-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 22 Aug 2025 09:51:46 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: riscv64 Version: 3.10.4-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: riscv64 Build Daemon (rv-osuosl-03) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Closes: 1100100 1110704 Changes: postfix (3.10.4-1~deb13u1) trixie; urgency=medium . * New upstream stable/bugfix version 3.10.4, with a handful of fixes. From the upstream release notes: - Fixes for postscreen(8): * Bugfix (defect introduced: Postfix 2.2, date 20050203): after detecting a lookup table change, and after starting a new postscreen process, the old postscreen process logged an ENOTSOCK error while attempting to accept a connection on a socket that it was no longer listening on. This error was introduced first in the multi_server skeleton code, and was five years later duplicated in the event_server skeleton that was created for postscreen. Problem reported by Florian Piekert. * Bugfix (defect introduced: Postfix 2.8, date 20101230): after detecting a cache table change and before starting a new postscreen process, the old postscreen process did not close the postscreen_cache_map, and therefore kept an exclusive lock that could prevent a new postscreen process from starting. Problem reported by Florian Piekert. - Fixes for tlsproxy(8): * Bugfix (defect introduced: Postfix 3.7): incorrect backwards compatible support for the legacy configuration parameters tlsproxy_client_level and tlsproxy_client_policy. This disabled the tlsproxy TLS client role when a legacy parameter was set (instead of the newer tlsproxy_client_security_level or tlsproxy_client_policy_maps). Reported by John Doe, diagnosed by Viktor Dukhovni. * Bugfix (defect introduced: Postfix 3.4): with the TLS client role disabled by configuration, the tlsproxy daemon dereferenced a null pointer while handling a tlsproxy client request. Reported by John Doe. - Reducing process churn: Postfix daemons no longer automatically restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file modification time change, when they opened that table for writing. - Portability: deleted an build dependency, because the feature is being removed from OpenSSL, and Postfix no longer needs it. - Cleanup: with "tls_required_enable = yes", the Postfix SMTP client will no longer maintain TLSRPT statistics for messages that contain a "TLS-Required: no" header. This can prevent TLSRPT notifications for TLSRPT notifications. - Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS client code logged "Untrusted TLS connection" (wrong) instead of "Trusted TLS connection" (right), for a new or resumed TLS session, when a server offered a trusted (valid PKI trust chain) certificate that did not match the expected server name pattern. Fix by Viktor Dukhovni. * d/gbp.conf: debian-branch=debian/trixie * configure-instance.in: fix typo * configure-instance.in: limit maxdepth=1 in /etc/ssl/certs dirs * configure-instance.in: use home-grown file copy procedure to sync chroot There are a few issues with using cp(1) to update files in chroot, - a file should be copied even if the source date is *less* than the target date (eg, if a package has been downgraded), which is not done by `cp -u` (#1110704), a file should be copied atomically (copy+rename, not truncate+copy), and care should be taken with extra attributes (#1100100). Use a simple perl-based script (using just perl-base) to update files instead, which fixes all this stuff. (Closes: #1100100, #1110704) Checksums-Sha1: aa486cb40802f15f3233ebdc12179498e72d69ff 11044 postfix-cdb-dbgsym_3.10.4-1~deb13u1_riscv64.deb 47f8b55297624f77daa4a7d816582258ca9c9180 5096 postfix-cdb_3.10.4-1~deb13u1_riscv64.deb 3d000f4e23d435f9490468d9bf0cbdc3efee2204 1850212 postfix-dbgsym_3.10.4-1~deb13u1_riscv64.deb b9f181de4adb83a3b49bfa1f9940d9aaf91c9705 22904 postfix-ldap-dbgsym_3.10.4-1~deb13u1_riscv64.deb 2001fcd6417476c7021d765d5d27487edce5eab6 12172 postfix-ldap_3.10.4-1~deb13u1_riscv64.deb f89fe565545384cb15a585857e7fe35062e3810b 17948 postfix-lmdb-dbgsym_3.10.4-1~deb13u1_riscv64.deb 201494d134cbf05d1a8a828e760d427590e8ce54 7988 postfix-lmdb_3.10.4-1~deb13u1_riscv64.deb 7335441709bb267996a90f4595eff6e7b4738407 13836 postfix-mongodb-dbgsym_3.10.4-1~deb13u1_riscv64.deb 1a867fb70b915ed4f73f8a537df4ee4ff946fadb 6064 postfix-mongodb_3.10.4-1~deb13u1_riscv64.deb b091d9d89879e049e806f6bf684128a204f84d64 24204 postfix-mysql-dbgsym_3.10.4-1~deb13u1_riscv64.deb b5608e9ed554498438298419198a1f751c2f2dce 7140 postfix-mysql_3.10.4-1~deb13u1_riscv64.deb 68ee42da86996faf09a3a1b868c97c9cbb290128 15048 postfix-pcre-dbgsym_3.10.4-1~deb13u1_riscv64.deb dbe5fe166c01e3dab8ccf61a033b1ecc0007a230 6924 postfix-pcre_3.10.4-1~deb13u1_riscv64.deb bf80e17882a6e163de6a28f911f2ae8acbe40c02 14260 postfix-pgsql-dbgsym_3.10.4-1~deb13u1_riscv64.deb 00bca6752934e5c1d98b918b4dc8714c7d22d8ad 6888 postfix-pgsql_3.10.4-1~deb13u1_riscv64.deb 7b189e1f71d4cac1d2a4b5001491ee281bc22bb7 8512 postfix-sqlite-dbgsym_3.10.4-1~deb13u1_riscv64.deb dcf64b255adc022ff181a02676a4bc5b08a7a1a7 4720 postfix-sqlite_3.10.4-1~deb13u1_riscv64.deb f92516ac22a30ef98aa7091d5f0ff93cf68983ee 12555 postfix_3.10.4-1~deb13u1_riscv64-buildd.buildinfo d4d6468e2aee966aa2bbb6b66a7ab0174dcd262f 1575388 postfix_3.10.4-1~deb13u1_riscv64.deb Checksums-Sha256: fc8a92ff4acf44fea1f806aab679df107814b7f24f3b999a2cd74864bbabfe24 11044 postfix-cdb-dbgsym_3.10.4-1~deb13u1_riscv64.deb 39109161c766e03f4fd229c885fa05fb8484bd8852e3b4a2198be1ba23ce798b 5096 postfix-cdb_3.10.4-1~deb13u1_riscv64.deb c44049b1a54109cca7c4a9e1f678883a5c72975deab5378f00dbf06a119d2254 1850212 postfix-dbgsym_3.10.4-1~deb13u1_riscv64.deb f29451d5f81582cf0f6e890c093379d39ae973bac584173bcf8212995604ed9c 22904 postfix-ldap-dbgsym_3.10.4-1~deb13u1_riscv64.deb e917705f8e7a60cc3e8271e4656e109bbf72adefed3dd9f2af5945acbba40531 12172 postfix-ldap_3.10.4-1~deb13u1_riscv64.deb 4a00772bc8cf5a962ecc0dfe4ea2701b45e486ce44fb5858f81478a4c30a3a2f 17948 postfix-lmdb-dbgsym_3.10.4-1~deb13u1_riscv64.deb e6817bbd97341d0ae65847e0586f035f47eca954d730a08da4b43088979bf1e8 7988 postfix-lmdb_3.10.4-1~deb13u1_riscv64.deb ed0a8a85bb1a93fa2933cad42f1f689d2e310158a5f0c186e5b88166dc57e855 13836 postfix-mongodb-dbgsym_3.10.4-1~deb13u1_riscv64.deb 724d780feab3a8acd8f620f76ba01894015fd6102a0e3bf871f793385aec92a7 6064 postfix-mongodb_3.10.4-1~deb13u1_riscv64.deb 1a676b1800a6182ecf7c6c78bb214fbbc88ba02485fa246a7f78a30e3804883d 24204 postfix-mysql-dbgsym_3.10.4-1~deb13u1_riscv64.deb f6588be1a196f13372bf7627eb779cdd73c639839a14bee0ad04eb867199f7cf 7140 postfix-mysql_3.10.4-1~deb13u1_riscv64.deb 849eb61584a4c00bc73b7b1b76c1f9231e17d7cef14292bf768f763ea18829cf 15048 postfix-pcre-dbgsym_3.10.4-1~deb13u1_riscv64.deb 6a34dd30d8b0febe766b7443874a25345a4d2bf8d358f110d7e1da98a408f48b 6924 postfix-pcre_3.10.4-1~deb13u1_riscv64.deb 928da91ac6bf10a32c60e972632b8b3194743620cce02c968f6deb5ddb403c2c 14260 postfix-pgsql-dbgsym_3.10.4-1~deb13u1_riscv64.deb c29b94d0467c02792e58c69b0295eb7b851e1fc96d4f8039c33aa9d121ae0810 6888 postfix-pgsql_3.10.4-1~deb13u1_riscv64.deb 462a0bc8a57b40aef694c0ef9b8fd63f3e27da859048b875ccfa014cdfcbe096 8512 postfix-sqlite-dbgsym_3.10.4-1~deb13u1_riscv64.deb baa91db15c0ab8997911401e33a6f9d0f00caa346c2c97cc81dcb22634e960a2 4720 postfix-sqlite_3.10.4-1~deb13u1_riscv64.deb 445faa4b4d160944fe0b4c7b5f8c339f04c21a829bab040b78e1837040dd30db 12555 postfix_3.10.4-1~deb13u1_riscv64-buildd.buildinfo 3f1d2dc698eee47de2cb53835fa33da9f30170f88023239ecc9c30857d9fb31f 1575388 postfix_3.10.4-1~deb13u1_riscv64.deb Files: 575e19345ee5f9626d4341e73e3c15f3 11044 debug optional postfix-cdb-dbgsym_3.10.4-1~deb13u1_riscv64.deb ecb8e7b0b21878582d7707ac5507016b 5096 mail optional postfix-cdb_3.10.4-1~deb13u1_riscv64.deb e40fb8c86b99dd3d64c0fc5f38d0e667 1850212 debug optional postfix-dbgsym_3.10.4-1~deb13u1_riscv64.deb 3cf0c39e8cb68279ce598b3886bb5a7a 22904 debug optional postfix-ldap-dbgsym_3.10.4-1~deb13u1_riscv64.deb 956159d6669b6c2d47018a1ac4586608 12172 mail optional postfix-ldap_3.10.4-1~deb13u1_riscv64.deb c59513453397d3581f3b1da9433c147b 17948 debug optional postfix-lmdb-dbgsym_3.10.4-1~deb13u1_riscv64.deb 262a3e4f1136ae251529d0e4c14ccb45 7988 mail optional postfix-lmdb_3.10.4-1~deb13u1_riscv64.deb 1f7a12464252f6415427c6e0345d37e6 13836 debug optional postfix-mongodb-dbgsym_3.10.4-1~deb13u1_riscv64.deb b6a3f97785e814f4ce6656e169ffa7ad 6064 mail optional postfix-mongodb_3.10.4-1~deb13u1_riscv64.deb 336ffbad9578d324b6b01a9a6adff9d3 24204 debug optional postfix-mysql-dbgsym_3.10.4-1~deb13u1_riscv64.deb a346eb82ce4521e179dadae3e26d505e 7140 mail optional postfix-mysql_3.10.4-1~deb13u1_riscv64.deb 9dac874aea36decf324149b1be8a0c47 15048 debug optional postfix-pcre-dbgsym_3.10.4-1~deb13u1_riscv64.deb 66465e9a89ab6d5cf7132e64f9f5c9c1 6924 mail optional postfix-pcre_3.10.4-1~deb13u1_riscv64.deb ff81365e4c1b37e464538382fa534fbf 14260 debug optional postfix-pgsql-dbgsym_3.10.4-1~deb13u1_riscv64.deb 485ad5691ad74826bd521ea79a98a5ec 6888 mail optional postfix-pgsql_3.10.4-1~deb13u1_riscv64.deb 0ae7e0de5ff0a71fd7f8402988f4679a 8512 debug optional postfix-sqlite-dbgsym_3.10.4-1~deb13u1_riscv64.deb 192db9c29ccfef02b8b85dcd6ae39b9d 4720 mail optional postfix-sqlite_3.10.4-1~deb13u1_riscv64.deb 3a8b67203b41640a83365c6483a37872 12555 mail optional postfix_3.10.4-1~deb13u1_riscv64-buildd.buildinfo 4abd149ee4e62d50f72a01d896c22fb5 1575388 mail optional postfix_3.10.4-1~deb13u1_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEHGDtw10vnHTL00OpqK0crxoR+pMFAmixG0IACgkQqK0crxoR +pM2sw//ep+2S/H8DoCvOUoaJyCAxOxEsEs62nGa5sNKNcvd7XPBqWPTG57PYFzX mcJ99MhRUMY0vfhENdRHFP2f9vC60QW8Vq/XIAzvQ+e+dxKbSP2lvqMAsqtk8K3T 8ektkKPj1Ehe6oetQCdgiQ7yp2BnCuLFXtzUbs/D4ctUhvaPDrYOftonT5vvUNP0 gIy3G7o4VLBYw5shKUKeiKYAdkQxsxzCKDJdmtOV8wnrUYtkLcexYsrQg2qeTu1g Dc5vRbyphd0HyJ57r3mXm7TcRqOEob5TCAEJwrXSNcseN1DiuGeQao/tIlfNYn0M 1Xk3U/WW/C44GTlVZn1UPXIoIob2yJL4bcrLH2YLowDBkkIZIxfyDIpDP5GF7EuU DP5wIBbWe60fPRh1eXbEpO6nFsdKIZKg9vu0SGevDtZSU3WHuFzXp6yjXY56mRbT JVbzBGGPmC1nQEJPovb3I2IvRZPLYZYYvvuKvU8SvJWhtxwnrxCQ/Ucpycps635+ kxZN/qtXxW84DcYaR8inKDBR6R57u1ImFeIV10RhljSaBqciSTZWPuhBFxi5Re/m P5uWVERRAeBOTB6zFoYLuYuXV+hIzDHosJJbgNNp7TdugKh3dnuENZpTgn6d8ukO a9yncETgEDMra+4TuwDnh4RNobl4mHAKjwpJXK4hoCxhEvjwr9Y= =TmTa -----END PGP SIGNATURE-----