← Back to team overview

group.of.nepali.translators team mailing list archive

[Bug 1727699] Re: SSL issue upgrading postfix

 

This bug was fixed in the package postfix - 3.1.0-3ubuntu0.3

---------------
postfix (3.1.0-3ubuntu0.3) xenial; urgency=medium

  * Only run post 3.0 master.cf fixup if upgrading from version before
    the fix. (LP: #1727699)
    This is a pick of 37b37e93 from Debian packaging repo at
    https://git.launchpad.net/postfix

 -- Christian Ehrhardt <christian.ehrhardt@xxxxxxxxxxxxx>  Tue, 02 Jan
2018 13:48:25 +0100

** Changed in: postfix (Ubuntu Xenial)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1727699

Title:
  SSL issue upgrading postfix

Status in postfix package in Ubuntu:
  Fix Released
Status in postfix source package in Xenial:
  Fix Released
Status in postfix package in Debian:
  Fix Released

Bug description:
  [Impact]

   * On upgrade depending on config postfix might mess with said config as 
     it mis-detects being an upgrade from postfix-2.

   * This was fixes in Debian later on, this cherry picks the fix

  [Test Case]

   * have a config with
      submission inet  n       -       -       -       -       smtpd
     And then upgrade (reinstall), example:
     - apt install postfix
     - change the line to the above in /etc/postfix/master.cf
       (that was essentially removing a comment and y -> -)
     - apt install --reinstall postfix
     This will have changed the config:
       - on upgrade you see
         setting explicit chroot on /etc/postfix:submission/inet/chroot
       - the value now is
         submission inet  n       -       y       -       -       smtpd

  
  [Regression Potential] 

   * Upgrades behave slightly different, but in the way we want. We can 
     break down into two things:
     1. only if coming from the right former versions (wanted)
     2. if the upgrade is done it is done in a safer way (wanted)

  [Other Info]
   
   * In a perfect world the version compare would be against the first 
     ubuntu 3.x version, but taking the cherry pick as-is appears much 
     cleaner for review and also there was never anything released (nor 
     seems it remotely likely to be) that would fall in the gap between 
     the first Debian / Ubuntu postfix 3 version.


  ----

  issue upgrading posfix on Ubuntu 16.04.3 LTS

  in file master.cf, line submission=

  the upgrade procedure has changed the field chroot to 'y', but it was
  '-'. 'y' is wrong

  #pre upgrade it was
  submission inet  n       -       -       -       -       smtpd

  #then it become
  submission inet  n       -       y       -       -       smtpd

  the 'y' is wrong

  http://www.postfix.org/master.5.html

  sais "Chroot (default: Postfix >= 3.0: n, Postfix <3.0: y)"

  with 'y' the server rejects all SSL smtp mails

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/postfix/+bug/1727699/+subscriptions