-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 22 Aug 2025 09:51:46 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: amd64 Version: 3.10.4-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Closes: 1100100 1110704 Changes: postfix (3.10.4-1~deb13u1) trixie; urgency=medium . * New upstream stable/bugfix version 3.10.4, with a handful of fixes. From the upstream release notes: - Fixes for postscreen(8): * Bugfix (defect introduced: Postfix 2.2, date 20050203): after detecting a lookup table change, and after starting a new postscreen process, the old postscreen process logged an ENOTSOCK error while attempting to accept a connection on a socket that it was no longer listening on. This error was introduced first in the multi_server skeleton code, and was five years later duplicated in the event_server skeleton that was created for postscreen. Problem reported by Florian Piekert. * Bugfix (defect introduced: Postfix 2.8, date 20101230): after detecting a cache table change and before starting a new postscreen process, the old postscreen process did not close the postscreen_cache_map, and therefore kept an exclusive lock that could prevent a new postscreen process from starting. Problem reported by Florian Piekert. - Fixes for tlsproxy(8): * Bugfix (defect introduced: Postfix 3.7): incorrect backwards compatible support for the legacy configuration parameters tlsproxy_client_level and tlsproxy_client_policy. This disabled the tlsproxy TLS client role when a legacy parameter was set (instead of the newer tlsproxy_client_security_level or tlsproxy_client_policy_maps). Reported by John Doe, diagnosed by Viktor Dukhovni. * Bugfix (defect introduced: Postfix 3.4): with the TLS client role disabled by configuration, the tlsproxy daemon dereferenced a null pointer while handling a tlsproxy client request. Reported by John Doe. - Reducing process churn: Postfix daemons no longer automatically restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file modification time change, when they opened that table for writing. - Portability: deleted an build dependency, because the feature is being removed from OpenSSL, and Postfix no longer needs it. - Cleanup: with "tls_required_enable = yes", the Postfix SMTP client will no longer maintain TLSRPT statistics for messages that contain a "TLS-Required: no" header. This can prevent TLSRPT notifications for TLSRPT notifications. - Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS client code logged "Untrusted TLS connection" (wrong) instead of "Trusted TLS connection" (right), for a new or resumed TLS session, when a server offered a trusted (valid PKI trust chain) certificate that did not match the expected server name pattern. Fix by Viktor Dukhovni. * d/gbp.conf: debian-branch=debian/trixie * configure-instance.in: fix typo * configure-instance.in: limit maxdepth=1 in /etc/ssl/certs dirs * configure-instance.in: use home-grown file copy procedure to sync chroot There are a few issues with using cp(1) to update files in chroot, - a file should be copied even if the source date is *less* than the target date (eg, if a package has been downgraded), which is not done by `cp -u` (#1110704), a file should be copied atomically (copy+rename, not truncate+copy), and care should be taken with extra attributes (#1100100). Use a simple perl-based script (using just perl-base) to update files instead, which fixes all this stuff. (Closes: #1100100, #1110704) Checksums-Sha1: 349e77e21237413462e3e6348bd5ecee74ffff8e 11076 postfix-cdb-dbgsym_3.10.4-1~deb13u1_amd64.deb 20a3d6008c68b1d64a758efb8a7a3ba59b91b505 5420 postfix-cdb_3.10.4-1~deb13u1_amd64.deb 0a3d3b5f9f9119e335f20f9f7a581d685453aa0e 1876420 postfix-dbgsym_3.10.4-1~deb13u1_amd64.deb 6784c4e973b83050ab7573a77e6bb01b91a0655b 22916 postfix-ldap-dbgsym_3.10.4-1~deb13u1_amd64.deb 2ed5079b6629c74a26e9bddce26067f247d82513 13044 postfix-ldap_3.10.4-1~deb13u1_amd64.deb f75941bfddf43a9ddd72509fb6f2f5b60280b315 18384 postfix-lmdb-dbgsym_3.10.4-1~deb13u1_amd64.deb 78088a782c7bba8a9731c6e44af999b9449a1992 8696 postfix-lmdb_3.10.4-1~deb13u1_amd64.deb 477aac222da7b57cabc5f80bb16d2e329640d109 13752 postfix-mongodb-dbgsym_3.10.4-1~deb13u1_amd64.deb 4b0cb7da8832ecfc6d3af46367de2e3aa28fa2cc 6268 postfix-mongodb_3.10.4-1~deb13u1_amd64.deb c513603185989b26652fb80477e5ac541cd83331 24420 postfix-mysql-dbgsym_3.10.4-1~deb13u1_amd64.deb 0605f429a2fb56a1e8fc461b2fd24c652a86cb07 7724 postfix-mysql_3.10.4-1~deb13u1_amd64.deb f05bfa03a4f129608a5714b033c73b1b1e6a2bdd 14936 postfix-pcre-dbgsym_3.10.4-1~deb13u1_amd64.deb ffa62f0fdc254454dde04838e1b1214be63b863d 7340 postfix-pcre_3.10.4-1~deb13u1_amd64.deb a88e80186c531ba1057d2fbb1bbac316974ac380 14312 postfix-pgsql-dbgsym_3.10.4-1~deb13u1_amd64.deb cd86f4c327f7cc6900edde85f29b78341c0b5389 7316 postfix-pgsql_3.10.4-1~deb13u1_amd64.deb a52a32a2000c7888b8de5e88741d5a374a3966f9 8280 postfix-sqlite-dbgsym_3.10.4-1~deb13u1_amd64.deb 8b4268f2b45737bd6e6fd7bbd61558341116a3b3 4972 postfix-sqlite_3.10.4-1~deb13u1_amd64.deb 9e0d5ee676531914b7074f782db6ea55f93ee497 12515 postfix_3.10.4-1~deb13u1_amd64-buildd.buildinfo 0c1b30b0954e739586eb947e0594b9f215d4014f 1597828 postfix_3.10.4-1~deb13u1_amd64.deb Checksums-Sha256: 9568df46101b7e25196f8aa77cdca6728b63e66fb2790987be34d1b862ed4b90 11076 postfix-cdb-dbgsym_3.10.4-1~deb13u1_amd64.deb cf93de5a2aee204915355b46abd467ed2371e245070251a7fdf4c12b6b43e1f1 5420 postfix-cdb_3.10.4-1~deb13u1_amd64.deb 955845e627e8a5bc36f4ba831eff50a2b714c44a47cbb7a77765adb98ab28496 1876420 postfix-dbgsym_3.10.4-1~deb13u1_amd64.deb 3f94d056c669daa0acde42e0dfbb3ad2c4b09e869e74a09e82449f47f072a4d9 22916 postfix-ldap-dbgsym_3.10.4-1~deb13u1_amd64.deb 4bd05080c18dcfeff0cb6470ef7ede246a98a8e9aa90f418fe980780a500b215 13044 postfix-ldap_3.10.4-1~deb13u1_amd64.deb 5521652d1f51f215c579c9b572617f4fd6dc0dfacbf4abb994862ff4d5965858 18384 postfix-lmdb-dbgsym_3.10.4-1~deb13u1_amd64.deb 0d55247578b662fbfffb89f530056ebaa2a926498438e3c31bce92b6dfa8a2d4 8696 postfix-lmdb_3.10.4-1~deb13u1_amd64.deb 4ce1b0105482f8540198a085ba023a581c9732ae02d29383bfb890305007bd3f 13752 postfix-mongodb-dbgsym_3.10.4-1~deb13u1_amd64.deb 61003ea45dbded1234edb0859d5d9ddaff1c7d282f2cf91a560d5481b104e43a 6268 postfix-mongodb_3.10.4-1~deb13u1_amd64.deb 430ed80aac88530f3550aa89daf05216ba32cac47f5a69a5e61cc1abb7dcbd73 24420 postfix-mysql-dbgsym_3.10.4-1~deb13u1_amd64.deb 62327c5f8650f4e227e416af99c1128d21ac52fb6185e91629e0a1306229399d 7724 postfix-mysql_3.10.4-1~deb13u1_amd64.deb 5e90d286c60f85898e4673e8ae5844d136f15c633814805f82c183a4180a051d 14936 postfix-pcre-dbgsym_3.10.4-1~deb13u1_amd64.deb 44fa3c766c9eaeea93207213dba364d58af61c962bad733cda7cf6badefa3945 7340 postfix-pcre_3.10.4-1~deb13u1_amd64.deb f0ec77c3267eaaa100cba51060fddd5a2309c26320a2e7b75439e5466cd9d4ec 14312 postfix-pgsql-dbgsym_3.10.4-1~deb13u1_amd64.deb b778222ad4a9191854db7e56b9d077290528e1d7ec4eaee321b2476e5cac74ee 7316 postfix-pgsql_3.10.4-1~deb13u1_amd64.deb b24fa0069ea258ae3a3d1e0f0c3428003c450d7d17834a4bebd0ac3d1ec1877f 8280 postfix-sqlite-dbgsym_3.10.4-1~deb13u1_amd64.deb 263bf1ade39346870e7943cd63e341bb819fc8fde3d2a88891ae2387c73de9cf 4972 postfix-sqlite_3.10.4-1~deb13u1_amd64.deb 144abe537992d5fb99dc7a409e0c6bd3b8703e5931c15419860b2aa96ea897e2 12515 postfix_3.10.4-1~deb13u1_amd64-buildd.buildinfo a3f47fb438b3640c4d8b01e8250e00663bbd3392635aa68a83a11ca1bb62c0e4 1597828 postfix_3.10.4-1~deb13u1_amd64.deb Files: dc79816d60b181e4c5d3c3ed6ed420df 11076 debug optional postfix-cdb-dbgsym_3.10.4-1~deb13u1_amd64.deb 66a3ab2320f2632d082508546e6b2bb4 5420 mail optional postfix-cdb_3.10.4-1~deb13u1_amd64.deb c295836b654f40f72099d739261bb176 1876420 debug optional postfix-dbgsym_3.10.4-1~deb13u1_amd64.deb 658c4c963c2df8fe62fe98b5cfc6bcc4 22916 debug optional postfix-ldap-dbgsym_3.10.4-1~deb13u1_amd64.deb 3fc163f9637b684e878fe8a2b269aa8d 13044 mail optional postfix-ldap_3.10.4-1~deb13u1_amd64.deb a20691d0e5fd87ba335905fb5faf7205 18384 debug optional postfix-lmdb-dbgsym_3.10.4-1~deb13u1_amd64.deb 0d6fa1157b519bd378bc94d8f5615df7 8696 mail optional postfix-lmdb_3.10.4-1~deb13u1_amd64.deb ec195423886938b54cf0d5c26b6b7701 13752 debug optional postfix-mongodb-dbgsym_3.10.4-1~deb13u1_amd64.deb 59b7e8c20b4c8b2fe232b7f47959a6dd 6268 mail optional postfix-mongodb_3.10.4-1~deb13u1_amd64.deb 7f1c49cc29fdaf02823828fd4a6eceda 24420 debug optional postfix-mysql-dbgsym_3.10.4-1~deb13u1_amd64.deb 876d6e9d0d86f309283b6ff4481b8140 7724 mail optional postfix-mysql_3.10.4-1~deb13u1_amd64.deb 020001aa6ac25adf8dc7cb8f870790dc 14936 debug optional postfix-pcre-dbgsym_3.10.4-1~deb13u1_amd64.deb ed9626246b13664608c662a25708df2c 7340 mail optional postfix-pcre_3.10.4-1~deb13u1_amd64.deb d23b07fa164e35f9542863a01cb7e211 14312 debug optional postfix-pgsql-dbgsym_3.10.4-1~deb13u1_amd64.deb 3af90681f7166e9a2e6df85c39e2b40e 7316 mail optional postfix-pgsql_3.10.4-1~deb13u1_amd64.deb 998bfbbee2cd981495af44338ed55f8c 8280 debug optional postfix-sqlite-dbgsym_3.10.4-1~deb13u1_amd64.deb 1e03a629816f28cb810575024004e7b4 4972 mail optional postfix-sqlite_3.10.4-1~deb13u1_amd64.deb d592ce26383739b914a0782a3161acda 12515 mail optional postfix_3.10.4-1~deb13u1_amd64-buildd.buildinfo d801b393b1873bceb45fee576ccf94ca 1597828 mail optional postfix_3.10.4-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEnw0rdzqckKx6dwRTEbCLukZn24oFAmixFbIACgkQEbCLukZn 24qqxQ/8D0yTdZr4CPODrtkpXDtcmk2IInYp+Ak6qPdX+LdENPCkVH75LdLwPnIV g/227nReOyLytEnahjF2xTkRSWSco3JS1ZXRXrvn6q/yRs817pelnIjImfIUzcuz xA0lurdF7KWHp3c+nHx87wtBKzBfqPdBmKt6hX6tSbAEC/22TdRYzUdwZjcBkEtQ FjKS2HFSa0v73mPcPWEFUc5gZ/WTJniYqeObTlpuMM7voC+4QFGDOLiZGtzQX6kX qqO9nMLQbN+qhEcB9T30JmmFlUGdfZ9utBfV1KYm7Q1IR44nbtGAeSG0Fslrd4vc efqYikXogxZrnRaO6fFosvzGClXcvAaChp1iUqc9/roTwH77jz0R7BAegTLfTv9H 3RTYr/ubZP6mXJfvFGJrstz7KSMj1UAeXZLtCgPOcaXXwqP5S6bMr7oIMecVJRKb IiZdleEalGJA4Wbi5iVC4PvdPxRaN5Jzzc/7jNmOjPSZJ4yT7MFvg1VJuL5HVWIS UnhsO1eyhasp2SeD4u1SQEq8+864fE3+AMeveCwT7pYME0kI/XnFlGdPmmkhmj0O ffHI+3UdSgPrTLIxAdLy3etaQ3SQbTdv5ssKBwbeb5J/q+1hx9OQCkZffUnRh9p6 S7sq0JSyk+3vgNl26OsYSQffkCbgrNNbZrLOG5Q0Js7cNG/Xius= =MD5K -----END PGP SIGNATURE-----