CVS commit: pkgsrc/mail/postfix

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Mon Nov  3 08:59:19 UTC 2025

Modified Files:
        pkgsrc/mail/postfix: Makefile.common distinfo
Removed Files:
        pkgsrc/mail/postfix/patches: patch-src_util_dict__dbm.c

Log Message:
mail/postfix: update to 3.10.5

Postfix 3.10.5 (2025-10-27)

Fixes for Postfix 3.10 only:

  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.

      * The existing behavior is to connect to any MX host listed
        in DNS, and to match the server certificate against any STS
        policy MX host pattern.

      * The corrected behavior is to connect to an MX host only if
        its name matches any STS policy MX host pattern, and to
        match the server certificate against the MX hostname.

    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.

  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.

Fixes for Postfix 3.10, 3.9, 3.8, 3.7:

  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.

  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.

  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".

  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.

  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.

  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.

Fixes for Postfix 3.10, 3.9, 3.8:

  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.


To generate a diff of this commit:
cvs rdiff -u -r1.58 -r1.59 pkgsrc/mail/postfix/Makefile.common
cvs rdiff -u -r1.217 -r1.218 pkgsrc/mail/postfix/distinfo
cvs rdiff -u -r1.1 -r0 pkgsrc/mail/postfix/patches/patch-src_util_dict__dbm.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/postfix/Makefile.common
diff -u pkgsrc/mail/postfix/Makefile.common:1.58 pkgsrc/mail/postfix/Makefile.common:1.59
--- pkgsrc/mail/postfix/Makefile.common:1.58    Sun Aug 24 22:07:34 2025
+++ pkgsrc/mail/postfix/Makefile.common Mon Nov  3 08:59:18 2025
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile.common,v 1.58 2025/08/24 22:07:34 taca Exp $
+# $NetBSD: Makefile.common,v 1.59 2025/11/03 08:59:18 taca Exp $
 # used by mail/postfix/Makefile
 # used by mail/postfix/Makefile.module
 
-DISTNAME=      postfix-3.10.4
+DISTNAME=      postfix-3.10.5
 CATEGORIES=    mail
 MASTER_SITES=  https://ftp.fu-berlin.de/unix/mail/postfix/official/
 MASTER_SITES+= https://ghostarchive.org/postfix/postfix-release/official/

Index: pkgsrc/mail/postfix/distinfo
diff -u pkgsrc/mail/postfix/distinfo:1.217 pkgsrc/mail/postfix/distinfo:1.218
--- pkgsrc/mail/postfix/distinfo:1.217  Wed Sep 10 15:26:35 2025
+++ pkgsrc/mail/postfix/distinfo        Mon Nov  3 08:59:18 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.217 2025/09/10 15:26:35 jperkin Exp $
+$NetBSD: distinfo,v 1.218 2025/11/03 08:59:18 taca Exp $
 
-BLAKE2s (postfix-3.10.4.tar.gz) = 2fdec417dabeb8cd2536baec5e9a2477264d1792300f5edd0930a758685127ab
-SHA512 (postfix-3.10.4.tar.gz) = da3a581551670ad4aa595ab50a8dd0bbe7d9e93ee354342c778ae1b461aa7bad9a640e4a55e27b025975c47c92f8238c8d281e1ca5bd1579a009d81ce06924d9
-Size (postfix-3.10.4.tar.gz) = 5050100 bytes
+BLAKE2s (postfix-3.10.5.tar.gz) = 126efe2ab87a0e9962f4627298e6930ac7d08c9c2015f5286892e1d923d34321
+SHA512 (postfix-3.10.5.tar.gz) = 3bec6185f1311f9726c5dc3a902f7e7b9a2e80488bf544805118d212bc1e6496668b60414485331dd0fc807dc1714d0bda6a219e710cdd6c56270a33e1aacabc
+Size (postfix-3.10.5.tar.gz) = 5039523 bytes
 SHA1 (patch-aa) = c8216f133e202a7bb37682b0dbc1448f021e7c1c
 SHA1 (patch-ag) = 8ab3cfafa63056f9a7f096da7e55bcccab965180
 SHA1 (patch-ai) = 3d143532e1e9a149c6c06e2efadcd34f6f72e82d
@@ -10,4 +10,3 @@ SHA1 (patch-src_smtpd_Makefile.in) = 813
 SHA1 (patch-src_smtpd_pfilter.c) = c747d2f3584f694eb7b73b19118b4d8b450cfe7f
 SHA1 (patch-src_smtpd_pfilter.h) = 153b516da89d709d293c6086c2f126791bd945d6
 SHA1 (patch-src_smtpd_smtpd.c) = 594211aa17979daa4ca7123fabe5df06250f5093
-SHA1 (patch-src_util_dict__dbm.c) = bbf1b23b6f08feb77161fb279c812a84b5b13417