Subject: CVS commit: pkgsrc/mail/postfix
From: Takahiro Kambe
Date: 2015-07-22 02:25:37
Message id: 20150722002537.EB34C98@cvs.netbsd.org

Log Message:
Update postfix to 2.11.6, security release.

With all supported Postfix releases, the default settings have been
updated so that they no longer enable export-grade ciphers, and no
longer enable the SSLv2 and SSLv3 protocols. These ciphers and
protocols have little if any legitimate use today, and have instead
become a vehicle for downgrade attacks. There are no other code
changes.

Postfix documentation has been updated to reflect the new default
settings and their rationale; the RELEASE_NOTES give suggestions
for how to enable the old ciphers and protocols if your infrastructure
requires them.

Finally, abandoning deprecated ciphers and protocols does not really
improve TLS security without measures to better authenticate remote
servers. Secure DNS and TLSA are steps in that direction.

Files:
RevisionActionfile
1.284modifypkgsrc/mail/postfix/Makefile
1.160modifypkgsrc/mail/postfix/distinfo
1.33modifypkgsrc/mail/postfix/patches/patch-ai