postfix: Update to version 3.11.3

Message ID 20260519212838.3147035-15-adolf.belka@ipfire.org
State New
Headers
Series postfix: Update to version 3.11.3 |

Commit Message

Adolf Belka 19 May 2026, 9:28 p.m. UTC
- Update from version 3.11.1 to 3.11.3
- No change in rootfile
- Changelog
3.11.3
    Bitrot: builds with musl libc broke, because they were using an obsolete
	NO_SNPRINTF code path that had not been updated for Claude Code findings.
    Two fixes for a signed integer overshift condition (a left shift into the sign bit).
	This "works" on contemporary CPUs, but may break in the future. One reported by
	Kamil Frankowicz, and one by Robert Sayre.
    Viktor Dukhovni fixed an 'uninitialized value' error in the 'collate.pl' script.
    Test code fixes by Viktor Dukhovni for a deprecation warning with OpenSSL 4.0, and
	for a race condition that caused a test script to fail.
3.11.2
    Bugfix (defect introduced: Postfix 3.11): the proxymap(8) daemon dereferenced an
	uninitialized pointer after a request protocol error. This daemon is not
	exposed to local or remote users. Found by Claude Opus 4.6.
    Bugfix (defect introduced: 20260309) a change, to set the service_name default
	value to "amnesiac", violated a test that parameter names in postconf output
	must match 1:1 with parameter names in the postlink script.
    Portability: support for recent FreeBSD, NetBSD, and OpenBSD versions. Brad Smith.
    Bugfix (defect introduced: Postfix 2.2, date 20041207): When truncating a database
	file, the cdb: database client looked at the file size from before requesting
	an exclusive lock on a database file, instead of the file size after the
	exclusive lock was granted. Found by Claude Opus 4.6.
    Bugfix (defect introduced: Postfix alpha, date 19980309): file descriptor leak
	after fork() failure. Found by Claude Opus 4.6.
    Mistakes in debug logging. Found by Claude Opus 4.6. This affected two files in
	Postfix 3.8 and 3.9, three files in Postfix 3.10 and 3.11.
    Unchecked null pointer results after an out-of-memory condition in a library
	dependency. Found by Claude Opus 4.6. The fix is to return an error status or
	to log a fatal error. This affected three source files.
    Missing or incomplete guards for ssize_t or int overflow, found by Claude Opus 4.6.
	This affected three source files. These limits are unlikely to be exceeded
	because the size of in-memory objects is limited by design (the number of
	in-memory objects is also limited).

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/postfix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)
  

Patch

diff --git a/lfs/postfix b/lfs/postfix
index 389405293..46de2c8e9 100644
--- a/lfs/postfix
+++ b/lfs/postfix
@@ -26,7 +26,7 @@  include Config
 
 SUMMARY    = A fast, secure, and flexible mailer
 
-VER        = 3.11.1
+VER        = 3.11.3
 
 THISAPP    = postfix-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@  DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = postfix
-PAK_VER    = 52
+PAK_VER    = 53
 
 DEPS       =
 
@@ -72,7 +72,7 @@  objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 38f5579b9252c6b91f1ea5af170fef3f1348dccdb41aaf0ab1c33eaaca2789d0b757bb03ef4b0e5ade1f69d7b195cbac4a714a0e5f0d2c8768d62db8adce23fc
+$(DL_FILE)_BLAKE2 = f88dd4e4b607ef729892ba3843c08b9d54864a2cc6605d9578eee85291be9918bf7f0d69cb2cff0b7e756de540c63c6ede1244557eb0027ca978484460085f6b
 
 install : $(TARGET)