-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 22 Aug 2025 09:51:46 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: ppc64el Version: 3.10.4-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Closes: 1100100 1110704 Changes: postfix (3.10.4-1~deb13u1) trixie; urgency=medium . * New upstream stable/bugfix version 3.10.4, with a handful of fixes. From the upstream release notes: - Fixes for postscreen(8): * Bugfix (defect introduced: Postfix 2.2, date 20050203): after detecting a lookup table change, and after starting a new postscreen process, the old postscreen process logged an ENOTSOCK error while attempting to accept a connection on a socket that it was no longer listening on. This error was introduced first in the multi_server skeleton code, and was five years later duplicated in the event_server skeleton that was created for postscreen. Problem reported by Florian Piekert. * Bugfix (defect introduced: Postfix 2.8, date 20101230): after detecting a cache table change and before starting a new postscreen process, the old postscreen process did not close the postscreen_cache_map, and therefore kept an exclusive lock that could prevent a new postscreen process from starting. Problem reported by Florian Piekert. - Fixes for tlsproxy(8): * Bugfix (defect introduced: Postfix 3.7): incorrect backwards compatible support for the legacy configuration parameters tlsproxy_client_level and tlsproxy_client_policy. This disabled the tlsproxy TLS client role when a legacy parameter was set (instead of the newer tlsproxy_client_security_level or tlsproxy_client_policy_maps). Reported by John Doe, diagnosed by Viktor Dukhovni. * Bugfix (defect introduced: Postfix 3.4): with the TLS client role disabled by configuration, the tlsproxy daemon dereferenced a null pointer while handling a tlsproxy client request. Reported by John Doe. - Reducing process churn: Postfix daemons no longer automatically restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file modification time change, when they opened that table for writing. - Portability: deleted an build dependency, because the feature is being removed from OpenSSL, and Postfix no longer needs it. - Cleanup: with "tls_required_enable = yes", the Postfix SMTP client will no longer maintain TLSRPT statistics for messages that contain a "TLS-Required: no" header. This can prevent TLSRPT notifications for TLSRPT notifications. - Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS client code logged "Untrusted TLS connection" (wrong) instead of "Trusted TLS connection" (right), for a new or resumed TLS session, when a server offered a trusted (valid PKI trust chain) certificate that did not match the expected server name pattern. Fix by Viktor Dukhovni. * d/gbp.conf: debian-branch=debian/trixie * configure-instance.in: fix typo * configure-instance.in: limit maxdepth=1 in /etc/ssl/certs dirs * configure-instance.in: use home-grown file copy procedure to sync chroot There are a few issues with using cp(1) to update files in chroot, - a file should be copied even if the source date is *less* than the target date (eg, if a package has been downgraded), which is not done by `cp -u` (#1110704), a file should be copied atomically (copy+rename, not truncate+copy), and care should be taken with extra attributes (#1100100). Use a simple perl-based script (using just perl-base) to update files instead, which fixes all this stuff. (Closes: #1100100, #1110704) Checksums-Sha1: 38dcffb967de536f5c2acedc0d8a1d62b4e937f3 11528 postfix-cdb-dbgsym_3.10.4-1~deb13u1_ppc64el.deb 859732dda93e555c6cbb23aa5b84bd50f15c4028 5680 postfix-cdb_3.10.4-1~deb13u1_ppc64el.deb 7a7626c01b353e20ea260bd1746a3ceece3c8a95 1921460 postfix-dbgsym_3.10.4-1~deb13u1_ppc64el.deb a0dd42fafdfd306241fe916bc02af19a0f758a5c 23672 postfix-ldap-dbgsym_3.10.4-1~deb13u1_ppc64el.deb 2f33ccc1a7d4f58fb85a2b3de868d213ad8d3bf1 13104 postfix-ldap_3.10.4-1~deb13u1_ppc64el.deb 2a7ff9ab0d50d75b39d5eb007ed5d0e3aebce642 19156 postfix-lmdb-dbgsym_3.10.4-1~deb13u1_ppc64el.deb e885d8034b08cfa9aef67d1fcbe1afef0ed95921 8564 postfix-lmdb_3.10.4-1~deb13u1_ppc64el.deb 36dd0f5c935ff9e8a2570e5783bf1477e8f2fb5f 14200 postfix-mongodb-dbgsym_3.10.4-1~deb13u1_ppc64el.deb d335b337042087c709b36a8926055c6f9fbe053c 6720 postfix-mongodb_3.10.4-1~deb13u1_ppc64el.deb 5a2c9c90524900781225d4b44a67612fbbda412f 25048 postfix-mysql-dbgsym_3.10.4-1~deb13u1_ppc64el.deb 3363aca970243e43f3a9d61e8d574884deaa546e 8412 postfix-mysql_3.10.4-1~deb13u1_ppc64el.deb 75857e3781bc8c41736203504daab99471e8fa7c 15312 postfix-pcre-dbgsym_3.10.4-1~deb13u1_ppc64el.deb 97e805dfce1dc7c894066ed5b110d2e0f482d373 7824 postfix-pcre_3.10.4-1~deb13u1_ppc64el.deb ec70bb78ef1cbb367c7446510fa1b3627f31b0b3 15040 postfix-pgsql-dbgsym_3.10.4-1~deb13u1_ppc64el.deb 30a5e42b883e9128bf00ab06403f0505ce51ba4d 8040 postfix-pgsql_3.10.4-1~deb13u1_ppc64el.deb 40093b900ba076a834f47cac2552d0db0ffc8b14 8720 postfix-sqlite-dbgsym_3.10.4-1~deb13u1_ppc64el.deb 36ced5c2d4f78eb3f1cf1d1a9a56c4f6b71bdd41 5060 postfix-sqlite_3.10.4-1~deb13u1_ppc64el.deb 999d4fa5e35c06d6a2f15b5ffb5f58196cc6c2cd 12610 postfix_3.10.4-1~deb13u1_ppc64el-buildd.buildinfo e7c4aa66167bbc0db68e3ba73b92c30a3012d61f 1627524 postfix_3.10.4-1~deb13u1_ppc64el.deb Checksums-Sha256: 59a056ad2591f3616dc5655ba04955d0b4026f7fd6e2c973b769924d1b73b43f 11528 postfix-cdb-dbgsym_3.10.4-1~deb13u1_ppc64el.deb dd1fc0e07291c79a210894df4a9cbd274d856d5f58e6707d98b4f83823f83c6d 5680 postfix-cdb_3.10.4-1~deb13u1_ppc64el.deb c4cefca5f472f4458e2b8fd5f9221f9ed46eff776bd3ebb1099a42666642d58c 1921460 postfix-dbgsym_3.10.4-1~deb13u1_ppc64el.deb c828ab011aaaf8f153a6f57cdee2bf7f74ae76750218c9b67ae5aa54563f4570 23672 postfix-ldap-dbgsym_3.10.4-1~deb13u1_ppc64el.deb a0a98cc8634b9a71f087abb70e4409287c7943f61a0dd3fee0f30f0cb768ee2a 13104 postfix-ldap_3.10.4-1~deb13u1_ppc64el.deb 09f58eb554c6d23da235369d8314a28e1747c0c98b8f928c835038e55c66474f 19156 postfix-lmdb-dbgsym_3.10.4-1~deb13u1_ppc64el.deb 9f7edd9ab66a6317e0ef80c337417bfdc45746384cb98f34efc87747ba213bb8 8564 postfix-lmdb_3.10.4-1~deb13u1_ppc64el.deb 3e8687db3b983bc8ef15f58c917004fdf3f3753f7baddb7767093c6fa5469b64 14200 postfix-mongodb-dbgsym_3.10.4-1~deb13u1_ppc64el.deb 0e723b532898fe645a74f193237b1425da307c23e6951d9efc2c36dca6f49965 6720 postfix-mongodb_3.10.4-1~deb13u1_ppc64el.deb ce6726fd9677e748778aa452a7e80e1ab87a9a987e2ea99e6a4d956fecdc2914 25048 postfix-mysql-dbgsym_3.10.4-1~deb13u1_ppc64el.deb bba407398f5140ec619f976152bdc6cfe0a14dbb11e22d9dee3e804ce09804d6 8412 postfix-mysql_3.10.4-1~deb13u1_ppc64el.deb 5f686107d4d7e51a8d118d8c4c3e86bf141596fdb35289b176eb842e87fc40de 15312 postfix-pcre-dbgsym_3.10.4-1~deb13u1_ppc64el.deb 005d6ec6a1ff7b6b635b35592bd3361e5468ac3d4637a11dea96e0a11629569d 7824 postfix-pcre_3.10.4-1~deb13u1_ppc64el.deb a265140bdb30e593384faf7feebfd862547c6ba9256d16a755e6cc485077b0d5 15040 postfix-pgsql-dbgsym_3.10.4-1~deb13u1_ppc64el.deb f5f074c9278f7844831fc65b645272eb0b759c421eacfb9895f4f41f4778994e 8040 postfix-pgsql_3.10.4-1~deb13u1_ppc64el.deb 78d75c06f784c9e9f31e30b7541dc5a46366d657e370ef26c01445a4527698d0 8720 postfix-sqlite-dbgsym_3.10.4-1~deb13u1_ppc64el.deb 67211ddabf65e8e00a897f68c977d954bef6edbf1dfc3710086a1eefdf1aa757 5060 postfix-sqlite_3.10.4-1~deb13u1_ppc64el.deb 16ff47285c06e67d734ba80e7dc46cf92115900a1746f27bf7dcb9f5e6150482 12610 postfix_3.10.4-1~deb13u1_ppc64el-buildd.buildinfo 90b47a832250b9cdc78650152708311cc7c79aa2fe693c86e0e12aee0adffaf3 1627524 postfix_3.10.4-1~deb13u1_ppc64el.deb Files: b8906cce3ede84f6ee67fd87e523523d 11528 debug optional postfix-cdb-dbgsym_3.10.4-1~deb13u1_ppc64el.deb 84a086fc046d8ade6f41570e8c15dd45 5680 mail optional postfix-cdb_3.10.4-1~deb13u1_ppc64el.deb 56d6365fc7643fa5a1e73a76c84903fb 1921460 debug optional postfix-dbgsym_3.10.4-1~deb13u1_ppc64el.deb 0980152c0b13d5bf86d6574cdcf2c3d5 23672 debug optional postfix-ldap-dbgsym_3.10.4-1~deb13u1_ppc64el.deb 4d388b46d926e7539a953ce9911babe7 13104 mail optional postfix-ldap_3.10.4-1~deb13u1_ppc64el.deb 3862a83caf945fb80fb566be3721ba4d 19156 debug optional postfix-lmdb-dbgsym_3.10.4-1~deb13u1_ppc64el.deb 97fd3f6aebce0aeb791f9097013f05ab 8564 mail optional postfix-lmdb_3.10.4-1~deb13u1_ppc64el.deb 9f35b2bd9f632b93682e941ea87efd2f 14200 debug optional postfix-mongodb-dbgsym_3.10.4-1~deb13u1_ppc64el.deb d112df943ab4878cdb87a340a50de019 6720 mail optional postfix-mongodb_3.10.4-1~deb13u1_ppc64el.deb c14e9d7c32a7512f79861bb5d5b42a7d 25048 debug optional postfix-mysql-dbgsym_3.10.4-1~deb13u1_ppc64el.deb dbba3769e38afacb7df3d45f51cda120 8412 mail optional postfix-mysql_3.10.4-1~deb13u1_ppc64el.deb 88c66aa0dd9bb12e37fbc6787355d1c9 15312 debug optional postfix-pcre-dbgsym_3.10.4-1~deb13u1_ppc64el.deb d6f2ed2da8ba955df5fad0eb10017251 7824 mail optional postfix-pcre_3.10.4-1~deb13u1_ppc64el.deb eec20917658961d324cd2c939fd2cc04 15040 debug optional postfix-pgsql-dbgsym_3.10.4-1~deb13u1_ppc64el.deb c89600ed7f9913ba9b1cd0faa0b37279 8040 mail optional postfix-pgsql_3.10.4-1~deb13u1_ppc64el.deb 7af273b538004c46d6442681e01c19f3 8720 debug optional postfix-sqlite-dbgsym_3.10.4-1~deb13u1_ppc64el.deb 55fe64a3dd2d01fa9451d3592168521f 5060 mail optional postfix-sqlite_3.10.4-1~deb13u1_ppc64el.deb bb8d0e4d0e2b4fcaae7c80fcdfe558ee 12610 mail optional postfix_3.10.4-1~deb13u1_ppc64el-buildd.buildinfo 921ea46689397499c4e22779c58272b2 1627524 mail optional postfix_3.10.4-1~deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYo4fOZBRi9qmvTxH1PowSTJ8+YQFAmixFcMACgkQ1PowSTJ8 +YTn7g//RAdEt7r5b9zrqjd77W6Evb1QWCU0jhHd0IekGhcECMJh7/0Hvcimwt6P oEAJP3uHsGlwMiXL940tG6IItevNHEHnouibOurkYUEIINVqQLheGk0HJ3qOWsuD HFnW0ntuvTfwGL1XWXt92hBkP8WkqaOorhBno1AWN/Jcx7yumsOG52+LtcU5Hxju 3f6dmkkwABZm+MFEMSA2MS/YKOhfiOewLUIdkeU1Mk0L0j8/3a5bJFIOB+ClKRrs sFWuk5NcmIHDQaoreEEvywcFTLADYTjMxRhyS+AORnzpHohlxMKuFP5spFbXGkWQ 93RivMk9zXySYNrZzgLzI97krxW94RPUpCuhhIZrIFHrRSTabmPkeXuoyY+J9fSf 8FebqFqT1pUPtQGuSb9ad3lVfHUfKDWBf+MwcEYcQUadijtYIb2hpBbKtHay7Qv7 s45KncFfJihap3yPi5+bWP6+0Iyhi8gYr0UXnGez+EuX7HbY9IMOfX5g6SyhiUmQ iNJUp3j/wEzObAhShRXUKc9ewzrfNA9nRFkXvdzd+XjVVdaWMSGZ9TtK08yHFaRN rKrmvkuAUyJVQg1uSuu9etPP99maAxUDJI5sN7c+TT+IWY/7wf4ZuQLmE4bjJJye KUB8CPRKVQvPVVuC1H4vCzdozObbRutsvp+wSs6eVSuql+1r0uQ= =NDP/ -----END PGP SIGNATURE-----