New version

Related: rhbz#2529649

postfix-3.10.10-large-fs.patch

@@ -21,10 +21,10 @@ index 50a4aa7..beef3db 100644
      if (msg_verbose)
  	msg_info("%s: %s: block size %lu, blocks free %lu",
 diff --git a/src/util/sys_defs.h b/src/util/sys_defs.h
-index 1fb449d..bcaac27 100644
+index 22f174e..dc8868a 100644
 --- a/src/util/sys_defs.h
 +++ b/src/util/sys_defs.h
-@@ -783,8 +783,8 @@ extern int initgroups(const char *, int);
+@@ -784,8 +784,8 @@ extern int initgroups(const char *, int);
  #define GETTIMEOFDAY(t)	gettimeofday(t,(struct timezone *) 0)
  #define ROOT_PATH	"/bin:/usr/bin:/sbin:/usr/sbin"
  #define FIONREAD_IN_TERMIOS_H

postfix-3.10.13-linux-7-fix.patch

@@ -0,0 +1,26 @@
+diff --git a/makedefs b/makedefs
+index 186a3b9..d6a2eb8 100644
+--- a/makedefs
++++ b/makedefs
+@@ -682,7 +682,7 @@ EOF
+ 		: ${SHLIB_ENV="LD_LIBRARY_PATH=`pwd`/lib"}
+ 		: ${PLUGIN_LD="${CC-gcc} -shared"}
+ 		;;
+-    Linux.[3456].*)
++    Linux.[34567].*)
+ 		SYSTYPE=LINUX$RELEASE_MAJOR
+ 		case "$CCARGS" in
+ 		 *-DNO_DB*) ;;
+diff --git a/src/util/sys_defs.h b/src/util/sys_defs.h
+index 3c1e93c..a6a2808 100644
+--- a/src/util/sys_defs.h
++++ b/src/util/sys_defs.h
+@@ -764,7 +764,7 @@ extern int initgroups(const char *, int);
+   * LINUX.
+   */
+ #if defined(LINUX2) || defined(LINUX3) || defined(LINUX4) || defined(LINUX5) \
+-	|| defined(LINUX6)
++	|| defined(LINUX6) || defined(LINUX7)
+ #define SUPPORTED
+ #define UINT32_TYPE	unsigned int
+ #define UINT16_TYPE	unsigned short

postfix-3.10.7-config.patch

@@ -81,7 +81,7 @@ index 3687c85..ae3af9e 100644
  #fallback_transport =
  
  # The luser_relay parameter specifies an optional destination address
-@@ -682,6 +705,43 @@ sample_directory =
+@@ -682,6 +705,37 @@ sample_directory =
  # readme_directory: The location of the Postfix README files.
  #
  readme_directory =
@@ -116,12 +116,6 @@ index 3687c85..ae3af9e 100644
 +#
 +smtp_tls_CApath = /etc/pki/tls/certs
 +
-+# The full pathname of a file containing CA certificates of root CAs
-+# trusted to sign either remote SMTP server certificates or intermediate CA
-+# certificates.
-+#
-+smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
-+
 +# Use TLS if this is supported by the remote SMTP server, otherwise use
 +# plaintext (opportunistic TLS outbound).
 +#

postfix.spec

@@ -56,8 +56,8 @@
 
 Name: postfix
 Summary: Postfix Mail Transport Agent
-Version: 3.10.7
-Release: 3%{?dist}
+Version: 3.10.14
+Release: 1%{?dist}
 Epoch: 2
 URL: http://www.postfix.org
 License: (IPL-1.0 OR EPL-2.0) AND GPL-2.0-or-later AND BSD-4-Clause-UC
@@ -96,11 +96,12 @@ Source101: postfix-pam.conf
 
 # Patches
 
-Patch1: postfix-3.10.5-config.patch
+Patch1: postfix-3.10.7-config.patch
 Patch2: postfix-3.9.0-files.patch
 Patch3: postfix-3.9.0-alternatives.patch
 # probably rhbz#428996
-Patch4: postfix-3.8.0-large-fs.patch
+Patch4: postfix-3.10.10-large-fs.patch
+Patch5: postfix-3.10.13-linux-7-fix.patch
 # rhbz#1931403, sent upstream
 Patch9: pflogsumm-1.1.6-syslog-name-underscore-fix.patch
 Patch11: postfix-3.4.4-chroot-example-fix.patch
@@ -263,6 +264,7 @@ maps with Postfix, you need this.
 %patch -P2 -p1 -b .files
 %patch -P3 -p1 -b .alternatives
 %patch -P4 -p1 -b .large-fs
+%patch -P5 -p1 -b .linux-7-fix
 
 # Change DEF_SHLIB_DIR according to build host
 sed -i \
@@ -281,10 +283,6 @@ popd
 %patch -P12 -p1 -b .warning
 %endif
 
-# Backport 3.8-20221006 fix for uname -r detection
-sed -i makedefs -e '\@Linux\.@s|345|3456|'
-sed -i src/util/sys_defs.h -e 's@defined(LINUX5)@defined(LINUX5) || defined(LINUX6)@'
-
 for f in README_FILES/TLS_{LEGACY_,}README TLS_ACKNOWLEDGEMENTS; do
 	iconv -f iso8859-1 -t utf8 -o ${f}{_,} &&
 		touch -r ${f}{,_} && mv -f ${f}{_,}
@@ -853,6 +851,22 @@ fi
 %endif
 
 %changelog
+* Tue Sep 08 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.14-1
+- New version
+  Related: rhbz#2529649
+
+* Mon Aug 17 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.13-1
+- New version
+  Resolves: rhbz#2513537
+
+* Mon May 18 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.10-1
+- New version
+  Resolves: CVE-2026-43964
+
+* Tue May 05 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.7-4
+- Fixed default TLS config to work with the removed ca-bundle.crt
+  Resolves: rhbz#2447292
+
 * Mon Jan 26 2026 Fedor Vorobev <fvorobev@redhat.com> - 2:3.10.7-3
 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
   Resolves: RHEL-128018

sources

@@ -1,2 +1,2 @@
+SHA512 (postfix-3.10.14.tar.gz) = 91c854ba9831afb986ed5572d55425b1eeb1695902f3ae1b6385c7955d737f9498151fcac02cab236053e3a9bafc18ce0144575b770b0f9e4c73802131879776
 SHA512 (pflogsumm-1.1.6.tar.gz) = 4581d2120bc17cfb322fda8d293989a2754eb9fa2696e3a1cea9032e85ed6a566e75aea1f628a6c7bbc7b9d6bf47ffeb873f95d71d7cb7f0ee46e27e492cf630
-SHA512 (postfix-3.10.7.tar.gz) = 28d7c05bfd6fb15f906c67cca989c4b47640ec631b640943deb66d91e44a6684deb79af95f0d4ba4dd362d9ba59179e5ed268942384e5e35ba472c91cf366e4c