RHBA-2013:0054 - Bug Fix Advisory

Topic

Updated postfix packages that fix multiple bugs and add one enhancement are now
available for Red Hat Enterprise Linux 5.

Description

The postfix packages provide a Mail Transport Agent (MTA), which supports
protocols like LDAP, SMTP AUTH (SASL), and TLS.

This update fixes the following bugs:

• Prior to this update, upstream example scripts were not included. This update

adds these upstream example scripts to the postfix package. (BZ#251677)

• Prior to this update, the recipient duplicate elimination did not work

correctly. As a consequence, users with multiple virtual aliases could receive
multiple copies of emails. This update modifies the underlying code so that the
recipient duplicate elimination will work as expected if the
"enable_original_recipient" configuration option is set to "no". Now, users will
no longer receive multiple copies of emails. (BZ#474541)

• Prior to this update, the postconf documentation contained ambiguous

information about "reject_invalid_helo_hostname" restrictions. This update
modifies the postconf documentation and the "reject_invalid_helo_hostname"
parameter is now documented without ambiguity . (BZ#514948)

• Prior to this update, the milter (mail filter) communication failed for

headers that are larger than 64 kB. Further milter processing of the email was
blocked. Now, this update modifies the underlying code so that the long headers
are truncated to 60000 characters or less before milter processing. Now, milter
processes these large headers as expected. (BZ#617069)

• Prior to this update, the postfix init script looked for any process named

"master" when checking whether the postfix daemon was running. As a consequence,
the script could be tricked by any other process named "master", which could
lead to problems. This update modifies the init script to check for the process
ID (PID) which is more robust. (BZ#645348)

• Prior to this update, the manual pages for the command line tools "mailq",

"newaliases", "sendmail" and "aliases" were not supported by alternatives. As a
consequence, these man pages could not be displayed. This update adds support
for these manual pages to the alternatives list. (BZ#664627)

• Prior to this update, the biff notification code did not set the FD_CLOEXEC

file descriptor flag on created UDP sockets. As a consequence, the postfix agent
could leak file descriptors (FD) to the local delivery agent (LDA) and to other
processes spawned by LDA. This update modifies the underlying code to set the
FD_CLOEXEC as expected. (BZ#766499)

This update also adds the following enhancement:

• Prior to this update, the postfix agent did not support MySQL. This update

adds MySQL support to postfix. (BZ#502412)

All users of postfix are advised to upgrade to these updated packages, which fix
these bugs and add this enhancement.

Solution

Before applying this update, make sure all previously-released errata relevant
to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 251677 - example scripts missing
• BZ - 474541 - Duplicate recipient filter fails on virtual alias expansion
• BZ - 502412 - Postfix MySQL map support
• BZ - 514948 - Postfix documentation needs clarification on helo hostname parameter
• BZ - 645348 - Postfix init script 'status' not very robust
• BZ - 664627 - mailq manpage does not display

CVEs

(none)

References

(none)