[Midnightbsd-cvs] [MidnightBSD/mports] cfe54e: mail/postfix: update to 3.11.6 (#774)

[Lucas Holt]

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: cfe54e58656c0a80847dae5bda3f86da99bc9393
      https://github.com/MidnightBSD/mports/commit/cfe54e58656c0a80847dae5bda3f86da99bc9393
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-24 (Mon, 24 Aug 2026)

  Changed paths:
    M mail/postfix/Makefile
    M mail/postfix/distinfo

  Log Message:
  -----------
  mail/postfix: update to 3.11.6 (#774)

Updates `mail/postfix` from 3.11.5 to 3.11.6 (upstream release of August
10, 2026).

## Why

Wietse describes 3.11.6 as addressing "medium-impact problems that need
to be fixed as some enable remote DOS or policy bypass." **No CVEs were
assigned**, so vulnerability databases will not flag 3.11.5 — I checked,
and the only hits returned for that version are false positives from
2001–2003.

**Policy bypass.** The SMTP server failed to reset `MAIL FROM` / `RCPT
TO` state after `smtpd_end_of_data_restrictions` rejected a message,
desynchronizing client and server. A crafted client could then send
`RCPT TO` and `DATA` with no `MAIL FROM` and deliver a second message
that skipped `check_recipient_access`, because the recipient counter was
already > 1. The same desync let a second message bypass Milter policy
enforcement after a Milter had accepted the first. Present since Postfix
2.2 (2004).

**Denial of service.**
- SMTP server command-history memory exhaustion via many very small
`BDAT` requests (since 3.4)
- Null pointer read crash after a `BDAT` command error followed by
`DATA` (since 3.4)
- Null pointer read crash parsing a malformed Dovecot AUTH response
(since 2.4)
- Address verification cache poisoning through `postdrop` — a local user
could force rejection of mail that should be accepted (since 1.1)

**Memory safety.** Read-after-free, uninitialized-read and over-read
fixes in `postscreen_dnsbl.c`, `postscreen_haproxy.c`,
`util/inet_connect.c`, `dns_lookup.c` (MX/SRV record over-read dating to
1997), `postsuper.c`, `record.c` and `sock_addr.c`.

Reported by Qualys and OpenAI Security.

## Port changes

Version bump and distinfo only. All four patches
(`extra-patch-blacklistd`, `patch-conf_main.cf`, `patch-makedefs`,
`patch-src_tls_tls__server.c`) apply unchanged, and `pkg-plist` needed
no edits.

## Validation

| Check | Result |
|---|---|
| `bmake makesum` | SHA256 `b9a74870…8d07`, 5289392 bytes |
| `bmake patch` | pass, all four patches apply cleanly |
| `bmake build` (default) | pass — 19 bin, 36 libexec |
| `bmake fake` + `bmake package` (default) | pass |
| `bmake build` + `package` (pgsql flavor) | pass, `postfix-pgsql.so`
built |
| `portlint` | 1 fatal + 10 warnings — **identical on 3.11.5**,
pre-existing |

Fixes verified present in the distfile rather than inferred from the
version: `src/global/mail_version.h` reads `MAIL_VERSION_NUMBER
"3.11.6"` / `MAIL_RELEASE_DATE "20260809"`, and `HISTORY` carries both
the policy-bypass and memory-safety entries.

Built on amd64. Two flavors of seven were built (`default`, `pgsql`);
`ldap`, `mongo`, `mysql`, `sasl` and `sqlite` were not, since the change
is a version bump with no flavor-specific edits — worth a cluster run to
confirm.

Two pre-existing quirks noted but deliberately left alone, as they are
out of scope for this update:
- `bmake fake` reports `etc/postfix/*.sample`, `main.cf.default`,
`bounce.cf.default` and `TLS_LICENSE` as "missing from the plist". False
positive — the checker does not expand `%%PFETC%%`. Verified the files
are present in the built package.
- `PFETC` carries a trailing slash, so package paths render as
`etc/postfix//main.cf.sample`. Cosmetic.

Not installed on the build host, which runs sendmail.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

## Summary by Sourcery

Update the Postfix port to the 3.11.6 upstream release.

Bug Fixes:
- Update Postfix to 3.11.6, incorporating upstream fixes for SMTP policy
bypasses, denial-of-service conditions, and multiple memory-safety
issues.

Chores:
- Refresh the distfile checksum metadata for the new Postfix release.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications