linux-from-scratch/glfs
1
0
Fork 0
mirror of https://github.com/Zeckmathederg/glfs.git synced 2025-01-24 23:32:12 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update to postfix-3.8.4 (Security Update)

Browse Source
This commit is contained in:
Douglas R. Reno 2023-12-29 23:33:09 -06:00
parent 418dddda76
commit d524862aa9
3 changed files with 18 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
introduction/welcome/changelog.xml
View File

@ -41,6 +41,10 @@
<listitem> <listitem>
<para>December 29th, 2023</para> <para>December 29th, 2023</para>
<itemizedlist> <itemizedlist>
<listitem>
<para>[renodr] - Update to postfix-3.8.4 (Security Update). Fixes
<ulink url="&blfs-ticket-root;19049">#19049</ulink>.</para>
</listitem>
<listitem> <listitem>
<para>[renodr] - Update to thunar-4.18.9. Fixes <para>[renodr] - Update to thunar-4.18.9. Fixes
<ulink url="&blfs-ticket-root;19066">#19066</ulink>.</para> <ulink url="&blfs-ticket-root;19066">#19066</ulink>.</para>

2
packages.ent
View File

@ -746,7 +746,7 @@
<!ENTITY dovecot-version "&dovecot-major;.&dovecot-minor;.&dovecot-micro;"> <!ENTITY dovecot-version "&dovecot-major;.&dovecot-minor;.&dovecot-micro;">
<!ENTITY exim-version "4.97.1"> <!ENTITY exim-version "4.97.1">
<!ENTITY postfix-version "3.8.3"> <!ENTITY postfix-version "3.8.4">
<!ENTITY sendmail-version "8.17.2"> <!ENTITY sendmail-version "8.17.2">
<!-- Chapter 22 --> <!-- Chapter 22 -->

15
server/mail/postfix.xml
View File

@ -9,9 +9,9 @@
mirror status, some of the mirrors shown as http are actually https --> mirror status, some of the mirrors shown as http are actually https -->
<!ENTITY postfix-download-http "https://ghostarchive.org/postfix/postfix-release/official/postfix-&postfix-version;.tar.gz"> <!ENTITY postfix-download-http "https://ghostarchive.org/postfix/postfix-release/official/postfix-&postfix-version;.tar.gz">
<!ENTITY postfix-download-ftp " "> <!ENTITY postfix-download-ftp " ">
<!ENTITY postfix-md5sum "7edfadf15fafe73523266829172d890f"> <!ENTITY postfix-md5sum "f2e5ac23387a5824bc365675697277e9">
<!ENTITY postfix-size "4.6 MB"> <!ENTITY postfix-size "4.6 MB">
<!ENTITY postfix-buildsize "156 MB"> <!ENTITY postfix-buildsize "208 MB">
<!ENTITY postfix-time "0.2 SBU (Using parallelism=4)"> <!ENTITY postfix-time "0.2 SBU (Using parallelism=4)">
]> ]>
@ -407,6 +407,17 @@ EOF</userinput></screen>
echo 'alias_database = lmdb:/etc/aliases' &gt;&gt; /etc/postfix/main.cf &amp;&amp; echo 'alias_database = lmdb:/etc/aliases' &gt;&gt; /etc/postfix/main.cf &amp;&amp;
echo 'alias_maps = lmdb:/etc/aliases' &gt;&gt; /etc/postfix/main.cf</userinput></screen> echo 'alias_maps = lmdb:/etc/aliases' &gt;&gt; /etc/postfix/main.cf</userinput></screen>
<para>
To protect your server against the recent SMTP smuggling attacks,
additonal steps are required. Add two lines into
<filename>/etc/postfix/mail.cf</filename> to disconnect remote SMTP
clients that send bare newlines, while also allowing clients on your
network with non-standard SMTP implementations to still send mail:
</para>
<screen role="root"><userinput>echo 'smtpd_forbid_bare_newline = yes' &gt;&gt; /etc/postfix/main.cf &amp;&amp;
echo 'smtpd_forbid_bare_newline_exclusions = $mynetworks' &gt;&gt; /etc/postfix/main.cf</userinput></screen>
<para> <para>
Note that if you are following an online tutorial to configure Note that if you are following an online tutorial to configure
Postfix, the tutorial may refer to a lookup table with Postfix, the tutorial may refer to a lookup table with