Accepting request 884703 from home:stroeder:network

Update to 3.5.10 with security fixes

OBS-URL: https://build.opensuse.org/request/show/884703
OBS-URL: https://build.opensuse.org/package/show/server:mail/postfix?expand=0&rev=409

postfix-3.5.10.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5bb4d7d72d7512b58f3a31426dcbd394fd354e0a43de21da89466b057a0228f8
+size 4621130

postfix-3.5.10.tar.gz.asc

@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.18 (FreeBSD)
+
+iFcDBQBgcxhnDAtZDoDKFacRCtagAP4umj05h3oJQmQPtJuCrJ383eRGoljQLvkc
+kifkMp+vzwD+LjAFR73rQ7rI+Za6BQq8ALKnrcYwBSJEXpRGvm6iSlw=
+=1LQK
+-----END PGP SIGNATURE-----

postfix-3.5.9.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:51ced5a3165a415beba812b6c9ead0496b7172ac6c3beb654d2ccd9a1b00762b
-size 4620852

postfix-3.5.9.tar.gz.asc

@@ -1,7 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.18 (FreeBSD)
-
-iFcDBQBgBFwoDAtZDoDKFacRCvzhAP4yix6R51EeNGV+lGfzsS2NEgDnoGvdoXIp
-m8O0ocFIXAD9HgylqBBdTnAm3PnDawYVJS6vWPUKJRGrqjwnTJ4Ikqc=
-=ncG3
------END PGP SIGNATURE-----

postfix-bdb.changes

@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Mon Apr 12 09:00:22 UTC 2021 - Michael Ströder <michael@stroeder.com>
+
+- Update to 3.5.10 with security fixes:
+  * Missing null pointer checks (introduced in Postfix 3.4) after
+    an internal I/O error during the smtp(8) to tlsproxy(8) handshake.
+    Found by Coverity, reported by Jaroslav Skarvada. Based on a
+    fix by Viktor Dukhovni.
+  * Null pointer bug (introduced in Postfix 3.0) and memory leak
+    (introduced in Postfix 3.4) after an inline: table syntax error
+    in main.cf or master.cf. Found by Coverity, reported by Jaroslav
+    Skarvada. Based on a fix by Viktor Dukhovni.
+  * Incomplete null pointer check (introduced: Postfix 2.10) after
+    truncated HaProxy version 1 handshake message. Found by Coverity,
+    reported by Jaroslav Skarvada. Fix by Viktor Dukhovni.
+  * Missing null pointer check (introduced: Postfix alpha) after
+    null argv[0] value.
+
 -------------------------------------------------------------------
 Wed Mar 10 15:12:11 UTC 2021 - Peter Varkoly <varkoly@suse.com>
 

postfix-bdb.spec

@@ -56,7 +56,7 @@
 %endif
 %bcond_without ldap
 Name:           postfix-bdb
-Version: 3.5.9
+Version: 3.5.10
 Release:        0
 Summary:        A fast, secure, and flexible mailer
 License:        IPL-1.0 OR EPL-2.0

postfix.changes

@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Mon Apr 12 09:00:22 UTC 2021 - Michael Ströder <michael@stroeder.com>
+
+- Update to 3.5.10 with security fixes:
+  * Missing null pointer checks (introduced in Postfix 3.4) after
+    an internal I/O error during the smtp(8) to tlsproxy(8) handshake.
+    Found by Coverity, reported by Jaroslav Skarvada. Based on a
+    fix by Viktor Dukhovni.
+  * Null pointer bug (introduced in Postfix 3.0) and memory leak
+    (introduced in Postfix 3.4) after an inline: table syntax error
+    in main.cf or master.cf. Found by Coverity, reported by Jaroslav
+    Skarvada. Based on a fix by Viktor Dukhovni.
+  * Incomplete null pointer check (introduced: Postfix 2.10) after
+    truncated HaProxy version 1 handshake message. Found by Coverity,
+    reported by Jaroslav Skarvada. Fix by Viktor Dukhovni.
+  * Missing null pointer check (introduced: Postfix alpha) after
+    null argv[0] value.
+
 -------------------------------------------------------------------
 Wed Mar 10 15:12:11 UTC 2021 - Peter Varkoly <varkoly@suse.com>
 

postfix.spec

@@ -42,7 +42,7 @@
 %bcond_without libnsl
 %bcond_without ldap
 Name:           postfix
-Version:        3.5.9
+Version:        3.5.10
 Release:        0
 Summary:        A fast, secure, and flexible mailer
 License:        IPL-1.0 OR EPL-2.0