New version

Related: rhbz#2529649

postfix-3.10.10-large-fs.patch

@@ -21,7 +21,7 @@ index 50a4aa7..beef3db 100644
      if (msg_verbose)
  	msg_info("%s: %s: block size %lu, blocks free %lu",
 diff --git a/src/util/sys_defs.h b/src/util/sys_defs.h
-index 113a4c1..d317afc 100644
+index 22f174e..dc8868a 100644
 --- a/src/util/sys_defs.h
 +++ b/src/util/sys_defs.h
 @@ -784,8 +784,8 @@ extern int initgroups(const char *, int);

postfix-3.10.13-linux-7-fix.patch

@@ -0,0 +1,26 @@
+diff --git a/makedefs b/makedefs
+index 186a3b9..d6a2eb8 100644
+--- a/makedefs
++++ b/makedefs
+@@ -682,7 +682,7 @@ EOF
+ 		: ${SHLIB_ENV="LD_LIBRARY_PATH=`pwd`/lib"}
+ 		: ${PLUGIN_LD="${CC-gcc} -shared"}
+ 		;;
+-    Linux.[3456].*)
++    Linux.[34567].*)
+ 		SYSTYPE=LINUX$RELEASE_MAJOR
+ 		case "$CCARGS" in
+ 		 *-DNO_DB*) ;;
+diff --git a/src/util/sys_defs.h b/src/util/sys_defs.h
+index 3c1e93c..a6a2808 100644
+--- a/src/util/sys_defs.h
++++ b/src/util/sys_defs.h
+@@ -764,7 +764,7 @@ extern int initgroups(const char *, int);
+   * LINUX.
+   */
+ #if defined(LINUX2) || defined(LINUX3) || defined(LINUX4) || defined(LINUX5) \
+-	|| defined(LINUX6)
++	|| defined(LINUX6) || defined(LINUX7)
+ #define SUPPORTED
+ #define UINT32_TYPE	unsigned int
+ #define UINT16_TYPE	unsigned short

postfix-3.10.7-config.patch

@@ -1,5 +1,5 @@
 diff --git a/conf/main.cf b/conf/main.cf
-index f61060e..fb218b8 100644
+index 3687c85..ae3af9e 100644
 --- a/conf/main.cf
 +++ b/conf/main.cf
 @@ -136,6 +136,10 @@ mail_owner = postfix
@@ -81,11 +81,14 @@ index f61060e..fb218b8 100644
  #fallback_transport =
  
  # The luser_relay parameter specifies an optional destination address
-@@ -691,4 +714,34 @@ shlib_directory =
- # between multiple Postfix instances.
- meta_directory = /etc/postfix
- 
+@@ -682,6 +705,37 @@ sample_directory =
+ # readme_directory: The location of the Postfix README files.
+ #
+ readme_directory =
 -inet_protocols = ipv4
+ shlib_directory = /usr/lib/postfix/${mail_version}
+ meta_directory = /etc/postfix
++
 +# TLS CONFIGURATION
 +#
 +# Basic Postfix TLS configuration by default with self-signed certificate

postfix-3.9.0-files.patch

@@ -1,5 +1,5 @@
 diff --git a/conf/postfix-files b/conf/postfix-files
-index 88c3371..873a124 100644
+index 5a93982..b843fec 100644
 --- a/conf/postfix-files
 +++ b/conf/postfix-files
 @@ -84,7 +84,6 @@ $shlib_directory/${LIB_PREFIX}sqlite${LIB_SUFFIX}:f:root:-:755
@@ -10,7 +10,7 @@ index 88c3371..873a124 100644
  $meta_directory/master.cf.proto:f:root:-:644
  $meta_directory/postfix-files.d:d:root:-:755
  $meta_directory/postfix-files:f:root:-:644
-@@ -144,18 +143,13 @@ $command_directory/postqueue:f:root:$setgid_group:2755:u
+@@ -142,18 +141,13 @@ $command_directory/postqueue:f:root:$setgid_group:2755:u
  $sendmail_path:f:root:-:755
  $newaliases_path:l:$sendmail_path
  $mailq_path:l:$sendmail_path
@@ -29,7 +29,7 @@ index 88c3371..873a124 100644
  $config_directory/main.cf:f:root:-:644:p
  $config_directory/master.cf:f:root:-:644:p
  $config_directory/pcre_table:f:root:-:644:o
-@@ -168,8 +162,8 @@ $config_directory/postfix-script:f:root:-:755:o
+@@ -166,8 +160,8 @@ $config_directory/postfix-script:f:root:-:755:o
  $config_directory/postfix-script-sgid:f:root:-:755:o
  $config_directory/postfix-script-nosgid:f:root:-:755:o
  $config_directory/post-install:f:root:-:755:o
@@ -40,7 +40,7 @@ index 88c3371..873a124 100644
  $manpage_directory/man1/postalias.1:f:root:-:644
  $manpage_directory/man1/postcat.1:f:root:-:644
  $manpage_directory/man1/postconf.1:f:root:-:644
-@@ -184,9 +178,9 @@ $manpage_directory/man1/postmap.1:f:root:-:644
+@@ -181,9 +175,9 @@ $manpage_directory/man1/postmap.1:f:root:-:644
  $manpage_directory/man1/postmulti.1:f:root:-:644
  $manpage_directory/man1/postqueue.1:f:root:-:644
  $manpage_directory/man1/postsuper.1:f:root:-:644
@@ -52,7 +52,7 @@ index 88c3371..873a124 100644
  $manpage_directory/man5/body_checks.5:f:root:-:644
  $manpage_directory/man5/bounce.5:f:root:-:644
  $manpage_directory/man5/canonical.5:f:root:-:644
-@@ -235,8 +229,8 @@ $manpage_directory/man8/qmgr.8:f:root:-:644
+@@ -231,8 +225,8 @@ $manpage_directory/man8/qmgr.8:f:root:-:644
  $manpage_directory/man8/qmqpd.8:f:root:-:644
  $manpage_directory/man8/scache.8:f:root:-:644
  $manpage_directory/man8/showq.8:f:root:-:644

postfix.service

@@ -11,16 +11,12 @@ PrivateTmp=true
 CapabilityBoundingSet=~ CAP_NET_ADMIN CAP_SYS_ADMIN CAP_SYS_BOOT CAP_SYS_MODULE
 ProtectSystem=true
 PrivateDevices=true
-ExecStartPre=!-/usr/sbin/restorecon -R /var/spool/postfix/pid
-ExecStartPre=!-/usr/libexec/postfix/aliasesdb
-ExecStartPre=!-/usr/libexec/postfix/chroot-update
-ExecStart=!/usr/sbin/postfix start
-ExecReload=!/usr/sbin/postfix reload
-ExecStop=!/usr/sbin/postfix stop
-User=postfix
-Group=root
-StateDirectory=postfix
-StateDirectoryMode=0700
+ExecStartPre=-/usr/sbin/restorecon -R /var/spool/postfix/pid
+ExecStartPre=-/usr/libexec/postfix/aliasesdb
+ExecStartPre=-/usr/libexec/postfix/chroot-update
+ExecStart=/usr/sbin/postfix start
+ExecReload=/usr/sbin/postfix reload
+ExecStop=/usr/sbin/postfix stop
 
 [Install]
 WantedBy=multi-user.target

postfix.spec

@@ -56,7 +56,7 @@
 
 Name: postfix
 Summary: Postfix Mail Transport Agent
-Version: 3.11.7
+Version: 3.10.14
 Release: 1%{?dist}
 Epoch: 2
 URL: http://www.postfix.org
@@ -81,7 +81,6 @@ Source3: README-Postfix-SASL-RedHat.txt
 Source4: postfix.aliasesdb
 Source5: postfix-chroot-update
 Source6: postfix.sysusers
-Source7: postfix.tmpfiles
 
 # Sources 50-99 are upstream [patch] contributions
 
@@ -97,11 +96,12 @@ Source101: postfix-pam.conf
 
 # Patches
 
-Patch1: postfix-3.11.1-config.patch
-Patch2: postfix-3.11.0-files.patch
+Patch1: postfix-3.10.7-config.patch
+Patch2: postfix-3.9.0-files.patch
 Patch3: postfix-3.9.0-alternatives.patch
 # probably rhbz#428996
-Patch4: postfix-3.11.2-large-fs.patch
+Patch4: postfix-3.10.10-large-fs.patch
+Patch5: postfix-3.10.13-linux-7-fix.patch
 # rhbz#1931403, sent upstream
 Patch9: pflogsumm-1.1.6-syslog-name-underscore-fix.patch
 Patch11: postfix-3.4.4-chroot-example-fix.patch
@@ -264,6 +264,7 @@ maps with Postfix, you need this.
 %patch -P2 -p1 -b .files
 %patch -P3 -p1 -b .alternatives
 %patch -P4 -p1 -b .large-fs
+%patch -P5 -p1 -b .linux-7-fix
 
 # Change DEF_SHLIB_DIR according to build host
 sed -i \
@@ -293,7 +294,6 @@ done
   sed -i '/^\s*alias_database\s*=\s*hash:\/etc\/aliases/ s|hash:|lmdb:|g' conf/main.cf
   echo >> conf/main.cf
   echo "default_database_type = lmdb" >> conf/main.cf
-  echo "default_cache_db_type = lmdb" >> conf/main.cf
 %endif
 
 %build
@@ -379,9 +379,6 @@ make -f Makefile.init makefiles shared=yes dynamicmaps=yes \
   AUXLIBS_CDB="${AUXLIBS_CDB}" \
   DEBUG="" SHLIB_RPATH="-Wl,-rpath,%{postfix_shlib_dir} $LDFLAGS" \
   OPT="$CFLAGS -fno-strict-aliasing -Wno-comment" \
-%if 0%{?defmap_lmdb}
-  default_database_type=lmdb default_cache_db_type=lmdb \
-%endif
   POSTFIX_INSTALL_OPTS=-keep-build-mtime
 
 %make_build
@@ -429,9 +426,6 @@ install -m 755 %{SOURCE5} %{buildroot}%{postfix_daemon_dir}/chroot-update
 # systemd-sysusers
 install -p -D -m 0644 %{SOURCE6} %{buildroot}%{_sysusersdir}/postfix.conf
 
-# systemd-tmpfiles
-install -p -D -m 0644 %{SOURCE7} %{buildroot}%{_tmpfilesdir}/postfix.conf
-
 install -c auxiliary/rmail/rmail $RPM_BUILD_ROOT%{_bindir}/rmail.postfix
 
 for i in active bounce corrupt defer deferred flush incoming private saved maildrop public pid saved trace; do
@@ -652,7 +646,6 @@ fi
 %config(noreplace) %{sasl_config_dir}/smtpd.conf
 %endif
 %config(noreplace) %{_sysconfdir}/pam.d/smtp.postfix
-%{_tmpfilesdir}/postfix.conf
 %{_unitdir}/postfix.service
 
 # Documentation
@@ -681,23 +674,23 @@ fi
 
 %dir %attr(0755, root, root) %{postfix_config_dir}
 %dir %attr(0755, root, root) %{postfix_daemon_dir}
-%ghost %dir %attr(0755, root, root) %{postfix_queue_dir}
+%dir %attr(0755, root, root) %{postfix_queue_dir}
 %dir %attr(0755, root, root) %{postfix_shlib_dir}
-%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/active
-%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/bounce
-%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/corrupt
-%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/defer
-%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/deferred
-%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/flush
-%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/hold
-%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/incoming
-%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/saved
-%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/trace
-%ghost %dir %attr(0730, %{postfix_user}, %{maildrop_group}) %{postfix_queue_dir}/maildrop
-%ghost %dir %attr(0755, root, root) %{postfix_queue_dir}/pid
-%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/private
-%ghost %dir %attr(0710, %{postfix_user}, %{maildrop_group}) %{postfix_queue_dir}/public
-%ghost %dir %attr(0700, %{postfix_user}, root) %{postfix_data_dir}
+%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/active
+%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/bounce
+%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/corrupt
+%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/defer
+%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/deferred
+%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/flush
+%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/hold
+%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/incoming
+%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/saved
+%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/trace
+%dir %attr(0730, %{postfix_user}, %{maildrop_group}) %{postfix_queue_dir}/maildrop
+%dir %attr(0755, root, root) %{postfix_queue_dir}/pid
+%dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/private
+%dir %attr(0710, %{postfix_user}, %{maildrop_group}) %{postfix_queue_dir}/public
+%dir %attr(0700, %{postfix_user}, root) %{postfix_data_dir}
 %dir %attr(0755, root, root) %{postfix_config_dir}/dynamicmaps.cf.d
 %dir %attr(0755, root, root) %{postfix_config_dir}/postfix-files.d
 
@@ -746,7 +739,6 @@ fi
 %attr(0755, root, root) %{postfix_daemon_dir}/pipe
 %attr(0755, root, root) %{postfix_daemon_dir}/post-install
 %attr(0644, root, root) %{postfix_config_dir}/postfix-files
-%attr(0755, root, root) %{postfix_daemon_dir}/postfix-non-bdb-script
 %attr(0755, root, root) %{postfix_daemon_dir}/postfix-script
 %attr(0755, root, root) %{postfix_daemon_dir}/postfix-tls-script
 %attr(0755, root, root) %{postfix_daemon_dir}/postfix-wrapper
@@ -859,61 +851,22 @@ fi
 %endif
 
 %changelog
-* Tue Sep 08 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.7-1
+* Tue Sep 08 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.14-1
 - New version
-  Resolves: rhbz#2529649
+  Related: rhbz#2529649
 
-* Mon Aug 17 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.6-1
+* Mon Aug 17 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.13-1
 - New version
   Resolves: rhbz#2513537
 
-* Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 2:3.11.5-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
-
-* Wed Jul 08 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.5-1
+* Mon May 18 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.10-1
 - New version
-  Resolves: rhbz#2497445
+  Resolves: CVE-2026-43964
 
-* Mon Jun 22 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.4-1
-- New version
-  Resolves: rhbz#2490220
-
-* Wed Jun 17 2026 Yaakov Selkowitz <yselkowi@redhat.com> - 2:3.11.3-5
-- Rebuilt for openssl 4.0
-
-* Wed Jun 17 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.3-4
-- Used workarounds for /var to support Image mode
-
-* Fri Jun 12 2026 Yaakov Selkowitz <yselkowi@redhat.com> - 2:3.11.3-3
-- Rebuilt for openssl 4.0
-
-* Mon Jun 08 2026 František Zatloukal <fzatlouk@redhat.com> - 2:3.11.3-2
-- Rebuilt for icu 78.3
-
-* Mon May 18 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.3-1
-- New version
-  Resolves: rhbz#2478103
-
-* Mon May 04 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.2-1
-- New version
-  Resolves: rhbz#2464614
-
-* Mon Apr 13 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.1-2
+* Tue May 05 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.7-4
 - Fixed default TLS config to work with the removed ca-bundle.crt
   Resolves: rhbz#2447292
 
-* Mon Apr 13 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.1-1
-- New version
-  Resolves: rhbz#2446390
-
-* Tue Mar 10 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.11.0-1
-- New version
-  Resolves: rhbz#2444870
-
-* Thu Feb 19 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.10.8-1
-- New version
-  Resolves: rhbz#2440818
-
 * Mon Jan 26 2026 Fedor Vorobev <fvorobev@redhat.com> - 2:3.10.7-3
 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
   Resolves: RHEL-128018

postfix.tmpfiles

@@ -1,16 +0,0 @@
-# postfix spool
-d /var/spool/postfix 0755 root root -
-d /var/spool/postfix/active 0700 postfix root -
-d /var/spool/postfix/bounce 0700 postfix root -
-d /var/spool/postfix/corrupt 0700 postfix root -
-d /var/spool/postfix/defer 0700 postfix root -
-d /var/spool/postfix/deferred 0700 postfix root -
-d /var/spool/postfix/flush 0700 postfix root -
-d /var/spool/postfix/hold 0700 postfix root -
-d /var/spool/postfix/incoming 0700 postfix root -
-d /var/spool/postfix/saved 0700 postfix root -
-d /var/spool/postfix/trace 0700 postfix root -
-d /var/spool/postfix/maildrop 0730 postfix postdrop -
-d /var/spool/postfix/pid 0755 root root -
-d /var/spool/postfix/private 0700 postfix root -
-d /var/spool/postfix/public 0710 postfix postdrop -

sources

@@ -1,2 +1,2 @@
-SHA512 (postfix-3.11.7.tar.gz) = 3b4ef7562a24bbab1d0ca361ac0af1037aa3d4ae65a7c825711de9d5d3ed88975aad63cb09991717de334f4382c29039b527a3e8d4e65c5a6d35efd3e782910f
+SHA512 (postfix-3.10.14.tar.gz) = 91c854ba9831afb986ed5572d55425b1eeb1695902f3ae1b6385c7955d737f9498151fcac02cab236053e3a9bafc18ce0144575b770b0f9e4c73802131879776
 SHA512 (pflogsumm-1.1.6.tar.gz) = 4581d2120bc17cfb322fda8d293989a2754eb9fa2696e3a1cea9032e85ed6a566e75aea1f628a6c7bbc7b9d6bf47ffeb873f95d71d7cb7f0ee46e27e492cf630