From: Wietse Z Venema <wietse@porcupine.org>
Date: Mon, 24 Feb 2025 05:00:00 +0000 (-0500)
Subject: postfix-3.7.14
X-Git-Tag: v3.7.14^0
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=da36d13878292f3a92fe4c69cf9a16937122ce34;p=thirdparty%2Fpostfix.git

postfix-3.7.14
---

diff --git a/postfix/HISTORY b/postfix/HISTORY
index 2cda6d489..781f9293a 100644
--- a/postfix/HISTORY
+++ b/postfix/HISTORY
@@ -26878,3 +26878,10 @@ Apologies for any names omitted.
 	configuration; added a post-quantum example to the
 	tls_config_file description. File: proto/postconf.proto.
 	The unused parameters will be deleted in Postfix 3.11.
+
+20250221
+
+	Bugfix (defect introduced: 20250210): a recent 'fix' for the
+	default smtp_tls_dane_insecure_mx_policy setting resulted in
+	unnecessary 'dnssec_probe' warnings, on systems that disable
+	DNSSEC lookups (the default). File: smtp/smtp_addr.c.
diff --git a/postfix/src/global/mail_version.h b/postfix/src/global/mail_version.h
index 5977e1a8c..9c92f1668 100644
--- a/postfix/src/global/mail_version.h
+++ b/postfix/src/global/mail_version.h
@@ -20,8 +20,8 @@
   * Patches change both the patchlevel and the release date. Snapshots have no
   * patchlevel; they change the release date only.
   */
-#define MAIL_RELEASE_DATE	"20250216"
-#define MAIL_VERSION_NUMBER	"3.7.13"
+#define MAIL_RELEASE_DATE	"20250224"
+#define MAIL_VERSION_NUMBER	"3.7.14"
 
 #ifdef SNAPSHOT
 #define MAIL_VERSION_DATE	"-" MAIL_RELEASE_DATE
diff --git a/postfix/src/smtp/smtp_addr.c b/postfix/src/smtp/smtp_addr.c
index fa0af4e14..50b7e78da 100644
--- a/postfix/src/smtp/smtp_addr.c
+++ b/postfix/src/smtp/smtp_addr.c
@@ -269,7 +269,8 @@ static DNS_RR *smtp_addr_list(DNS_RR *mx_names, DSN_BUF *why)
     if (mx_names->dnssec_valid)
 	res_opt = RES_USE_DNSSEC;
 #ifdef USE_TLS
-    else if (smtp_tls_insecure_mx_policy > TLS_LEV_MAY)
+    else if (smtp_tls_insecure_mx_policy > TLS_LEV_MAY
+	     && smtp_dns_support == SMTP_DNS_DNSSEC)
 	res_opt = RES_USE_DNSSEC;
 #endif