group.of.nepali.translators team mailing list archive
-
group.of.nepali.translators team
-
Mailing list archive
-
Message #21609
[Bug 1727699] Re: SSL issue upgrading postfix
This bug was fixed in the package postfix - 3.1.0-3ubuntu0.3
---------------
postfix (3.1.0-3ubuntu0.3) xenial; urgency=medium
* Only run post 3.0 master.cf fixup if upgrading from version before
the fix. (LP: #1727699)
This is a pick of 37b37e93 from Debian packaging repo at
https://git.launchpad.net/postfix
-- Christian Ehrhardt <christian.ehrhardt@xxxxxxxxxxxxx> Tue, 02 Jan
2018 13:48:25 +0100
** Changed in: postfix (Ubuntu Xenial)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1727699
Title:
SSL issue upgrading postfix
Status in postfix package in Ubuntu:
Fix Released
Status in postfix source package in Xenial:
Fix Released
Status in postfix package in Debian:
Fix Released
Bug description:
[Impact]
* On upgrade depending on config postfix might mess with said config as
it mis-detects being an upgrade from postfix-2.
* This was fixes in Debian later on, this cherry picks the fix
[Test Case]
* have a config with
submission inet n - - - - smtpd
And then upgrade (reinstall), example:
- apt install postfix
- change the line to the above in /etc/postfix/master.cf
(that was essentially removing a comment and y -> -)
- apt install --reinstall postfix
This will have changed the config:
- on upgrade you see
setting explicit chroot on /etc/postfix:submission/inet/chroot
- the value now is
submission inet n - y - - smtpd
[Regression Potential]
* Upgrades behave slightly different, but in the way we want. We can
break down into two things:
1. only if coming from the right former versions (wanted)
2. if the upgrade is done it is done in a safer way (wanted)
[Other Info]
* In a perfect world the version compare would be against the first
ubuntu 3.x version, but taking the cherry pick as-is appears much
cleaner for review and also there was never anything released (nor
seems it remotely likely to be) that would fall in the gap between
the first Debian / Ubuntu postfix 3 version.
----
issue upgrading posfix on Ubuntu 16.04.3 LTS
in file master.cf, line submission=
the upgrade procedure has changed the field chroot to 'y', but it was
'-'. 'y' is wrong
#pre upgrade it was
submission inet n - - - - smtpd
#then it become
submission inet n - y - - smtpd
the 'y' is wrong
http://www.postfix.org/master.5.html
sais "Chroot (default: Postfix >= 3.0: n, Postfix <3.0: y)"
with 'y' the server rejects all SSL smtp mails
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/postfix/+bug/1727699/+subscriptions