From 2b78642fcc7ee3ea7d7cb8cc7cb750029f30cdae Mon Sep 17 00:00:00 2001 From: Patrick J Volkerding Date: Sat, 23 Dec 2023 02:48:56 +0000 Subject: Sat Dec 23 02:48:56 UTC 2023 a/glibc-zoneinfo-2023d-noarch-1.txz: Upgraded. This package provides the latest timezone updates. l/libsass-3.6.6-x86_64-1.txz: Upgraded. n/postfix-3.8.4-x86_64-1.txz: Upgraded. Security: this release adds support to defend against an email spoofing attack (SMTP smuggling) on recipients at a Postfix server. Sites concerned about SMTP smuggling attacks should enable this feature on Internet-facing Postfix servers. For compatibility with non-standard clients, Postfix by default excludes clients in mynetworks from this countermeasure. The recommended settings are: # Optionally disconnect remote SMTP clients that send bare newlines, # but allow local clients with non-standard SMTP implementations # such as netcat, fax machines, or load balancer health checks. # smtpd_forbid_bare_newline = yes smtpd_forbid_bare_newline_exclusions = $mynetworks The smtpd_forbid_bare_newline feature is disabled by default. For more information, see: https://www.postfix.org/smtp-smuggling.html (* Security fix *) --- ChangeLog.rss | 35 +++++++++++++++++++++++++++++++++-- 1 file changed, 33 insertions(+), 2 deletions(-) (limited to 'ChangeLog.rss') diff --git a/ChangeLog.rss b/ChangeLog.rss index d00067291..3a1bc6477 100644 --- a/ChangeLog.rss +++ b/ChangeLog.rss @@ -11,9 +11,40 @@ Tracking Slackware development in git. en-us urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f - Thu, 21 Dec 2023 20:46:11 GMT - Thu, 21 Dec 2023 21:29:58 GMT + Sat, 23 Dec 2023 02:48:56 GMT + Sat, 23 Dec 2023 03:30:36 GMT maintain_current_git.sh v 1.17 + + Sat, 23 Dec 2023 02:48:56 GMT + Sat, 23 Dec 2023 02:48:56 GMT + https://git.slackware.nl/current/tag/?h=20231223024856 + 20231223024856 + + +a/glibc-zoneinfo-2023d-noarch-1.txz: Upgraded. + This package provides the latest timezone updates. +l/libsass-3.6.6-x86_64-1.txz: Upgraded. +n/postfix-3.8.4-x86_64-1.txz: Upgraded. + Security: this release adds support to defend against an email spoofing + attack (SMTP smuggling) on recipients at a Postfix server. Sites + concerned about SMTP smuggling attacks should enable this feature on + Internet-facing Postfix servers. For compatibility with non-standard + clients, Postfix by default excludes clients in mynetworks from this + countermeasure. + The recommended settings are: + # Optionally disconnect remote SMTP clients that send bare newlines, + # but allow local clients with non-standard SMTP implementations + # such as netcat, fax machines, or load balancer health checks. + # + smtpd_forbid_bare_newline = yes + smtpd_forbid_bare_newline_exclusions = $mynetworks + The smtpd_forbid_bare_newline feature is disabled by default. + For more information, see: + https://www.postfix.org/smtp-smuggling.html + (* Security fix *) + ]]> + + Thu, 21 Dec 2023 20:46:11 GMT Thu, 21 Dec 2023 20:46:11 GMT -- cgit v1.2.3