SHA256
1
0
forked from pool/postfix

Accepting request 884703 from home:stroeder:network

Update to 3.5.10 with security fixes

OBS-URL: https://build.opensuse.org/request/show/884703
OBS-URL: https://build.opensuse.org/package/show/server:mail/postfix?expand=0&rev=409
This commit is contained in:
Michael Ströder 2021-04-12 18:08:05 +00:00 committed by Git OBS Bridge
parent 11a8ac6e1a
commit 34f68e2d16
8 changed files with 48 additions and 12 deletions

3
postfix-3.5.10.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:5bb4d7d72d7512b58f3a31426dcbd394fd354e0a43de21da89466b057a0228f8
size 4621130

View File

@ -0,0 +1,7 @@
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (FreeBSD)
iFcDBQBgcxhnDAtZDoDKFacRCtagAP4umj05h3oJQmQPtJuCrJ383eRGoljQLvkc
kifkMp+vzwD+LjAFR73rQ7rI+Za6BQq8ALKnrcYwBSJEXpRGvm6iSlw=
=1LQK
-----END PGP SIGNATURE-----

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:51ced5a3165a415beba812b6c9ead0496b7172ac6c3beb654d2ccd9a1b00762b
size 4620852

View File

@ -1,7 +0,0 @@
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (FreeBSD)
iFcDBQBgBFwoDAtZDoDKFacRCvzhAP4yix6R51EeNGV+lGfzsS2NEgDnoGvdoXIp
m8O0ocFIXAD9HgylqBBdTnAm3PnDawYVJS6vWPUKJRGrqjwnTJ4Ikqc=
=ncG3
-----END PGP SIGNATURE-----

View File

@ -1,3 +1,21 @@
-------------------------------------------------------------------
Mon Apr 12 09:00:22 UTC 2021 - Michael Ströder <michael@stroeder.com>
- Update to 3.5.10 with security fixes:
* Missing null pointer checks (introduced in Postfix 3.4) after
an internal I/O error during the smtp(8) to tlsproxy(8) handshake.
Found by Coverity, reported by Jaroslav Skarvada. Based on a
fix by Viktor Dukhovni.
* Null pointer bug (introduced in Postfix 3.0) and memory leak
(introduced in Postfix 3.4) after an inline: table syntax error
in main.cf or master.cf. Found by Coverity, reported by Jaroslav
Skarvada. Based on a fix by Viktor Dukhovni.
* Incomplete null pointer check (introduced: Postfix 2.10) after
truncated HaProxy version 1 handshake message. Found by Coverity,
reported by Jaroslav Skarvada. Fix by Viktor Dukhovni.
* Missing null pointer check (introduced: Postfix alpha) after
null argv[0] value.
-------------------------------------------------------------------
Wed Mar 10 15:12:11 UTC 2021 - Peter Varkoly <varkoly@suse.com>

View File

@ -56,7 +56,7 @@
%endif
%bcond_without ldap
Name: postfix-bdb
Version: 3.5.9
Version: 3.5.10
Release: 0
Summary: A fast, secure, and flexible mailer
License: IPL-1.0 OR EPL-2.0

View File

@ -1,3 +1,21 @@
-------------------------------------------------------------------
Mon Apr 12 09:00:22 UTC 2021 - Michael Ströder <michael@stroeder.com>
- Update to 3.5.10 with security fixes:
* Missing null pointer checks (introduced in Postfix 3.4) after
an internal I/O error during the smtp(8) to tlsproxy(8) handshake.
Found by Coverity, reported by Jaroslav Skarvada. Based on a
fix by Viktor Dukhovni.
* Null pointer bug (introduced in Postfix 3.0) and memory leak
(introduced in Postfix 3.4) after an inline: table syntax error
in main.cf or master.cf. Found by Coverity, reported by Jaroslav
Skarvada. Based on a fix by Viktor Dukhovni.
* Incomplete null pointer check (introduced: Postfix 2.10) after
truncated HaProxy version 1 handshake message. Found by Coverity,
reported by Jaroslav Skarvada. Fix by Viktor Dukhovni.
* Missing null pointer check (introduced: Postfix alpha) after
null argv[0] value.
-------------------------------------------------------------------
Wed Mar 10 15:12:11 UTC 2021 - Peter Varkoly <varkoly@suse.com>

View File

@ -42,7 +42,7 @@
%bcond_without libnsl
%bcond_without ldap
Name: postfix
Version: 3.5.9
Version: 3.5.10
Release: 0
Summary: A fast, secure, and flexible mailer
License: IPL-1.0 OR EPL-2.0