rpms/postfix
7
0
Fork 0
Code Issues Pull Requests Releases Activity

import UBI postfix-3.8.5-10.el10_2

Browse Source
This commit is contained in:
AlmaLinux RelEng Bot 2026-06-15 08:15:03 -04:00
parent d6a8a12686
commit cdcdf4e3a7
2 changed files with 22 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
postfix-3.8.16-CVE-2026-43964.patch Normal file
View File

@ -0,0 +1,13 @@
diff --git a/src/global/dsn_util.c b/src/global/dsn_util.c
index 52b997a..5751128 100644
--- a/src/global/dsn_util.c
+++ b/src/global/dsn_util.c
@@ -154,7 +154,7 @@ DSN_SPLIT *dsn_split(DSN_SPLIT *dp, const char *def_dsn, const char *text)
if ((len = dsn_valid(cp)) > 0) {
strncpy(dp->dsn.data, cp, len);
dp->dsn.data[len] = 0;
- cp += len + 1;
+ cp += len;
} else if ((len = dsn_valid(def_dsn)) > 0) {
strncpy(dp->dsn.data, def_dsn, len);
dp->dsn.data[len] = 0;

10
postfix.spec
View File

@ -57,7 +57,7 @@
Name: postfix
Summary: Postfix Mail Transport Agent
Version: 3.8.5
Release: 9%{?dist}
Release: 10%{?dist}
Epoch: 2
URL: http://www.postfix.org
License: (IPL-1.0 OR EPL-2.0) AND GPL-2.0-or-later AND BSD-4-Clause-UC
@ -109,6 +109,9 @@ Patch11: postfix-3.4.4-chroot-example-fix.patch
Patch13: pflogsumm-1.1.5-syslog-name-underscore-fix.patch
Patch14: postfix-3.8.5-openssl-no-engine.patch
Patch15: postfix-3.8.5-rhel-remove-version-mismatch-warning.patch
# https://redhat.atlassian.net/browse/RHEL-176554
# https://www.mail-archive.com/postfix-announce@postfix.org/msg00110.html
Patch16: postfix-3.8.16-CVE-2026-43964.patch
# Optional patches - set the appropriate environment variables to include
# them when building the package/spec file
@ -274,6 +277,7 @@ popd
%patch13 -p1 -b .pflogsumm-1.1.5-syslog-name-underscore-fix
%patch14 -p1 -b .openssl-no-engine
%patch15 -p1 -b .warning
%patch16 -p1 -b .cve-2026-43964
# Backport 3.8-20221006 fix for uname -r detection
sed -i makedefs -e '\@Linux\.@s|345|3456|'
@ -842,6 +846,10 @@ fi
%endif
%changelog
* Thu May 21 2026 Fedor Vorobev <fvorobev@redhat.com> - 2:3.8.5-10
- Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
Resolves: RHEL-176554
* Tue Jan 06 2026 Fedor Vorobev <fvorobev@redhat.com> - 2:3.8.5-9
- Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
Resolves: RHEL-138726