CVS commit: pkgsrc/mail/postfix

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Sat Jul  4 04:13:48 UTC 2026

Modified Files:
        pkgsrc/mail/postfix: Makefile Makefile.common distinfo

Log Message:
mail/postfix: update to 3.11.4

Postfix 3.11.4 (2026-06-17)

This release addresses five low-impact problems that need to be addressed as
they can reduce safety margins.

* Bug 1 (defect introduced: Postfix 3.1, date 20150607): null pointer read
  and heap data overread in the Postfix SMTP client's smtp_dns_reply_filter.
  Problem reported by TristanInSec, found with ASAN.  Also reported by other
  people.  Reproduction and real-world impact researched by Wietse.

* Bug 2 (defect introduced: Postfix 3.6, date: 20200710): panic (assertion
  failure and voluntary crash) while parsing a TLSA reply with length 3.
  Found during code maintenance.  See below for root cause, reproduction,
  and impact.

* Bug 3 (Problem introduced: Postfix 2.9, date: 20110205) Robustness: the
  Postfix SMTP server will no longer receive (and discard) an unlimited
  amount of text while receiving a long SMTP command line.  Problem reported
  by Michael Wollner (Ibonok).  Under high load conditions, the amount of
  text was already limited by a 10-second deadline to receive an SMTP
  command.

* Bug 4 Robustness: with the above change the Postfix SMTP client will no
  longer receive (and discard) an unlimited amount of text while receiving a
  long SMTP response line.

* Bug 5 (Problem introduced: Postfix 3.4, date: 20180825) Robustness: do not
  receive (and discard) unlimited amounts of data with BDAT
  commands. Problem found during code maintenance. File: smtpd/smtpd.c.

For more detail, pleare refer
<https://www.postfix.org/announcements/postfix-3.11.4.html>.


To generate a diff of this commit:
cvs rdiff -u -r1.357 -r1.358 pkgsrc/mail/postfix/Makefile
cvs rdiff -u -r1.65 -r1.66 pkgsrc/mail/postfix/Makefile.common
cvs rdiff -u -r1.224 -r1.225 pkgsrc/mail/postfix/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/postfix/Makefile
diff -u pkgsrc/mail/postfix/Makefile:1.357 pkgsrc/mail/postfix/Makefile:1.358
--- pkgsrc/mail/postfix/Makefile:1.357  Thu May 21 15:14:20 2026
+++ pkgsrc/mail/postfix/Makefile        Sat Jul  4 04:13:48 2026
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.357 2026/05/21 15:14:20 jakllsch Exp $
+# $NetBSD: Makefile,v 1.358 2026/07/04 04:13:48 taca Exp $
 
-PKGREVISION=   1
 .include "../../mail/postfix/Makefile.common"
 
 COMMENT=       Fast, easy to administer, and secure mail transfer agent

Index: pkgsrc/mail/postfix/Makefile.common
diff -u pkgsrc/mail/postfix/Makefile.common:1.65 pkgsrc/mail/postfix/Makefile.common:1.66
--- pkgsrc/mail/postfix/Makefile.common:1.65    Sun May 17 15:03:51 2026
+++ pkgsrc/mail/postfix/Makefile.common Sat Jul  4 04:13:48 2026
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile.common,v 1.65 2026/05/17 15:03:51 taca Exp $
+# $NetBSD: Makefile.common,v 1.66 2026/07/04 04:13:48 taca Exp $
 # used by mail/postfix/Makefile
 # used by mail/postfix/Makefile.module
 
-DISTNAME=      postfix-3.11.3
+DISTNAME=      postfix-3.11.4
 CATEGORIES=    mail
 MASTER_SITES=  https://ftp.fu-berlin.de/unix/mail/postfix/official/
 MASTER_SITES+= https://ghostarchive.org/postfix/postfix-release/official/

Index: pkgsrc/mail/postfix/distinfo
diff -u pkgsrc/mail/postfix/distinfo:1.224 pkgsrc/mail/postfix/distinfo:1.225
--- pkgsrc/mail/postfix/distinfo:1.224  Sun May 17 15:03:51 2026
+++ pkgsrc/mail/postfix/distinfo        Sat Jul  4 04:13:48 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.224 2026/05/17 15:03:51 taca Exp $
+$NetBSD: distinfo,v 1.225 2026/07/04 04:13:48 taca Exp $
 
-BLAKE2s (postfix-3.11.3.tar.gz) = 819d0c19bd00aad6ccae54ad02cc761281cda47b49137e7e61930c7a8d3e3919
-SHA512 (postfix-3.11.3.tar.gz) = d1293c209a7033309975308991a2efa4f077bc7eb93b50a560ea714ea6280ada3726f5266c6b58926a326fda5a0fa68b486b543de092432ac9025dd424d24dd3
-Size (postfix-3.11.3.tar.gz) = 5282523 bytes
+BLAKE2s (postfix-3.11.4.tar.gz) = cd76bfcfc96b0d4a4b96b943408d8d9733e33fa6f80b76c2a43bd7af8126894c
+SHA512 (postfix-3.11.4.tar.gz) = 0ff931861ab250bccff6a9592115b8991980c33574db14af9e5d1e1e42d896be41a5b1a38e41ce4f6b5cec236df37581ae52bd37a2810443e1ba17bbeb2bfaab
+Size (postfix-3.11.4.tar.gz) = 5285318 bytes
 SHA1 (patch-aa) = c8216f133e202a7bb37682b0dbc1448f021e7c1c
 SHA1 (patch-ag) = 5b6f0e82ce8202d76043130392c4c76737b155d7
 SHA1 (patch-ai) = 765faa3f959ab0669055d3742a2a2cfc3b454235