[Midnightbsd-cvs] [MidnightBSD/mports] b005aa: mail/postfix: update to 3.11.7

[Lucas Holt]

  Branch: refs/heads/mail/postfix
  Home:   https://github.com/MidnightBSD/mports
  Commit: b005aae122d73355d340b9847b1f6b2d7498603c
      https://github.com/MidnightBSD/mports/commit/b005aae122d73355d340b9847b1f6b2d7498603c
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-09-11 (Fri, 11 Sep 2026)

  Changed paths:
    M mail/postfix/Makefile
    M mail/postfix/distinfo

  Log Message:
  -----------
  mail/postfix: update to 3.11.7

Security and bug-fix release. Notable fixes:

- SMTP smuggling remained possible via smtpd_proxy_filter when the
  after-filter SMTP server used the default smtpd_forbid_bare_newline
  settings; stray CR is now removed from the proxy filter input stream.
- SMTP smuggling via smtpd_proxy_filter when the before-filter server
  added a Require-TLS-ESMTP header (requiretls_esmtp_header = yes,
  the default).
- Null pointer read in smtpd after MAIL FROM/RCPT TO/VRFY with a UTF8
  address and no SMTPUTF8 parameter, reachable with strict_smtputf8 = yes.
- Heap over-read in smtpd when formatting a malformed multiline response
  from a malicious Milter or attacker-in-the-middle.
- TLS session tickets are now stamped with their master.cf service name.
- postmap/postalias warn about root-owned databases in non-root
  directories; postdrop rejects null and line-break characters in queue
  file envelope records.
- MySQL tls_verify_cert = yes had no effect with Oracle MySQL 8+.
- pipe(8) no longer drops a command-line argument when $user expands
  to an empty string.

https://www.postfix.org/announcements/postfix-3.11.7.html

All existing patches apply unchanged. Build, fake, and package verified
on amd64 for the default flavor.

AI-Assisted-by: Claude Opus 5 <noreply at anthropic.com>
Co-Authored-By: Claude Opus 5 (1M context) <noreply at anthropic.com>
Claude-Session: https://claude.ai/code/session_017JRCQA17KgZSRk2vV96wbT
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications