From 4ad237bec7556a677724aafee4ca803e4755661cd21d337ff5e74769d3fcccaa Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Michael=20Str=C3=B6der?= <michael@stroeder.com>
Date: Mon, 29 Jun 2020 18:43:28 +0000
Subject: [PATCH 1/4] OBS-URL:
 https://build.opensuse.org/package/show/server:mail/postfix?expand=0&rev=371

---
 postfix-3.5.3.tar.gz | 3 ---
 1 file changed, 3 deletions(-)
 delete mode 100644 postfix-3.5.3.tar.gz

diff --git a/postfix-3.5.3.tar.gz b/postfix-3.5.3.tar.gz
deleted file mode 100644
index b058bf3..0000000
--- a/postfix-3.5.3.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:e381089cf2a03105042835776f23489c0a58600a6a6ebc8cb59f5cb1eb4d8d75
-size 4611925

From e3a1cf70570c7e6285d71fca173d56ee138b48c89066d3d518e630cd8a1ecf01 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Michael=20Str=C3=B6der?= <michael@stroeder.com>
Date: Mon, 29 Jun 2020 18:43:52 +0000
Subject: [PATCH 2/4] OBS-URL:
 https://build.opensuse.org/package/show/server:mail/postfix?expand=0&rev=372

---
 postfix.spec | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/postfix.spec b/postfix.spec
index c22fd85..8767bfb 100644
--- a/postfix.spec
+++ b/postfix.spec
@@ -53,7 +53,7 @@
 %bcond_with    libnsl
 %endif
 Name:           postfix
-Version:        3.5.3
+Version:        3.5.4
 Release:        0
 Summary:        A fast, secure, and flexible mailer
 License:        IPL-1.0 OR EPL-2.0

From 1e9396c123f29fd948e3659476536af1ed8472387d13b58bd0ba977c4a451498 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Michael=20Str=C3=B6der?= <michael@stroeder.com>
Date: Mon, 29 Jun 2020 18:45:20 +0000
Subject: [PATCH 3/4] OBS-URL:
 https://build.opensuse.org/package/show/server:mail/postfix?expand=0&rev=373

---
 postfix-3.5.4.tar.gz | 3 +++
 1 file changed, 3 insertions(+)
 create mode 100644 postfix-3.5.4.tar.gz

diff --git a/postfix-3.5.4.tar.gz b/postfix-3.5.4.tar.gz
new file mode 100644
index 0000000..66372cf
--- /dev/null
+++ b/postfix-3.5.4.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:fc2fb1cc27556aa2506bc287af04881cde07c83d5cb213ba835083b4bb796881
+size 4612431

From 70973495cebb1dda5e4456951e81e26fbee641fc1d1e960e19696a95de34431f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Michael=20Str=C3=B6der?= <michael@stroeder.com>
Date: Mon, 29 Jun 2020 18:45:27 +0000
Subject: [PATCH 4/4] Update to 3.5.4

OBS-URL: https://build.opensuse.org/package/show/server:mail/postfix?expand=0&rev=374
---
 postfix.changes | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/postfix.changes b/postfix.changes
index 2673c96..02b816e 100644
--- a/postfix.changes
+++ b/postfix.changes
@@ -1,3 +1,22 @@
+-------------------------------------------------------------------
+Mon Jun 29 18:44:13 UTC 2020 - Michael Ströder <michael@stroeder.com>
+
+- Update to 3.5.4:
+  * The connection_reuse attribute in smtp_tls_policy_maps always
+    resulted in an "invalid attribute name" error.
+  * SMTP over TLS connection reuse always failed for Postfix SMTP
+    client configurations that specify explicit trust anchors (remote
+    SMTP server certificates or public keys).
+  * The Postfix SMTP client's DANE implementation would always send
+    an SNI option with the name in a destination's MX record, even
+    if the MX record pointed to a CNAME record. MX records that
+    point to CNAME records are not conformant with RFC5321, and so
+    are rare.
+    Based on the DANE survey of ~2 million hosts it was found that
+    with the corrected SMTP client behavior, sending SNI with the
+    CNAME-expanded name, the SMTP server would not send a different
+    certificate. This fix should therefore be safe.
+
 -------------------------------------------------------------------
 Mon Jun 15 16:09:57 UTC 2020 - Michael Ströder <michael@stroeder.com>