diff --git a/postfix-3.10.13-linux-7-fix.patch b/postfix-3.10.13-linux-7-fix.patch deleted file mode 100644 index 6f8e1d3..0000000 --- a/postfix-3.10.13-linux-7-fix.patch +++ /dev/null @@ -1,26 +0,0 @@ -diff --git a/makedefs b/makedefs -index 186a3b9..d6a2eb8 100644 ---- a/makedefs -+++ b/makedefs -@@ -682,7 +682,7 @@ EOF - : ${SHLIB_ENV="LD_LIBRARY_PATH=`pwd`/lib"} - : ${PLUGIN_LD="${CC-gcc} -shared"} - ;; -- Linux.[3456].*) -+ Linux.[34567].*) - SYSTYPE=LINUX$RELEASE_MAJOR - case "$CCARGS" in - *-DNO_DB*) ;; -diff --git a/src/util/sys_defs.h b/src/util/sys_defs.h -index 3c1e93c..a6a2808 100644 ---- a/src/util/sys_defs.h -+++ b/src/util/sys_defs.h -@@ -764,7 +764,7 @@ extern int initgroups(const char *, int); - * LINUX. - */ - #if defined(LINUX2) || defined(LINUX3) || defined(LINUX4) || defined(LINUX5) \ -- || defined(LINUX6) -+ || defined(LINUX6) || defined(LINUX7) - #define SUPPORTED - #define UINT32_TYPE unsigned int - #define UINT16_TYPE unsigned short diff --git a/postfix-3.9.0-files.patch b/postfix-3.11.0-files.patch similarity index 90% rename from postfix-3.9.0-files.patch rename to postfix-3.11.0-files.patch index 03ae645..f9174da 100644 --- a/postfix-3.9.0-files.patch +++ b/postfix-3.11.0-files.patch @@ -1,5 +1,5 @@ diff --git a/conf/postfix-files b/conf/postfix-files -index 5a93982..b843fec 100644 +index 88c3371..873a124 100644 --- a/conf/postfix-files +++ b/conf/postfix-files @@ -84,7 +84,6 @@ $shlib_directory/${LIB_PREFIX}sqlite${LIB_SUFFIX}:f:root:-:755 @@ -10,7 +10,7 @@ index 5a93982..b843fec 100644 $meta_directory/master.cf.proto:f:root:-:644 $meta_directory/postfix-files.d:d:root:-:755 $meta_directory/postfix-files:f:root:-:644 -@@ -142,18 +141,13 @@ $command_directory/postqueue:f:root:$setgid_group:2755:u +@@ -144,18 +143,13 @@ $command_directory/postqueue:f:root:$setgid_group:2755:u $sendmail_path:f:root:-:755 $newaliases_path:l:$sendmail_path $mailq_path:l:$sendmail_path @@ -29,7 +29,7 @@ index 5a93982..b843fec 100644 $config_directory/main.cf:f:root:-:644:p $config_directory/master.cf:f:root:-:644:p $config_directory/pcre_table:f:root:-:644:o -@@ -166,8 +160,8 @@ $config_directory/postfix-script:f:root:-:755:o +@@ -168,8 +162,8 @@ $config_directory/postfix-script:f:root:-:755:o $config_directory/postfix-script-sgid:f:root:-:755:o $config_directory/postfix-script-nosgid:f:root:-:755:o $config_directory/post-install:f:root:-:755:o @@ -40,7 +40,7 @@ index 5a93982..b843fec 100644 $manpage_directory/man1/postalias.1:f:root:-:644 $manpage_directory/man1/postcat.1:f:root:-:644 $manpage_directory/man1/postconf.1:f:root:-:644 -@@ -181,9 +175,9 @@ $manpage_directory/man1/postmap.1:f:root:-:644 +@@ -184,9 +178,9 @@ $manpage_directory/man1/postmap.1:f:root:-:644 $manpage_directory/man1/postmulti.1:f:root:-:644 $manpage_directory/man1/postqueue.1:f:root:-:644 $manpage_directory/man1/postsuper.1:f:root:-:644 @@ -52,7 +52,7 @@ index 5a93982..b843fec 100644 $manpage_directory/man5/body_checks.5:f:root:-:644 $manpage_directory/man5/bounce.5:f:root:-:644 $manpage_directory/man5/canonical.5:f:root:-:644 -@@ -231,8 +225,8 @@ $manpage_directory/man8/qmgr.8:f:root:-:644 +@@ -235,8 +229,8 @@ $manpage_directory/man8/qmgr.8:f:root:-:644 $manpage_directory/man8/qmqpd.8:f:root:-:644 $manpage_directory/man8/scache.8:f:root:-:644 $manpage_directory/man8/showq.8:f:root:-:644 diff --git a/postfix-3.10.7-config.patch b/postfix-3.11.1-config.patch similarity index 96% rename from postfix-3.10.7-config.patch rename to postfix-3.11.1-config.patch index 16356c0..1ab0eab 100644 --- a/postfix-3.10.7-config.patch +++ b/postfix-3.11.1-config.patch @@ -1,5 +1,5 @@ diff --git a/conf/main.cf b/conf/main.cf -index 3687c85..ae3af9e 100644 +index f61060e..fb218b8 100644 --- a/conf/main.cf +++ b/conf/main.cf @@ -136,6 +136,10 @@ mail_owner = postfix @@ -81,14 +81,11 @@ index 3687c85..ae3af9e 100644 #fallback_transport = # The luser_relay parameter specifies an optional destination address -@@ -682,6 +705,37 @@ sample_directory = - # readme_directory: The location of the Postfix README files. - # - readme_directory = --inet_protocols = ipv4 - shlib_directory = /usr/lib/postfix/${mail_version} +@@ -691,4 +714,34 @@ shlib_directory = + # between multiple Postfix instances. meta_directory = /etc/postfix -+ + +-inet_protocols = ipv4 +# TLS CONFIGURATION +# +# Basic Postfix TLS configuration by default with self-signed certificate diff --git a/postfix-3.10.10-large-fs.patch b/postfix-3.11.2-large-fs.patch similarity index 97% rename from postfix-3.10.10-large-fs.patch rename to postfix-3.11.2-large-fs.patch index 77897ac..9eec3b2 100644 --- a/postfix-3.10.10-large-fs.patch +++ b/postfix-3.11.2-large-fs.patch @@ -21,7 +21,7 @@ index 50a4aa7..beef3db 100644 if (msg_verbose) msg_info("%s: %s: block size %lu, blocks free %lu", diff --git a/src/util/sys_defs.h b/src/util/sys_defs.h -index 22f174e..dc8868a 100644 +index 113a4c1..d317afc 100644 --- a/src/util/sys_defs.h +++ b/src/util/sys_defs.h @@ -784,8 +784,8 @@ extern int initgroups(const char *, int); diff --git a/postfix.service b/postfix.service index 1016ac3..d8ce880 100644 --- a/postfix.service +++ b/postfix.service @@ -11,12 +11,16 @@ PrivateTmp=true CapabilityBoundingSet=~ CAP_NET_ADMIN CAP_SYS_ADMIN CAP_SYS_BOOT CAP_SYS_MODULE ProtectSystem=true PrivateDevices=true -ExecStartPre=-/usr/sbin/restorecon -R /var/spool/postfix/pid -ExecStartPre=-/usr/libexec/postfix/aliasesdb -ExecStartPre=-/usr/libexec/postfix/chroot-update -ExecStart=/usr/sbin/postfix start -ExecReload=/usr/sbin/postfix reload -ExecStop=/usr/sbin/postfix stop +ExecStartPre=!-/usr/sbin/restorecon -R /var/spool/postfix/pid +ExecStartPre=!-/usr/libexec/postfix/aliasesdb +ExecStartPre=!-/usr/libexec/postfix/chroot-update +ExecStart=!/usr/sbin/postfix start +ExecReload=!/usr/sbin/postfix reload +ExecStop=!/usr/sbin/postfix stop +User=postfix +Group=root +StateDirectory=postfix +StateDirectoryMode=0700 [Install] WantedBy=multi-user.target diff --git a/postfix.spec b/postfix.spec index 1c443d1..3d07bcf 100644 --- a/postfix.spec +++ b/postfix.spec @@ -56,7 +56,7 @@ Name: postfix Summary: Postfix Mail Transport Agent -Version: 3.10.14 +Version: 3.11.7 Release: 1%{?dist} Epoch: 2 URL: http://www.postfix.org @@ -81,6 +81,7 @@ Source3: README-Postfix-SASL-RedHat.txt Source4: postfix.aliasesdb Source5: postfix-chroot-update Source6: postfix.sysusers +Source7: postfix.tmpfiles # Sources 50-99 are upstream [patch] contributions @@ -96,12 +97,11 @@ Source101: postfix-pam.conf # Patches -Patch1: postfix-3.10.7-config.patch -Patch2: postfix-3.9.0-files.patch +Patch1: postfix-3.11.1-config.patch +Patch2: postfix-3.11.0-files.patch Patch3: postfix-3.9.0-alternatives.patch # probably rhbz#428996 -Patch4: postfix-3.10.10-large-fs.patch -Patch5: postfix-3.10.13-linux-7-fix.patch +Patch4: postfix-3.11.2-large-fs.patch # rhbz#1931403, sent upstream Patch9: pflogsumm-1.1.6-syslog-name-underscore-fix.patch Patch11: postfix-3.4.4-chroot-example-fix.patch @@ -264,7 +264,6 @@ maps with Postfix, you need this. %patch -P2 -p1 -b .files %patch -P3 -p1 -b .alternatives %patch -P4 -p1 -b .large-fs -%patch -P5 -p1 -b .linux-7-fix # Change DEF_SHLIB_DIR according to build host sed -i \ @@ -294,6 +293,7 @@ done sed -i '/^\s*alias_database\s*=\s*hash:\/etc\/aliases/ s|hash:|lmdb:|g' conf/main.cf echo >> conf/main.cf echo "default_database_type = lmdb" >> conf/main.cf + echo "default_cache_db_type = lmdb" >> conf/main.cf %endif %build @@ -379,6 +379,9 @@ make -f Makefile.init makefiles shared=yes dynamicmaps=yes \ AUXLIBS_CDB="${AUXLIBS_CDB}" \ DEBUG="" SHLIB_RPATH="-Wl,-rpath,%{postfix_shlib_dir} $LDFLAGS" \ OPT="$CFLAGS -fno-strict-aliasing -Wno-comment" \ +%if 0%{?defmap_lmdb} + default_database_type=lmdb default_cache_db_type=lmdb \ +%endif POSTFIX_INSTALL_OPTS=-keep-build-mtime %make_build @@ -426,6 +429,9 @@ install -m 755 %{SOURCE5} %{buildroot}%{postfix_daemon_dir}/chroot-update # systemd-sysusers install -p -D -m 0644 %{SOURCE6} %{buildroot}%{_sysusersdir}/postfix.conf +# systemd-tmpfiles +install -p -D -m 0644 %{SOURCE7} %{buildroot}%{_tmpfilesdir}/postfix.conf + install -c auxiliary/rmail/rmail $RPM_BUILD_ROOT%{_bindir}/rmail.postfix for i in active bounce corrupt defer deferred flush incoming private saved maildrop public pid saved trace; do @@ -646,6 +652,7 @@ fi %config(noreplace) %{sasl_config_dir}/smtpd.conf %endif %config(noreplace) %{_sysconfdir}/pam.d/smtp.postfix +%{_tmpfilesdir}/postfix.conf %{_unitdir}/postfix.service # Documentation @@ -674,23 +681,23 @@ fi %dir %attr(0755, root, root) %{postfix_config_dir} %dir %attr(0755, root, root) %{postfix_daemon_dir} -%dir %attr(0755, root, root) %{postfix_queue_dir} +%ghost %dir %attr(0755, root, root) %{postfix_queue_dir} %dir %attr(0755, root, root) %{postfix_shlib_dir} -%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/active -%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/bounce -%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/corrupt -%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/defer -%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/deferred -%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/flush -%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/hold -%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/incoming -%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/saved -%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/trace -%dir %attr(0730, %{postfix_user}, %{maildrop_group}) %{postfix_queue_dir}/maildrop -%dir %attr(0755, root, root) %{postfix_queue_dir}/pid -%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/private -%dir %attr(0710, %{postfix_user}, %{maildrop_group}) %{postfix_queue_dir}/public -%dir %attr(0700, %{postfix_user}, root) %{postfix_data_dir} +%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/active +%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/bounce +%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/corrupt +%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/defer +%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/deferred +%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/flush +%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/hold +%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/incoming +%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/saved +%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/trace +%ghost %dir %attr(0730, %{postfix_user}, %{maildrop_group}) %{postfix_queue_dir}/maildrop +%ghost %dir %attr(0755, root, root) %{postfix_queue_dir}/pid +%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/private +%ghost %dir %attr(0710, %{postfix_user}, %{maildrop_group}) %{postfix_queue_dir}/public +%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_data_dir} %dir %attr(0755, root, root) %{postfix_config_dir}/dynamicmaps.cf.d %dir %attr(0755, root, root) %{postfix_config_dir}/postfix-files.d @@ -739,6 +746,7 @@ fi %attr(0755, root, root) %{postfix_daemon_dir}/pipe %attr(0755, root, root) %{postfix_daemon_dir}/post-install %attr(0644, root, root) %{postfix_config_dir}/postfix-files +%attr(0755, root, root) %{postfix_daemon_dir}/postfix-non-bdb-script %attr(0755, root, root) %{postfix_daemon_dir}/postfix-script %attr(0755, root, root) %{postfix_daemon_dir}/postfix-tls-script %attr(0755, root, root) %{postfix_daemon_dir}/postfix-wrapper @@ -851,22 +859,61 @@ fi %endif %changelog -* Tue Sep 08 2026 Jaroslav Škarvada - 2:3.10.14-1 +* Tue Sep 08 2026 Jaroslav Škarvada - 2:3.11.7-1 - New version - Related: rhbz#2529649 + Resolves: rhbz#2529649 -* Mon Aug 17 2026 Jaroslav Škarvada - 2:3.10.13-1 +* Mon Aug 17 2026 Jaroslav Škarvada - 2:3.11.6-1 - New version Resolves: rhbz#2513537 -* Mon May 18 2026 Jaroslav Škarvada - 2:3.10.10-1 -- New version - Resolves: CVE-2026-43964 +* Thu Jul 16 2026 Fedora Release Engineering - 2:3.11.5-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -* Tue May 05 2026 Jaroslav Škarvada - 2:3.10.7-4 +* Wed Jul 08 2026 Jaroslav Škarvada - 2:3.11.5-1 +- New version + Resolves: rhbz#2497445 + +* Mon Jun 22 2026 Jaroslav Škarvada - 2:3.11.4-1 +- New version + Resolves: rhbz#2490220 + +* Wed Jun 17 2026 Yaakov Selkowitz - 2:3.11.3-5 +- Rebuilt for openssl 4.0 + +* Wed Jun 17 2026 Jaroslav Škarvada - 2:3.11.3-4 +- Used workarounds for /var to support Image mode + +* Fri Jun 12 2026 Yaakov Selkowitz - 2:3.11.3-3 +- Rebuilt for openssl 4.0 + +* Mon Jun 08 2026 František Zatloukal - 2:3.11.3-2 +- Rebuilt for icu 78.3 + +* Mon May 18 2026 Jaroslav Škarvada - 2:3.11.3-1 +- New version + Resolves: rhbz#2478103 + +* Mon May 04 2026 Jaroslav Škarvada - 2:3.11.2-1 +- New version + Resolves: rhbz#2464614 + +* Mon Apr 13 2026 Jaroslav Škarvada - 2:3.11.1-2 - Fixed default TLS config to work with the removed ca-bundle.crt Resolves: rhbz#2447292 +* Mon Apr 13 2026 Jaroslav Škarvada - 2:3.11.1-1 +- New version + Resolves: rhbz#2446390 + +* Tue Mar 10 2026 Jaroslav Škarvada - 2:3.11.0-1 +- New version + Resolves: rhbz#2444870 + +* Thu Feb 19 2026 Jaroslav Škarvada - 2:3.10.8-1 +- New version + Resolves: rhbz#2440818 + * Mon Jan 26 2026 Fedor Vorobev - 2:3.10.7-3 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-128018 diff --git a/postfix.tmpfiles b/postfix.tmpfiles new file mode 100644 index 0000000..567af18 --- /dev/null +++ b/postfix.tmpfiles @@ -0,0 +1,16 @@ +# postfix spool +d /var/spool/postfix 0755 root root - +d /var/spool/postfix/active 0700 postfix root - +d /var/spool/postfix/bounce 0700 postfix root - +d /var/spool/postfix/corrupt 0700 postfix root - +d /var/spool/postfix/defer 0700 postfix root - +d /var/spool/postfix/deferred 0700 postfix root - +d /var/spool/postfix/flush 0700 postfix root - +d /var/spool/postfix/hold 0700 postfix root - +d /var/spool/postfix/incoming 0700 postfix root - +d /var/spool/postfix/saved 0700 postfix root - +d /var/spool/postfix/trace 0700 postfix root - +d /var/spool/postfix/maildrop 0730 postfix postdrop - +d /var/spool/postfix/pid 0755 root root - +d /var/spool/postfix/private 0700 postfix root - +d /var/spool/postfix/public 0710 postfix postdrop - diff --git a/sources b/sources index c10708d..00b0f60 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (postfix-3.10.14.tar.gz) = 91c854ba9831afb986ed5572d55425b1eeb1695902f3ae1b6385c7955d737f9498151fcac02cab236053e3a9bafc18ce0144575b770b0f9e4c73802131879776 +SHA512 (postfix-3.11.7.tar.gz) = 3b4ef7562a24bbab1d0ca361ac0af1037aa3d4ae65a7c825711de9d5d3ed88975aad63cb09991717de334f4382c29039b527a3e8d4e65c5a6d35efd3e782910f SHA512 (pflogsumm-1.1.6.tar.gz) = 4581d2120bc17cfb322fda8d293989a2754eb9fa2696e3a1cea9032e85ed6a566e75aea1f628a6c7bbc7b9d6bf47ffeb873f95d71d7cb7f0ee46e27e492cf630