OBS-URL: https://build.opensuse.org/request/show/733151
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/postfix?expand=0&rev=177
This commit is contained in:
Dominique Leuenberger 2019-09-27 12:43:52 +00:00 committed by Git OBS Bridge
commit b2163b675e
4 changed files with 67 additions and 0 deletions

View File

@ -0,0 +1,33 @@
diff --git a/postfix/src/dns/dns_str_resflags.c b/postfix/src/dns/dns_str_resflags.c
index 5f2cce5e0..472394c3a 100644
--- a/postfix/src/dns/dns_str_resflags.c
+++ b/postfix/src/dns/dns_str_resflags.c
@@ -52,18 +52,28 @@
static const LONG_NAME_MASK resflag_table[] = {
"RES_INIT", RES_INIT,
"RES_DEBUG", RES_DEBUG,
+#ifdef RES_AAONLY
"RES_AAONLY", RES_AAONLY,
+#endif
"RES_USEVC", RES_USEVC,
+#ifdef RES_PRIMARY
"RES_PRIMARY", RES_PRIMARY,
+#endif
"RES_IGNTC", RES_IGNTC,
"RES_RECURSE", RES_RECURSE,
"RES_DEFNAMES", RES_DEFNAMES,
"RES_STAYOPEN", RES_STAYOPEN,
"RES_DNSRCH", RES_DNSRCH,
+#ifdef RES_INSECURE1
"RES_INSECURE1", RES_INSECURE1,
+#endif
+#ifdef RES_INSECURE2
"RES_INSECURE2", RES_INSECURE2,
+#endif
"RES_NOALIASES", RES_NOALIASES,
+#ifdef RES_USE_INET6
"RES_USE_INET6", RES_USE_INET6,
+#endif
#ifdef RES_ROTATE
"RES_ROTATE", RES_ROTATE,
#endif

View File

@ -0,0 +1,17 @@
--- src/global/mail_queue.c-orig 2019-04-01 14:37:54.136169772 +0200
+++ src/global/mail_queue.c 2019-04-01 14:42:35.191382999 +0200
@@ -363,6 +363,14 @@
break;
if (errno == EEXIST || errno == EISDIR)
continue;
+ /*
+ * Avoid getting into an infinite loop when we don't have permission to
+ * read temp_path
+ */
+ if (errno == EACCES) {
+ msg_fatal("%s: create file %s: no permission", myname, STR(temp_path));
+ break;
+ }
msg_warn("%s: create file %s: %m", myname, STR(temp_path));
sleep(10);
}

View File

@ -1,3 +1,16 @@
-------------------------------------------------------------------
Tue Sep 24 07:59:04 UTC 2019 - Martin Liška <mliska@suse.cz>
- Backport deprecated-RES_INSECURE1.patch in order to fix
boo#1149705.
-------------------------------------------------------------------
Thu Sep 19 06:20:48 UTC 2019 - Peter Varkoly <varkoly@suse.com>
- bsc#1120757 L3: File Permissions->Paranoid can cause a system hang
Break loop if postfix has no permission in spool directory.
- add postfix-avoid-infinit-loop-if-no-permission.patch
-------------------------------------------------------------------
Fri Aug 9 14:50:12 UTC 2019 - chris@computersalat.de

View File

@ -73,6 +73,8 @@ Patch6: %{name}-linux45.patch
Patch7: %{name}-ssl-release-buffers.patch
Patch8: %{name}-vda-v14-3.0.3.patch
Patch9: fix-postfix-script.patch
Patch10: %{name}-avoid-infinit-loop-if-no-permission.patch
Patch11: deprecated-RES_INSECURE1.patch
BuildRequires: ca-certificates
BuildRequires: cyrus-sasl-devel
BuildRequires: db-devel
@ -173,6 +175,8 @@ PostgreSQL.
%patch7
%patch8
%patch9
%patch10
%patch11 -p2
# ---------------------------------------------------------------------------