CVS commit: pkgsrc/mail/postfix

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Mon Feb 17 15:31:51 UTC 2025

Modified Files:
        pkgsrc/mail/postfix: Makefile.common distinfo

Log Message:
mail/postfix: update to 3.9.2

Postfix 3.9.2 (2025-02-17)

  * Forward compatibility: Support for OpenSSL 3.5 post-quantum
    cryptography. To manage algorithm selection, OpenSSL introduces new
    TLS group syntax that Postfix will not attempt to imitate. Instead,
    Postfix now allows the tls_eecdh_auto_curves and tls_ffdhe_auto_groups
    parameter values to have an empty value. When both are set
    empty, the algorithm selection can be managed through OpenSSL
    configuration. Viktor Dukhovni.

  * Forward compatibility: ignore new queue file flag bits that may be
    used with Postfix 3.10 and later. This is a safety in case a Postfix
    3.10 upgrade needs to be rolled back, after the new TLS-Required
    feature has been used.

  * Performance: when a mysql: or pgsql: configuration specifies a single
    host, assume that it is a load balancer and reconnect immediately
    after a single failure, instead of failing all requests for 60s.

  * Bugfix (defect introduced: Postfix 3.4, date 20181113): a server with
    multiple TLS certificates could report, for a resumed TLS session,
    the wrong server-signature and server-digest names in logging and
    Received: message headers. Viktor Dukhovni.

  * Bugfix (defect introduced: Postfix 3.3, date 20180107) small memory
    leak in the cleanup daemon when generating a "From: full-name "
    message header. The impact is limited because the number of requests
    is bounded by the "max_use" configuration parameter. Found during
    code maintenance.

  * Bugfix (defect introduced: Postfix 3.0): the bounce daemon mangled
    a non-ASCII address localpart in the "X-Postfix-Sender:" field of
    a delivery status notification. It backslash-escaped each byte in a
    multi-byte character. This behavior was implemented in Postfix 2.1
    (no support for UTF8 local-parts), but it became incorrect after
    SMTPUTF8 support was implemented in Postfix 3.0.

  * Bugfix (defect introduced: Postfix 3.6): Reverted the default
    smtp_tls_dane_insecure_mx_policy setting to "dane" as of Postfix
    3.6.17, 3.7.13, 3.8.8, 3.9.2, and 3.10.0. By mistake the default was
    dependent on the smtp_tls_security_level setting. Problem reported
    by ?mer G?ven.

  * Portability: added "include <sys_socket.h>" for a SUNOS5
    workaround. Gary R. Schmidt.


To generate a diff of this commit:
cvs rdiff -u -r1.49 -r1.50 pkgsrc/mail/postfix/Makefile.common
cvs rdiff -u -r1.210 -r1.211 pkgsrc/mail/postfix/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/postfix/Makefile.common
diff -u pkgsrc/mail/postfix/Makefile.common:1.49 pkgsrc/mail/postfix/Makefile.common:1.50
--- pkgsrc/mail/postfix/Makefile.common:1.49    Sat Dec  7 06:08:57 2024
+++ pkgsrc/mail/postfix/Makefile.common Mon Feb 17 15:31:51 2025
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile.common,v 1.49 2024/12/07 06:08:57 taca Exp $
+# $NetBSD: Makefile.common,v 1.50 2025/02/17 15:31:51 taca Exp $
 # used by mail/postfix/Makefile
 # used by mail/postfix/Makefile.module
 
-DISTNAME=      postfix-3.9.1
+DISTNAME=      postfix-3.9.2
 CATEGORIES=    mail
 MASTER_SITES=  ftp://ftp.porcupine.org/mirrors/postfix-release/official/
 

Index: pkgsrc/mail/postfix/distinfo
diff -u pkgsrc/mail/postfix/distinfo:1.210 pkgsrc/mail/postfix/distinfo:1.211
--- pkgsrc/mail/postfix/distinfo:1.210  Sat Dec  7 06:08:57 2024
+++ pkgsrc/mail/postfix/distinfo        Mon Feb 17 15:31:51 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.210 2024/12/07 06:08:57 taca Exp $
+$NetBSD: distinfo,v 1.211 2025/02/17 15:31:51 taca Exp $
 
-BLAKE2s (postfix-3.9.1.tar.gz) = 7cd2667399dbe796958aecfda285121d87deb22d5f6845affd6cd961ae517429
-SHA512 (postfix-3.9.1.tar.gz) = 79109d9f19e51d9089a0f2b5c6134972148a6e1a7e385aabc79c0a32e09c78715ad94a93ae3eca1171b770c62d6bf3b8e079b94183ae851001db1a0cf21fff15
-Size (postfix-3.9.1.tar.gz) = 4953855 bytes
+BLAKE2s (postfix-3.9.2.tar.gz) = e588e2a98a98198633649a4f1d198a31a954203f47f0ebe8a7886dcb4ab00780
+SHA512 (postfix-3.9.2.tar.gz) = 14154077bd474283e522c427d9e45b3599be0c748c0bd2131309fcc506162e8522669a230c1a35bb467a5216d7e99c3d9685fc8f581232cd12e9337ea48d1981
+Size (postfix-3.9.2.tar.gz) = 4956185 bytes
 SHA1 (patch-aa) = c8216f133e202a7bb37682b0dbc1448f021e7c1c
 SHA1 (patch-ag) = 8ab3cfafa63056f9a7f096da7e55bcccab965180
 SHA1 (patch-ai) = 3d143532e1e9a149c6c06e2efadcd34f6f72e82d