CVS commit: [pkgsrc-2026Q2] pkgsrc/mail/postfix

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Thu Jul 16 14:10:13 UTC 2026

Modified Files:
        pkgsrc/mail/postfix [pkgsrc-2026Q2]: Makefile Makefile.common distinfo

Log Message:
Pullup ticket #7174 - requested by taca
mail/postfix: Security fix

Revisions pulled up:
- mail/postfix/Makefile                                         1.358
- mail/postfix/Makefile.common                                  1.66-1.67
- mail/postfix/distinfo                                         1.225-1.226

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sat Jul  4 04:13:48 UTC 2026

   Modified Files:
        pkgsrc/mail/postfix: Makefile Makefile.common distinfo

   Log Message:
   mail/postfix: update to 3.11.4

   Postfix 3.11.4 (2026-06-17)

   This release addresses five low-impact problems that need to be addressed as
   they can reduce safety margins.

   * Bug 1 (defect introduced: Postfix 3.1, date 20150607): null pointer read
     and heap data overread in the Postfix SMTP client's smtp_dns_reply_filter.
     Problem reported by TristanInSec, found with ASAN.  Also reported by other
     people.  Reproduction and real-world impact researched by Wietse.

   * Bug 2 (defect introduced: Postfix 3.6, date: 20200710): panic (assertion
     failure and voluntary crash) while parsing a TLSA reply with length 3.
     Found during code maintenance.  See below for root cause, reproduction,
     and impact.

   * Bug 3 (Problem introduced: Postfix 2.9, date: 20110205) Robustness: the
     Postfix SMTP server will no longer receive (and discard) an unlimited
     amount of text while receiving a long SMTP command line.  Problem reported
     by Michael Wollner (Ibonok).  Under high load conditions, the amount of
     text was already limited by a 10-second deadline to receive an SMTP
     command.

   * Bug 4 Robustness: with the above change the Postfix SMTP client will no
     longer receive (and discard) an unlimited amount of text while receiving a
     long SMTP response line.

   * Bug 5 (Problem introduced: Postfix 3.4, date: 20180825) Robustness: do not
     receive (and discard) unlimited amounts of data with BDAT
     commands. Problem found during code maintenance. File: smtpd/smtpd.c.

   For more detail, pleare refer
   <https://www.postfix.org/announcements/postfix-3.11.4.html>.

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Tue Jul  7 13:48:07 UTC 2026

   Modified Files:
        pkgsrc/mail/postfix: Makefile.common distinfo

   Log Message:
   mail/postfix: update to 3.11.5

   3.11.5 (2026-07-06)

   This release addresses medium-impact problems that need to be fixed
   as some enable remote DOS, or local memory corruption.

   For more detail, please refer:
   <https://www.postfix.org/announcements/postfix-3.11.5.html>.


To generate a diff of this commit:
cvs rdiff -u -r1.357 -r1.357.2.1 pkgsrc/mail/postfix/Makefile
cvs rdiff -u -r1.65 -r1.65.2.1 pkgsrc/mail/postfix/Makefile.common
cvs rdiff -u -r1.224 -r1.224.2.1 pkgsrc/mail/postfix/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/postfix/Makefile
diff -u pkgsrc/mail/postfix/Makefile:1.357 pkgsrc/mail/postfix/Makefile:1.357.2.1
--- pkgsrc/mail/postfix/Makefile:1.357  Thu May 21 15:14:20 2026
+++ pkgsrc/mail/postfix/Makefile        Thu Jul 16 14:10:12 2026
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.357 2026/05/21 15:14:20 jakllsch Exp $
+# $NetBSD: Makefile,v 1.357.2.1 2026/07/16 14:10:12 maya Exp $
 
-PKGREVISION=   1
 .include "../../mail/postfix/Makefile.common"
 
 COMMENT=       Fast, easy to administer, and secure mail transfer agent

Index: pkgsrc/mail/postfix/Makefile.common
diff -u pkgsrc/mail/postfix/Makefile.common:1.65 pkgsrc/mail/postfix/Makefile.common:1.65.2.1
--- pkgsrc/mail/postfix/Makefile.common:1.65    Sun May 17 15:03:51 2026
+++ pkgsrc/mail/postfix/Makefile.common Thu Jul 16 14:10:12 2026
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile.common,v 1.65 2026/05/17 15:03:51 taca Exp $
+# $NetBSD: Makefile.common,v 1.65.2.1 2026/07/16 14:10:12 maya Exp $
 # used by mail/postfix/Makefile
 # used by mail/postfix/Makefile.module
 
-DISTNAME=      postfix-3.11.3
+DISTNAME=      postfix-3.11.5
 CATEGORIES=    mail
 MASTER_SITES=  https://ftp.fu-berlin.de/unix/mail/postfix/official/
 MASTER_SITES+= https://ghostarchive.org/postfix/postfix-release/official/

Index: pkgsrc/mail/postfix/distinfo
diff -u pkgsrc/mail/postfix/distinfo:1.224 pkgsrc/mail/postfix/distinfo:1.224.2.1
--- pkgsrc/mail/postfix/distinfo:1.224  Sun May 17 15:03:51 2026
+++ pkgsrc/mail/postfix/distinfo        Thu Jul 16 14:10:12 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.224 2026/05/17 15:03:51 taca Exp $
+$NetBSD: distinfo,v 1.224.2.1 2026/07/16 14:10:12 maya Exp $
 
-BLAKE2s (postfix-3.11.3.tar.gz) = 819d0c19bd00aad6ccae54ad02cc761281cda47b49137e7e61930c7a8d3e3919
-SHA512 (postfix-3.11.3.tar.gz) = d1293c209a7033309975308991a2efa4f077bc7eb93b50a560ea714ea6280ada3726f5266c6b58926a326fda5a0fa68b486b543de092432ac9025dd424d24dd3
-Size (postfix-3.11.3.tar.gz) = 5282523 bytes
+BLAKE2s (postfix-3.11.5.tar.gz) = dbe5d6943b1c8635445fca40793759f068b01135e18896977b0d15f9f58bbaf0
+SHA512 (postfix-3.11.5.tar.gz) = af9d3678844afcbdf77c228e29138255a935c63988c3b8dff31bb2a66315f376d94d782b5545829e1491c6a1335172ad194b7f8fd02038db35cd6527cff82087
+Size (postfix-3.11.5.tar.gz) = 5287872 bytes
 SHA1 (patch-aa) = c8216f133e202a7bb37682b0dbc1448f021e7c1c
 SHA1 (patch-ag) = 5b6f0e82ce8202d76043130392c4c76737b155d7
 SHA1 (patch-ai) = 765faa3f959ab0669055d3742a2a2cfc3b454235