<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="152">
<package pkgid="b3fef6b0ef75e65b5d2bdf1d3bcd0d8c4d306fa2b1204c6225625148e3423468ca68cbfa0fa65f42ea8b8863e7ddc0b797eb32db43a89ac4676901175daa6e97" name="courier-authlib" arch="armv7hl">
  <version epoch="0" ver="0.72.4" rel="111.19"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="16ad846b7b8907f61fe7fb2360b42c98314bbf61e95b55d387c4c3342147ecfbb0cde7ab31856436d61c09a076df47cc08ba7db369ed112731b57be3265c7389" name="courier-authlib" arch="src">
  <version epoch="0" ver="0.72.4" rel="111.19"/>
  <changelog author="suse+build@de-korte.org" date="1512388800">- update to 0.68.0
  * authldaplib.cpp: Rewrite authldap in modern C++. Autodetect
    and automatically reload authldaprc when it is changed. No server
    restart is required.
  * authldaplib.cpp (operator): Fix compilation warning.
  * checkpassword.c (do_authcheckpassword): Check for a null return
    value from crypt().
  * authsqlite, authmysql, authpgsql: Rewrite these modules in
    modern C++. Autodetect and automatically reload the configuration
    file when it's changed, no server restart is needed.
  * userdb/userdbpw.c (main): Use bcrypt_gensalt() on OpenBSD
  * courierauth.h: Move declarations from cramlib.h into courierauth.h,
    exporting them as part of the public API.
  * configure.ac: Rebuild against updated courier-unicode API.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1554811200">- Add the missing dependencies for Tumbleweed.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1573560000">- update to 0.69.1
  * authldaplib.cpp (ldapopen): Make sure that we rebind if we reconnect,
    if so configured.
  * authldaplib.cpp: Fix handling of LDAP configurations that use the
    same LDAP attribute for two or more variables.
- update to 0.69.0
  * authdaemond.c: set FD_CLOEXEC on socket file descriptors, to avoid
    leaks to child processes.
  * authldaplib.cpp: improve automatic reconnection logic to the LDAP
    server.
  * authsaslclient.h (SASL_LIST): Reorder SASL methods, strongest
    first.
- add courier-authlib.keyring for source verification
- remove obsolete SysV courier-authdaemon.init
- cleanup spec</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1584446400">- BuildRequires postgresql-server-devel on Leap &gt;= 15.2</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1590667200">- update to 0.70.0
  * authsasl.c (auth_sasl_ex): For EXTERNAL, base64-decode the
    initial authorization string, since if none is provided the
    callback's reply is base64-decoded.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1592568000">- update to 0.71.0
  * userdb: Make userdb script accept UTF-8 domain names. Document
    it in the man page.
  * Configure and installed versioned shared libraries, both shared
    and the authentication modules.
  * Update INSTALL. Remove obsolete pre-courier authlib migration
    script and documentation. It's been long enough.
  * Add _meta API functions with an extra auth_meta parameter,
    keep the original functions as wrappers that provide a stub meta
    parameter. Use this to pass arbitrary variables to authdaemon.
  * authdaemond.c: retrieve the TCPREMOTEIP variable if it's provided.
  * authpam.c: TCPREMOTEIP, if set, sets PAM_RHOST.
  * Makefile.am (commonldflags): Link all libraries with the
  - -enable-new-dtags flag.
- rpmlint
  o addFilter shared-lib-calls-exit</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1612958400">- update to 0.71.1
  * Clean up header files, do not install autoconf-generated
    courier_auth_config.h</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616241600">- update to 0.71.2
  * No relevant changes for (open)SUSE build
- update source download URL
- fix unsafe permissions for socket directory (boo#1183724)
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1617537600">- Change ownership of socket directory from root:root to root:mail
  to allow postfix SASL auth to work
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="11b35493f668b9fb8b26fa6a80696fff980cf380d1e5d80388998a8ae7472ab84eb85d6a65f415a1a17c911a3d0360695bb99f246c847a7f2177f9a76c870c93" name="courier-authlib" arch="aarch64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="f0d3d848ae457de338f0d47317ab0d57861c9135c82c46b9a382a6a75d844f25120019888a6258946493b3181eb32c7466157d9f9b0fd6b189eb58c5a8a47928" name="courier-authlib" arch="i586">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="1cab0b9ebac2604f0644b5c1e7e50d1ca151bf2b856f7bdd9bc2072e071a4b1aecc3220af37c1bd1496803fc2471d7cafa396d36dd1ac38febf33f88b3221d0d" name="courier-authlib" arch="ppc64le">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="d5b35c6f0df0b711545b4475ed92e3ed00ea8edbb3941f3968fa53b9740ddc7c40f18346dfa3a362061dbecce43bdeb39026d37f2bb4387c0d252310354f7c99" name="courier-authlib" arch="src">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1573560000">- update to 0.69.1
  * authldaplib.cpp (ldapopen): Make sure that we rebind if we reconnect,
    if so configured.
  * authldaplib.cpp: Fix handling of LDAP configurations that use the
    same LDAP attribute for two or more variables.
- update to 0.69.0
  * authdaemond.c: set FD_CLOEXEC on socket file descriptors, to avoid
    leaks to child processes.
  * authldaplib.cpp: improve automatic reconnection logic to the LDAP
    server.
  * authsaslclient.h (SASL_LIST): Reorder SASL methods, strongest
    first.
- add courier-authlib.keyring for source verification
- remove obsolete SysV courier-authdaemon.init
- cleanup spec</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1584446400">- BuildRequires postgresql-server-devel on Leap &gt;= 15.2</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1590667200">- update to 0.70.0
  * authsasl.c (auth_sasl_ex): For EXTERNAL, base64-decode the
    initial authorization string, since if none is provided the
    callback's reply is base64-decoded.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1592568000">- update to 0.71.0
  * userdb: Make userdb script accept UTF-8 domain names. Document
    it in the man page.
  * Configure and installed versioned shared libraries, both shared
    and the authentication modules.
  * Update INSTALL. Remove obsolete pre-courier authlib migration
    script and documentation. It's been long enough.
  * Add _meta API functions with an extra auth_meta parameter,
    keep the original functions as wrappers that provide a stub meta
    parameter. Use this to pass arbitrary variables to authdaemon.
  * authdaemond.c: retrieve the TCPREMOTEIP variable if it's provided.
  * authpam.c: TCPREMOTEIP, if set, sets PAM_RHOST.
  * Makefile.am (commonldflags): Link all libraries with the
  - -enable-new-dtags flag.
- rpmlint
  o addFilter shared-lib-calls-exit</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1612958400">- update to 0.71.1
  * Clean up header files, do not install autoconf-generated
    courier_auth_config.h</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616241600">- update to 0.71.2
  * No relevant changes for (open)SUSE build
- update source download URL
- fix unsafe permissions for socket directory (boo#1183724)
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1617537600">- Change ownership of socket directory from root:root to root:mail
  to allow postfix SASL auth to work
  % courier-authlib.tmpfile</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="3b318706a0ba8b10e1838720c9b780f1580b1cfa2af62c96af9fa95ad5be417ab41e6494f721eeba1449bdcb941a5911c3f97c68507ff04cf62578437833ddcb" name="courier-authlib" arch="x86_64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="1d8f385cd109f70bdc0225e99fc4f2e843c303abbe0fcc51e47d1ab4818b4abaf8c8c0346391728edec99600fe07f1c37cbd6840d3f84987cff54633e014d126" name="courier-authlib-debuginfo" arch="armv7hl">
  <version epoch="0" ver="0.72.4" rel="111.19"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="46f41d67ee2bb724db27de178143e2f44940318bf503115abbc156f146e307bc5531909b9a8d3eaf733f3236a496f89a04e82e5d0bd1ea0fd9c793cbe650e0f2" name="courier-authlib-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="feb72335c92027adaa7eaed7c1cb40a5e2bcbc8c34a96f6db5f901f67c6d0db26d7bcfa85709ffcdbb308899e0c4551763e2787bd6803adc844da49f34b39bcd" name="courier-authlib-debuginfo" arch="i586">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="d9cafa5e6f7e66676bdc9bb2c4373442cf39e796e23ea0e17b3992af09cec4f7ef362c8444aaa31267788d35e38284c44cb2f7fc2b2fab20007449a2363fd5d1" name="courier-authlib-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="10f659e2581ce9d27c6ffd811d682239acee0871d6d23f3410dd8f31eae0897408882fd5cf0931798cfcec0615b7e874870ad1ca9f61f2416c0fdc586b37d54e" name="courier-authlib-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="005ae1bd92eeb342cb2de8971d21f8bbe8e129245cca7d798f7c83c7bc3bb49c9b2b39fd4911add55695dd801942c28644b317aa9b21fcca384dcd3589bc8ce8" name="courier-authlib-debugsource" arch="armv7hl">
  <version epoch="0" ver="0.72.4" rel="111.19"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="5c585a2c728beb3a0ddebd328bba5f98ab7cc961a6658f9bbd82b82b6d2ceb8f47cc2dcff261272ca772c92180cfb30404ec15e29466c14135056da8c258b02a" name="courier-authlib-debugsource" arch="aarch64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="70289b7ce4478dda12012e7ee4fae4e0bfee6a662d9c30697bd86beaedb81b95aac79f1ecdafdc4d718635a998f15206aa81a6334d85a8da88b7b6ee4001975f" name="courier-authlib-debugsource" arch="i586">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="5c6d8de1b1d9f0b460928e712c286708c3bdb7c57526a58755d7366bde0946b9d5ea71c763366f1d1e44d9b6731f46659c4e7f569b9435ee0930ef9f1f83ce36" name="courier-authlib-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="c2f42e4837e3f7e376dae59c9d9b75d8da9c687c3b3644051a1e70affcd2cccc3a899376c11b28b31123d4449ed20bae2460df1197f088806116f1b2a9e4843f" name="courier-authlib-debugsource" arch="x86_64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="db07dea0f6601d4406f1fefeddd096e79338605b3ba8a3c85d03132c685f99ee692d9e39c3a717d780b248e25c8f6dfb01bb7fc143ad1a480863266961b0b1ab" name="courier-authlib-devel" arch="armv7hl">
  <version epoch="0" ver="0.72.4" rel="111.19"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="701661eb331888ace2936d43dda0893bc4f154a582e8fb646487a476c958636576fcce309ca5258a3bd1f2cf9aa2edd153d29f4fc5fbb5ef416851346f9e6a87" name="courier-authlib-devel" arch="aarch64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="a058a86cfd824323795be1ad1cbfec6a747777c5f7d2e56fc6e397b485ce2478a340f74fd19029c64d8a4baec8f7276d5761b8d3c6f7709fd26a58c5158e48b3" name="courier-authlib-devel" arch="i586">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="140496425d65ab4aba57400d29a5d36cf74605460fe4c788ff46ec5521cb13eab157c24210f1c1973e8f2462d9e6b6ef2ed77d68817c97bf469db7ebb0501719" name="courier-authlib-devel" arch="ppc64le">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="fc6d092b001ef13560dfc91064fcf8b3213c2e15840c21ffb467b7655dac202b806469806c79d13d64734baf2e6a7251b1dda325901d2ef4546a90d7369fd488" name="courier-authlib-devel" arch="x86_64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="d3fee33524985d959dc26a101cee117e4a471bf8ef2de611d976826c403b28c9768535ba89006e69e4d886bc2472ad2b1d2212e63a551cd57e7b7e381c838cf1" name="courier-authlib-devel-debuginfo" arch="armv7hl">
  <version epoch="0" ver="0.72.4" rel="111.19"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="a497ccfa25d521dcb9957f5d8358b9928d13746e629cefed10e836ca6fb4e35cd66bc6793439a7390f33f6e58a65ef3167f27b287d951445c65859a4f0b10585" name="courier-authlib-devel-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="f896e2241417a3b26e2772ca6c17577d00378dedee25f391e78e656b8bcf735fae98ab87bd4fe63d0651278f26b6dfefba2748eadd802f0a9ef896fe653481c0" name="courier-authlib-devel-debuginfo" arch="i586">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="dc0167fb11e7cc4a3c1f3ec99936b5d3ce490bda9a476929c48586d0530c527087082a5da3b00dfa8415e0d46c8983ea32936534a241cb55195f0d8deaadd337" name="courier-authlib-devel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="33efb9fa2fd2680d1b1dc3afbcb695fdef41e313fee50da8df103e40538a520d3c068edf926693554fb659eb47d872225f32ec463ed55426f2ed16ed1d389a7c" name="courier-authlib-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="2330c2109ada68ae95cee9b154b46f344280dc811057f6c39c6354023d3999ff4dca4086058d6b00b758f9f1212ddb311ab9d4bb7ebbb1975d4751d2da1e0ef2" name="courier-authlib-ldap" arch="armv7hl">
  <version epoch="0" ver="0.72.4" rel="111.19"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="127dff56464ac6b40dbb6e516b55f3345c36468e3a59a9be57c2c184e742eac71b0d5400e95e68d9c299883bbe2edcc2fd006e7f90ee33ffddad9ec844b11608" name="courier-authlib-ldap" arch="aarch64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="0693caac43bc680903780b5c68b445ac92607a05ea8918f9ffea71ac93283a6528dd5882782658a0a51d956e51bc6f929ec4dd33d597758fcb737e84ca0db7fc" name="courier-authlib-ldap" arch="i586">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="491440861bfbe29815e1f44f80adfbad4a7241ee680a201907ec01e482d863240e4d6063177e9772cbf45290f3ebea4514f2c92e0349700e2d83272264cb0d53" name="courier-authlib-ldap" arch="ppc64le">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="f9ecce51af7a07b51d504f1e00114a76d9d3dc7251f8edb11bf574f82a89bec62776b7743f6842b9ef26a4cd9fd45a76ddd63726e95f422fbceb837a603a6e0b" name="courier-authlib-ldap" arch="x86_64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="9b261f06b84663cbec33dddd4d19174f11049f9a593e112af4943a6659d3902ae73dbfd02cd8ff284c70c8c11859ade4013d44a007a447ba8c7e9ea4b282f852" name="courier-authlib-ldap-debuginfo" arch="armv7hl">
  <version epoch="0" ver="0.72.4" rel="111.19"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="407a2aa9510a0432107e005e6d5d3e57033428c02dfdd1a97d0fc74de86e13de4f56a93926b2a5518f16926e6d04dcdd31163c1481933ca65a8cb0d15d47a9da" name="courier-authlib-ldap-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="d38f05df103c20c52762febc89c87abe84491e3002bb18f8f5b5871771116f9d079646479b8c80becfcfed1f6050c727dfd26db07bc3e64203b030e24f8b89d1" name="courier-authlib-ldap-debuginfo" arch="i586">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="c10e5b41e123ece1c6f9bb1cbbeb7c38b67ba6a393405071de46e2f9507d91687c33f97f6e8d4b7820b7581adf0005c13fc6cb81d136be7c36aa5bbc81329eb0" name="courier-authlib-ldap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="33e86b0dd58e5029a4b81e8346120bd55dc20c1b8c3a42d7a40cb4d00bef143f7f4720722d72b5120861371cc16412f50171e4718e86686e266cff9bd8f69a51" name="courier-authlib-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="5766843157c3b4cbff05899808e1ecac1d2791e00c4dd38e999dc10d21c6234e844d2392c093f57b9b271ce2f8c2f0e0fe80e34eac3bf0a084fe1a0a286e02ab" name="courier-authlib-mysql" arch="armv7hl">
  <version epoch="0" ver="0.72.4" rel="111.19"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="62ce5f4fbdadab395570b01f19e58ae11a58e19c7437bc53a601c2e9970f7be472a3ec2a7306bd6b36fac53c30b9ac9c4dc4cd0d44f0594d34ba3dc693d7f6f3" name="courier-authlib-mysql" arch="aarch64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="ade2a5a45ccb4ef129d6abfdee73d768cb3c1cb1677eaeac7495e08c6649a61509d8cfe8db132444fa57d863e6ddb428264603a70d9952a0e406c0055acd7e59" name="courier-authlib-mysql" arch="i586">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="c52e024e287a8ea0d53548b41efc6dc318a21743bd5f2f366d7cd02f71972ae56c25010be8aa809183a60b06bb056218522e5b93af1bd8a483f64a05f157a057" name="courier-authlib-mysql" arch="ppc64le">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="f3f563d1a73a3bd67982ae6119181b8925cd522dfab770248c2eb09fb1ff43ad1070d050a675685ae026c45b88f489a62efbd004b4eec8686b0775afa250accf" name="courier-authlib-mysql" arch="x86_64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="9d576cbf2950aa0b305bdf0987500b6427614125bd30b18d0cd225921501a3596f22132eb0a83cfd332834afe04b53aa11ef6e0fd4123e627ddd080d8cbfa988" name="courier-authlib-mysql-debuginfo" arch="armv7hl">
  <version epoch="0" ver="0.72.4" rel="111.19"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="132ce0359edd51b7553858efb05051c94faca02009df99bce7620817f7799e2ac322b114903a807a53e0c8567d6bf83531ca79eb4c2bb9f4c39be1add8b3d91d" name="courier-authlib-mysql-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="c9f52e5be7f1ad02e051b00a53ed6bad8c56bb6c2518c3cf88993647639879ca4d04e394b07ae13b2644b304aecaa8bd23e1e2fab6ed9d1713d7cbc55375a2d4" name="courier-authlib-mysql-debuginfo" arch="i586">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="25e550779fe3572d77ab2ff4d5ec41765bd7e6a316d4ecf171e2b136eb504b60d858491088d9db69326e0cf71f95b01abdbdf81ad2e8ddd6aea31131686605a1" name="courier-authlib-mysql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="f4859fd3f6874d2e09097f7219626584414022da5e8d43be47b42b7c1ce8c83bfe989f2ea64427eded89d13d0ccd69c8c5aad752f6479c2ed9a62d2f3d78c810" name="courier-authlib-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="f785e2c5264a3d83dc600144e4989c73d759a8f3672f59e82561254955fce33ef942da2e6a1aa056ecc32b03ef5cc89f82ce0e6c97071e6ba6a473cd564efb37" name="courier-authlib-pgsql" arch="armv7hl">
  <version epoch="0" ver="0.72.4" rel="111.19"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="4bd5132605373e7b11d14fd71fdfd921351e6967f4f8a16642c9af97378e2d26314826c98cad5482798a45c8207595d71e7fedef58f75479ccbb823db26db311" name="courier-authlib-pgsql" arch="aarch64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="a4622c587ad5909a070c9e654897682f5b88831abf48016fa5cf47c78b9661be21ac55d3b1b46ca2011ce9787f0386fe308734f833ff40ae11abc5ea14391ec0" name="courier-authlib-pgsql" arch="i586">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="422b257a8fea5523395f0be148f8c9d270eceb07e757b313dbea66a5c47537e2df3d2547ff03ae3ad9be4e4170415bcd646890fe691b9bbf4802cfd43bead7e6" name="courier-authlib-pgsql" arch="ppc64le">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="becedcd35646c6cf6897543f7ccdd0c0c4b95811c1fb8594dcbb667a45e0bdbf1a2bc04e12fa6e9c9b8bad376a044c21098857cda56f8a9ddfdb2ac7aa6a7df3" name="courier-authlib-pgsql" arch="x86_64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="f7265abb205928c39ce25dfe0dcaa884f8d4e165f41b55d6dd6a23bffc554da90f2d3b0244e0bbc93058623e03acce0d495cb3d80d387a627b93a5dcbedf7aa4" name="courier-authlib-pgsql-debuginfo" arch="armv7hl">
  <version epoch="0" ver="0.72.4" rel="111.19"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="c0b3bad07af3fb5c4dfc916781233820163a097aa0e32ca2a978ae22ef18a2d5b8a0e6be8a167741b996702bb1bc8a590ac2d3bd23c325e340388dee23197848" name="courier-authlib-pgsql-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="0cbb2f84fa0c9f365077300e184659c41bfc07bcfb70df911d4eb57c65d50f5fccd45e74a754a3b7eca37a427a80a01416d9ddd84b7220210193f4152c4e1c19" name="courier-authlib-pgsql-debuginfo" arch="i586">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="bf6911cc8371a4dc613efe9a85cd9b2711205f8e9d389409680ffd44f557df9e8438479437ec83e1b770555bb8920676ee9c3615d84802b83df70041980bc5fe" name="courier-authlib-pgsql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="c932ffed45af92dcf81d47724b819ac8da2c5549f276814c40ac230df8e0a383c966885f11c43ec457555d2e9a7a3cb7e29e2082b69e60ec61b210ecdb75a5b0" name="courier-authlib-pgsql-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="c3591ecd35a590bd0e84561d6cec878ea75c85064158af6d4c55e4cea482c8b67f0e23a01d037aa9694d750056d05de061d9b440220f84814efcb92082e6abe2" name="courier-authlib-pipe" arch="armv7hl">
  <version epoch="0" ver="0.72.4" rel="111.19"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="8d4c9cd38352b9de0c446316efbaff6b41d1c2c2edf8395ea68c4894cb8add328cbc9466fbe9e8f08e5e8992380de9708a7386154808f26616ff4bdbeccedfe3" name="courier-authlib-pipe" arch="aarch64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="64bfa84be1a6787a7741cdc7b21e78b77681b972f83d45bf39a92e12f34a1b594f4da34c1187bfdb836d883cdaa7f04ae61f8f7a5afa316e9f43dd7e34cfc7c4" name="courier-authlib-pipe" arch="i586">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="c7652a0455787b30f63eabb9808af00d6cf120bdb569287a62378bf4cf25d69bb4ddfec9209bf64ca2a3037758e4490aacb06014b0170fe15ff55828d903ace7" name="courier-authlib-pipe" arch="ppc64le">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="84ae025b6d76578ac796026832da6fbc7d4ba8ae05cb87efdb4ea58d0ad86b6b042b53640ea7f5d110e23af2be0b2d0640dafac114dadb7dc906f6e8eb18a523" name="courier-authlib-pipe" arch="x86_64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="e47775ac3edde4300a46ae5a9af6e71524ee85af8ed543153c5886c019986e4096d4ad5ee13b9c62d0e769481b09f3dea41f9858ba7c3df2edc790ed9046b64d" name="courier-authlib-pipe-debuginfo" arch="armv7hl">
  <version epoch="0" ver="0.72.4" rel="111.19"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="37e303b120c3d496b3fc3cefa84c9bb700ba6f16163dc59990a0a7a140b601b40612dc6c38e33a83086bd113cb3257a8b3a46f8ef9846e2f0dc4e78dbc94a79a" name="courier-authlib-pipe-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="bb6ab33777b01459cfa4ef0a1e04aac5e787964709cc01205dccf98c20b5a8a9d112e606504fc2fb594e2a04636c1931391cb762cc1e5753e3c940bbf280be4b" name="courier-authlib-pipe-debuginfo" arch="i586">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="d2ff9b7128c4eea14b13ecd6f15f9de18b621b01674b35fefa80cc35c44a5f3a26f48fb280a40b4a16fa69e9b6caa082ca14c86bb7d776ac1816e0e75b836a4f" name="courier-authlib-pipe-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="443a0bbe1c714f1608b9338b433ee90a4739a065d7c085e065f0b4a0ab0bd3ea83e33b41b18137e049e537b50fdf27632be476016b929a1c1982fc0df042e474" name="courier-authlib-pipe-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="def4b344c833cc29bc3bee93009525bbd8770aa86017b3c42aedca72637f52cbdc323be6fcb8e08a64dc7b3990c94af7f154efbcd1959d0d2eef364c065a6e34" name="courier-authlib-sqlite" arch="armv7hl">
  <version epoch="0" ver="0.72.4" rel="111.19"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="cca0635bb91dc5b502c8e32e08a2c157fbc03985aa8e83f0ef757480f79379f9486314591a4ac4a143f84d6d87b57682ca107fc75927251c0cb16542868d2b94" name="courier-authlib-sqlite" arch="aarch64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="a5f7d83421f0a09b9e23157e59139dfed2b47bd103ce5dcfcb0731d06b86143dcbb7add39105d70158372128925e9ba7061f7d66d0c9ccf6a89a5184b586e3d5" name="courier-authlib-sqlite" arch="i586">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="d8176677d0b4407b4866282a002cc47a1f8de25a3da646aa8fababc1fa133f4703c41eb7a6fe093104751609b5260e6ec2d1bfea6fa9be6101accf540cdaa725" name="courier-authlib-sqlite" arch="ppc64le">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="6e14de18e4a7cf8bbe417656b7f1ac4b4a67d04c1cf982370bb8b21303a47608b4447362f4c9a61f6d0d632fe465ec6d0b031922f9bd86efea6ece6c23eac92a" name="courier-authlib-sqlite" arch="x86_64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="d1f12a1847b241174038c799b58f6194ed67d8786b62226d643a5df0de434c256bbff10ff175cd396f483671b16d12161170f89581dd1dd55143eec36b7ef3a3" name="courier-authlib-sqlite-debuginfo" arch="armv7hl">
  <version epoch="0" ver="0.72.4" rel="111.19"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="2b3123246c031067e7e4b5693c52166986fe62a8afa67a0d6b0fc1cfae4a3f4316638a85a35c6f7fc2dfea31f0a44be5016f8b08d84a7d0422d206cfae58a0c9" name="courier-authlib-sqlite-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="ea29bf87d45ffb96bb9268a5521741b0d755e330d7fa14d52206cb8bb0dc4f4de086de1d504f83abc7509cfe7b105b340850f9378b2c4e0cbfd60bb240d77055" name="courier-authlib-sqlite-debuginfo" arch="i586">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="b3866d454c586ef8e1f641a29d39bf9f0d5fbc489aef8d63f644a54f6ca69c0e3efd859f1710c024f5fbeede835be6e183d224210e8918332fc14ec419d0ed67" name="courier-authlib-sqlite-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="6a9fcb8804aeac28584d0f6af9a233f3810ff8de263098e0df6e63a9c38646f2d927cece68178139ef9aa1ed401ff4e22108a2c9048d1d2d4238b8e4c6bc273c" name="courier-authlib-sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="d43e5847cbd4794939faf99657bb751ee129abbfecb0aa3e1fa0cbc125e01e7b8651b4ea944b01f4962c7f29fe262ba0301ea5dd38f276de476ec79b8f26cd8e" name="courier-authlib-userdb" arch="armv7hl">
  <version epoch="0" ver="0.72.4" rel="111.19"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="5516eb7243ec03125e7025dfcc3944e8c7ff7e73a43a81e76a1f112b981fdab9537245ec6357622075e6aecf10df4a03e0d20e65147ad21350046e2c5e6306ba" name="courier-authlib-userdb" arch="aarch64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="d989e6e872432d646f68088f16aeb5e628a1627bb6947d83f8a76dbd60f183b052d5951f9e94efd2fb2a3495bd381b931917390c6d30387d4f3e84e976293bb6" name="courier-authlib-userdb" arch="i586">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="5d91c98a459e9f99251972fd223c9654aac63c35701dd7159a1e3a1404c863447bc88bd4824593fc9c42f6ab960afb9c9976082a0ede667984c94e2168a3aa21" name="courier-authlib-userdb" arch="ppc64le">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="35ebe6d7f01b56fc579c7666198efeb68dcdd75b58494d4991db9935ef4b60cfac8854cd3695274bf656dd350ce6888575702d72d257b46cf53aa9f9f9c27944" name="courier-authlib-userdb" arch="x86_64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="21049707b7e92c0481b545320351849caa2122d1f335a13ca72cdfc2e9c32d428e373fce6b3e6da8bfb5fcaa3469cef233c1f9f47712f1b7b872da623cf7cde5" name="courier-authlib-userdb-debuginfo" arch="armv7hl">
  <version epoch="0" ver="0.72.4" rel="111.19"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1618315200">- update to 0.71.3
  * courier-authlib: Report failed LDAP authenticated bind correctly.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1630324800">- Added hardening to systemd service(s). Modified:
  * courier-authdaemon.service</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="efec27a3b219ab237525886c24160b4724e0084ae79fd8cd2c162970a279cd3794d55c5b9acc20371db4aba7c1c6953526d1195af0defec4f1f2eacfb9dc96fe" name="courier-authlib-userdb-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="1c9b80487f46e1aaa7c31938fcaeab0590d958670fbdc543dc4dedb1e3dc4c5eeae994b3359cd092aa900bc8e4eac80e9acf0079c08f00a468f26276f72ff466" name="courier-authlib-userdb-debuginfo" arch="i586">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="fa418fa814c82c52820780ef2ec4a4bc4d5fe63aa34410e023ce2900c099ee695c1a10583756fac7de3e510433db7ca04299d53c57bf9b09b2eb3a691f36a6a6" name="courier-authlib-userdb-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="84cef1bf050db1f997574a25e08bac00bb7d8e4e1869e46eaa3e52a52f80e1bebdc17d805c9c39bb632e5caef72b2f8f195869f3cfa3257208fb087b8215be24" name="courier-authlib-userdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.72.7" rel="3.11"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1646740800">- update to 0.71.4:
  * Fix a theoretical memory corruption during authentication if the
    process runs out of memory. The server does not do much memory
    allocation prior to authentication, this is mostly academic.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 0.71.5:
  * gcc 12 and autotools update.
  * Add scripts to create installable .deb packages, update
    documentation.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 0.72.0:
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
- update to 0.71.6:
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.
  * Remove obsolete setting from authpgsqlrc, update connection string
    template.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1706702400">- update to 0.72.1:
  * Assorted fixes for potential issues with proper C library usage.
  * Updated rpm and deb packages that guard against updates to newer
    versions with different compilation options.
- update courier-authlib.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1708516800">- Change to %autosetup as RPM 4.20 will no longer support %patchN</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 0.72.3
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
  * courier-authlib.spec.in: Update dependencies to build against
    mariadb-devel instead of mysql-devel.
  * courier-authlib.spec.in: Packaging fixes.
- update to 0.72.2
  * courier-authlib.spec.in: Fedora 40 fixes.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 0.72.4
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 0.72.5
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * packaging/debian/control: Fix deb package dependencies
  * packaging: Fix rpm packaging, use a synthesized changelog entry
    with the current date, to set the rpmbuild epoch date.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 0.72.7
  * Update makeuserdb script to handle automatic configuration
    file backups created by package managers.
- update to 0.72.6
  * Fix C++ linking issues
  * authldaplib.cpp: Fix rebinding after an automatic reconnection.
    Update sample authldap.ldif and remove authldap.schema</changelog>
</package>
<package pkgid="355a1c2a5d75a79ad1030ae776f11c99d768641f84b20f686db30bad13cc06e63bc341d6f9eb1f73e7b1e1776212cb1c81c49552c70f035e522f295e3f8b88a0" name="courier-imap" arch="armv7hl">
  <version epoch="0" ver="5.2.11" rel="117.20"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1642420800">- update to 5.1.7
  * Fix linking failure on some Linux distributions.
- update to 5.1.6
  * Fix linking failure on some Linux distributions.
- update to 5.1.5
  * Fix minor memory leaks. If valgrind is installed, "make check" will
    run it to check for memory leaks.
  * Convert to PCRE2.
  * libcouriertls: use ALARM to kill couriertls if the server process
    terminates but openssl hangs trying to shut down the socket.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 5.1.8
  * gcc 12 and autotools update. OpenSSL 3.0 update.
  * courier, courier-imap: remove the --disable-root-check configure
    option, now that make check can deal with it.
  * Add scripts to create installable .deb packages, update
    documentation.
  * imap/authenticate_auth.c: Fix broken SASL authentication.
  * Adjust behavior of inherited ACLs. After deleting and recreating
    a folder, have the recreated folder inherit its parent folder's ACLs,
    normally, instead of mysteriously restoring whatever ACLs the folder
    had when it was deleted.
  * Fixes to Makefile to workaround test suite failures related to
    permission checking when make check runs as root.
  * Fix minor memory leaks.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 5.2.0
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
  * make install: replace absolute links with relative links.
- update to 5.1.9
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1671364800">- update to 5.2.1
  * Fix a compatibility problem with OpenSSL 3 that results in TLS
    negotiation failures in some non-default configurations.
  * Fix an error in courier-imap's installation script that results in
    creation of absolute, rather than relative, symbolic links.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676894400">- update to 5.2.2
  * imapd.c (append): No longer accept a non-standard single
    flag name instead of a parenthesized flag list to APPEND, due to
    ambiguity with the UTF8 extension.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1680696000">- update to 5.2.3
  * all: update configure.ac to require at least version 2.0.5 of
    libidn</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1682856000">- update to 5.2.4
  * Fix spurious gcc 13 compiler warnings. Have configure script
    include the standardized location of the CA certificate bundle,
    in addition to various legacy compatibility paths.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1693396800">- update to 5.2.5
  * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set.
  * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for
    rogue symlinks in maildirs.
- update courier-imap.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- update to 5.2.6
  * Fix generated Date: header issues in timezones that have a
    non-standard alternate timezone offset
  * pop3 and imap logs also indicate whether the connections used
    starttls or stls
  * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1722686400">- update to 5.2.7
  * tcpd: support per-local port custom -haproxy configuration.
    Multiple updates to the couriertcpd man page, updated documentation
    for ipv6 and CIDR support.
  * tcpd: remove -noidentlookup, implement -haproxy
  * couriertcpd: set the IP_FREEBIND option on all listening sockets.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 5.2.9
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
- update to 5.2.8
  * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH
    setting, fix warning with newer versions of grep.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1725192000">- update to 5.2.10
  * pop3login.c (login_pop3): Fix a problem when proxying UTF8 POP3
    connections.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 5.2.11
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="f3bff69f19d74e72269b42e114984d36a7a51a427aa2ba93d3107d7290e4853368dc6a391d61b780ce024124fde3890b7db17ab301bd8e3602432fb124e2c2b5" name="courier-imap" arch="src">
  <version epoch="0" ver="5.2.11" rel="117.20"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616241600">- update to 5.1.0
  * Implement support for the TLS ALPN extension.
  * Replace FAM/Gamin with inotify.
  * Install the maildirwatch tool.
  * Remove the IMAP_ENHANCEDIDLE setting from the imapd configuration
    file.
- update source download URL
- remove courier-imap-Makefile.patch (upstreamed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616328000">- update to 5.1.1
  * Fix swapped TLS_CACHEFILE settings in the IMAP and POP3
    configuration files</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616846400">- update to 5.1.2
  * make: Individual files that did not end in a newline were
    not handled correctly.
  * imap: adjust error message.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1619352000">- update to 5.1.3
  * pop3d: pro-forma POP3 LANG extension.
  * pop3d-ssl.dist.in (TLS_STARTTLS_PROTOCOL): Remove duplicate entry
    in the pop3d-ssl configuration file.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1627905600">- update to 5.1.4
  * all: code changes so that courier can be compiled with -Wall
  - Werror gcc flags. The default compilation flags are not changed.
    This also includes changes to the configuration scripts, which
    includes removing outdated configuration settings.
  * pop3: buffer input by ourselves, clear input buffer before
    switching to TLS.
  * imap: fix crash if the connection to the client is terminated at
    the wrong/right time.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1642420800">- update to 5.1.7
  * Fix linking failure on some Linux distributions.
- update to 5.1.6
  * Fix linking failure on some Linux distributions.
- update to 5.1.5
  * Fix minor memory leaks. If valgrind is installed, "make check" will
    run it to check for memory leaks.
  * Convert to PCRE2.
  * libcouriertls: use ALARM to kill couriertls if the server process
    terminates but openssl hangs trying to shut down the socket.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 5.1.8
  * gcc 12 and autotools update. OpenSSL 3.0 update.
  * courier, courier-imap: remove the --disable-root-check configure
    option, now that make check can deal with it.
  * Add scripts to create installable .deb packages, update
    documentation.
  * imap/authenticate_auth.c: Fix broken SASL authentication.
  * Adjust behavior of inherited ACLs. After deleting and recreating
    a folder, have the recreated folder inherit its parent folder's ACLs,
    normally, instead of mysteriously restoring whatever ACLs the folder
    had when it was deleted.
  * Fixes to Makefile to workaround test suite failures related to
    permission checking when make check runs as root.
  * Fix minor memory leaks.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 5.2.0
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
  * make install: replace absolute links with relative links.
- update to 5.1.9
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1671364800">- update to 5.2.1
  * Fix a compatibility problem with OpenSSL 3 that results in TLS
    negotiation failures in some non-default configurations.
  * Fix an error in courier-imap's installation script that results in
    creation of absolute, rather than relative, symbolic links.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676894400">- update to 5.2.2
  * imapd.c (append): No longer accept a non-standard single
    flag name instead of a parenthesized flag list to APPEND, due to
    ambiguity with the UTF8 extension.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1680696000">- update to 5.2.3
  * all: update configure.ac to require at least version 2.0.5 of
    libidn</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1682856000">- update to 5.2.4
  * Fix spurious gcc 13 compiler warnings. Have configure script
    include the standardized location of the CA certificate bundle,
    in addition to various legacy compatibility paths.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1693396800">- update to 5.2.5
  * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set.
  * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for
    rogue symlinks in maildirs.
- update courier-imap.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- update to 5.2.6
  * Fix generated Date: header issues in timezones that have a
    non-standard alternate timezone offset
  * pop3 and imap logs also indicate whether the connections used
    starttls or stls
  * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1722686400">- update to 5.2.7
  * tcpd: support per-local port custom -haproxy configuration.
    Multiple updates to the couriertcpd man page, updated documentation
    for ipv6 and CIDR support.
  * tcpd: remove -noidentlookup, implement -haproxy
  * couriertcpd: set the IP_FREEBIND option on all listening sockets.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 5.2.9
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
- update to 5.2.8
  * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH
    setting, fix warning with newer versions of grep.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1725192000">- update to 5.2.10
  * pop3login.c (login_pop3): Fix a problem when proxying UTF8 POP3
    connections.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 5.2.11
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="780367d01b6f84159a21fb96450680b4100205ded43fb40e7e49f9d6262ef06a820169a97206a4f83b5dea26bcfd3c8ffe6d8f11fdf7c25aeacff55dfb15ba2a" name="courier-imap" arch="aarch64">
  <version epoch="0" ver="5.3.2" rel="3.12"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676894400">- update to 5.2.2
  * imapd.c (append): No longer accept a non-standard single
    flag name instead of a parenthesized flag list to APPEND, due to
    ambiguity with the UTF8 extension.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1680696000">- update to 5.2.3
  * all: update configure.ac to require at least version 2.0.5 of
    libidn</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1682856000">- update to 5.2.4
  * Fix spurious gcc 13 compiler warnings. Have configure script
    include the standardized location of the CA certificate bundle,
    in addition to various legacy compatibility paths.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1693396800">- update to 5.2.5
  * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set.
  * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for
    rogue symlinks in maildirs.
- update courier-imap.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- update to 5.2.6
  * Fix generated Date: header issues in timezones that have a
    non-standard alternate timezone offset
  * pop3 and imap logs also indicate whether the connections used
    starttls or stls
  * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1722686400">- update to 5.2.7
  * tcpd: support per-local port custom -haproxy configuration.
    Multiple updates to the couriertcpd man page, updated documentation
    for ipv6 and CIDR support.
  * tcpd: remove -noidentlookup, implement -haproxy
  * couriertcpd: set the IP_FREEBIND option on all listening sockets.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 5.2.9
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
- update to 5.2.8
  * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH
    setting, fix warning with newer versions of grep.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1725192000">- update to 5.2.10
  * pop3login.c (login_pop3): Fix a problem when proxying UTF8 POP3
    connections.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 5.2.11
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 5.3.1
  * Fix MIME parsing bugs.
- update to 5.3.0
  * Remove obsolete diagnostic references to FAM and Gamin.
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * rfc822 library update.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 5.3.2
  * Update makeimapaccess script to handle automatic configuration
    file backups created by package managers.</changelog>
</package>
<package pkgid="edd183f7ac27022f72f353fe6928f390920c0469d53062a17788540ad0940d3326541efa049a5e8d3ca26e7a29cbac283981924e6185783b6886c16302a3572e" name="courier-imap" arch="i586">
  <version epoch="0" ver="5.3.2" rel="3.12"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676894400">- update to 5.2.2
  * imapd.c (append): No longer accept a non-standard single
    flag name instead of a parenthesized flag list to APPEND, due to
    ambiguity with the UTF8 extension.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1680696000">- update to 5.2.3
  * all: update configure.ac to require at least version 2.0.5 of
    libidn</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1682856000">- update to 5.2.4
  * Fix spurious gcc 13 compiler warnings. Have configure script
    include the standardized location of the CA certificate bundle,
    in addition to various legacy compatibility paths.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1693396800">- update to 5.2.5
  * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set.
  * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for
    rogue symlinks in maildirs.
- update courier-imap.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- update to 5.2.6
  * Fix generated Date: header issues in timezones that have a
    non-standard alternate timezone offset
  * pop3 and imap logs also indicate whether the connections used
    starttls or stls
  * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1722686400">- update to 5.2.7
  * tcpd: support per-local port custom -haproxy configuration.
    Multiple updates to the couriertcpd man page, updated documentation
    for ipv6 and CIDR support.
  * tcpd: remove -noidentlookup, implement -haproxy
  * couriertcpd: set the IP_FREEBIND option on all listening sockets.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 5.2.9
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
- update to 5.2.8
  * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH
    setting, fix warning with newer versions of grep.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1725192000">- update to 5.2.10
  * pop3login.c (login_pop3): Fix a problem when proxying UTF8 POP3
    connections.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 5.2.11
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 5.3.1
  * Fix MIME parsing bugs.
- update to 5.3.0
  * Remove obsolete diagnostic references to FAM and Gamin.
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * rfc822 library update.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 5.3.2
  * Update makeimapaccess script to handle automatic configuration
    file backups created by package managers.</changelog>
</package>
<package pkgid="3949f8606d29c62fcaf4ffd17ca9c8629ae8a7bb153f4b2d1ce85bac5872834e838fe0f0e8696fcaf96c002b4ce01b4e0ab93066b4e8c6d7c2f34bb8ee29ceb0" name="courier-imap" arch="ppc64le">
  <version epoch="0" ver="5.3.2" rel="3.12"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676894400">- update to 5.2.2
  * imapd.c (append): No longer accept a non-standard single
    flag name instead of a parenthesized flag list to APPEND, due to
    ambiguity with the UTF8 extension.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1680696000">- update to 5.2.3
  * all: update configure.ac to require at least version 2.0.5 of
    libidn</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1682856000">- update to 5.2.4
  * Fix spurious gcc 13 compiler warnings. Have configure script
    include the standardized location of the CA certificate bundle,
    in addition to various legacy compatibility paths.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1693396800">- update to 5.2.5
  * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set.
  * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for
    rogue symlinks in maildirs.
- update courier-imap.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- update to 5.2.6
  * Fix generated Date: header issues in timezones that have a
    non-standard alternate timezone offset
  * pop3 and imap logs also indicate whether the connections used
    starttls or stls
  * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1722686400">- update to 5.2.7
  * tcpd: support per-local port custom -haproxy configuration.
    Multiple updates to the couriertcpd man page, updated documentation
    for ipv6 and CIDR support.
  * tcpd: remove -noidentlookup, implement -haproxy
  * couriertcpd: set the IP_FREEBIND option on all listening sockets.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 5.2.9
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
- update to 5.2.8
  * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH
    setting, fix warning with newer versions of grep.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1725192000">- update to 5.2.10
  * pop3login.c (login_pop3): Fix a problem when proxying UTF8 POP3
    connections.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 5.2.11
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 5.3.1
  * Fix MIME parsing bugs.
- update to 5.3.0
  * Remove obsolete diagnostic references to FAM and Gamin.
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * rfc822 library update.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 5.3.2
  * Update makeimapaccess script to handle automatic configuration
    file backups created by package managers.</changelog>
</package>
<package pkgid="3669ee14fe4387716b820d54ea75c5a711c51772ac694a1a720c4c7976b741dfc4632829a31eccad961efd116e770bc29a0a76c582ea40e395b8f813bc4b1817" name="courier-imap" arch="src">
  <version epoch="0" ver="5.3.2" rel="3.12"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1616846400">- update to 5.1.2
  * make: Individual files that did not end in a newline were
    not handled correctly.
  * imap: adjust error message.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1619352000">- update to 5.1.3
  * pop3d: pro-forma POP3 LANG extension.
  * pop3d-ssl.dist.in (TLS_STARTTLS_PROTOCOL): Remove duplicate entry
    in the pop3d-ssl configuration file.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1627905600">- update to 5.1.4
  * all: code changes so that courier can be compiled with -Wall
  - Werror gcc flags. The default compilation flags are not changed.
    This also includes changes to the configuration scripts, which
    includes removing outdated configuration settings.
  * pop3: buffer input by ourselves, clear input buffer before
    switching to TLS.
  * imap: fix crash if the connection to the client is terminated at
    the wrong/right time.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1642420800">- update to 5.1.7
  * Fix linking failure on some Linux distributions.
- update to 5.1.6
  * Fix linking failure on some Linux distributions.
- update to 5.1.5
  * Fix minor memory leaks. If valgrind is installed, "make check" will
    run it to check for memory leaks.
  * Convert to PCRE2.
  * libcouriertls: use ALARM to kill couriertls if the server process
    terminates but openssl hangs trying to shut down the socket.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 5.1.8
  * gcc 12 and autotools update. OpenSSL 3.0 update.
  * courier, courier-imap: remove the --disable-root-check configure
    option, now that make check can deal with it.
  * Add scripts to create installable .deb packages, update
    documentation.
  * imap/authenticate_auth.c: Fix broken SASL authentication.
  * Adjust behavior of inherited ACLs. After deleting and recreating
    a folder, have the recreated folder inherit its parent folder's ACLs,
    normally, instead of mysteriously restoring whatever ACLs the folder
    had when it was deleted.
  * Fixes to Makefile to workaround test suite failures related to
    permission checking when make check runs as root.
  * Fix minor memory leaks.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 5.2.0
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
  * make install: replace absolute links with relative links.
- update to 5.1.9
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1671364800">- update to 5.2.1
  * Fix a compatibility problem with OpenSSL 3 that results in TLS
    negotiation failures in some non-default configurations.
  * Fix an error in courier-imap's installation script that results in
    creation of absolute, rather than relative, symbolic links.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676894400">- update to 5.2.2
  * imapd.c (append): No longer accept a non-standard single
    flag name instead of a parenthesized flag list to APPEND, due to
    ambiguity with the UTF8 extension.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1680696000">- update to 5.2.3
  * all: update configure.ac to require at least version 2.0.5 of
    libidn</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1682856000">- update to 5.2.4
  * Fix spurious gcc 13 compiler warnings. Have configure script
    include the standardized location of the CA certificate bundle,
    in addition to various legacy compatibility paths.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1693396800">- update to 5.2.5
  * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set.
  * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for
    rogue symlinks in maildirs.
- update courier-imap.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- update to 5.2.6
  * Fix generated Date: header issues in timezones that have a
    non-standard alternate timezone offset
  * pop3 and imap logs also indicate whether the connections used
    starttls or stls
  * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1722686400">- update to 5.2.7
  * tcpd: support per-local port custom -haproxy configuration.
    Multiple updates to the couriertcpd man page, updated documentation
    for ipv6 and CIDR support.
  * tcpd: remove -noidentlookup, implement -haproxy
  * couriertcpd: set the IP_FREEBIND option on all listening sockets.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 5.2.9
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
- update to 5.2.8
  * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH
    setting, fix warning with newer versions of grep.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1725192000">- update to 5.2.10
  * pop3login.c (login_pop3): Fix a problem when proxying UTF8 POP3
    connections.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 5.2.11
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 5.3.1
  * Fix MIME parsing bugs.
- update to 5.3.0
  * Remove obsolete diagnostic references to FAM and Gamin.
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * rfc822 library update.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 5.3.2
  * Update makeimapaccess script to handle automatic configuration
    file backups created by package managers.</changelog>
</package>
<package pkgid="a8647d7b0d77674bfaef29c426647e58324ebee4510a90664841e85b6e0288ae62bd06403771734f6dfdc42bdb317d055795eae7e889ff97870bfd8f9553e74e" name="courier-imap" arch="x86_64">
  <version epoch="0" ver="5.3.2" rel="3.12"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676894400">- update to 5.2.2
  * imapd.c (append): No longer accept a non-standard single
    flag name instead of a parenthesized flag list to APPEND, due to
    ambiguity with the UTF8 extension.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1680696000">- update to 5.2.3
  * all: update configure.ac to require at least version 2.0.5 of
    libidn</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1682856000">- update to 5.2.4
  * Fix spurious gcc 13 compiler warnings. Have configure script
    include the standardized location of the CA certificate bundle,
    in addition to various legacy compatibility paths.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1693396800">- update to 5.2.5
  * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set.
  * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for
    rogue symlinks in maildirs.
- update courier-imap.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- update to 5.2.6
  * Fix generated Date: header issues in timezones that have a
    non-standard alternate timezone offset
  * pop3 and imap logs also indicate whether the connections used
    starttls or stls
  * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1722686400">- update to 5.2.7
  * tcpd: support per-local port custom -haproxy configuration.
    Multiple updates to the couriertcpd man page, updated documentation
    for ipv6 and CIDR support.
  * tcpd: remove -noidentlookup, implement -haproxy
  * couriertcpd: set the IP_FREEBIND option on all listening sockets.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 5.2.9
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
- update to 5.2.8
  * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH
    setting, fix warning with newer versions of grep.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1725192000">- update to 5.2.10
  * pop3login.c (login_pop3): Fix a problem when proxying UTF8 POP3
    connections.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 5.2.11
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 5.3.1
  * Fix MIME parsing bugs.
- update to 5.3.0
  * Remove obsolete diagnostic references to FAM and Gamin.
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * rfc822 library update.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 5.3.2
  * Update makeimapaccess script to handle automatic configuration
    file backups created by package managers.</changelog>
</package>
<package pkgid="78a3252212307be770d1027512113c44842861ef7f9f4ccd2ad2d140df0f8754592b98ff763d73f3417aa06419db47ab67cb47483d3f792f9215df68a9bbdfa7" name="courier-imap-debuginfo" arch="armv7hl">
  <version epoch="0" ver="5.2.11" rel="117.20"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1642420800">- update to 5.1.7
  * Fix linking failure on some Linux distributions.
- update to 5.1.6
  * Fix linking failure on some Linux distributions.
- update to 5.1.5
  * Fix minor memory leaks. If valgrind is installed, "make check" will
    run it to check for memory leaks.
  * Convert to PCRE2.
  * libcouriertls: use ALARM to kill couriertls if the server process
    terminates but openssl hangs trying to shut down the socket.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 5.1.8
  * gcc 12 and autotools update. OpenSSL 3.0 update.
  * courier, courier-imap: remove the --disable-root-check configure
    option, now that make check can deal with it.
  * Add scripts to create installable .deb packages, update
    documentation.
  * imap/authenticate_auth.c: Fix broken SASL authentication.
  * Adjust behavior of inherited ACLs. After deleting and recreating
    a folder, have the recreated folder inherit its parent folder's ACLs,
    normally, instead of mysteriously restoring whatever ACLs the folder
    had when it was deleted.
  * Fixes to Makefile to workaround test suite failures related to
    permission checking when make check runs as root.
  * Fix minor memory leaks.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 5.2.0
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
  * make install: replace absolute links with relative links.
- update to 5.1.9
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1671364800">- update to 5.2.1
  * Fix a compatibility problem with OpenSSL 3 that results in TLS
    negotiation failures in some non-default configurations.
  * Fix an error in courier-imap's installation script that results in
    creation of absolute, rather than relative, symbolic links.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676894400">- update to 5.2.2
  * imapd.c (append): No longer accept a non-standard single
    flag name instead of a parenthesized flag list to APPEND, due to
    ambiguity with the UTF8 extension.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1680696000">- update to 5.2.3
  * all: update configure.ac to require at least version 2.0.5 of
    libidn</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1682856000">- update to 5.2.4
  * Fix spurious gcc 13 compiler warnings. Have configure script
    include the standardized location of the CA certificate bundle,
    in addition to various legacy compatibility paths.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1693396800">- update to 5.2.5
  * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set.
  * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for
    rogue symlinks in maildirs.
- update courier-imap.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- update to 5.2.6
  * Fix generated Date: header issues in timezones that have a
    non-standard alternate timezone offset
  * pop3 and imap logs also indicate whether the connections used
    starttls or stls
  * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1722686400">- update to 5.2.7
  * tcpd: support per-local port custom -haproxy configuration.
    Multiple updates to the couriertcpd man page, updated documentation
    for ipv6 and CIDR support.
  * tcpd: remove -noidentlookup, implement -haproxy
  * couriertcpd: set the IP_FREEBIND option on all listening sockets.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 5.2.9
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
- update to 5.2.8
  * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH
    setting, fix warning with newer versions of grep.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1725192000">- update to 5.2.10
  * pop3login.c (login_pop3): Fix a problem when proxying UTF8 POP3
    connections.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 5.2.11
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="e1dcdbd419178c51c57822ce34241482249b8248c068a875a5e4824451504788864adf0c5ef751c972f18c71e02ff0b35d1595569d14464d3012954604d0b517" name="courier-imap-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.3.2" rel="3.12"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676894400">- update to 5.2.2
  * imapd.c (append): No longer accept a non-standard single
    flag name instead of a parenthesized flag list to APPEND, due to
    ambiguity with the UTF8 extension.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1680696000">- update to 5.2.3
  * all: update configure.ac to require at least version 2.0.5 of
    libidn</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1682856000">- update to 5.2.4
  * Fix spurious gcc 13 compiler warnings. Have configure script
    include the standardized location of the CA certificate bundle,
    in addition to various legacy compatibility paths.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1693396800">- update to 5.2.5
  * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set.
  * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for
    rogue symlinks in maildirs.
- update courier-imap.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- update to 5.2.6
  * Fix generated Date: header issues in timezones that have a
    non-standard alternate timezone offset
  * pop3 and imap logs also indicate whether the connections used
    starttls or stls
  * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1722686400">- update to 5.2.7
  * tcpd: support per-local port custom -haproxy configuration.
    Multiple updates to the couriertcpd man page, updated documentation
    for ipv6 and CIDR support.
  * tcpd: remove -noidentlookup, implement -haproxy
  * couriertcpd: set the IP_FREEBIND option on all listening sockets.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 5.2.9
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
- update to 5.2.8
  * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH
    setting, fix warning with newer versions of grep.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1725192000">- update to 5.2.10
  * pop3login.c (login_pop3): Fix a problem when proxying UTF8 POP3
    connections.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 5.2.11
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 5.3.1
  * Fix MIME parsing bugs.
- update to 5.3.0
  * Remove obsolete diagnostic references to FAM and Gamin.
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * rfc822 library update.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 5.3.2
  * Update makeimapaccess script to handle automatic configuration
    file backups created by package managers.</changelog>
</package>
<package pkgid="ca12a29370bf251db409706ac5fe481356996e65781e49b0116a9790a568d62554bf26ee9c4896fe89ede136719d0be255ffa409722dbe5f447c5cdb451b4de0" name="courier-imap-debuginfo" arch="i586">
  <version epoch="0" ver="5.3.2" rel="3.12"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676894400">- update to 5.2.2
  * imapd.c (append): No longer accept a non-standard single
    flag name instead of a parenthesized flag list to APPEND, due to
    ambiguity with the UTF8 extension.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1680696000">- update to 5.2.3
  * all: update configure.ac to require at least version 2.0.5 of
    libidn</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1682856000">- update to 5.2.4
  * Fix spurious gcc 13 compiler warnings. Have configure script
    include the standardized location of the CA certificate bundle,
    in addition to various legacy compatibility paths.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1693396800">- update to 5.2.5
  * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set.
  * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for
    rogue symlinks in maildirs.
- update courier-imap.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- update to 5.2.6
  * Fix generated Date: header issues in timezones that have a
    non-standard alternate timezone offset
  * pop3 and imap logs also indicate whether the connections used
    starttls or stls
  * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1722686400">- update to 5.2.7
  * tcpd: support per-local port custom -haproxy configuration.
    Multiple updates to the couriertcpd man page, updated documentation
    for ipv6 and CIDR support.
  * tcpd: remove -noidentlookup, implement -haproxy
  * couriertcpd: set the IP_FREEBIND option on all listening sockets.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 5.2.9
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
- update to 5.2.8
  * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH
    setting, fix warning with newer versions of grep.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1725192000">- update to 5.2.10
  * pop3login.c (login_pop3): Fix a problem when proxying UTF8 POP3
    connections.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 5.2.11
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 5.3.1
  * Fix MIME parsing bugs.
- update to 5.3.0
  * Remove obsolete diagnostic references to FAM and Gamin.
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * rfc822 library update.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 5.3.2
  * Update makeimapaccess script to handle automatic configuration
    file backups created by package managers.</changelog>
</package>
<package pkgid="5033a50427a3dcd6ab56f4a5638f7020701ab12c45be620c905384eb5a9657f37750fcee602e97203d7d4f4904b83108ca6996dfcfdd299731f3facd760de6e7" name="courier-imap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.3.2" rel="3.12"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676894400">- update to 5.2.2
  * imapd.c (append): No longer accept a non-standard single
    flag name instead of a parenthesized flag list to APPEND, due to
    ambiguity with the UTF8 extension.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1680696000">- update to 5.2.3
  * all: update configure.ac to require at least version 2.0.5 of
    libidn</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1682856000">- update to 5.2.4
  * Fix spurious gcc 13 compiler warnings. Have configure script
    include the standardized location of the CA certificate bundle,
    in addition to various legacy compatibility paths.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1693396800">- update to 5.2.5
  * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set.
  * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for
    rogue symlinks in maildirs.
- update courier-imap.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- update to 5.2.6
  * Fix generated Date: header issues in timezones that have a
    non-standard alternate timezone offset
  * pop3 and imap logs also indicate whether the connections used
    starttls or stls
  * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1722686400">- update to 5.2.7
  * tcpd: support per-local port custom -haproxy configuration.
    Multiple updates to the couriertcpd man page, updated documentation
    for ipv6 and CIDR support.
  * tcpd: remove -noidentlookup, implement -haproxy
  * couriertcpd: set the IP_FREEBIND option on all listening sockets.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 5.2.9
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
- update to 5.2.8
  * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH
    setting, fix warning with newer versions of grep.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1725192000">- update to 5.2.10
  * pop3login.c (login_pop3): Fix a problem when proxying UTF8 POP3
    connections.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 5.2.11
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 5.3.1
  * Fix MIME parsing bugs.
- update to 5.3.0
  * Remove obsolete diagnostic references to FAM and Gamin.
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * rfc822 library update.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 5.3.2
  * Update makeimapaccess script to handle automatic configuration
    file backups created by package managers.</changelog>
</package>
<package pkgid="50e958aa75b560a7a1cdb1d518f84a4c253aeb7c06a91f9a89cc8d3bc9a3dd013e901b9bd8d4170e09a8513d0dc4fa3e071aab81c6b4042d2f0d4d37fd8b34bf" name="courier-imap-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.2" rel="3.12"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676894400">- update to 5.2.2
  * imapd.c (append): No longer accept a non-standard single
    flag name instead of a parenthesized flag list to APPEND, due to
    ambiguity with the UTF8 extension.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1680696000">- update to 5.2.3
  * all: update configure.ac to require at least version 2.0.5 of
    libidn</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1682856000">- update to 5.2.4
  * Fix spurious gcc 13 compiler warnings. Have configure script
    include the standardized location of the CA certificate bundle,
    in addition to various legacy compatibility paths.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1693396800">- update to 5.2.5
  * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set.
  * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for
    rogue symlinks in maildirs.
- update courier-imap.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- update to 5.2.6
  * Fix generated Date: header issues in timezones that have a
    non-standard alternate timezone offset
  * pop3 and imap logs also indicate whether the connections used
    starttls or stls
  * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1722686400">- update to 5.2.7
  * tcpd: support per-local port custom -haproxy configuration.
    Multiple updates to the couriertcpd man page, updated documentation
    for ipv6 and CIDR support.
  * tcpd: remove -noidentlookup, implement -haproxy
  * couriertcpd: set the IP_FREEBIND option on all listening sockets.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 5.2.9
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
- update to 5.2.8
  * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH
    setting, fix warning with newer versions of grep.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1725192000">- update to 5.2.10
  * pop3login.c (login_pop3): Fix a problem when proxying UTF8 POP3
    connections.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 5.2.11
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 5.3.1
  * Fix MIME parsing bugs.
- update to 5.3.0
  * Remove obsolete diagnostic references to FAM and Gamin.
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * rfc822 library update.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 5.3.2
  * Update makeimapaccess script to handle automatic configuration
    file backups created by package managers.</changelog>
</package>
<package pkgid="1e1f6f864f3fddbfdccef64a29a13ff90980e673b8327a9c71122b79dbc24f57496b97aee5f49a95dcdffce14160e08bfb6284ac8e6fff73d931055158ad73af" name="courier-imap-debugsource" arch="armv7hl">
  <version epoch="0" ver="5.2.11" rel="117.20"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1642420800">- update to 5.1.7
  * Fix linking failure on some Linux distributions.
- update to 5.1.6
  * Fix linking failure on some Linux distributions.
- update to 5.1.5
  * Fix minor memory leaks. If valgrind is installed, "make check" will
    run it to check for memory leaks.
  * Convert to PCRE2.
  * libcouriertls: use ALARM to kill couriertls if the server process
    terminates but openssl hangs trying to shut down the socket.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1660996800">- update to 5.1.8
  * gcc 12 and autotools update. OpenSSL 3.0 update.
  * courier, courier-imap: remove the --disable-root-check configure
    option, now that make check can deal with it.
  * Add scripts to create installable .deb packages, update
    documentation.
  * imap/authenticate_auth.c: Fix broken SASL authentication.
  * Adjust behavior of inherited ACLs. After deleting and recreating
    a folder, have the recreated folder inherit its parent folder's ACLs,
    normally, instead of mysteriously restoring whatever ACLs the folder
    had when it was deleted.
  * Fixes to Makefile to workaround test suite failures related to
    permission checking when make check runs as root.
  * Fix minor memory leaks.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1670155200">- update to 5.2.0
  * Switch to libidn2.
  * Debian/Ubuntu: update lintian overrides
  * make install: replace absolute links with relative links.
- update to 5.1.9
  * Adjust deb packaging. Check /etc/lsb-release and include the
    distribution release in the deb package version, to faciliate
    updating to the same version of the package in an updated release.
  * Fix build dependencies.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1671364800">- update to 5.2.1
  * Fix a compatibility problem with OpenSSL 3 that results in TLS
    negotiation failures in some non-default configurations.
  * Fix an error in courier-imap's installation script that results in
    creation of absolute, rather than relative, symbolic links.</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676894400">- update to 5.2.2
  * imapd.c (append): No longer accept a non-standard single
    flag name instead of a parenthesized flag list to APPEND, due to
    ambiguity with the UTF8 extension.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1680696000">- update to 5.2.3
  * all: update configure.ac to require at least version 2.0.5 of
    libidn</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1682856000">- update to 5.2.4
  * Fix spurious gcc 13 compiler warnings. Have configure script
    include the standardized location of the CA certificate bundle,
    in addition to various legacy compatibility paths.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1693396800">- update to 5.2.5
  * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set.
  * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for
    rogue symlinks in maildirs.
- update courier-imap.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- update to 5.2.6
  * Fix generated Date: header issues in timezones that have a
    non-standard alternate timezone offset
  * pop3 and imap logs also indicate whether the connections used
    starttls or stls
  * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1722686400">- update to 5.2.7
  * tcpd: support per-local port custom -haproxy configuration.
    Multiple updates to the couriertcpd man page, updated documentation
    for ipv6 and CIDR support.
  * tcpd: remove -noidentlookup, implement -haproxy
  * couriertcpd: set the IP_FREEBIND option on all listening sockets.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 5.2.9
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
- update to 5.2.8
  * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH
    setting, fix warning with newer versions of grep.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1725192000">- update to 5.2.10
  * pop3login.c (login_pop3): Fix a problem when proxying UTF8 POP3
    connections.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 5.2.11
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
</package>
<package pkgid="73b339116660bcd17e813034a5321abf8dc795b62b9f22e337732e91165ef3671606cc6d3a757ed00849b950304f4f55b5e5734ea65987a9e4d76fcea70fa7d4" name="courier-imap-debugsource" arch="aarch64">
  <version epoch="0" ver="5.3.2" rel="3.12"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676894400">- update to 5.2.2
  * imapd.c (append): No longer accept a non-standard single
    flag name instead of a parenthesized flag list to APPEND, due to
    ambiguity with the UTF8 extension.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1680696000">- update to 5.2.3
  * all: update configure.ac to require at least version 2.0.5 of
    libidn</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1682856000">- update to 5.2.4
  * Fix spurious gcc 13 compiler warnings. Have configure script
    include the standardized location of the CA certificate bundle,
    in addition to various legacy compatibility paths.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1693396800">- update to 5.2.5
  * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set.
  * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for
    rogue symlinks in maildirs.
- update courier-imap.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- update to 5.2.6
  * Fix generated Date: header issues in timezones that have a
    non-standard alternate timezone offset
  * pop3 and imap logs also indicate whether the connections used
    starttls or stls
  * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1722686400">- update to 5.2.7
  * tcpd: support per-local port custom -haproxy configuration.
    Multiple updates to the couriertcpd man page, updated documentation
    for ipv6 and CIDR support.
  * tcpd: remove -noidentlookup, implement -haproxy
  * couriertcpd: set the IP_FREEBIND option on all listening sockets.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 5.2.9
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
- update to 5.2.8
  * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH
    setting, fix warning with newer versions of grep.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1725192000">- update to 5.2.10
  * pop3login.c (login_pop3): Fix a problem when proxying UTF8 POP3
    connections.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 5.2.11
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 5.3.1
  * Fix MIME parsing bugs.
- update to 5.3.0
  * Remove obsolete diagnostic references to FAM and Gamin.
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * rfc822 library update.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 5.3.2
  * Update makeimapaccess script to handle automatic configuration
    file backups created by package managers.</changelog>
</package>
<package pkgid="b1edf78a2f3744b1da69bf0a7c5af1bdc3e2f420928e98f70515ac017529754389b0224f05bf69b8adbda59d6d2bf5dcf9483ad0201fdb292b9604500f8d0b17" name="courier-imap-debugsource" arch="i586">
  <version epoch="0" ver="5.3.2" rel="3.12"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676894400">- update to 5.2.2
  * imapd.c (append): No longer accept a non-standard single
    flag name instead of a parenthesized flag list to APPEND, due to
    ambiguity with the UTF8 extension.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1680696000">- update to 5.2.3
  * all: update configure.ac to require at least version 2.0.5 of
    libidn</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1682856000">- update to 5.2.4
  * Fix spurious gcc 13 compiler warnings. Have configure script
    include the standardized location of the CA certificate bundle,
    in addition to various legacy compatibility paths.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1693396800">- update to 5.2.5
  * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set.
  * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for
    rogue symlinks in maildirs.
- update courier-imap.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- update to 5.2.6
  * Fix generated Date: header issues in timezones that have a
    non-standard alternate timezone offset
  * pop3 and imap logs also indicate whether the connections used
    starttls or stls
  * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1722686400">- update to 5.2.7
  * tcpd: support per-local port custom -haproxy configuration.
    Multiple updates to the couriertcpd man page, updated documentation
    for ipv6 and CIDR support.
  * tcpd: remove -noidentlookup, implement -haproxy
  * couriertcpd: set the IP_FREEBIND option on all listening sockets.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 5.2.9
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
- update to 5.2.8
  * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH
    setting, fix warning with newer versions of grep.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1725192000">- update to 5.2.10
  * pop3login.c (login_pop3): Fix a problem when proxying UTF8 POP3
    connections.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 5.2.11
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 5.3.1
  * Fix MIME parsing bugs.
- update to 5.3.0
  * Remove obsolete diagnostic references to FAM and Gamin.
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * rfc822 library update.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 5.3.2
  * Update makeimapaccess script to handle automatic configuration
    file backups created by package managers.</changelog>
</package>
<package pkgid="5a91c682c79f986502679d8dc8da030991c6f0219f1dd524044e255d4413d00f842a1eb104434fb8ac6027f9c79a4310c357b285b7755b52a00861a78fc383f5" name="courier-imap-debugsource" arch="ppc64le">
  <version epoch="0" ver="5.3.2" rel="3.12"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676894400">- update to 5.2.2
  * imapd.c (append): No longer accept a non-standard single
    flag name instead of a parenthesized flag list to APPEND, due to
    ambiguity with the UTF8 extension.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1680696000">- update to 5.2.3
  * all: update configure.ac to require at least version 2.0.5 of
    libidn</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1682856000">- update to 5.2.4
  * Fix spurious gcc 13 compiler warnings. Have configure script
    include the standardized location of the CA certificate bundle,
    in addition to various legacy compatibility paths.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1693396800">- update to 5.2.5
  * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set.
  * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for
    rogue symlinks in maildirs.
- update courier-imap.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- update to 5.2.6
  * Fix generated Date: header issues in timezones that have a
    non-standard alternate timezone offset
  * pop3 and imap logs also indicate whether the connections used
    starttls or stls
  * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1722686400">- update to 5.2.7
  * tcpd: support per-local port custom -haproxy configuration.
    Multiple updates to the couriertcpd man page, updated documentation
    for ipv6 and CIDR support.
  * tcpd: remove -noidentlookup, implement -haproxy
  * couriertcpd: set the IP_FREEBIND option on all listening sockets.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 5.2.9
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
- update to 5.2.8
  * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH
    setting, fix warning with newer versions of grep.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1725192000">- update to 5.2.10
  * pop3login.c (login_pop3): Fix a problem when proxying UTF8 POP3
    connections.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 5.2.11
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 5.3.1
  * Fix MIME parsing bugs.
- update to 5.3.0
  * Remove obsolete diagnostic references to FAM and Gamin.
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * rfc822 library update.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 5.3.2
  * Update makeimapaccess script to handle automatic configuration
    file backups created by package managers.</changelog>
</package>
<package pkgid="e41cdc9ddf23de3f392a97ed89436acefb39fe56b3240a6b3e1accd0ff0eb1db951dcb229eb52db3a72fbb5e3fca2b355c719d0a54abb3315874dd9a6176d843" name="courier-imap-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.2" rel="3.12"/>
  <changelog author="Stefan Schubert &lt;schubi@suse.com&gt;" date="1673524800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676894400">- update to 5.2.2
  * imapd.c (append): No longer accept a non-standard single
    flag name instead of a parenthesized flag list to APPEND, due to
    ambiguity with the UTF8 extension.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1680696000">- update to 5.2.3
  * all: update configure.ac to require at least version 2.0.5 of
    libidn</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1682856000">- update to 5.2.4
  * Fix spurious gcc 13 compiler warnings. Have configure script
    include the standardized location of the CA certificate bundle,
    in addition to various legacy compatibility paths.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1693396800">- update to 5.2.5
  * Turn off IMAP_TLS_REQUIRED if IMAP_TLS is already set.
  * Compiling with -DMAILDIR_SKIP_SYMLINK_CHECKS turns off checking for
    rogue symlinks in maildirs.
- update courier-imap.keyring with new signing key</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- update to 5.2.6
  * Fix generated Date: header issues in timezones that have a
    non-standard alternate timezone offset
  * pop3 and imap logs also indicate whether the connections used
    starttls or stls
  * add missing TLS_PRIVATE_KEYFILE setting to esmtpd.dist</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1722686400">- update to 5.2.7
  * tcpd: support per-local port custom -haproxy configuration.
    Multiple updates to the couriertcpd man page, updated documentation
    for ipv6 and CIDR support.
  * tcpd: remove -noidentlookup, implement -haproxy
  * couriertcpd: set the IP_FREEBIND option on all listening sockets.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1723118400">- update to 5.2.9
  * courier-debuild: implement DEBGCC=default, to help with pbuilder.
- update to 5.2.8
  * configure.ac: rpm and deb packaging fixes: remove incorrect MANPATH
    setting, fix warning with newer versions of grep.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1725192000">- update to 5.2.10
  * pop3login.c (login_pop3): Fix a problem when proxying UTF8 POP3
    connections.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1744027200">- update to 5.2.11
  * Fixes several compilation errors from gcc 15.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1751889600">- Adjusted systemd services to work with SELinux (bsc#1243221)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1761480000">- update to 5.3.1
  * Fix MIME parsing bugs.
- update to 5.3.0
  * Remove obsolete diagnostic references to FAM and Gamin.
  * Require C++17 support. Add autoconf checks for C++17. Provide
    build instructions for oldest versions of enterprise Linux distros
    whose gcc is too old.
  * rfc822 library update.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1768219200">- update to 5.3.2
  * Update makeimapaccess script to handle automatic configuration
    file backups created by package managers.</changelog>
</package>
<package pkgid="d770110ea364ad654dbfb4f55620d7461233c55e93304bd16efa8f8229eb34df4d8454890530eb44fe12777b470c20761150b81591384f2059aeae28ce1e96bc" name="postfix" arch="aarch64">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="4ea8b9a72599697b07c8408665bd6a0c5039b7718354b54076a9ae5bd6bf049b04fc0059140950ce3e906d5c738d7885b7f64b87b38027e7a8e977ab1b5a6bb5" name="postfix" arch="armv7hl">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="b76d787058914e2dfacfb4bdef20c303556377a60d800428ebb4192b4cacd6d29a305da9e95527994965a3157a8abb26cfd3deea9372b192aea45d7fd81c97aa" name="postfix" arch="i586">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="92471c0bbb6f8ba6aeb6450dff317553938c85c99e10fd6f2d2888183f2a68dd66e0484cdbb6a971725ca8b936bab341fc38a6013de201225d14264a18689e18" name="postfix" arch="ppc64le">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="8ff5a78b355c0081db50c6c8e80e2354ca36363167b9e6994a8f5db03a139bedad882239fb864576cb6f09bc113822bb822674146c1b2260aab5f5371d3a6f85" name="postfix" arch="src">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="11487adbb9360b18520d26c4599cd7c6ef75103a2c9abc0a74e2fe2aa4eaa7fd62928efc43e6df4838367e3bb45e09fa5a36e4205f1e090dfbfc6b5d9c77889d" name="postfix" arch="x86_64">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="a1449987af896bade0e707f00b1982076426274e89eb351cc268ebfc7719cdba048dca70a4d649696abf627179c309e7778803e88cf7bcf88c3a3bc9a5f87ad4" name="postfix-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="bdc2c1140ed6c536ac050c9cda6a73b5ee53cdb31995e97aa30f06723d2277e78b20bdf5f68c5a336a8daf56e8f97f1df3344dcb0a397d571d4bcd70c1cff41e" name="postfix-debuginfo" arch="armv7hl">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="0936579e1ec56047f1e3fc374f54cd6537016b2018f9fb76bfed6c557c88fff3a86e8d3c1856ddc5ea5f6f2db0c51aca4b56b569f0da4e34ee7701e55669a788" name="postfix-debuginfo" arch="i586">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="bd4e17182f6041bc88a457bc80d091b7db39d05eb2c0fd4b1ddf3e97b82c9a5c0ce6c65852dff1a848a4273e8f3265de1f217724604c6570e8ad236b193c173b" name="postfix-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="68d7846b0679c9b5c1718a9003a1d655bc17381132b133b76f7ba412e3d1437beb0b877dfb343855e8af98b09421d39eefa7b20a4ba7d3ee047d9e13014546b1" name="postfix-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="dca84ff238b1cef04ca46cf4c08c2703c6aebbc1455e29ccbd92ac7365d749f266e8261ff3d9b412fc3e26377e2d2135fa6eb71a0c472ae7cbcfcedcb56747f4" name="postfix-debugsource" arch="aarch64">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="f3e732b338298599f7ac4ef0f977d64fec37af46360d1b232f6143e3dccb4f2bf15ab38c44a6fbdfcc036bcf78b8e5796b019616b94ad5b35062ccb169369522" name="postfix-debugsource" arch="armv7hl">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="cb27d0c91ca0dfb51f678cc50462fb973554b1490d406917ad19aeb3af9c323784a2af78bd9e438ba34eedd254e5776518c71a3c1bd8f03ed0a3e2b22ed9e52c" name="postfix-debugsource" arch="i586">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="0a3dd61a00a1ea2213ab59e7875f32cc7d307bb262330a7b046a401645dc2a1076e480147f24f32d014a27fb9be9120242ebadb0091900bde16f1b401e1cdf1e" name="postfix-debugsource" arch="ppc64le">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="5d8d91e7e482a863c52ba200f1a8505709e75f4653d3fe1e85deb392f75737e1c968decc4f64e02547cb3d9e9eb20e9e796da1ab01607f3125c1e54074e48b39" name="postfix-debugsource" arch="x86_64">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="651cd0a5e17ccecdba1c249219dd8cf7ea9ce0aba9e1ea91c2eb19c9694be12669c8aca8b486784faedd3e6df280bc2ef51bc1324967fd5bf2d8b94a8ae6e446" name="postfix-devel" arch="noarch">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="bb799ddd89084f4ed380533b130c9b2b8f9f06cfab44b7c0b36b9b616e8abb30cac1113a871aef779fc54715d557a7dd79ab943e82b34e6e429b78da6efd3763" name="postfix-doc" arch="noarch">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="ba6b7306205bebdc39e4d02aa1d8e916fbdb2e7745b3a3d093ee0b2fd3b5ea7659575c2c2e32abbf22b719b4c3cc0a2338f8f110609028dcfc60b2c40dd3aa89" name="postfix-ldap" arch="aarch64">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="56663a0ac394be70adf84a603eaa0d995ab0c84ca023bd1639181a569ac8eaa634ec6ef64cccc1e3a6b5863f3759ea3077cc94a0fe859b5b6a8ee01bac3750e9" name="postfix-ldap" arch="armv7hl">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="2423c35ced0f21c439665e6b48eb2aef75a96a1ab8c18407a734cc5dded6bec72f7c6f4d12d6e669c575431e5fced5da542475dbb6f3b6d20eca88bcbee63b81" name="postfix-ldap" arch="i586">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="dacbda912add1d6ae9c8b643100c19135c7405c904b1586420db980bbfeb01f0fa8676aef0baa29ba81a264bdf65891d6ac25e9c27f3127ea0f4b8de89fa67fb" name="postfix-ldap" arch="ppc64le">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="f48292518508c56ea3e5724bcdcca7da08d90e4f075cc297a0ee68c7387d07770827eb149ffc774d59a8a4875cc77248ff9d60b768d3b6f843e0328e0127186d" name="postfix-ldap" arch="x86_64">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="0b92dc5a52596c6b04e678e21a7c1371976c793e761866d5ed3161e620e111e77f6d47079b8bcbf84d30bcba42f3c9f23d4366a0b427ce33bfd4e046bb01f544" name="postfix-ldap-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="bf395a40556cb65f9cbf8aceab0697d278b9281fe8593282970fb2c3c584e3fadb872529f96241219b8dfa361c88c13690085d0acaa8c59900c43875490b02b9" name="postfix-ldap-debuginfo" arch="armv7hl">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="0873ef29cedec881c7315ea19e501008ed1ef6f8726a3b525263d8779a0427d0f873a882253bad70f7ee4b1793f767bd06e81578ec098d55d014b8e192911525" name="postfix-ldap-debuginfo" arch="i586">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="963715ea71eed92d0efe9eb6b72658481d3fd048e2b54542d20d31435f45367d6ec2e669609fc59156e0e05fc1c331700cfe8d4d31e5de77ffb94a3385dd954b" name="postfix-ldap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="25a79c57753c2148fc4d1788235020923d09d3cef990cea584e3f79a9c97f6cf44b5e3067738a9046d742b236aaa93f0ece4d2e2dbca04f2287bf0086b1be382" name="postfix-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="928e24939b09c56232eeaa383ff2a7bea15970cf147f1e8cb41680be95fca8c474f36978a139ae3a0e0f66a3cd40073a550aea19f7375df5c4a4754240220752" name="postfix-mysql" arch="aarch64">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="32a2944150d5e03cf9e7962a21f439a99ae31242a388eb63a161a586530b14b5a1e9a1e4e672711e393dc47f70f07b9de159b630e11edb272dce8c4e61d4109b" name="postfix-mysql" arch="armv7hl">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="a329338792a9bb3b244c80011e70863224f95ef9d6ca5d17df2c2ff0cda7741b3bc6748ef33b289c7b044e1e9f93d681a63ecc34741ec90cb0e51d2a87a8a903" name="postfix-mysql" arch="i586">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="049987df3af56e74394d289d6d279203679628df67a837f50398dfacdc96598e3999aa17df6084ca09a23abea32322f1f6ebdb45f79ab7292c83f1dc40ee6b17" name="postfix-mysql" arch="ppc64le">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="fc4ac1394cf948a45631c1b74c2c1ef8b8169a4b0e57eebb1d1d1fa7b9b73569ac8cb2f933b812c47c172ea90d5f447221871a1df4ff7f9d960854d251bbfb71" name="postfix-mysql" arch="x86_64">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="d4947eabe4106b86dde20ddb0953ef0cc887cb46d95050513979f79c703a2e114cb2fd66043e27f6dbe982a88acfee41c8f85a315bce21567000a0ca6b035bb4" name="postfix-mysql-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="d558502da141ed2bf5b882e478a595f3e669b07b648d600ec553e14743d86f8f8bdb2754d59fea4c3b5b235bf04fec1d36c813d058989c33fa252489eb6ac4e1" name="postfix-mysql-debuginfo" arch="armv7hl">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="55e4ec0a38d4d936071ac07516a02d27b8ac249f0e248ac95eadb430c0b432c7938906e2b27661d6086b7879e50d349f98e6978f2bd24ec9aa3e3c46e52cc33a" name="postfix-mysql-debuginfo" arch="i586">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="61a8b1d1aae9efc7ebf66881113f6a08e5072f32c232d4009f377d00734868c25dab965acfc192e697482420e3f9f4cd9decac20fa9b39c1f3e9a123ec6df898" name="postfix-mysql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="16b0eb285223bfb3a785936c95a70f775c503fe4323b6e8b04a11a7b147096854cddec5657b53a3354fe80d604d0671b3512f364b5762201681bab5a9c080f65" name="postfix-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="437ffefc7f35f0b185fd9698d7d33917d3d8610c6985e1c41b7834a9eac788f783fd97d284c08759f553aa9fa679b965d5baa9886dca2101797ef28d9fd45511" name="postfix-postgresql" arch="aarch64">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="97881f4971e135c73fc86ed8ba8d735e4934ccdce740034c2018c03d5a257115572e528f823cb89754a93961d20189db5f02798abef6abc3e145166e8bb30a16" name="postfix-postgresql" arch="armv7hl">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="4196909cb1a8eca8bade3203ffd9b814384e9709df0e85d00cd2cdff902d22030e105f3435bb24aa6209f41ff07a2dd799357c331111ca44ff26c424f259d236" name="postfix-postgresql" arch="i586">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="c1d33a5d3cab870ea19e23d26190f241c72f08bbb4923e7689987df4b57072e731620e7ae077ab821b083c018b03ed4c051a29a6853a0e2097a274c6c04032f8" name="postfix-postgresql" arch="ppc64le">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="516368694b497656d0ec38d2e0e8168d632b2c757ad08953b3ef2513788b7c0d536c03d071f49c1ec55908267be5e15cad6f1f1b319606c8b10e8669344f23cc" name="postfix-postgresql" arch="x86_64">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="be5b2f790b96114346f0f63203ed17b0bde2319a685768779a0d46e2aa0e46b337edf558346d6e6843757b2a15dafed22a2e9b20313527c1c3de83ad4b478476" name="postfix-postgresql-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="22b19d3e2896b664ae7709a11beb7e66f28c2d9c8121cea778c7047516362a280c2ea24f6c10cfd75d3b99a53e581b56cce8878d6f62209417695b5970142111" name="postfix-postgresql-debuginfo" arch="armv7hl">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="2429efd7042acaf3ea977ec02834f38d0418e841c35e538ffe0b56f486c3076a119be69887e3e4df1cca9480b4faa34e2705b5cf300a5cb3abcd518571ae9fed" name="postfix-postgresql-debuginfo" arch="i586">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="270f9a3a671df101ad3fefc8313f85cbac3c64a4846b80e79d130edbe9f2ea46a5f5e81ca34126c2801f71da9193fe1879593842b3f60593ad9727c416a4f765" name="postfix-postgresql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
<package pkgid="c67e7253676413f823f71197906124b746ad7d2303b066c3712c795ee0048ad2ad994886d8f6b128294a292b1dd55255b63bfc2d421e7ef6a5326a9927e001f4" name="postfix-postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.7" rel="540.1"/>
  <changelog author="chris@computersalat.de" date="1742126400">- rework postfix-main.cf.patch
- fix config.postfix
  * add missing: cpifnewer "/usr/@lib@/sasl2/*" usr/@lib@/sasl2
- rebase patches
  * pointer_to_literals.patch
  * postfix-linux45.patch
  * postfix-master.cf.patch
  * postfix-ssl-release-buffers.patch
  * set-default-db-type.patch
- keep spec and changes files in sync</changelog>
  <changelog author="Friedrich Haubensak &lt;hsk17@mail.de&gt;" date="1744113600">- add -std=gnu17 to CCARGS to fix gcc15 compile time error, as
  Wietse Venema suggests (marc.info/?l=postfix-users&amp;m=173542420611213)</changelog>
  <changelog author="chris@computersalat.de" date="1744200000">- fix compile option -std=gnu17 (only for &gt;= 1600)
- sync changes file</changelog>
  <changelog author="Giacomo Comes &lt;gcomes.obs@gmail.com&gt;" date="1744718400">- update postfix-main.cf.patch
  * remove duplicated entry smtp_dns_support_level</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1745323200">- update to 3.10.2
  * Bugfix (defect introduced: date 19991116): when appending a
    setting to a main.cf or master.cf file that did not end in a
    newline character, the "postconf -e" command did not add an
    extra newline character before appending the new setting, causing
    information to become garbled.
  * Bugfix (defect introduced: Postfix 2.3, date 20051222): the
    Dovecot auth client did not attempt to create a new connection
    after an I/O error on an existing connection.
  * Improved and corrected error messages when converting (host or
    service) information to (symbolic text, numerical text, or
    binary) form.
  * Documentation: updated link to Dovecot documentation.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1746705600">- postfix incorrect logic for the master.cf handling for tls ports
  (bsc#1242822)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747742400">- move /var/spool/mail/ to separate package (bsc#1179574)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1747828800">-  [sle16][postfix] postfix service failed to start due to
  "chmod: cannot access '/etc/postfix/virtual.lmdb': No such file or directory"
  (bsc#1243409)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1748865600">- Fix place of pam file
- [Build 20250527] postfix mail delivery fails (bsc#1243886)
- move /var/spool/mail/ to separate package (bsc#1179574)
  Revert last bad change
- Adapt rpmlint</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1754222400">- update to 3.10.3
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): include
    the current TLS security level in the SMTP connection cache
    lookup key for lookups by next-hop destination, to avoid reusing
    the same SMTP connection when sending messages with and without
    a "TLS-Required: no" header. Likewise, include the current TLS
    security level in the TLS session lookup key, to avoid reusing
    the same TLS session info when sending messages with and without
    a "TLS-Required: no" header.
  * Bugfix (defect introduced: Postfix-3.10, date 20250117): the
    Postfix SMTP client attempted to look up TLSA records even with
    "TLS-Required: no". This could result in unnecessary failures.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1755604800">- update to 3.10.4
  * Fixes for postscreen(8):
  - Bugfix (defect introduced: Postfix 2.2, date 20050203): after
    detecting a lookup table change, and after starting a new
    postscreen process, the old postscreen process logged an ENOTSOCK
    error while attempting to accept a connection on a socket that
    it was no longer listening on. This error was introduced first
    in the multi_server skeleton code, and was five years later
    duplicated in the event_server skeleton that was created for
    postscreen.
  - Bugfix (defect introduced: Postfix 2.8, date 20101230):
    after detecting a cache table change and before starting a new
    postscreen process, the old postscreen process did not close the
    postscreen_cache_map, and therefore kept an exclusive lock that
    could prevent a new postscreen process from starting.
  * Fixes for tlsproxy(8):
  - Bugfix (defect introduced: Postfix 3.7): incorrect backwards
    compatible support for the legacy configuration parameters
    tlsproxy_client_level and tlsproxy_client_policy. This
    disabled the tlsproxy TLS client role when a legacy parameter
    was set (instead of the newer tlsproxy_client_security_level
    or tlsproxy_client_policy_maps).
  - Bugfix (defect introduced: Postfix 3.4): with the TLS client role
    disabled by configuration, the tlsproxy daemon dereferenced a
    null pointer while handling a tlsproxy client request.
  * Reducing process churn: Postfix daemons no longer automatically
    restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file
    modification time change, when they opened that table for writing.
  * Portability: deleted an &lt;openssl/engine.h&gt; build dependency,
    because the feature is being removed from OpenSSL, and Postfix
    no longer needs it.
  * Cleanup: with "tls_required_enable = yes", the Postfix SMTP client
    will no longer maintain TLSRPT statistics for messages that contain
    a "TLS-Required: no" header. This can prevent TLSRPT notifications
    for TLSRPT notifications.
  * Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS
    client code logged "Untrusted TLS connection" (wrong) instead of
    "Trusted TLS connection" (right), for a new or resumed TLS session,
    when a server offered a trusted (valid PKI trust chain) certificate
    that did not match the expected server name pattern.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1762776000">- update to 3.10.5
  * Workaround for an interface mis-match between the Postfix SMTP
    client and MTA-STS policy plugins.
  * The existing behavior is to connect to any MX host listed
    in DNS, and to match the server certificate against any STS
    policy MX host pattern.
  * The corrected behavior is to connect to an MX host only if
    its name matches any STS policy MX host pattern, and to
    match the server certificate against the MX hostname.
    The corrected behavior must be enabled in two places: in Postfix
    with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default:
    "yes") and in an MTA-STS plugin by enabling TLSRPT support, so
    that the plugin forwards STS policy attributes to Postfix. This
    works even if Postfix TLSRPT support is disabled at build time
    or at runtime.
  * TLSRPT Workaround: when a TLSRPT policy-type value is
    "no-policy-found", pretend that the TLSRPT policy domain value
    is equal to the recipient domain. This ignores that different
    policy types (TLSA, STS) use different policy domains. But this
    is what Microsoft does, and therefore, what other tools expect.
  * Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP
    client's connection reuse logic did not distinguish between
    sessions that require SMTPUTF8 support, and sessions that do
    not. The solution is 1) to store sessions with different SMTPUTF8
    requirements under distinct connection cache storage keys, and
    2) to not cache a connection when SMTPUTF8 is required but the
    server does not support that feature.
  * Bugfix (defect introduced: Postfix 3.0, date 20140731): the
    smtpd 'disconnect' command statistics did not count commands
    with "bad syntax" and "bad UTF-8 syntax" errors.
  * Bugfix: the August 2025 patch broke DBM library support which
    is still needed on Solaris; and the same change could result
    in warnings with "database X is older than source file Y".
  * Postfix 3.11 forward compatibility: to avoid ugly warnings when
    Postfix 3.11 is rolled back to an older version, allow a
    preliminary 'size' record in maildrop queue files created with
    Postfix 3.11 or later.
  * Bugfix (defect introduced: Postfix 3.8, date 20220128):
    non-reproducible build, because the 'postconf -e' output order
    for new main.cf entries was no longer deterministic. Problem
    reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
  * To make builds predictable, add missing meta_directory and
    shlib_directory settings to the stock main.cf file. Problem
    diagnosed by Eray Aslan.
  * Bugfix (defect introduced: Postfix 3.9, date 20230517):
    posttls-finger(1) logged an incorrectly-formatted port number.
    Viktor Dukhovni.
- rebase postfix-main.cf.patch
- adapt rpmlint
  o dir-or-file-outside-snapshot</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1764158400">- update to 3.10.6
  * Bugfix (defect introduced: Postfix 3.10, date: 20250117).
    Symptom: warning messages that smtp_tls_wrappermode requires
    "smtp_tls_security_level = encrypt".
    Root cause: support for "TLS-Required: no" broke client-side
    TLS wrappermode support, by downgrading a connection to TLS
    security level 'may'.
    The fix changes the downgrade level for wrappermode connections
    to 'encrypt'. Rationale: by design, TLS can be optional only
    for connections that use STARTTLS. The downgrade to unauthenticated
    'encrypt' allows a sender to avoid an email delivery problem.
    Problem reported by Joshua Tyler Cochran.
  * New logging: the Postfix SMTP client will log a warning when
    an MX hostname does not match STS policy MX patterns, with
    "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with
    TLSRPT support enabled in a TLS policy plugin. It will log a
    successful match only when verbose logging is enabled.
  * Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP
    client null pointer crash when an STS policy plugin sends no
    policy_string or no mx_pattern attributes. This can happen only
    during tests with a fake STS plugin.
  * Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault
    when a duplicate parameter name is given to "postconf -X" or
    "postconf -#'.
  * Documentation: removed incorrect text from the parameter
    description for smtp_cname_overrides_servername. File:
    proto/postconf.proto.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1764936000">- postfix is unable to send mail by default (bsc#1253775)
  o Clean up the package
  * Get rid of config.postfix script to avoid unintentional changes
    of the configuration. The sysconfig files mail and postfix
    were removed also.
  * Deliver the original main.cf and master.cf
  * Remove a lot of deprecated stuff from the package.
  * Remove the ExecStartPre scripts to maintain the postmaps
    and the chroot environment.
  * A new ExecStartPre script manages the default alias map which
    is part of the default configuration of postfix.
    /sbin/postalias /etc/aliases
  * Do not use the permissions framework. A new ExecStartPre script
    takes care of the right permissions: /usr/sbin/postfix set-permissions
  * Remove mkpostfixcert
  * Get rid of berkley db converting scripts
  o Remove patches:
  * postfix-master.cf.patch
  * postfix-main.cf.patch
  * postfix-bdb-main.cf.patch</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1765368000">- Add /var/spool/mail to the permissions.d drop-in. This directory used to be
  whitelisted globally in the permissions package but an update for the exim
  mail server changed that (bsc#1254597 bsc#1240755).
- Reintroduce permissions.d/postfix-paranoid drop-in that was removed in r534.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765368001">- update to 3.10.7
  * This patch addresses build errors on recent Linux distributions.
    With the patch, Postfix builds will run the compiler with a
    backwards compatibility option that is supported by Gcc and Clang.
    For other compilers, an error message provides hints.</changelog>
  <changelog author="Stefan Botter &lt;obs@botter.cc&gt;" date="1765454400">- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1765713600">- Put /etc/permissions.d/postfix.paranoid into the postfix-SUSE.tar.gz</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1766318400">- (jsc#PED-14859) Fix packages for Immutable Mode - postfix</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1768305600">- fix (bsc#1256462) [Build 12.10] openQA test fails in mta: Failed to start postfix.service
  Put postfix set-permisson into %post</changelog>
</package>
</otherdata>