Author: Martin Pitt
Revision Date: 2015-10-18 13:41:57 UTC

Drop unnecessary python-unit test dependency, it got removed from wily.

Author: Martin Pitt
Revision Date: 2015-10-18 13:41:57 UTC

Drop unnecessary python-unit test dependency, it got removed from wily.

Author: Seyeong Kim
Revision Date: 2015-02-17 08:01:59 UTC

support postfix/protocols (LP: #583216)

Author: Seyeong Kim
Revision Date: 2015-02-17 08:01:59 UTC

support postfix/protocols (LP: #583216)

Author: Seyeong Kim
Revision Date: 2015-02-02 16:15:31 UTC

support postfix/protocols (LP: #583216)

Author: Seyeong Kim
Revision Date: 2015-02-02 16:20:29 UTC

support postfix/protocols (LP: #583216)

Author: Seyeong Kim
Revision Date: 2015-02-02 16:15:31 UTC

support postfix/protocols (LP: #583216)

Author: Seyeong Kim
Revision Date: 2015-02-02 16:20:29 UTC

support postfix/protocols (LP: #583216)

Author: Seyeong Kim
Revision Date: 2015-02-02 15:50:04 UTC

support postfix/protocols (LP: #583216)

Author: Seyeong Kim
Revision Date: 2015-02-02 15:50:04 UTC

support postfix/protocols (LP: #583216)

Author: LaMont Jones
Revision Date: 2014-06-07 08:48:54 UTC

[LaMont Jones]

* fix usage of LIBLIST in init.d. Closes: #733123

[Tanguy Ortolo]

* copy /etc/host.conf to the chroot

[Guilhem Moulin]

* Build dict_ldap.so with SASL binding enabled. Closes: #730848

[Joey Hess]

* Fix short description in init script. Closes: #738314

[Jonathan Hall]

* Better myhostname default handling. Closes: #214741

[Wietse Venema]

* New Upstream release. Closes: #750485

Author: LaMont Jones
Revision Date: 2014-02-11 07:44:30 UTC

[LaMont Jones]

* New upstream release: 2.11.0

[localization folks]

* l10n: Updated German translations. Closes: #734893 (Helge Kreutzmann)

Author: LaMont Jones
Revision Date: 2013-09-08 19:24:46 UTC

[Wietse Venema]

* New upstream release

[LaMont Jones]

* drop bad diffs from review
* python 2to3 migration for apport. LP: #1222180

Author: LaMont Jones
Revision Date: 2013-09-08 19:24:46 UTC

[Wietse Venema]

* New upstream release

[LaMont Jones]

* drop bad diffs from review
* python 2to3 migration for apport. LP: #1222180

Author: Yolanda Robla
Revision Date: 2013-05-22 13:55:31 UTC

d/tests/test-postfix.py: rewrite in pexpect to avoid python error

Author: Dimitri John Ledkov
Revision Date: 2013-05-21 15:41:36 UTC

update maintainer

Author: LaMont Jones
Revision Date: 2013-03-22 10:30:29 UTC

[LaMont Jones]

* Set smtpd_relay_restrictions in the correct place. LP: #1156223

[localization folks]

* l10n: updated Indonesian debconf translations. Closes: #703225 (T. Surya
  Fajri)
* l10n: Updated Russian debconf translations. Closes: #703590 (Sergey
  Alyoshin)
* l10n: updated Japanese debconf translations. Closes: #703168 (Kenshi Muto)
* l10n: updated Basque translation. Closes: #703316 (Dooteo)
* l10n: Updated Swedish debconf translations. Closes: #703397 (Martin Bagge)
* l10n: Updated Czech debconf translations. Closes: #703537 (Miroslav Kure)
* l10n: Updated Brazilian Portuguese debconf templates. Closes: #703471
  (Marcelo Santana)
* l10n: Updated French debconf translations. Closes: #703449 (Christian
  Perrier)

Author: LaMont Jones
Revision Date: 2013-03-22 10:30:29 UTC

[LaMont Jones]

* Set smtpd_relay_restrictions in the correct place. LP: #1156223

[localization folks]

* l10n: updated Indonesian debconf translations. Closes: #703225 (T. Surya
  Fajri)
* l10n: Updated Russian debconf translations. Closes: #703590 (Sergey
  Alyoshin)
* l10n: updated Japanese debconf translations. Closes: #703168 (Kenshi Muto)
* l10n: updated Basque translation. Closes: #703316 (Dooteo)
* l10n: Updated Swedish debconf translations. Closes: #703397 (Martin Bagge)
* l10n: Updated Czech debconf translations. Closes: #703537 (Miroslav Kure)
* l10n: Updated Brazilian Portuguese debconf templates. Closes: #703471
  (Marcelo Santana)
* l10n: Updated French debconf translations. Closes: #703449 (Christian
  Perrier)

Author: Scott Kitterman
Revision Date: 2013-02-06 18:26:32 UTC

New upstream micro-version update (LP: #1117761)

Author: Scott Kitterman
Revision Date: 2013-02-06 18:26:32 UTC

New upstream micro-version update (LP: #1117761)

Author: Clint Byrum
Revision Date: 2012-08-18 15:45:12 UTC

d/rules: Fix apport hook installation (LP: #1038527)

Author: LaMont Jones
Revision Date: 2012-04-13 12:10:32 UTC

[LaMont Jones]

* postfix Depends: cpio. Closes: #617703
* create /dev/{,u}random for SSL. Closes: #572841
* cleanup cert copying code to handle trailing / on CApath

[Sven Joachim]

* add --quiet to cpio invocation. Closes: #614675

[localization folks]

* l10n: Updated dutch debconf. Closes: #668531 (Jeroen Schot)

Author: Scott Kitterman
Revision Date: 2011-10-07 00:59:20 UTC

[ LaMont Jones ]
* Trial microversion update per TB 10/6/11 (LP: #869411)

[Wietse Venema]

* 2.8.5
  - Workaround: report a {client_connections} Milter macro value of zero
    instead of garbage, when the remote SMTP client is not subject to any
    smtpd_client_* limits. Problem reported by Christian Roessner.
  - Bugfix: allow for Milters that send an SMTP server reply without RFC 3463
    enhanced status code. Reported by Vladimir Vassiliev.
* 2.8.4
  - Performance: a high load of DSN success notification requests
    could slow down the queue manager.
  - Bugfix (introduced Postfix 2.3 and Postfix 2.7): the Milter
    client reported some "file too large" errors as temporary
    errors.
  - Bugfix (introduced in Postfix 1.1, duplicated in Postfix
    2.3, unrelated mistake in Postfix 2.7): the local(8) delivery
    agent ignored table lookup errors in mailbox_command_maps,
    mailbox_transport_maps, fallback_transport_maps and (while
    bouncing mail to alias) alias owner lookup.
  - Bugfix (introduced Postfix 2.6 with master_service_disable)
    loop control error when parsing a malformed master.cf file.
  - Bugfix (introduced: Postfix 2.7): "sendmail -t" reported
    "protocol error" after queue file write error.
  - Linux kernel version 3 support.
  - Workaround: some Spamhaus RHSBL rejects lookups with "No
    IP queries" even if the name has an alphanumerical prefix.
    We play safe, and skip both RHSBL and RHSWL queries for
    names ending in a numerical suffix.
* 2.8.3
  - Cleanup: postscreen(8) and verify(8) daemons now lock their respective
    cache file exclusively upon open, to avoid massive cache corruption
    by unsupported sharing.
  - Bugfix (introduced with Postfix SASL patch 20000314): don't reuse a
    server SASL handle after authentication failure. CVE-2011-1720

Author: Scott Kitterman
Revision Date: 2011-10-06 23:55:59 UTC

Source backport for Maverick from natty-proposed (LP: #868869)

Author: LaMont Jones
Revision Date: 2011-10-06 21:59:12 UTC

Source backport for Lucid from natty-proposed (LP: #868869)

Author: Scott Kitterman
Revision Date: 2011-10-07 00:59:20 UTC

[ LaMont Jones ]
* Trial microversion update per TB 10/6/11 (LP: #869411)

[Wietse Venema]

* 2.8.5
  - Workaround: report a {client_connections} Milter macro value of zero
    instead of garbage, when the remote SMTP client is not subject to any
    smtpd_client_* limits. Problem reported by Christian Roessner.
  - Bugfix: allow for Milters that send an SMTP server reply without RFC 3463
    enhanced status code. Reported by Vladimir Vassiliev.
* 2.8.4
  - Performance: a high load of DSN success notification requests
    could slow down the queue manager.
  - Bugfix (introduced Postfix 2.3 and Postfix 2.7): the Milter
    client reported some "file too large" errors as temporary
    errors.
  - Bugfix (introduced in Postfix 1.1, duplicated in Postfix
    2.3, unrelated mistake in Postfix 2.7): the local(8) delivery
    agent ignored table lookup errors in mailbox_command_maps,
    mailbox_transport_maps, fallback_transport_maps and (while
    bouncing mail to alias) alias owner lookup.
  - Bugfix (introduced Postfix 2.6 with master_service_disable)
    loop control error when parsing a malformed master.cf file.
  - Bugfix (introduced: Postfix 2.7): "sendmail -t" reported
    "protocol error" after queue file write error.
  - Linux kernel version 3 support.
  - Workaround: some Spamhaus RHSBL rejects lookups with "No
    IP queries" even if the name has an alphanumerical prefix.
    We play safe, and skip both RHSBL and RHSWL queries for
    names ending in a numerical suffix.
* 2.8.3
  - Cleanup: postscreen(8) and verify(8) daemons now lock their respective
    cache file exclusively upon open, to avoid massive cache corruption
    by unsupported sharing.
  - Bugfix (introduced with Postfix SASL patch 20000314): don't reuse a
    server SASL handle after authentication failure. CVE-2011-1720

Author: LaMont Jones
Revision Date: 2011-10-06 21:59:12 UTC

oneiric upload

Author: Marc Deslauriers
Revision Date: 2011-05-10 08:21:55 UTC

* SECURITY UPDATE: SASL memory corruption
  - src/smtpd/smtpd_sasl_proto.c: don't reuse the SASL handle after
    auth failure.
  - Origin: backported from postfix-2.8-patch03.gz
  - CVE-2011-1720

Author: Marc Deslauriers
Revision Date: 2011-05-10 08:46:31 UTC

* SECURITY UPDATE: SASL memory corruption
  - debian/patches/CVE-2011-1720.dpatch: don't reuse the SASL handle
    after auth failure in src/smtpd/smtpd_sasl_proto.c.
  - CVE-2011-1720

Author: Marc Deslauriers
Revision Date: 2011-05-10 08:46:31 UTC

* SECURITY UPDATE: SASL memory corruption
  - debian/patches/CVE-2011-1720.dpatch: don't reuse the SASL handle
    after auth failure in src/smtpd/smtpd_sasl_proto.c.
  - CVE-2011-1720

Author: Marc Deslauriers
Revision Date: 2011-05-10 08:40:16 UTC

* SECURITY UPDATE: SASL memory corruption
  - src/smtpd/smtpd_sasl_proto.c: don't reuse the SASL handle after
    auth failure.
  - Origin: backported from postfix-2.5-patch13.gz
  - CVE-2011-1720

Author: Marc Deslauriers
Revision Date: 2011-05-10 08:40:16 UTC

* SECURITY UPDATE: SASL memory corruption
  - src/smtpd/smtpd_sasl_proto.c: don't reuse the SASL handle after
    auth failure.
  - Origin: backported from postfix-2.5-patch13.gz
  - CVE-2011-1720

Author: Marc Deslauriers
Revision Date: 2011-05-10 08:37:13 UTC

* SECURITY UPDATE: SASL memory corruption
  - src/smtpd/smtpd_sasl_proto.c: don't reuse the SASL handle after
    auth failure.
  - Origin: backported from postfix-2.7-patch04.gz
  - CVE-2011-1720

Author: Marc Deslauriers
Revision Date: 2011-05-10 08:37:13 UTC

* SECURITY UPDATE: SASL memory corruption
  - src/smtpd/smtpd_sasl_proto.c: don't reuse the SASL handle after
    auth failure.
  - Origin: backported from postfix-2.7-patch04.gz
  - CVE-2011-1720

Author: Marc Deslauriers
Revision Date: 2011-05-10 08:33:00 UTC

* SECURITY UPDATE: SASL memory corruption
  - src/smtpd/smtpd_sasl_proto.c: don't reuse the SASL handle after
    auth failure.
  - Origin: backported from postfix-2.7-patch04.gz
  - CVE-2011-1720

Author: Marc Deslauriers
Revision Date: 2011-05-10 08:33:00 UTC

* SECURITY UPDATE: SASL memory corruption
  - src/smtpd/smtpd_sasl_proto.c: don't reuse the SASL handle after
    auth failure.
  - Origin: backported from postfix-2.7-patch04.gz
  - CVE-2011-1720

Author: Marc Deslauriers
Revision Date: 2011-04-15 10:27:41 UTC

* SECURITY UPDATE: man-in-the-middle via plaintext command injection
  - src/smtp/smtp_proto.c, src/smtpd/smtpd.c: discard the contents of the
    stream buffer so there is no pending plaintext.
  - Origin: backported from postfix-2.6-patch09.gz
  - CVE-2011-0411

Author: Marc Deslauriers
Revision Date: 2011-04-15 10:27:41 UTC

* SECURITY UPDATE: man-in-the-middle via plaintext command injection
  - src/smtp/smtp_proto.c, src/smtpd/smtpd.c: discard the contents of the
    stream buffer so there is no pending plaintext.
  - Origin: backported from postfix-2.6-patch09.gz
  - CVE-2011-0411

Author: Scott Kitterman
Revision Date: 2011-04-04 23:43:56 UTC

* Merge from debian unstable. Remaining changes:
  - makedefs: search all directories known by the compiler for our
    libraries, not just /lib and /lib64; fixing the build failure with
    multiarch.

Author: LaMont Jones
Revision Date: 2010-06-13 18:30:59 UTC

[Matt Moen]

* Create ca-certificates.crt for smtp{,d}_enforce_tls case, too.
  Closes: #575464

[Wietse Venema]

* New upstream release.

[LaMont Jones]

* add freebsd 8 support. Closes: #570327
* Drop tinycdb build-dep. Closes: #577997

Author: LaMont Jones
Revision Date: 2010-02-17 09:06:13 UTC

New upstream release

Author: LaMont Jones
Revision Date: 2009-09-18 09:52:47 UTC

[Andreas Olsson]

* postrm: Remove /var/lib/postfix on purge. LP: #348990

[LaMont Jones]

* Just use the first line of /etc/mailname. Closes: #484246 LP: #251433
* SECURITY-UPDATE: correct permissions on /var/spool/postfix/pid
  - adjust /var/spool/postfix/pid directory to be owned by root, not postfix.
  - CVE-2009-2930

Author: Scott Kitterman
Revision Date: 2008-08-15 11:20:28 UTC

* Source backport for Gutsy (LP: #258193)
  - Switch back to libdb4.3

Author: Christoph Berg
Revision Date: 2008-09-07 14:02:15 UTC

* Non-maintainer upload.
* Add rsyslog.d config snipped to create a /dev/log syslog socket in the
  postfix chroot. Also, add a note about other syslog daemons to
  README.Debian. Closes: #311812

Author: LaMont Jones
Revision Date: 2008-09-02 07:20:37 UTC

[Wietse Venema]

local file descriptor leak with 2.6 kernels and epoll.

Author: LaMont Jones
Revision Date: 2008-04-15 21:55:08 UTC

* (2.5.2-0 or later contains all these fixes.)

[ LaMont Jones]

* cherry-pick upstream fixes
  - bounce: segv on one-line template text.
  - sasl: enforce mechanism output filter on client command input.
  - milter-app callbacks didn't receive {mail_addr} or {rcpt_addr}
    information
  - warn_if_reject reject_unlisted_recipient/sender worked incorrectly
  - qmgr was incorrectly initializing client logging attributes

[Michel Grentzinger]

* l10n: french debconf templates update. Closes: #468392

Author: Scott Kitterman
Revision Date: 2008-08-15 11:47:15 UTC

* Source backport for Feisty (LP: #258193)
  - Switch back to libdb4.3

Author: LaMont Jones
Revision Date: 2008-09-02 07:16:19 UTC

[Wietse Venema]

local file descriptor leak with 2.6 kernels and epoll.

Author: Scott Kitterman
Revision Date: 2008-03-01 23:35:24 UTC

* Source backport for Edgy (LP: #197540)
  - Switch back to libdb4.3

Author: LaMont Jones
Revision Date: 2008-09-02 07:16:19 UTC

[Wietse Venema]

local file descriptor leak with 2.6 kernels and epoll.

Author: LaMont Jones
Revision Date: 2007-10-05 17:53:51 UTC

meta: build-depend libdb4.5-dev. Debian and future ubuntu will be
db 4.6, but gutsy wants db4.5

Author: LaMont Jones
Revision Date: 2008-08-13 21:57:42 UTC

* SECURITY UPDATE: processes running as group mail could escalate
  privileges to the root user
* modify src/util/safe_open.c
* CVE-2008-2936

Author: LaMont Jones
Revision Date: 2008-08-13 21:57:42 UTC

* SECURITY UPDATE: processes running as group mail could escalate
  privileges to the root user
* modify src/util/safe_open.c
* CVE-2008-2936

Author: SpecialK
Revision Date: 2007-10-05 17:17:26 UTC

Automated backport upload; no source changes.

Author: LaMont Jones
Revision Date: 2007-03-12 22:42:23 UTC

Updated Czech debconf template. Closes: #414392

Author: LaMont Jones
Revision Date: 2006-08-29 08:49:35 UTC

* New upstream version with various bug fixes.
* use invoke-rc.d in preinst. Closes: #381167
* Suggest: resolvconf
* Fix section 8postfix man page headers to say '8postfix', to fix lintian
  errors.

Author: LaMont Jones
Revision Date: 2006-04-07 08:20:32 UTC

* New upstream version
* Add Galician debconf translations. Closes: #361255

Author: Martin Pitt
Revision Date: 2006-06-02 11:25:12 UTC

* SECURITY UPDATE: Potential SQL injection in some client encodings.
* Add debian/patches/10pgsql-escape.dpatch:
  - src/global/dict_pgsql.c, dict_pgsql_quote(): Use '' instead of \' for
    escaping '.
* CVE-2006-2314

Author: LaMont Jones
Revision Date: 2005-09-01 22:20:12 UTC

mailer type is only a high-pri question if this is a fresh install.
Closes: #14130

Author: Martin Pitt
Revision Date: 2006-06-02 11:18:53 UTC

* SECURITY UPDATE: Potential SQL injection in some client encodings.
* Add debian/patches/10pgsql-escape.dpatch:
  - src/global/dict_pgsql.c, dict_pgsql_quote(): Use '' instead of \' for
    escaping '.
* CVE-2006-2314

Author: LaMont Jones
Revision Date: 2005-03-17 17:15:01 UTC

Sigh. Get rid of failure messages during _shutdown_, too. Closes: #7364

Author: LaMont Jones
Revision Date: 2005-02-04 09:28:18 UTC

Backport fix for Warty bug#5025 (preinst failed to stop postfix during
upgrade). Closes: #6164

Author: LaMont Jones
Revision Date: 2004-10-06 11:50:33 UTC

* Deliver man pages for master.cf services in section 8postfix.
  Remove smtpd.8.gz diversion. Closes: #274777
* Clean up postfix-mysql documentation (created README.Debian files).
  Closes: Warty#2022
* Fix typo in postmap man page. Closes: #271369