-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 22 Aug 2025 09:51:46 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: arm64 Version: 3.10.4-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-conova-04) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Closes: 1100100 1110704 Changes: postfix (3.10.4-1~deb13u1) trixie; urgency=medium . * New upstream stable/bugfix version 3.10.4, with a handful of fixes. From the upstream release notes: - Fixes for postscreen(8): * Bugfix (defect introduced: Postfix 2.2, date 20050203): after detecting a lookup table change, and after starting a new postscreen process, the old postscreen process logged an ENOTSOCK error while attempting to accept a connection on a socket that it was no longer listening on. This error was introduced first in the multi_server skeleton code, and was five years later duplicated in the event_server skeleton that was created for postscreen. Problem reported by Florian Piekert. * Bugfix (defect introduced: Postfix 2.8, date 20101230): after detecting a cache table change and before starting a new postscreen process, the old postscreen process did not close the postscreen_cache_map, and therefore kept an exclusive lock that could prevent a new postscreen process from starting. Problem reported by Florian Piekert. - Fixes for tlsproxy(8): * Bugfix (defect introduced: Postfix 3.7): incorrect backwards compatible support for the legacy configuration parameters tlsproxy_client_level and tlsproxy_client_policy. This disabled the tlsproxy TLS client role when a legacy parameter was set (instead of the newer tlsproxy_client_security_level or tlsproxy_client_policy_maps). Reported by John Doe, diagnosed by Viktor Dukhovni. * Bugfix (defect introduced: Postfix 3.4): with the TLS client role disabled by configuration, the tlsproxy daemon dereferenced a null pointer while handling a tlsproxy client request. Reported by John Doe. - Reducing process churn: Postfix daemons no longer automatically restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file modification time change, when they opened that table for writing. - Portability: deleted an build dependency, because the feature is being removed from OpenSSL, and Postfix no longer needs it. - Cleanup: with "tls_required_enable = yes", the Postfix SMTP client will no longer maintain TLSRPT statistics for messages that contain a "TLS-Required: no" header. This can prevent TLSRPT notifications for TLSRPT notifications. - Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS client code logged "Untrusted TLS connection" (wrong) instead of "Trusted TLS connection" (right), for a new or resumed TLS session, when a server offered a trusted (valid PKI trust chain) certificate that did not match the expected server name pattern. Fix by Viktor Dukhovni. * d/gbp.conf: debian-branch=debian/trixie * configure-instance.in: fix typo * configure-instance.in: limit maxdepth=1 in /etc/ssl/certs dirs * configure-instance.in: use home-grown file copy procedure to sync chroot There are a few issues with using cp(1) to update files in chroot, - a file should be copied even if the source date is *less* than the target date (eg, if a package has been downgraded), which is not done by `cp -u` (#1110704), a file should be copied atomically (copy+rename, not truncate+copy), and care should be taken with extra attributes (#1100100). Use a simple perl-based script (using just perl-base) to update files instead, which fixes all this stuff. (Closes: #1100100, #1110704) Checksums-Sha1: 1821b3d00274abc6b58bbbb556fe9f18b2c021fe 11076 postfix-cdb-dbgsym_3.10.4-1~deb13u1_arm64.deb b8e0d0a0466cbbb0f6924e695d8bb112537ab584 5196 postfix-cdb_3.10.4-1~deb13u1_arm64.deb e77b618539bb650a0607b10d49e6b3032518e5e5 1875136 postfix-dbgsym_3.10.4-1~deb13u1_arm64.deb 6744652add29d0c0535eacf05449affda5a7c3e3 22736 postfix-ldap-dbgsym_3.10.4-1~deb13u1_arm64.deb c0a2982db9100b57309b9b0291c1eb68966fe32d 12072 postfix-ldap_3.10.4-1~deb13u1_arm64.deb 5e11187920eeb2fc2266b22b8e519e7a339d6dba 18524 postfix-lmdb-dbgsym_3.10.4-1~deb13u1_arm64.deb 9ce53f3697b2c9dc01d453a984876058552fea16 8272 postfix-lmdb_3.10.4-1~deb13u1_arm64.deb df901c9f906b2dd087be2142642540b590b3880f 13852 postfix-mongodb-dbgsym_3.10.4-1~deb13u1_arm64.deb 7ab3d6f060ac3e1bc80910957dbd17d61261bb5a 6272 postfix-mongodb_3.10.4-1~deb13u1_arm64.deb 6ef51377396c8e2b10c1fc4ec370ab20b8b5469d 24120 postfix-mysql-dbgsym_3.10.4-1~deb13u1_arm64.deb b546ebeba9c8dd26f17992ca416bd30960f2c7ca 7280 postfix-mysql_3.10.4-1~deb13u1_arm64.deb 8e58ae82f87559a89b48438d42c0ab4abff08762 15108 postfix-pcre-dbgsym_3.10.4-1~deb13u1_arm64.deb 3280e07e423906a85ab30d0e8aa136e0fb92806d 7064 postfix-pcre_3.10.4-1~deb13u1_arm64.deb 9f732dbe13c3709e4d0a3e47b5a158aa6a4097f7 14136 postfix-pgsql-dbgsym_3.10.4-1~deb13u1_arm64.deb 8184610fc96f9e979dd2606e1d975e2d9fdce4b7 6948 postfix-pgsql_3.10.4-1~deb13u1_arm64.deb 2366557680ccca68f98481a68d2b15d09f327574 8504 postfix-sqlite-dbgsym_3.10.4-1~deb13u1_arm64.deb fea7cc200722e0ef0e2676ef119f630961cc2913 4976 postfix-sqlite_3.10.4-1~deb13u1_arm64.deb 74ae041667a3aa2b9586469ad95b1d86a45dee5c 12502 postfix_3.10.4-1~deb13u1_arm64-buildd.buildinfo 94f2a5443e53a512ea99276873b999a02afcba3c 1541120 postfix_3.10.4-1~deb13u1_arm64.deb Checksums-Sha256: a6849f63aca7d606d65674b0c3ea2bc252d4c4f9d2a2a5c667a1a396c2c9f45a 11076 postfix-cdb-dbgsym_3.10.4-1~deb13u1_arm64.deb 957bbdd33c64d79bec6b9bb08b68fe75dbdcd717011a48f29dc6fd500c670f80 5196 postfix-cdb_3.10.4-1~deb13u1_arm64.deb a0d9a6cf21b85712512d93a8108880d281ff762888d79e22d05168238565e06b 1875136 postfix-dbgsym_3.10.4-1~deb13u1_arm64.deb c0c6b48f97ed4a513d9180ff9e0ac719a9ebe5cfff8c32173309ab2518805d80 22736 postfix-ldap-dbgsym_3.10.4-1~deb13u1_arm64.deb 8e29d5ace2f011c4aec4595674844535bc4c5df5f0f99e1decf8800861eb20d2 12072 postfix-ldap_3.10.4-1~deb13u1_arm64.deb cccae18097a2604e871364a3af952049154be474699f93882168266ace13cc62 18524 postfix-lmdb-dbgsym_3.10.4-1~deb13u1_arm64.deb 2e853f4a7e30faa85f6a3743274885cfbf28f249623adbf452c3fb3bc7721d9a 8272 postfix-lmdb_3.10.4-1~deb13u1_arm64.deb 208066082052c0089799801e6498a24a0f3dae270ed5e0b29275eafbd962e5ab 13852 postfix-mongodb-dbgsym_3.10.4-1~deb13u1_arm64.deb 25b6dc23841188b359569ee1ddee9b0c51944509224c9078209ff286730ef691 6272 postfix-mongodb_3.10.4-1~deb13u1_arm64.deb 2f371271f8741b7eec4e58388a8b056ac4c448307efb6fbd6320fa7f93fa5952 24120 postfix-mysql-dbgsym_3.10.4-1~deb13u1_arm64.deb cdc3e6d899e24f65daae3f1615cb55cc4e5118bfc9dfa20401d051a08b025e24 7280 postfix-mysql_3.10.4-1~deb13u1_arm64.deb 8b3bb8fdd6228ef34b62b7b6410d559f7b25f25f69cb69a02c27344ce2fb0a71 15108 postfix-pcre-dbgsym_3.10.4-1~deb13u1_arm64.deb e09b1215bfb9d7c0914bbc197d07909fb03ce19b2e403b3bf54db8d2a6f4adcf 7064 postfix-pcre_3.10.4-1~deb13u1_arm64.deb 9182bf90764601db9dfefe5662250416f414c0d9fde623357a3e49d0c5d9a2cc 14136 postfix-pgsql-dbgsym_3.10.4-1~deb13u1_arm64.deb 88f257d5d31e49ee087052d2a1acedc02458e8c377eabe7988e69ac8a04ec942 6948 postfix-pgsql_3.10.4-1~deb13u1_arm64.deb 102e28e849bc79e389635d41cbcf63516b870d9651d4eee6b88d25d210f3cd76 8504 postfix-sqlite-dbgsym_3.10.4-1~deb13u1_arm64.deb 181d5d0f1a88b4b8831cfc9d3c2bf29bdbba609ebee18c8e7711e3ba54690d83 4976 postfix-sqlite_3.10.4-1~deb13u1_arm64.deb e03d8bc0592f116ced7d70b3bf4fb15bf36158454f2895edc3172ac524ba8af6 12502 postfix_3.10.4-1~deb13u1_arm64-buildd.buildinfo c2447488ba4487fe12c393e1d0052b589ff0d01a70620e39e1b009c36733794d 1541120 postfix_3.10.4-1~deb13u1_arm64.deb Files: d45dd13d4f83f674afbf978e994a3b05 11076 debug optional postfix-cdb-dbgsym_3.10.4-1~deb13u1_arm64.deb 7e36b29b16de2d8ddabea5e107a38b33 5196 mail optional postfix-cdb_3.10.4-1~deb13u1_arm64.deb cef069195f6ea9e96e0ab557d79d1759 1875136 debug optional postfix-dbgsym_3.10.4-1~deb13u1_arm64.deb 4ed54b9ce6a9408430c9d3d9083fc127 22736 debug optional postfix-ldap-dbgsym_3.10.4-1~deb13u1_arm64.deb e755d2478c8ecb3d5b25fa8a63715333 12072 mail optional postfix-ldap_3.10.4-1~deb13u1_arm64.deb ab27b2f9850e8e1551c37fbe383c7c0d 18524 debug optional postfix-lmdb-dbgsym_3.10.4-1~deb13u1_arm64.deb f9743a4706ab69bd4d88af8e33862d1b 8272 mail optional postfix-lmdb_3.10.4-1~deb13u1_arm64.deb c61950f4e17dae6da007c4f85cda784c 13852 debug optional postfix-mongodb-dbgsym_3.10.4-1~deb13u1_arm64.deb 8c342e0114a9e244ca2d4f33df7e16ef 6272 mail optional postfix-mongodb_3.10.4-1~deb13u1_arm64.deb 9cc1491c971a0dc4698cd6bd4c9c6b7b 24120 debug optional postfix-mysql-dbgsym_3.10.4-1~deb13u1_arm64.deb d490786982cc173e9e493e7a20917607 7280 mail optional postfix-mysql_3.10.4-1~deb13u1_arm64.deb 06fe4c643b4f002c33b5bb0a46f811d4 15108 debug optional postfix-pcre-dbgsym_3.10.4-1~deb13u1_arm64.deb 7440ec50d9ecb334c3e473843fc7cc7a 7064 mail optional postfix-pcre_3.10.4-1~deb13u1_arm64.deb 491adf145df89d40e1e326310d9959ed 14136 debug optional postfix-pgsql-dbgsym_3.10.4-1~deb13u1_arm64.deb 1e1dea53512706c50dae2c5872fe2795 6948 mail optional postfix-pgsql_3.10.4-1~deb13u1_arm64.deb 48d4483f22fe87ad1ccf39d954317c15 8504 debug optional postfix-sqlite-dbgsym_3.10.4-1~deb13u1_arm64.deb 4e881095e2d1b0ebc4c48f0f7a132cc0 4976 mail optional postfix-sqlite_3.10.4-1~deb13u1_arm64.deb 8af345f64245bbc74c37be23b34108fd 12502 mail optional postfix_3.10.4-1~deb13u1_arm64-buildd.buildinfo ce2d0c697b43d1a0844df363f4148983 1541120 mail optional postfix_3.10.4-1~deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvEwFZ4bqkVI+Rh6t+N4VxR6LZYEFAmixFdMACgkQ+N4VxR6L ZYF7BQ/9FDPZ83juq+C9PteEi2oedbO0i8oGMsa5AUuOsZ9chQVTuD+D9c+CLARd kHAEgPnIU7WS6WJE8nbcX471BpMPdHHmYT8dWLnlfjhwWc8XDWY0gnMmS8OK7NNA AIxHHvQZ3ewdcQvENy/fEqqQjNQOc6ph8Ok5blBA8TNKL/9CAZBn2NxYAhx6z1CK IchzI9NNdJ4mEfDCArwlEi4BqLha+UjPcxi08Q5PaR4qo9ODlFZTgXXgHa89P6PH NP+6XWrnyXnDmK9X+QigoEE4Itzmu5oKudelLqFd2jcaRaSGcWM8E9LAqOx1ay3w y+FhykuAGzmjdfZe5EZhrFxm4bcKXU2xGSQgl68A9VbyMGmsVHihAH4DI2cyWNfk ahi44b07NnjiEqlGp9ur4xi4IDY3JzCX87T3JcKIHVg5QxUP9lcH1qE28dvDiW/3 f9cVqJb+FmgfJgMpiNa2pXwVqp/YSC0nEd0/fXJ1NUY4sl4mlt95w4Cw2MqtdNtX XCV9mSn1PBDCJxWa3x9R3j6Uzihf+lXYB84PtFKWjfSKJ9x9HIXvV7MY9U3BBgZo FCxWncByptuYZOog9Q4PUlYlZ9gZyDRT3BdmEvNgjP2K++KKioY9Az54aPD8ZSii Ym+RzuIX9MJCzViSGKHBBYeqbNk1RgrxW9+1K4uN0YOWJOuECZs= =getv -----END PGP SIGNATURE-----