Prereq: "2.3.12"
diff -cr --new-file /var/tmp/postfix-2.3.12/src/global/mail_version.h ./src/global/mail_version.h
*** /var/tmp/postfix-2.3.12/src/global/mail_version.h	Tue Jul 31 15:04:02 2007
--- ./src/global/mail_version.h	Wed Oct 17 13:10:42 2007
***************
*** 20,27 ****
    * Patches change both the patchlevel and the release date. Snapshots have no
    * patchlevel; they change the release date only.
    */
! #define MAIL_RELEASE_DATE	"20070731"
! #define MAIL_VERSION_NUMBER	"2.3.12"
  
  #ifdef SNAPSHOT
  # define MAIL_VERSION_DATE	"-" MAIL_RELEASE_DATE
--- 20,27 ----
    * Patches change both the patchlevel and the release date. Snapshots have no
    * patchlevel; they change the release date only.
    */
! #define MAIL_RELEASE_DATE	"20071017"
! #define MAIL_VERSION_NUMBER	"2.3.13"
  
  #ifdef SNAPSHOT
  # define MAIL_VERSION_DATE	"-" MAIL_RELEASE_DATE
diff -cr --new-file /var/tmp/postfix-2.3.12/HISTORY ./HISTORY
*** /var/tmp/postfix-2.3.12/HISTORY	Tue Jul 31 17:05:43 2007
--- ./HISTORY	Wed Oct 17 12:28:56 2007
***************
*** 13064,13074 ****
  
  20070730
  
!         Bugfix: when a milter replied with ACCEPT at or before the
!         first RCPT command, the cleanup server would apply the
!         non_smtpd_milters setting as if the message was a local
!         submission. Problem reported by Jukka Salmi. Also, the
!         cleanup server would get out of sync with the milter when
!         a milter replied with ACCEPT at the DATA command. Files:
!         cleanup/cleanup_envelope.c, smtpd/smtpd.c, milter/milters.c.
  	Back-port from Postfix 2.4/2.5.
--- 13064,13090 ----
  
  20070730
  
! 	Bugfix: when a milter replied with ACCEPT at or before the
! 	first RCPT command, the cleanup server would apply the
! 	non_smtpd_milters setting as if the message was a local
! 	submission. Problem reported by Jukka Salmi. Also, the
! 	cleanup server would get out of sync with the milter when
! 	a milter replied with ACCEPT at the DATA command. Files:
! 	cleanup/cleanup_envelope.c, smtpd/smtpd.c, milter/milters.c.
  	Back-port from Postfix 2.4/2.5.
+ 
+ 20070911
+ 
+ 	Bugfix (introduced Postfix 2.2.11): TLS client certificate
+ 	with unparsable canonical name caused the SMTP server's
+ 	policy client to allocate zero-length memory, triggering
+ 	an assertion that it shouldn't do such things.  File:
+ 	smtpd/smtpd_check.c. Back-port from Postfix 2.4/2.5.
+ 
+ 20070917
+ 
+ 	Workaround: the flush daemon forces an access time update
+ 	for the per-destination logfile, to prevent an excessive
+ 	rate of delivery attempts when the queue file system is
+ 	mounted with "noatime".  File: flush/flush.c. Back-port
+ 	from Postfix 2.4/2.5.
diff -cr --new-file /var/tmp/postfix-2.3.12/src/flush/flush.c ./src/flush/flush.c
*** /var/tmp/postfix-2.3.12/src/flush/flush.c	Mon Jun 26 08:59:19 2006
--- ./src/flush/flush.c	Wed Oct 17 13:11:56 2007
***************
*** 147,152 ****
--- 147,153 ----
  
  #include <sys_defs.h>
  #include <sys/stat.h>
+ #include <sys/time.h>
  #include <unistd.h>
  #include <stdlib.h>
  #include <utime.h>
***************
*** 478,483 ****
--- 479,489 ----
       */
      if (count > 0 && ftruncate(vstream_fileno(log), (off_t) 0) < 0)
  	msg_fatal("%s: truncate fast flush logfile %s: %m", myname, path);
+ 
+     /*
+      * Workaround for noatime mounts. Use futimes() if available.
+      */
+     (void) utimes(VSTREAM_PATH(log), (struct timeval *) 0);
  
      /*
       * Request delivery and clean up.
diff -cr --new-file /var/tmp/postfix-2.3.12/src/smtpd/smtpd_check.c ./src/smtpd/smtpd_check.c
*** /var/tmp/postfix-2.3.12/src/smtpd/smtpd_check.c	Fri Jan 12 09:45:18 2007
--- ./src/smtpd/smtpd_check.c	Tue Sep 11 10:15:19 2007
***************
*** 3302,3308 ****
  	    coded_CN_buf = 0; \
  	    coded_CN = ""; \
  	} else { \
! 	    coded_CN_buf = vstring_alloc(strlen(CN)); \
  	    xtext_quote(coded_CN_buf, CN, ""); \
  	    coded_CN = STR(coded_CN_buf); \
  	} \
--- 3302,3308 ----
  	    coded_CN_buf = 0; \
  	    coded_CN = ""; \
  	} else { \
! 	    coded_CN_buf = vstring_alloc(strlen(CN) + 1); \
  	    xtext_quote(coded_CN_buf, CN, ""); \
  	    coded_CN = STR(coded_CN_buf); \
  	} \