rpms/postfix/F-8 postfix.spec, 1.59, 1.60 sources, 1.26, 1.27 postfix-CVE-2008-2936.patch, 1.1, NONE

Tue Sep 30 14:25:09 UTC 2008

Author: twoerner

Update of /cvs/pkgs/rpms/postfix/F-8
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv30382

Modified Files:
	postfix.spec sources 
Removed Files:
	postfix-CVE-2008-2936.patch 
Log Message:
- new version 2.5.5
  fixes CVE-2008-2936, CVE-2008-2937 and CVE-2008-3889 (rhbz#459101)




Index: postfix.spec
===================================================================
RCS file: /cvs/pkgs/rpms/postfix/F-8/postfix.spec,v
retrieving revision 1.59
retrieving revision 1.60
diff -u -r1.59 -r1.60

--- postfix.spec	14 Aug 2008 13:55:48 -0000	1.59
+++ postfix.spec	30 Sep 2008 14:24:39 -0000	1.60
@@ -1,6 +1,6 @@
+%{?!MYSQL: %define MYSQL 0}
+%{?!PGSQL: %define PGSQL 0}
 %define LDAP 2
-%define MYSQL 0
-%define PGSQL 0
 %define PCRE 1
 %define SASL 2
 %define TLS 1
@@ -32,18 +32,19 @@
 %define postfix_daemon_dir	%{_libexecdir}/postfix
 %define postfix_command_dir	%{_sbindir}
 %define postfix_queue_dir	%{_var}/spool/postfix
+%define postfix_data_dir	%{_var}/lib/postfix
 %define postfix_doc_dir		%{_docdir}/%{name}-%{version}
 %define postfix_sample_dir	%{postfix_doc_dir}/samples
 %define postfix_readme_dir	%{postfix_doc_dir}/README_FILES
 
 Name: postfix
 Summary: Postfix Mail Transport Agent
-Version: 2.4.5
-Release: 3%{?dist}
+Version: 2.5.5
+Release: 1%{?dist}
 Epoch: 2
 Group: System Environment/Daemons
 URL: http://www.postfix.org
-License: IBM Public License
+License: IBM
 Requires(post): /sbin/chkconfig
 Requires(post): %{_sbindir}/alternatives
 Requires(pre): %{_sbindir}/groupadd
@@ -53,7 +54,7 @@
 Requires(preun): %{_sbindir}/alternatives
 Requires(postun): /sbin/service
 
-Provides: MTA smtpd smtpdaemon /usr/bin/newaliases
+Provides: MTA smtpd smtpdaemon server(smtp) /usr/bin/newaliases
 
 Source0: ftp://ftp.porcupine.org/mirrors/postfix-release/official/%{name}-%{version}.tar.gz
 Source1: postfix-etc-init.d-postfix
@@ -80,7 +81,6 @@
 Patch8: postfix-large-fs.patch
 Patch9: postfix-2.4.0-cyrus.patch
 Patch10: postfix-2.4.5-open_define.patch
-Patch11: postfix-CVE-2008-2936.patch
 
 # Optional patches - set the appropriate environment variables to include
 #                    them when building the package/spec file
@@ -109,8 +109,8 @@
 %endif
 
 %if %{MYSQL}
-Requires: mysql
-BuildRequires: mysql, mysql-devel
+Requires: mysql-libs
+BuildRequires: mysql-devel
 %endif
 
 %if %{PGSQL}
@@ -139,7 +139,9 @@
 %patch8 -p1 -b .large-fs
 %patch9 -p1 -b .cyrus
 %patch10 -p1 -b .open_define
-%patch11 -p1 -b .CVE-2008-2936
+
+# resolve multilib conflict for makedefs.out: rename to makedefs.out-%{_arch}
+perl -pi -e "s/makedefs.out/makedefs.out-%{_arch}/g" conf/postfix-files Makefile.in */Makefile.in */*/Makefile.in HISTORY
 
 %if %{PFLOGSUMM}
 gzip -dc %{SOURCE53} | tar xf -
@@ -240,6 +242,7 @@
        daemon_directory=%{postfix_daemon_dir} \
        command_directory=%{postfix_command_dir} \
        queue_directory=%{postfix_queue_dir} \
+       data_directory=%{postfix_data_dir} \
        sendmail_path=%{postfix_command_dir}/sendmail.postfix \
        newaliases_path=%{_bindir}/newaliases.postfix \
        mailq_path=%{_bindir}/mailq.postfix \
@@ -304,13 +307,21 @@
 install -c qshape.1 $RPM_BUILD_ROOT%{_mandir}/man1/qshape.1
 install -c auxiliary/qshape/qshape.pl $RPM_BUILD_ROOT%{postfix_command_dir}/qshape
 
-rm -f $RPM_BUILD_ROOT/etc/postfix/aliases
+# remove alias file
+rm -f $RPM_BUILD_ROOT%{postfix_config_dir}/aliases
 
+# create /usr/lib/sendmail
 mkdir -p $RPM_BUILD_ROOT/usr/lib
 pushd $RPM_BUILD_ROOT/usr/lib
 ln -sf ../sbin/sendmail.postfix .
 popd
 
+# enable all protocols
+cat >> $RPM_BUILD_ROOT%{postfix_config_dir}/main.cf <<EOF
+# Enable IPv4, and IPv6 if supported
+inet_protocols = all
+EOF
+
 %post
 /sbin/chkconfig --add postfix
 
@@ -418,6 +429,7 @@
 %dir %attr(0755, root, root) %{postfix_queue_dir}/pid
 %dir %attr(0700, %{postfix_user}, root) %{postfix_queue_dir}/private
 %dir %attr(0710, %{postfix_user}, %{maildrop_group}) %{postfix_queue_dir}/public
+%dir %attr(0700, %{postfix_user}, root) %{postfix_data_dir}
 
 %attr(0644, root, root) %{_mandir}/man1/[a-n]*
 %attr(0644, root, root) %{_mandir}/man1/post*
@@ -444,7 +456,7 @@
 %attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/header_checks
 %attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/main.cf
 %attr(0644, root, root) %{postfix_config_dir}/main.cf.default
-%attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/makedefs.out
+%attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/makedefs.out-*
 %attr(0644, root, root) %config(noreplace) %{postfix_config_dir}/master.cf
 %attr(0755, root, root) %{postfix_config_dir}/post-install
 %attr(0644, root, root) %{postfix_config_dir}/postfix-files
@@ -468,9 +480,40 @@
 
 
 %changelog
-* Thu Aug 14 2008 Thomas Woerner <twoerner at redhat.com> 2:2.4.5-3
+* Wed Sep 17 2008 Thomas Woerner <twoerner at redhat.com> 2:2.5.5-1
+- new version 2.5.5
+  fixes CVE-2008-2936, CVE-2008-2937 and CVE-2008-3889 (rhbz#459101)
+
+* Thu Aug 28 2008 Tom "spot" Callaway <tcallawa at redhat.com> 2:2.5.1-4
+- fix license tag
+
+* Thu Aug 14 2008 Thomas Woerner <twoerner at redhat.com> 2:2.5.1-3
 - fixed postfix privilege problem with symlinks in the mail spool directory
-  (CVE-2008-2936) (rhbz#459099)
+  (CVE-2008-2936) (rhbz#459101)
+
+* Wed Mar 12 2008 Thomas Woerner <twoerner at redhat.com> 2:2.5.1-2
+- fixed fix for enabling IPv6 support (rhbz#437024)
+- added new postfix data directory (rhbz#437042)
+
+* Thu Feb 21 2008 Thomas Woerner <twoerner at redhat.com> 2:2.5.1-1
+- new verison 2.5.1
+
+* Wed Feb 20 2008 Fedora Release Engineering <rel-eng at fedoraproject.org> - 2:2.4.6-3
+- Autorebuild for GCC 4.3
+
+* Thu Dec 06 2007 Release Engineering <rel-eng at fedoraproject dot org> - 2.4.6-2
+- Rebuild for deps
+
+* Wed Nov 28 2007 Thomas Woerner <twoerner at redhat.com> 2:2.4.6-1
+- new verison 2.4.6
+- added virtual server(smtp) provide (rhbz#380631)
+- enabling IPv6 support (rhbz#197105)
+- made the MYSQL and PGSQL defines overloadable as build argument
+
+* Wed Nov  7 2007 Thomas Woerner <twoerner at redhat.com> 2:2.4.5-3
+- fixed multilib conflict for makedefs.out: rename to makedefs.out-%{_arch}
+  (rhbz#342941)
+- enabled mysql support
 
 * Thu Oct  4 2007 Thomas Woerner <twoerner at redhat.com> 2:2.4.5-2
 - made init script lsb conform (#243286, rhbz#247025)


Index: sources
===================================================================
RCS file: /cvs/pkgs/rpms/postfix/F-8/sources,v
retrieving revision 1.26
retrieving revision 1.27
diff -u -r1.26 -r1.27
--- sources	13 Aug 2007 16:54:24 -0000	1.26
+++ sources	30 Sep 2008 14:24:39 -0000	1.27
@@ -1,2 +1,2 @@
 1f78fcaf2a36ec3520ecff286a45251a  pflogsumm-1.1.0.tar.gz
-ceba0cde05d12baa0ba2ed69fbb96b42  postfix-2.4.5.tar.gz
+6b4b848bdd2239dddfc9d385e57e19ef  postfix-2.5.5.tar.gz


--- postfix-CVE-2008-2936.patch DELETED ---


