From mboxrd@z Thu Jan 1 00:00:00 1970 From: Adolf Belka To: development@lists.ipfire.org Subject: [PATCH] postfix: Update to version 3.9.0 Date: Sun, 02 Jun 2024 12:14:16 +0200 Message-ID: <20240602101417.2953-1-adolf.belka@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============1633840296990601977==" List-Id: --===============1633840296990601977== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable - Update from version 3.8.4 to 3.9.0 - Update of rootfile - With version 3.9.0 the option smtpd_forbid_bare_newline default value is no= w yes. With previous versions the default value was no but to prevent the possibility = of an smtp smuggling attack the option should be yes. Previous version therefore acti= vely set the value to yes and added it to the main.cf file when being installed. Wi= th version 3.9.0 the default value is now yes so the option no longer needs to be add= ed into main.cf, so smtp smuggling attack is protected by default now. - Removed the section from the install.sh file that added the option into mai= n.cf with version 3.8.4. From 3.9.0 onwards the default value is yes so no longer ne= eds to be actively added into main.cf - Changelog is too large to paste here. It can be read in the file RELEASE_NO= TES in the source tarball. Signed-off-by: Adolf Belka --- config/rootfiles/packages/postfix | 1 + lfs/postfix | 8 ++++---- src/paks/postfix/install.sh | 4 ---- 3 files changed, 5 insertions(+), 8 deletions(-) diff --git a/config/rootfiles/packages/postfix b/config/rootfiles/packages/po= stfix index 23e1efb25..b77a5b42a 100644 --- a/config/rootfiles/packages/postfix +++ b/config/rootfiles/packages/postfix @@ -96,6 +96,7 @@ usr/sbin/sendmail.postfix #usr/share/man/man5/lmdb_table.5 #usr/share/man/man5/master.5 #usr/share/man/man5/memcache_table.5 +#usr/share/man/man5/mongodb_table.5 #usr/share/man/man5/mysql_table.5 #usr/share/man/man5/nisplus_table.5 #usr/share/man/man5/pcre_table.5 diff --git a/lfs/postfix b/lfs/postfix index 7f2625a4e..497168267 100644 --- a/lfs/postfix +++ b/lfs/postfix @@ -1,7 +1,7 @@ ############################################################################= ### # = # # IPFire.org - A linux based firewall = # -# Copyright (C) 2007-2023 IPFire Team = # +# Copyright (C) 2007-2024 IPFire Team = # # = # # This program is free software: you can redistribute it and/or modify = # # it under the terms of the GNU General Public License as published by = # @@ -26,7 +26,7 @@ include Config =20 SUMMARY =3D A fast, secure, and flexible mailer =20 -VER =3D 3.8.4 +VER =3D 3.9.0 =20 THISAPP =3D postfix-$(VER) DL_FILE =3D $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM =3D $(URL_IPFIRE) DIR_APP =3D $(DIR_SRC)/$(THISAPP) TARGET =3D $(DIR_INFO)/$(THISAPP) PROG =3D postfix -PAK_VER =3D 44 +PAK_VER =3D 45 =20 DEPS =3D =20 @@ -70,7 +70,7 @@ objects =3D $(DL_FILE) =20 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) =20 -$(DL_FILE)_BLAKE2 =3D 200ce3d72444da05e42fc8627002d53d68c1b3d78b7f74b0130ac9= 58c23d16454783ef4849a8c9a4e3cba8ae36646e921f7e94ac4fb819b597e1a5ab1a875272 +$(DL_FILE)_BLAKE2 =3D e07a525d9cbea43d3ed11f3d672452cf94f88ca7bbaf3c3254bf5b= e4ef675a1797a5fff2444c0db60c6eb53e43734a388a91faed72bb2fb4e3e5a353535602b0 =20 install : $(TARGET) =20 diff --git a/src/paks/postfix/install.sh b/src/paks/postfix/install.sh index 2e04e74a8..830970e1e 100644 --- a/src/paks/postfix/install.sh +++ b/src/paks/postfix/install.sh @@ -25,10 +25,6 @@ extract_files restore_backup ${NAME} =20 -# change main.cf parameter from default value to prevent smtp smuggling atta= ck -# will not be required once postfix-3.9.x is released as default will then b= e yes -postconf -e 'smtpd_forbid_bare_newline =3D yes' - postalias /etc/aliases # Set postfix's hostname postconf -e "myhostname=3D$(hostname -f)" --=20 2.45.1 --===============1633840296990601977==--