lp:ubuntu/hardy-security/postfix

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

48. By Marc Deslauriers on 2011-05-10

* SECURITY UPDATE: SASL memory corruption
  - src/smtpd/smtpd_sasl_proto.c: don't reuse the SASL handle after
    auth failure.
  - Origin: backported from postfix-2.5-patch13.gz
  - CVE-2011-1720

47. By Marc Deslauriers on 2011-04-15

* SECURITY UPDATE: man-in-the-middle via plaintext command injection
  - src/smtp/smtp_proto.c, src/smtpd/smtpd.c: discard the contents of the
    stream buffer so there is no pending plaintext.
  - Origin: backported from postfix-2.5-patch12.gz
  - CVE-2011-0411
* SECURITY UPDATE: symlink attack via incorrect pid dir permissions
  - debian/postfix.postinst: create pid dir with appropriate permissions.
  - CVE-2009-2939

46. By LaMont Jones on 2008-09-02

[Wietse Venema]

* local file descriptor leak with 2.6 kernels and epoll.

[LaMont Jones]

* Package

45. By James Westby on 2008-08-13

Import packaging changes for version 2.5.1-2ubuntu1.1

44. By LaMont Jones on 2008-04-15

* (2.5.2-0 or later contains all these fixes.)

[ LaMont Jones]

* cherry-pick upstream fixes
  - bounce: segv on one-line template text.
  - sasl: enforce mechanism output filter on client command input.
  - milter-app callbacks didn't receive {mail_addr} or {rcpt_addr}
    information
  - warn_if_reject reject_unlisted_recipient/sender worked incorrectly
  - qmgr was incorrectly initializing client logging attributes

[Michel Grentzinger]

* l10n: french debconf templates update. Closes: #468392

43. By LaMont Jones on 2008-04-02

[Michael Vogt]

* postfix-doc: run postconf only if there is a main.cf available. LP: #203849

[LaMont Jones]

* main.cf.tls: put cache files in the right directory. LP: #207526

[cobaco (aka Bart Cornelis)]

* l10n: new nl.po. Closes: #467538

42. By Michael Vogt on 2008-03-19

* postfix-doc.postinst:
  - run postconf only if there is a main.cf available (LP: #203849)
* Modify Maintainer value to match the DebianMaintainerField
  specification.

41. By LaMont Jones on 2008-02-21

[Helge Kreutzmann]

* l10n: new de.po. Closes: #465479

[Wietse Venema]

* New upstream release

[LaMont Jones]

* rules: add msg-email target

40. By LaMont Jones on 2008-02-08

[Scott Kitterman]

* Add IPv6 loopback addresses to default mynetworks in debian/templates. Closes: #345047

[Benjamin Sonntag]

* SSL certs are needed by the (chrooted) smtp and smtpd processes. Closes: #444951

[Wietse Venema]

* 2.5.1~rc1

[LaMont Jones]

* postconf.5: myhostname documenation unclear. LP: #180551
* postinst: also set relay_transport=error on Local Only systems
* new template

[Miguel Figueiredo]

* l10n: new pt.po. Closes: #463188

39. By LaMont Jones on 2008-01-24

[Sergey Alyoshin]

* l10n: new ru.po

[Clytie Siddall]

* l10n: new vi.po

[Sunjae Park]

* l10n: new ko.po. Closes: #462195

[LaMont Jones]

* Deliver /var/spool/postfix/usr/lib/sasl2. Closes: #426338
* init.d: running check should handle prelinked systems. Closes: #456940
* install/upgrade: suppress 'Unknown host' errors. Closes: #259097
* rules: suppress command output in msgstats target.
* l10n: dropped quote char in it.po
* postinst: set default transport to error on 'Local only' systems.

[Jordà Polo]

* l10n: New Catalan ca.po. Closes: #461803

[Jacobo Tarrio]

* l10n: new gl.po. Closes: #461777

[cobaco (aka Bart Cornelis)]

* l10n: new nl.po

[Michel Grentzinger]

* l10n: new fr.po. Closes: #460086

[Kenshi Muto]

* l10n: new ja.po. Closes: #462187

[Tirumurti Vasudevan]

* l10n: Updated Tamil translations. Closes: #461840

[Cristian Rigamonti]

* l10n: new it.po. Closes: #461791