mirror of
git://slackware.nl/current.git
synced 2024-12-29 10:25:00 +01:00
d46ef1440f
patches/packages/glibc-zoneinfo-2023d-noarch-1_slack15.0.txz: Upgraded.
This package provides the latest timezone updates.
patches/packages/postfix-3.6.13-x86_64-1_slack15.0.txz: Upgraded.
Security: this release adds support to defend against an email spoofing
attack (SMTP smuggling) on recipients at a Postfix server. Sites
concerned about SMTP smuggling attacks should enable this feature on
Internet-facing Postfix servers. For compatibility with non-standard
clients, Postfix by default excludes clients in mynetworks from this
countermeasure.
The recommended settings are:
# Optionally disconnect remote SMTP clients that send bare newlines,
# but allow local clients with non-standard SMTP implementations
# such as netcat, fax machines, or load balancer health checks.
#
smtpd_forbid_bare_newline = yes
smtpd_forbid_bare_newline_exclusions = $mynetworks
The smtpd_forbid_bare_newline feature is disabled by default.
For more information, see:
https://www.postfix.org/smtp-smuggling.html
(* Security fix *)
14 lines
692 B
Diff
14 lines
692 B
Diff
--- ./conf/postfix-script.orig 2019-02-28 13:02:24.783759137 -0600
|
|
+++ ./conf/postfix-script 2019-02-28 13:05:25.516761071 -0600
|
|
@@ -139,7 +139,10 @@
|
|
# Foreground this so it can be stopped. All inodes are cached.
|
|
$daemon_directory/postfix-script check-warn
|
|
fi
|
|
- $INFO starting the Postfix mail system || exit 1
|
|
+ $INFO starting the Postfix mail system > /dev/null 2> /dev/null || exit 1
|
|
+ # Because this is called during Slackware init, let's make it look
|
|
+ # similar to everything else printed on the screen:
|
|
+ echo "Starting the Postfix mail system: $command_directory/postfix start"
|
|
case $1 in
|
|
start)
|
|
# NOTE: wait in foreground process to get the initialization status.
|