From c75863e34b7ff39c4bff5a07187f7e617d680864 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jaroslav=20=C5=A0karvada?= Date: Tue, 5 May 2026 18:20:45 +0200 Subject: [PATCH 1/5] Fixed default TLS config to work with the removed ca-bundle.crt Resolves: rhbz#2447292 --- ...fix-3.10.5-config.patch => postfix-3.10.7-config.patch | 8 +------- postfix.spec | 8 ++++++-- 2 files changed, 7 insertions(+), 9 deletions(-) rename postfix-3.10.5-config.patch => postfix-3.10.7-config.patch (95%) diff --git a/postfix-3.10.5-config.patch b/postfix-3.10.7-config.patch similarity index 95% rename from postfix-3.10.5-config.patch rename to postfix-3.10.7-config.patch index c09a76d..16356c0 100644 --- a/postfix-3.10.5-config.patch +++ b/postfix-3.10.7-config.patch @@ -81,7 +81,7 @@ index 3687c85..ae3af9e 100644 #fallback_transport = # The luser_relay parameter specifies an optional destination address -@@ -682,6 +705,43 @@ sample_directory = +@@ -682,6 +705,37 @@ sample_directory = # readme_directory: The location of the Postfix README files. # readme_directory = @@ -116,12 +116,6 @@ index 3687c85..ae3af9e 100644 +# +smtp_tls_CApath = /etc/pki/tls/certs + -+# The full pathname of a file containing CA certificates of root CAs -+# trusted to sign either remote SMTP server certificates or intermediate CA -+# certificates. -+# -+smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt -+ +# Use TLS if this is supported by the remote SMTP server, otherwise use +# plaintext (opportunistic TLS outbound). +# diff --git a/postfix.spec b/postfix.spec index ac88719..140c3bd 100644 --- a/postfix.spec +++ b/postfix.spec @@ -57,7 +57,7 @@ Name: postfix Summary: Postfix Mail Transport Agent Version: 3.10.7 -Release: 3%{?dist} +Release: 4%{?dist} Epoch: 2 URL: http://www.postfix.org License: (IPL-1.0 OR EPL-2.0) AND GPL-2.0-or-later AND BSD-4-Clause-UC @@ -96,7 +96,7 @@ Source101: postfix-pam.conf # Patches -Patch1: postfix-3.10.5-config.patch +Patch1: postfix-3.10.7-config.patch Patch2: postfix-3.9.0-files.patch Patch3: postfix-3.9.0-alternatives.patch # probably rhbz#428996 @@ -853,6 +853,10 @@ fi %endif %changelog +* Tue May 05 2026 Jaroslav Škarvada - 2:3.10.7-4 +- Fixed default TLS config to work with the removed ca-bundle.crt + Resolves: rhbz#2447292 + * Mon Jan 26 2026 Fedor Vorobev - 2:3.10.7-3 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-128018 From 5817449c672ae86c66bac0d8f22ab991aa4c8789 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jaroslav=20=C5=A0karvada?= Date: Mon, 18 May 2026 20:16:21 +0200 Subject: [PATCH 2/5] New version Resolves: CVE-2026-43964 --- ....0-large-fs.patch => postfix-3.10.10-large-fs.patch | 4 ++-- postfix.spec | 10 +++++++--- sources | 2 +- 3 files changed, 10 insertions(+), 6 deletions(-) rename postfix-3.8.0-large-fs.patch => postfix-3.10.10-large-fs.patch (92%) diff --git a/postfix-3.8.0-large-fs.patch b/postfix-3.10.10-large-fs.patch similarity index 92% rename from postfix-3.8.0-large-fs.patch rename to postfix-3.10.10-large-fs.patch index b0c7933..77897ac 100644 --- a/postfix-3.8.0-large-fs.patch +++ b/postfix-3.10.10-large-fs.patch @@ -21,10 +21,10 @@ index 50a4aa7..beef3db 100644 if (msg_verbose) msg_info("%s: %s: block size %lu, blocks free %lu", diff --git a/src/util/sys_defs.h b/src/util/sys_defs.h -index 1fb449d..bcaac27 100644 +index 22f174e..dc8868a 100644 --- a/src/util/sys_defs.h +++ b/src/util/sys_defs.h -@@ -783,8 +783,8 @@ extern int initgroups(const char *, int); +@@ -784,8 +784,8 @@ extern int initgroups(const char *, int); #define GETTIMEOFDAY(t) gettimeofday(t,(struct timezone *) 0) #define ROOT_PATH "/bin:/usr/bin:/sbin:/usr/sbin" #define FIONREAD_IN_TERMIOS_H diff --git a/postfix.spec b/postfix.spec index 140c3bd..80672b6 100644 --- a/postfix.spec +++ b/postfix.spec @@ -56,8 +56,8 @@ Name: postfix Summary: Postfix Mail Transport Agent -Version: 3.10.7 -Release: 4%{?dist} +Version: 3.10.10 +Release: 1%{?dist} Epoch: 2 URL: http://www.postfix.org License: (IPL-1.0 OR EPL-2.0) AND GPL-2.0-or-later AND BSD-4-Clause-UC @@ -100,7 +100,7 @@ Patch1: postfix-3.10.7-config.patch Patch2: postfix-3.9.0-files.patch Patch3: postfix-3.9.0-alternatives.patch # probably rhbz#428996 -Patch4: postfix-3.8.0-large-fs.patch +Patch4: postfix-3.10.10-large-fs.patch # rhbz#1931403, sent upstream Patch9: pflogsumm-1.1.6-syslog-name-underscore-fix.patch Patch11: postfix-3.4.4-chroot-example-fix.patch @@ -853,6 +853,10 @@ fi %endif %changelog +* Mon May 18 2026 Jaroslav Škarvada - 2:3.10.10-1 +- New version + Resolves: CVE-2026-43964 + * Tue May 05 2026 Jaroslav Škarvada - 2:3.10.7-4 - Fixed default TLS config to work with the removed ca-bundle.crt Resolves: rhbz#2447292 diff --git a/sources b/sources index 195284e..2dec362 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ SHA512 (pflogsumm-1.1.6.tar.gz) = 4581d2120bc17cfb322fda8d293989a2754eb9fa2696e3a1cea9032e85ed6a566e75aea1f628a6c7bbc7b9d6bf47ffeb873f95d71d7cb7f0ee46e27e492cf630 -SHA512 (postfix-3.10.7.tar.gz) = 28d7c05bfd6fb15f906c67cca989c4b47640ec631b640943deb66d91e44a6684deb79af95f0d4ba4dd362d9ba59179e5ed268942384e5e35ba472c91cf366e4c +SHA512 (postfix-3.10.10.tar.gz) = 25d08769a1917a91721220cbf2ad518694f65182e550b77e663b27810428981c7955946eb96a439534098e77c52433e3984b484d2d7381128aa93630263106f5 From 7aafe05c32c09928412b0b8cbbd9975b7ff04fa3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jaroslav=20=C5=A0karvada?= Date: Mon, 17 Aug 2026 19:51:28 +0200 Subject: [PATCH 3/5] New version Resolves: rhbz#2513537 --- postfix.spec | 6 +++++- sources | 2 +- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/postfix.spec b/postfix.spec index 80672b6..b3ee0fa 100644 --- a/postfix.spec +++ b/postfix.spec @@ -56,7 +56,7 @@ Name: postfix Summary: Postfix Mail Transport Agent -Version: 3.10.10 +Version: 3.10.13 Release: 1%{?dist} Epoch: 2 URL: http://www.postfix.org @@ -853,6 +853,10 @@ fi %endif %changelog +* Mon Aug 17 2026 Jaroslav Škarvada - 2:3.10.13-1 +- New version + Resolves: rhbz#2513537 + * Mon May 18 2026 Jaroslav Škarvada - 2:3.10.10-1 - New version Resolves: CVE-2026-43964 diff --git a/sources b/sources index 2dec362..736f372 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ SHA512 (pflogsumm-1.1.6.tar.gz) = 4581d2120bc17cfb322fda8d293989a2754eb9fa2696e3a1cea9032e85ed6a566e75aea1f628a6c7bbc7b9d6bf47ffeb873f95d71d7cb7f0ee46e27e492cf630 -SHA512 (postfix-3.10.10.tar.gz) = 25d08769a1917a91721220cbf2ad518694f65182e550b77e663b27810428981c7955946eb96a439534098e77c52433e3984b484d2d7381128aa93630263106f5 +SHA512 (postfix-3.10.13.tar.gz) = d03d6ebcfd907201825bf294cda8eb0816ffdafee0e1c94a8e5a557a72468bd8f73ee13691f33895a37925ace8f0782723ab8937c41a3ff852757d06508c7f00 From 9bdd5f554b1731b1ebcb46a7bf36f446f0d22a57 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jaroslav=20=C5=A0karvada?= Date: Mon, 17 Aug 2026 20:33:53 +0200 Subject: [PATCH 4/5] New version Resolves: rhbz#2513537 --- postfix-3.10.13-linux-7-fix.patch | 26 ++++++++++++++++++++++++++ postfix.spec | 6 ++---- 2 files changed, 28 insertions(+), 4 deletions(-) create mode 100644 postfix-3.10.13-linux-7-fix.patch diff --git a/postfix-3.10.13-linux-7-fix.patch b/postfix-3.10.13-linux-7-fix.patch new file mode 100644 index 0000000..6f8e1d3 --- /dev/null +++ b/postfix-3.10.13-linux-7-fix.patch @@ -0,0 +1,26 @@ +diff --git a/makedefs b/makedefs +index 186a3b9..d6a2eb8 100644 +--- a/makedefs ++++ b/makedefs +@@ -682,7 +682,7 @@ EOF + : ${SHLIB_ENV="LD_LIBRARY_PATH=`pwd`/lib"} + : ${PLUGIN_LD="${CC-gcc} -shared"} + ;; +- Linux.[3456].*) ++ Linux.[34567].*) + SYSTYPE=LINUX$RELEASE_MAJOR + case "$CCARGS" in + *-DNO_DB*) ;; +diff --git a/src/util/sys_defs.h b/src/util/sys_defs.h +index 3c1e93c..a6a2808 100644 +--- a/src/util/sys_defs.h ++++ b/src/util/sys_defs.h +@@ -764,7 +764,7 @@ extern int initgroups(const char *, int); + * LINUX. + */ + #if defined(LINUX2) || defined(LINUX3) || defined(LINUX4) || defined(LINUX5) \ +- || defined(LINUX6) ++ || defined(LINUX6) || defined(LINUX7) + #define SUPPORTED + #define UINT32_TYPE unsigned int + #define UINT16_TYPE unsigned short diff --git a/postfix.spec b/postfix.spec index b3ee0fa..26c25c0 100644 --- a/postfix.spec +++ b/postfix.spec @@ -101,6 +101,7 @@ Patch2: postfix-3.9.0-files.patch Patch3: postfix-3.9.0-alternatives.patch # probably rhbz#428996 Patch4: postfix-3.10.10-large-fs.patch +Patch5: postfix-3.10.13-linux-7-fix.patch # rhbz#1931403, sent upstream Patch9: pflogsumm-1.1.6-syslog-name-underscore-fix.patch Patch11: postfix-3.4.4-chroot-example-fix.patch @@ -263,6 +264,7 @@ maps with Postfix, you need this. %patch -P2 -p1 -b .files %patch -P3 -p1 -b .alternatives %patch -P4 -p1 -b .large-fs +%patch -P5 -p1 -b .linux-7-fix # Change DEF_SHLIB_DIR according to build host sed -i \ @@ -281,10 +283,6 @@ popd %patch -P12 -p1 -b .warning %endif -# Backport 3.8-20221006 fix for uname -r detection -sed -i makedefs -e '\@Linux\.@s|345|3456|' -sed -i src/util/sys_defs.h -e 's@defined(LINUX5)@defined(LINUX5) || defined(LINUX6)@' - for f in README_FILES/TLS_{LEGACY_,}README TLS_ACKNOWLEDGEMENTS; do iconv -f iso8859-1 -t utf8 -o ${f}{_,} && touch -r ${f}{,_} && mv -f ${f}{_,} From 1ad0eab5231a891636063db935b1f527fa2eba72 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jaroslav=20=C5=A0karvada?= Date: Tue, 8 Sep 2026 17:44:59 +0200 Subject: [PATCH 5/5] New version Related: rhbz#2529649 --- postfix.spec | 6 +++++- sources | 2 +- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/postfix.spec b/postfix.spec index 26c25c0..1c443d1 100644 --- a/postfix.spec +++ b/postfix.spec @@ -56,7 +56,7 @@ Name: postfix Summary: Postfix Mail Transport Agent -Version: 3.10.13 +Version: 3.10.14 Release: 1%{?dist} Epoch: 2 URL: http://www.postfix.org @@ -851,6 +851,10 @@ fi %endif %changelog +* Tue Sep 08 2026 Jaroslav Škarvada - 2:3.10.14-1 +- New version + Related: rhbz#2529649 + * Mon Aug 17 2026 Jaroslav Škarvada - 2:3.10.13-1 - New version Resolves: rhbz#2513537 diff --git a/sources b/sources index 736f372..c10708d 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ +SHA512 (postfix-3.10.14.tar.gz) = 91c854ba9831afb986ed5572d55425b1eeb1695902f3ae1b6385c7955d737f9498151fcac02cab236053e3a9bafc18ce0144575b770b0f9e4c73802131879776 SHA512 (pflogsumm-1.1.6.tar.gz) = 4581d2120bc17cfb322fda8d293989a2754eb9fa2696e3a1cea9032e85ed6a566e75aea1f628a6c7bbc7b9d6bf47ffeb873f95d71d7cb7f0ee46e27e492cf630 -SHA512 (postfix-3.10.13.tar.gz) = d03d6ebcfd907201825bf294cda8eb0816ffdafee0e1c94a8e5a557a72468bd8f73ee13691f33895a37925ace8f0782723ab8937c41a3ff852757d06508c7f00