New version

Resolves: rhbz#2255641
Fixed SMTP smuggling vulnerability
  Resolves: CVE-2023-51764

postfix-3.7.9-large-fs.patch

@@ -21,10 +21,10 @@ index 50a4aa7..beef3db 100644
      if (msg_verbose)
  	msg_info("%s: %s: block size %lu, blocks free %lu",
 diff --git a/src/util/sys_defs.h b/src/util/sys_defs.h
-index c9ebc33..f2be0e2 100644
+index aec8d8a..aff8d44 100644
 --- a/src/util/sys_defs.h
 +++ b/src/util/sys_defs.h
-@@ -771,8 +771,8 @@ extern int initgroups(const char *, int);
+@@ -772,8 +772,8 @@ extern int initgroups(const char *, int);
  #define GETTIMEOFDAY(t)	gettimeofday(t,(struct timezone *) 0)
  #define ROOT_PATH	"/bin:/usr/bin:/sbin:/usr/sbin"
  #define FIONREAD_IN_TERMIOS_H

postfix.service

@@ -11,7 +11,7 @@ PrivateTmp=true
 CapabilityBoundingSet=~ CAP_NET_ADMIN CAP_SYS_ADMIN CAP_SYS_BOOT CAP_SYS_MODULE
 ProtectSystem=true
 PrivateDevices=true
-ExecStartPre=-/usr/sbin/restorecon -R /var/spool/postfix/pid/master.pid
+ExecStartPre=-/usr/sbin/restorecon -R /var/spool/postfix/pid
 ExecStartPre=-/usr/libexec/postfix/aliasesdb
 ExecStartPre=-/usr/libexec/postfix/chroot-update
 ExecStart=/usr/sbin/postfix start

postfix.spec

@@ -48,7 +48,7 @@
 
 Name: postfix
 Summary: Postfix Mail Transport Agent
-Version: 3.7.4
+Version: 3.7.9
 Release: 1%{?dist}
 Epoch: 2
 URL: http://www.postfix.org
@@ -92,7 +92,7 @@ Source101: postfix-pam.conf
 Patch1: postfix-3.7.0-config.patch
 Patch2: postfix-3.4.0-files.patch
 Patch3: postfix-3.3.3-alternatives.patch
-Patch4: postfix-3.7.0-large-fs.patch
+Patch4: postfix-3.7.9-large-fs.patch
 Patch9: pflogsumm-1.1.5-datecalc.patch
 # rhbz#1384871, sent upstream
 Patch10: pflogsumm-1.1.5-ipv6-warnings-fix.patch
@@ -101,6 +101,8 @@ Patch11: postfix-3.4.4-chroot-example-fix.patch
 Patch12: postfix-3.7.0-whitespace-name-fix.patch
 # rhbz#1931403, sent upstream
 Patch13: pflogsumm-1.1.5-syslog-name-underscore-fix.patch
+# backported feature from upstream
+Patch14: postfix-3.7.9-SRV-resolve.patch
 
 # Optional patches - set the appropriate environment variables to include
 #                    them when building the package/spec file
@@ -253,6 +255,7 @@ popd
 %patch11 -p1 -b .chroot-example-fix
 %patch12 -p1 -b .whitespace-name-fix
 %patch13 -p1 -b .pflogsumm-1.1.5-syslog-name-underscore-fix
+%patch14 -p1 -b .SRV
 
 # Backport 3.8-20221006 fix for uname -r detection
 sed -i makedefs -e '\@Linux\.@s|345|3456|'
@@ -806,6 +809,19 @@ fi
 %endif
 
 %changelog
+* Tue Jan  2 2024 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.7.9-1
+- New version
+  Resolves: rhbz#2255641
+- Fixed SMTP smuggling vulnerability
+  Resolves: CVE-2023-51764
+
+* Tue Jul 11 2023 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.7.4-3
+- Fixed possible warning when postfix is restarted
+  Resolves: rhbz#2218058
+
+* Thu Jun 08 2023 Tomas Korbar <tkorbar@redhat.com> - 2:3.7.4-2
+- Backport SRV resolution from 3.8.0 release
+
 * Wed Jan 25 2023 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.7.4-1
 - New version
   Resolves: rhbz#2162932

sources

@@ -1,2 +1,2 @@
+SHA512 (postfix-3.7.9.tar.gz) = a529a2ee3e7623e258ffb7b5d8708253ec55b616a87a83f8e3200e37fff939f8cb23ee65e7c685d71aeacd3deb3f19d343a616be2fec2eaee912dd8cf0cd6a7a
 SHA512 (pflogsumm-1.1.5.tar.gz) = 994d660692dfea38a1dd9866d15f15035657e85131c1f5a2cd82baa5bd4ad987a00939cb5233f316d2090014c52ae68ef20db0c893f8634969484e0e74678f4d
-SHA512 (postfix-3.7.4.tar.gz) = 972738291b960c90fe83861d55b1288900416167adb353418956e69bcc709a6daf84fbfde11d573eebba030654d27abc8d55f90661a2b880ccfb3a334064c236