-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 22 Aug 2025 09:51:46 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: armhf Version: 3.10.4-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-conova-03) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Closes: 1100100 1110704 Changes: postfix (3.10.4-1~deb13u1) trixie; urgency=medium . * New upstream stable/bugfix version 3.10.4, with a handful of fixes. From the upstream release notes: - Fixes for postscreen(8): * Bugfix (defect introduced: Postfix 2.2, date 20050203): after detecting a lookup table change, and after starting a new postscreen process, the old postscreen process logged an ENOTSOCK error while attempting to accept a connection on a socket that it was no longer listening on. This error was introduced first in the multi_server skeleton code, and was five years later duplicated in the event_server skeleton that was created for postscreen. Problem reported by Florian Piekert. * Bugfix (defect introduced: Postfix 2.8, date 20101230): after detecting a cache table change and before starting a new postscreen process, the old postscreen process did not close the postscreen_cache_map, and therefore kept an exclusive lock that could prevent a new postscreen process from starting. Problem reported by Florian Piekert. - Fixes for tlsproxy(8): * Bugfix (defect introduced: Postfix 3.7): incorrect backwards compatible support for the legacy configuration parameters tlsproxy_client_level and tlsproxy_client_policy. This disabled the tlsproxy TLS client role when a legacy parameter was set (instead of the newer tlsproxy_client_security_level or tlsproxy_client_policy_maps). Reported by John Doe, diagnosed by Viktor Dukhovni. * Bugfix (defect introduced: Postfix 3.4): with the TLS client role disabled by configuration, the tlsproxy daemon dereferenced a null pointer while handling a tlsproxy client request. Reported by John Doe. - Reducing process churn: Postfix daemons no longer automatically restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file modification time change, when they opened that table for writing. - Portability: deleted an build dependency, because the feature is being removed from OpenSSL, and Postfix no longer needs it. - Cleanup: with "tls_required_enable = yes", the Postfix SMTP client will no longer maintain TLSRPT statistics for messages that contain a "TLS-Required: no" header. This can prevent TLSRPT notifications for TLSRPT notifications. - Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS client code logged "Untrusted TLS connection" (wrong) instead of "Trusted TLS connection" (right), for a new or resumed TLS session, when a server offered a trusted (valid PKI trust chain) certificate that did not match the expected server name pattern. Fix by Viktor Dukhovni. * d/gbp.conf: debian-branch=debian/trixie * configure-instance.in: fix typo * configure-instance.in: limit maxdepth=1 in /etc/ssl/certs dirs * configure-instance.in: use home-grown file copy procedure to sync chroot There are a few issues with using cp(1) to update files in chroot, - a file should be copied even if the source date is *less* than the target date (eg, if a package has been downgraded), which is not done by `cp -u` (#1110704), a file should be copied atomically (copy+rename, not truncate+copy), and care should be taken with extra attributes (#1100100). Use a simple perl-based script (using just perl-base) to update files instead, which fixes all this stuff. (Closes: #1100100, #1110704) Checksums-Sha1: f7ba7a052f6f805b356fa538cb7c3717ec91f4f4 11244 postfix-cdb-dbgsym_3.10.4-1~deb13u1_armhf.deb 34de64c244937666bd5307381d6f0b874f8a9cd9 4808 postfix-cdb_3.10.4-1~deb13u1_armhf.deb 6dd73e4181603dbdbf4c1e6f2d1d4b09a6798db5 1824360 postfix-dbgsym_3.10.4-1~deb13u1_armhf.deb e9d53038a98491b4e28f6425b3badde41b2a999f 22480 postfix-ldap-dbgsym_3.10.4-1~deb13u1_armhf.deb 3e053308973f51f4549c1ad65be74032cec5aa62 11924 postfix-ldap_3.10.4-1~deb13u1_armhf.deb 0a6992175fa533825083322dafc38117dd42e750 18620 postfix-lmdb-dbgsym_3.10.4-1~deb13u1_armhf.deb d34bc0135cf90474c90af02f3357e4cc94551505 7396 postfix-lmdb_3.10.4-1~deb13u1_armhf.deb a6e7886c2d82a0bcb68a9a8558c27fb16d7d1ca8 13968 postfix-mongodb-dbgsym_3.10.4-1~deb13u1_armhf.deb d377894de0b3685a98e9b355591b6d75c2394281 5636 postfix-mongodb_3.10.4-1~deb13u1_armhf.deb 3ee8f262d1c8b57f20aa16e88fc0030e85b70f9d 24420 postfix-mysql-dbgsym_3.10.4-1~deb13u1_armhf.deb 80c37b01023f1283678c1bd01d5fad6e04ca5c7e 6972 postfix-mysql_3.10.4-1~deb13u1_armhf.deb d52832d95ebe3a93c4ab735e9026111956fe7062 14912 postfix-pcre-dbgsym_3.10.4-1~deb13u1_armhf.deb 8e8c9376cd566c2e3288dc75ce0b4489c52050c1 6324 postfix-pcre_3.10.4-1~deb13u1_armhf.deb da8a804dd0b1bb6eef33b5113a39ad67b6db4194 14416 postfix-pgsql-dbgsym_3.10.4-1~deb13u1_armhf.deb b0fb6cdcebcc2ea433e1916381eb3bf459ecef0d 6580 postfix-pgsql_3.10.4-1~deb13u1_armhf.deb affe1da269e375b28e4de57b27a38b1493728ecb 8596 postfix-sqlite-dbgsym_3.10.4-1~deb13u1_armhf.deb dbfbe2931b2d9c23558b064471ac0444c2237c2f 4584 postfix-sqlite_3.10.4-1~deb13u1_armhf.deb d465ec95e0ee8c1dd72572aacac98f40224f2a1a 12381 postfix_3.10.4-1~deb13u1_armhf-buildd.buildinfo cffe5d3bcc9e72e7445e4a128b2824908270ae75 1515428 postfix_3.10.4-1~deb13u1_armhf.deb Checksums-Sha256: 22e58cbc65aa472b0c50fa725204a4d3f957dc236e98fba17cf5497a76da0003 11244 postfix-cdb-dbgsym_3.10.4-1~deb13u1_armhf.deb f0e8a7dbd2a327ff63a45ce49cef281162c491ba7346642a2e2d584eb1436304 4808 postfix-cdb_3.10.4-1~deb13u1_armhf.deb 4e170f8943320ff75f04f59ba748a3d6e0921b312ddc7edfd4c0c2918adb7aea 1824360 postfix-dbgsym_3.10.4-1~deb13u1_armhf.deb fe1d8150aa28d3b6405425f41c88d7ed26d08efafbea842f0b6edc0f0ad45fe9 22480 postfix-ldap-dbgsym_3.10.4-1~deb13u1_armhf.deb 57b598f1a20e2eb399d4016c964f7894a500957b07739739ba7ce7ef19131b6a 11924 postfix-ldap_3.10.4-1~deb13u1_armhf.deb 9c3bb4b5d29de3a17668ff3c3a6cbd6d6a0124fcf7220e79506a62778eb07c72 18620 postfix-lmdb-dbgsym_3.10.4-1~deb13u1_armhf.deb 4909777722a46252fc0b43245841bba08b1cf1db1bc83ccbc7717ba4c68f07ca 7396 postfix-lmdb_3.10.4-1~deb13u1_armhf.deb 4fa3fc226ca8b79852b1fdd95c51f6fb4e25468dc58f727f2d3e3d407648faae 13968 postfix-mongodb-dbgsym_3.10.4-1~deb13u1_armhf.deb 03ea66f2f588c06647368800ca46d88e8b79359a52ab10df2e39dd2d57feac88 5636 postfix-mongodb_3.10.4-1~deb13u1_armhf.deb d4dddba4d6e40250171fbd59c456c233f57558dd3190a643261a5502a3cac8c7 24420 postfix-mysql-dbgsym_3.10.4-1~deb13u1_armhf.deb 2fd82c12432c85c07a473530c5dfda336f7ef3fa9f03ad905eae8a0083d10394 6972 postfix-mysql_3.10.4-1~deb13u1_armhf.deb af7b961c201eb5eb335c1a5452b847350fd3ee75943ab2b47f105547067464ac 14912 postfix-pcre-dbgsym_3.10.4-1~deb13u1_armhf.deb 7202700a4f2a187759787cd51284c646d64bbd0929150e24cba3548ae7f06920 6324 postfix-pcre_3.10.4-1~deb13u1_armhf.deb 1ea8d55079d0bbad14cc3a4c1111a95cb09a701116d6dba78ea07bea367675a1 14416 postfix-pgsql-dbgsym_3.10.4-1~deb13u1_armhf.deb cea9890755678550ac7ebdbadcfe8c4c518a55a83af696751fc3b482cdb02fa0 6580 postfix-pgsql_3.10.4-1~deb13u1_armhf.deb 106dfafdc8c24936b1b02bbf37707c83a96e084ae805bdaac5603878b0084980 8596 postfix-sqlite-dbgsym_3.10.4-1~deb13u1_armhf.deb d713a16196cd03a1e1c963756b72135a6ea994ee627cac8824ec3d1bfab8d55f 4584 postfix-sqlite_3.10.4-1~deb13u1_armhf.deb ae04d01fc704a3f9c1519841c0913109b1511db0a1784007c4ab51c50d528c06 12381 postfix_3.10.4-1~deb13u1_armhf-buildd.buildinfo 37310846a7b40d568abeb98f35ff64c0e057d1b58d6504ac98dd9ceda6d6ee0a 1515428 postfix_3.10.4-1~deb13u1_armhf.deb Files: 8ff44cede4160fa528a4b7ef12ddb51f 11244 debug optional postfix-cdb-dbgsym_3.10.4-1~deb13u1_armhf.deb b2ad580036315407dec82759137d1ce8 4808 mail optional postfix-cdb_3.10.4-1~deb13u1_armhf.deb e1f1307d21420a4e4af61bf6b791b88f 1824360 debug optional postfix-dbgsym_3.10.4-1~deb13u1_armhf.deb d9f5222ee18bac942ed561297f0bb41d 22480 debug optional postfix-ldap-dbgsym_3.10.4-1~deb13u1_armhf.deb 1a638de40cc11d9aac3e7eb3f7580bbf 11924 mail optional postfix-ldap_3.10.4-1~deb13u1_armhf.deb 8259f2c4e9b247751faa00d50c024d95 18620 debug optional postfix-lmdb-dbgsym_3.10.4-1~deb13u1_armhf.deb b82f168964b9c97ecdefde6df22c20b9 7396 mail optional postfix-lmdb_3.10.4-1~deb13u1_armhf.deb 391cea484738506e0838ca90e134cc36 13968 debug optional postfix-mongodb-dbgsym_3.10.4-1~deb13u1_armhf.deb 15d7a3bde9ed67201e0dd355909cc14d 5636 mail optional postfix-mongodb_3.10.4-1~deb13u1_armhf.deb 2cb460af1adc697756d472cebbed63cb 24420 debug optional postfix-mysql-dbgsym_3.10.4-1~deb13u1_armhf.deb 3d9c00231a4ba45a97eb8a6630880aaa 6972 mail optional postfix-mysql_3.10.4-1~deb13u1_armhf.deb 836c795710a74ec62a0553eb1c4f8b7c 14912 debug optional postfix-pcre-dbgsym_3.10.4-1~deb13u1_armhf.deb db8b53ac43ab83db618b074f35d057b6 6324 mail optional postfix-pcre_3.10.4-1~deb13u1_armhf.deb c6f4c40766a81b37098fe0cb077cf776 14416 debug optional postfix-pgsql-dbgsym_3.10.4-1~deb13u1_armhf.deb b88509408abfd0f650941367c706888c 6580 mail optional postfix-pgsql_3.10.4-1~deb13u1_armhf.deb e1a0201a46cf5fc38f299b53ab7d4f46 8596 debug optional postfix-sqlite-dbgsym_3.10.4-1~deb13u1_armhf.deb 0692f8473e421048c36924310e1c1170 4584 mail optional postfix-sqlite_3.10.4-1~deb13u1_armhf.deb 2941c10cd8cbe688b1b2225e3df34c00 12381 mail optional postfix_3.10.4-1~deb13u1_armhf-buildd.buildinfo 512f34af77b8e5891285683a37c0486d 1515428 mail optional postfix_3.10.4-1~deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEVM4SKBZumztS8zr3lST9Us03ywsFAmixFjcACgkQlST9Us03 yws4rg//S4olivXRbF0G2J21NCAGHbs+0usdEOMw61ikI+T+id2do6NUVZkp+drb eJKPdHz7x/Z760Ke/4KeI6C/KnVltGI7iG1jS/f6c5XhsY7k7xmdwYLBCExh3lfV pDdZ/zcuxnupPDuP3o7PeFCZvKqcucUzYkFagecbWtRecDxjsNnkUGGokMVNj3UV 1QRao1NC5AfLriedoM6a5KkLKA7f8CjEduXyK4T6YQO6+9qXQuMEuojpu62iU509 1G2cywSNWT7z4wzTxkFoytSVxbueJK81XKB8Brqr81Wx9JHnjo4S8c4ANvx1Njy0 A3a4NHzl4+X/kN87aVcvqNN10e5gtQoR/QaPI2LTYSIeVA7o94psn+b0kQbdZlQF Xsg1iJpm7ZUw3QbJ6qDGPzKlmgKxw/60GSXUzi0Sy7ELphtB/HmvB4gFqCe2geUO eL6IhN3Rw919zpFHe/fBlEU2pC9DE/RyHXm32xh4nam21yUHCDyG9f4ERa9fBO8x YW7VZagDBHlzJEwXhihPvWI5tCJoI54LSw7DiSmGzw+Id42QasthYyyXOqCUQuFE QsA1v94VrF9cZE2h3KDu76EybpRaimutST47z/VM6EvqRW7FtRQID0++TbL03Whx UOvyVnftSBaVkjIWTGVxQ6uxySmLqDJSMu0Qm6WKRqLq3+Jjg8c= =Z3Dz -----END PGP SIGNATURE-----