New version

Resolves: rhbz#2529649

postfix-3.11.0-files.patch

@@ -1,5 +1,5 @@
 diff --git a/conf/postfix-files b/conf/postfix-files
-index 5a93982..b843fec 100644
+index 88c3371..873a124 100644
 --- a/conf/postfix-files
 +++ b/conf/postfix-files
 @@ -84,7 +84,6 @@ $shlib_directory/${LIB_PREFIX}sqlite${LIB_SUFFIX}:f:root:-:755
@@ -10,7 +10,7 @@ index 5a93982..b843fec 100644
  $meta_directory/master.cf.proto:f:root:-:644
  $meta_directory/postfix-files.d:d:root:-:755
  $meta_directory/postfix-files:f:root:-:644
-@@ -142,18 +141,13 @@ $command_directory/postqueue:f:root:$setgid_group:2755:u
+@@ -144,18 +143,13 @@ $command_directory/postqueue:f:root:$setgid_group:2755:u
  $sendmail_path:f:root:-:755
  $newaliases_path:l:$sendmail_path
  $mailq_path:l:$sendmail_path
@@ -29,7 +29,7 @@ index 5a93982..b843fec 100644
  $config_directory/main.cf:f:root:-:644:p
  $config_directory/master.cf:f:root:-:644:p
  $config_directory/pcre_table:f:root:-:644:o
-@@ -166,8 +160,8 @@ $config_directory/postfix-script:f:root:-:755:o
+@@ -168,8 +162,8 @@ $config_directory/postfix-script:f:root:-:755:o
  $config_directory/postfix-script-sgid:f:root:-:755:o
  $config_directory/postfix-script-nosgid:f:root:-:755:o
  $config_directory/post-install:f:root:-:755:o
@@ -40,7 +40,7 @@ index 5a93982..b843fec 100644
  $manpage_directory/man1/postalias.1:f:root:-:644
  $manpage_directory/man1/postcat.1:f:root:-:644
  $manpage_directory/man1/postconf.1:f:root:-:644
-@@ -181,9 +175,9 @@ $manpage_directory/man1/postmap.1:f:root:-:644
+@@ -184,9 +178,9 @@ $manpage_directory/man1/postmap.1:f:root:-:644
  $manpage_directory/man1/postmulti.1:f:root:-:644
  $manpage_directory/man1/postqueue.1:f:root:-:644
  $manpage_directory/man1/postsuper.1:f:root:-:644
@@ -52,7 +52,7 @@ index 5a93982..b843fec 100644
  $manpage_directory/man5/body_checks.5:f:root:-:644
  $manpage_directory/man5/bounce.5:f:root:-:644
  $manpage_directory/man5/canonical.5:f:root:-:644
-@@ -231,8 +225,8 @@ $manpage_directory/man8/qmgr.8:f:root:-:644
+@@ -235,8 +229,8 @@ $manpage_directory/man8/qmgr.8:f:root:-:644
  $manpage_directory/man8/qmqpd.8:f:root:-:644
  $manpage_directory/man8/scache.8:f:root:-:644
  $manpage_directory/man8/showq.8:f:root:-:644

postfix-3.11.1-config.patch

@@ -1,5 +1,5 @@
 diff --git a/conf/main.cf b/conf/main.cf
-index 3687c85..ae3af9e 100644
+index f61060e..fb218b8 100644
 --- a/conf/main.cf
 +++ b/conf/main.cf
 @@ -136,6 +136,10 @@ mail_owner = postfix
@@ -81,14 +81,11 @@ index 3687c85..ae3af9e 100644
  #fallback_transport =
  
  # The luser_relay parameter specifies an optional destination address
-@@ -682,6 +705,43 @@ sample_directory =
+@@ -691,4 +714,34 @@ shlib_directory =
- # readme_directory: The location of the Postfix README files.
+ # between multiple Postfix instances.
- #
- readme_directory =
--inet_protocols = ipv4
- shlib_directory = /usr/lib/postfix/${mail_version}
  meta_directory = /etc/postfix
-+
+ 
+-inet_protocols = ipv4
 +# TLS CONFIGURATION
 +#
 +# Basic Postfix TLS configuration by default with self-signed certificate
@@ -116,12 +113,6 @@ index 3687c85..ae3af9e 100644
 +#
 +smtp_tls_CApath = /etc/pki/tls/certs
 +
-+# The full pathname of a file containing CA certificates of root CAs
-+# trusted to sign either remote SMTP server certificates or intermediate CA
-+# certificates.
-+#
-+smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
-+
 +# Use TLS if this is supported by the remote SMTP server, otherwise use
 +# plaintext (opportunistic TLS outbound).
 +#

postfix-3.11.2-large-fs.patch

@@ -21,10 +21,10 @@ index 50a4aa7..beef3db 100644
      if (msg_verbose)
  	msg_info("%s: %s: block size %lu, blocks free %lu",
 diff --git a/src/util/sys_defs.h b/src/util/sys_defs.h
-index 1fb449d..bcaac27 100644
+index 113a4c1..d317afc 100644
 --- a/src/util/sys_defs.h
 +++ b/src/util/sys_defs.h
-@@ -783,8 +783,8 @@ extern int initgroups(const char *, int);
+@@ -784,8 +784,8 @@ extern int initgroups(const char *, int);
  #define GETTIMEOFDAY(t)	gettimeofday(t,(struct timezone *) 0)
  #define ROOT_PATH	"/bin:/usr/bin:/sbin:/usr/sbin"
  #define FIONREAD_IN_TERMIOS_H

postfix.service

@@ -11,12 +11,16 @@ PrivateTmp=true
 CapabilityBoundingSet=~ CAP_NET_ADMIN CAP_SYS_ADMIN CAP_SYS_BOOT CAP_SYS_MODULE
 ProtectSystem=true
 PrivateDevices=true
-ExecStartPre=-/usr/sbin/restorecon -R /var/spool/postfix/pid
+ExecStartPre=!-/usr/sbin/restorecon -R /var/spool/postfix/pid
-ExecStartPre=-/usr/libexec/postfix/aliasesdb
+ExecStartPre=!-/usr/libexec/postfix/aliasesdb
-ExecStartPre=-/usr/libexec/postfix/chroot-update
+ExecStartPre=!-/usr/libexec/postfix/chroot-update
-ExecStart=/usr/sbin/postfix start
+ExecStart=!/usr/sbin/postfix start
-ExecReload=/usr/sbin/postfix reload
+ExecReload=!/usr/sbin/postfix reload
-ExecStop=/usr/sbin/postfix stop
+ExecStop=!/usr/sbin/postfix stop
+User=postfix
+Group=root
+StateDirectory=postfix
+StateDirectoryMode=0700
 
 [Install]
 WantedBy=multi-user.target

postfix.spec

@@ -56,8 +56,8 @@
 
 Name: postfix
 Summary: Postfix Mail Transport Agent
-Version: 3.10.7
+Version: 3.11.7
-Release: 3%{?dist}
+Release: 1%{?dist}
 Epoch: 2
 URL: http://www.postfix.org
 License: (IPL-1.0 OR EPL-2.0) AND GPL-2.0-or-later AND BSD-4-Clause-UC
@@ -81,6 +81,7 @@ Source3: README-Postfix-SASL-RedHat.txt
 Source4: postfix.aliasesdb
 Source5: postfix-chroot-update
 Source6: postfix.sysusers
+Source7: postfix.tmpfiles
 
 # Sources 50-99 are upstream [patch] contributions
 
@@ -96,11 +97,11 @@ Source101: postfix-pam.conf
 
 # Patches
 
-Patch1: postfix-3.10.5-config.patch
+Patch1: postfix-3.11.1-config.patch
-Patch2: postfix-3.9.0-files.patch
+Patch2: postfix-3.11.0-files.patch
 Patch3: postfix-3.9.0-alternatives.patch
 # probably rhbz#428996
-Patch4: postfix-3.8.0-large-fs.patch
+Patch4: postfix-3.11.2-large-fs.patch
 # rhbz#1931403, sent upstream
 Patch9: pflogsumm-1.1.6-syslog-name-underscore-fix.patch
 Patch11: postfix-3.4.4-chroot-example-fix.patch
@@ -281,10 +282,6 @@ popd
 %patch -P12 -p1 -b .warning
 %endif
 
-# Backport 3.8-20221006 fix for uname -r detection
-sed -i makedefs -e '\@Linux\.@s|345|3456|'
-sed -i src/util/sys_defs.h -e 's@defined(LINUX5)@defined(LINUX5) || defined(LINUX6)@'
-
 for f in README_FILES/TLS_{LEGACY_,}README TLS_ACKNOWLEDGEMENTS; do
 	iconv -f iso8859-1 -t utf8 -o ${f}{_,} &&
 		touch -r ${f}{,_} && mv -f ${f}{_,}
@@ -296,6 +293,7 @@ done
   sed -i '/^\s*alias_database\s*=\s*hash:\/etc\/aliases/ s|hash:|lmdb:|g' conf/main.cf
   echo >> conf/main.cf
   echo "default_database_type = lmdb" >> conf/main.cf
+  echo "default_cache_db_type = lmdb" >> conf/main.cf
 %endif
 
 %build
@@ -381,6 +379,9 @@ make -f Makefile.init makefiles shared=yes dynamicmaps=yes \
   AUXLIBS_CDB="${AUXLIBS_CDB}" \
   DEBUG="" SHLIB_RPATH="-Wl,-rpath,%{postfix_shlib_dir} $LDFLAGS" \
   OPT="$CFLAGS -fno-strict-aliasing -Wno-comment" \
+%if 0%{?defmap_lmdb}
+  default_database_type=lmdb default_cache_db_type=lmdb \
+%endif
   POSTFIX_INSTALL_OPTS=-keep-build-mtime
 
 %make_build
@@ -428,6 +429,9 @@ install -m 755 %{SOURCE5} %{buildroot}%{postfix_daemon_dir}/chroot-update
 # systemd-sysusers
 install -p -D -m 0644 %{SOURCE6} %{buildroot}%{_sysusersdir}/postfix.conf
 
+# systemd-tmpfiles
+install -p -D -m 0644 %{SOURCE7} %{buildroot}%{_tmpfilesdir}/postfix.conf
+
 install -c auxiliary/rmail/rmail $RPM_BUILD_ROOT%{_bindir}/rmail.postfix
 
 for i in active bounce corrupt defer deferred flush incoming private saved maildrop public pid saved trace; do
@@ -648,6 +652,7 @@ fi
 %config(noreplace) %{sasl_config_dir}/smtpd.conf
 %endif
 %config(noreplace) %{_sysconfdir}/pam.d/smtp.postfix
+%{_tmpfilesdir}/postfix.conf
 %{_unitdir}/postfix.service
 
 # Documentation
@@ -676,23 +681,23 @@ fi
 
 %dir %attr(0755, root, root) %{postfix_config_dir}
 %dir %attr(0755, root, root) %{postfix_daemon_dir}
-%dir %attr(0755, root, root) %{postfix_queue_dir}
+%ghost %dir %attr(0755, root, root) %{postfix_queue_dir}
 %dir %attr(0755, root, root) %{postfix_shlib_dir}
-%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/active
+%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/active
-%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/bounce
+%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/bounce
-%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/corrupt
+%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/corrupt
-%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/defer
+%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/defer
-%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/deferred
+%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/deferred
-%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/flush
+%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/flush
-%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/hold
+%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/hold
-%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/incoming
+%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/incoming
-%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/saved
+%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/saved
-%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/trace
+%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/trace
-%dir %attr(0730, %{postfix_user}, %{maildrop_group}) %{postfix_queue_dir}/maildrop
+%ghost %dir %attr(0730, %{postfix_user}, %{maildrop_group}) %{postfix_queue_dir}/maildrop
-%dir %attr(0755, root, root) %{postfix_queue_dir}/pid
+%ghost %dir %attr(0755, root, root) %{postfix_queue_dir}/pid
-%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/private
+%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/private
-%dir %attr(0710, %{postfix_user}, %{maildrop_group}) %{postfix_queue_dir}/public
+%ghost %dir %attr(0710, %{postfix_user}, %{maildrop_group}) %{postfix_queue_dir}/public
-%dir %attr(0700, %{postfix_user}, root) %{postfix_data_dir}
+%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_data_dir}
 %dir %attr(0755, root, root) %{postfix_config_dir}/dynamicmaps.cf.d
 %dir %attr(0755, root, root) %{postfix_config_dir}/postfix-files.d
 
@@ -741,6 +746,7 @@ fi
 %attr(0755, root, root) %{postfix_daemon_dir}/pipe
 %attr(0755, root, root) %{postfix_daemon_dir}/post-install
 %attr(0644, root, root) %{postfix_config_dir}/postfix-files
+%attr(0755, root, root) %{postfix_daemon_dir}/postfix-non-bdb-script
 %attr(0755, root, root) %{postfix_daemon_dir}/postfix-script
 %attr(0755, root, root) %{postfix_daemon_dir}/postfix-tls-script
 %attr(0755, root, root) %{postfix_daemon_dir}/postfix-wrapper
@@ -853,6 +859,61 @@ fi
 %endif
 
 %changelog
+* Tue Sep 08 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.7-1
+- New version
+  Resolves: rhbz#2529649
+
+* Mon Aug 17 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.6-1
+- New version
+  Resolves: rhbz#2513537
+
+* Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 2:3.11.5-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
+
+* Wed Jul 08 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.5-1
+- New version
+  Resolves: rhbz#2497445
+
+* Mon Jun 22 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.4-1
+- New version
+  Resolves: rhbz#2490220
+
+* Wed Jun 17 2026 Yaakov Selkowitz <yselkowi@redhat.com> - 2:3.11.3-5
+- Rebuilt for openssl 4.0
+
+* Wed Jun 17 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.3-4
+- Used workarounds for /var to support Image mode
+
+* Fri Jun 12 2026 Yaakov Selkowitz <yselkowi@redhat.com> - 2:3.11.3-3
+- Rebuilt for openssl 4.0
+
+* Mon Jun 08 2026 František Zatloukal <fzatlouk@redhat.com> - 2:3.11.3-2
+- Rebuilt for icu 78.3
+
+* Mon May 18 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.3-1
+- New version
+  Resolves: rhbz#2478103
+
+* Mon May 04 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.2-1
+- New version
+  Resolves: rhbz#2464614
+
+* Mon Apr 13 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.1-2
+- Fixed default TLS config to work with the removed ca-bundle.crt
+  Resolves: rhbz#2447292
+
+* Mon Apr 13 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.1-1
+- New version
+  Resolves: rhbz#2446390
+
+* Tue Mar 10 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.0-1
+- New version
+  Resolves: rhbz#2444870
+
+* Thu Feb 19 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.8-1
+- New version
+  Resolves: rhbz#2440818
+
 * Mon Jan 26 2026 Fedor Vorobev <fvorobev@redhat.com> - 2:3.10.7-3
 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
   Resolves: RHEL-128018

postfix.tmpfiles

@@ -0,0 +1,16 @@
+# postfix spool
+d /var/spool/postfix 0755 root root -
+d /var/spool/postfix/active 0700 postfix root -
+d /var/spool/postfix/bounce 0700 postfix root -
+d /var/spool/postfix/corrupt 0700 postfix root -
+d /var/spool/postfix/defer 0700 postfix root -
+d /var/spool/postfix/deferred 0700 postfix root -
+d /var/spool/postfix/flush 0700 postfix root -
+d /var/spool/postfix/hold 0700 postfix root -
+d /var/spool/postfix/incoming 0700 postfix root -
+d /var/spool/postfix/saved 0700 postfix root -
+d /var/spool/postfix/trace 0700 postfix root -
+d /var/spool/postfix/maildrop 0730 postfix postdrop -
+d /var/spool/postfix/pid 0755 root root -
+d /var/spool/postfix/private 0700 postfix root -
+d /var/spool/postfix/public 0710 postfix postdrop -

sources

@@ -1,2 +1,2 @@
+SHA512 (postfix-3.11.7.tar.gz) = 3b4ef7562a24bbab1d0ca361ac0af1037aa3d4ae65a7c825711de9d5d3ed88975aad63cb09991717de334f4382c29039b527a3e8d4e65c5a6d35efd3e782910f
 SHA512 (pflogsumm-1.1.6.tar.gz) = 4581d2120bc17cfb322fda8d293989a2754eb9fa2696e3a1cea9032e85ed6a566e75aea1f628a6c7bbc7b9d6bf47ffeb873f95d71d7cb7f0ee46e27e492cf630
-SHA512 (postfix-3.10.7.tar.gz) = 28d7c05bfd6fb15f906c67cca989c4b47640ec631b640943deb66d91e44a6684deb79af95f0d4ba4dd362d9ba59179e5ed268942384e5e35ba472c91cf366e4c