rpms/postfix
7
0
Fork 0
Code Issues Pull Requests Releases Activity

import UBI postfix-3.5.25-3.el9_8

Browse Source
This commit is contained in:
AlmaLinux RelEng Bot 2026-06-16 07:34:40 -04:00
parent 157854880a
commit 275119ccbc
2 changed files with 22 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
SOURCES/postfix-3.8.16-CVE-2026-43964.patch Normal file
View File

@ -0,0 +1,13 @@
diff --git a/src/global/dsn_util.c b/src/global/dsn_util.c
index 52b997a..5751128 100644
--- a/src/global/dsn_util.c
+++ b/src/global/dsn_util.c
@@ -154,7 +154,7 @@ DSN_SPLIT *dsn_split(DSN_SPLIT *dp, const char *def_dsn, const char *text)
if ((len = dsn_valid(cp)) > 0) {
strncpy(dp->dsn.data, cp, len);
dp->dsn.data[len] = 0;
- cp += len + 1;
+ cp += len;
} else if ((len = dsn_valid(def_dsn)) > 0) {
strncpy(dp->dsn.data, def_dsn, len);
dp->dsn.data[len] = 0;

10
SPECS/postfix.spec
View File

@ -46,7 +46,7 @@
Name: postfix
Summary: Postfix Mail Transport Agent
Version: 3.5.25
Release: 2%{?dist}
Release: 3%{?dist}
Epoch: 2
URL: http://www.postfix.org
License: (IBM and GPLv2+) or (EPL-2.0 and GPLv2+)
@ -103,6 +103,9 @@ Patch14: pflogsumm-1.1.5-syslog-name-underscore-fix.patch
# rhbz#2134789, backported feature from upstream
Patch15: postfix-3.5.25-SRV-resolve.patch
Patch16: postfix-3.5.25-rhel-remove-version-mismatch-warning.patch
# https://redhat.atlassian.net/browse/RHEL-176550
# https://www.mail-archive.com/postfix-announce@postfix.org/msg00110.html
Patch17: postfix-3.8.16-CVE-2026-43964.patch
# Optional patches - set the appropriate environment variables to include
# them when building the package/spec file
@ -259,6 +262,7 @@ popd
%patch14 -p1 -b .pflogsumm-1.1.5-syslog-name-underscore-fix
%patch15 -p1 -b .SRV-resolution
%patch16 -p1 -b .warning
%patch17 -p1 -b .cve-2026-43964
for f in README_FILES/TLS_{LEGACY_,}README TLS_ACKNOWLEDGEMENTS; do
iconv -f iso8859-1 -t utf8 -o ${f}{_,} &&
@ -805,6 +809,10 @@ fi
%endif
%changelog
* Thu May 21 2026 Fedor Vorobev <fvorobev@redhat.com> - 2:3.5.25-3
- Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
Resolves: RHEL-176550
* Tue Jan 06 2026 Fedor Vorobev <fvorobev@redhat.com> - 2:3.5.25-2
- Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
RHEL-128018