CVS commit: pkgsrc/mail/postfix

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Sun Aug 24 22:07:34 UTC 2025

Modified Files:
        pkgsrc/mail/postfix: Makefile.common distinfo

Log Message:
mail/postfix: update to 3.10.4

Postfix 3.10.4 (2025-08-19)

Fixes for Postfix 3.10, 3.9, 3.8, 3.7:

  * Fixes for postscreen(8):

      * Bugfix (defect introduced: Postfix 2.2, date 20050203): after
        detecting a lookup table change, and after starting a new
        postscreen process, the old postscreen process logged an ENOTSOCK
        error while attempting to accept a connection on a socket that
        it was no longer listening on. This error was introduced first
        in the multi_server skeleton code, and was five years later
        duplicated in the event_server skeleton that was created for
        postscreen. Problem reported by Florian Piekert.

      * Bugfix (defect introduced: Postfix 2.8, date 20101230):
        after detecting a cache table change and before starting a new
        postscreen process, the old postscreen process did not close the
        postscreen_cache_map, and therefore kept an exclusive lock that
        could prevent a new postscreen process from starting. Problem
        reported by Florian Piekert.

  * Fixes for tlsproxy(8):

      * Bugfix (defect introduced: Postfix 3.7): incorrect backwards
        compatible support for the legacy configuration parameters
        tlsproxy_client_level and tlsproxy_client_policy. This
        disabled the tlsproxy TLS client role when a legacy parameter
        was set (instead of the newer tlsproxy_client_security_level
        or tlsproxy_client_policy_maps). Reported by John Doe,
        diagnosed by Viktor Dukhovni.

      * Bugfix (defect introduced: Postfix 3.4): with the TLS client role
        disabled by configuration, the tlsproxy daemon dereferenced a
        null pointer while handling a tlsproxy client request. Reported by
        John Doe.

  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.

  * Portability: deleted an <openssl/engine.h> build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.

Fixes for Postfix 3.10 only:

  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.

  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern. Fix by Viktor
    Dukhovni.


To generate a diff of this commit:
cvs rdiff -u -r1.57 -r1.58 pkgsrc/mail/postfix/Makefile.common
cvs rdiff -u -r1.215 -r1.216 pkgsrc/mail/postfix/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/postfix/Makefile.common
diff -u pkgsrc/mail/postfix/Makefile.common:1.57 pkgsrc/mail/postfix/Makefile.common:1.58
--- pkgsrc/mail/postfix/Makefile.common:1.57    Sat Jul 26 06:56:45 2025
+++ pkgsrc/mail/postfix/Makefile.common Sun Aug 24 22:07:34 2025
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile.common,v 1.57 2025/07/26 06:56:45 taca Exp $
+# $NetBSD: Makefile.common,v 1.58 2025/08/24 22:07:34 taca Exp $
 # used by mail/postfix/Makefile
 # used by mail/postfix/Makefile.module
 
-DISTNAME=      postfix-3.10.3
+DISTNAME=      postfix-3.10.4
 CATEGORIES=    mail
 MASTER_SITES=  https://ftp.fu-berlin.de/unix/mail/postfix/official/
 MASTER_SITES+= https://ghostarchive.org/postfix/postfix-release/official/

Index: pkgsrc/mail/postfix/distinfo
diff -u pkgsrc/mail/postfix/distinfo:1.215 pkgsrc/mail/postfix/distinfo:1.216
--- pkgsrc/mail/postfix/distinfo:1.215  Sat Jul 26 06:56:45 2025
+++ pkgsrc/mail/postfix/distinfo        Sun Aug 24 22:07:34 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.215 2025/07/26 06:56:45 taca Exp $
+$NetBSD: distinfo,v 1.216 2025/08/24 22:07:34 taca Exp $
 
-BLAKE2s (postfix-3.10.3.tar.gz) = 77c7553d9446843a6d8da71a62181564593d81e3341eeb55d5e316df0c5215df
-SHA512 (postfix-3.10.3.tar.gz) = 457f2d49c0845992b19601fb597422190f7506da5edd66eac1b0387e9adb339a65d3822205b1c4e9243d8f0a9a4108eb7cf11fba6b53f366934caf8cd489157c
-Size (postfix-3.10.3.tar.gz) = 5048719 bytes
+BLAKE2s (postfix-3.10.4.tar.gz) = 2fdec417dabeb8cd2536baec5e9a2477264d1792300f5edd0930a758685127ab
+SHA512 (postfix-3.10.4.tar.gz) = da3a581551670ad4aa595ab50a8dd0bbe7d9e93ee354342c778ae1b461aa7bad9a640e4a55e27b025975c47c92f8238c8d281e1ca5bd1579a009d81ce06924d9
+Size (postfix-3.10.4.tar.gz) = 5050100 bytes
 SHA1 (patch-aa) = c8216f133e202a7bb37682b0dbc1448f021e7c1c
 SHA1 (patch-ag) = 8ab3cfafa63056f9a7f096da7e55bcccab965180
 SHA1 (patch-ai) = 3d143532e1e9a149c6c06e2efadcd34f6f72e82d