-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 22 Aug 2025 09:51:46 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: armel Version: 3.10.4-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-conova-04) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Closes: 1100100 1110704 Changes: postfix (3.10.4-1~deb13u1) trixie; urgency=medium . * New upstream stable/bugfix version 3.10.4, with a handful of fixes. From the upstream release notes: - Fixes for postscreen(8): * Bugfix (defect introduced: Postfix 2.2, date 20050203): after detecting a lookup table change, and after starting a new postscreen process, the old postscreen process logged an ENOTSOCK error while attempting to accept a connection on a socket that it was no longer listening on. This error was introduced first in the multi_server skeleton code, and was five years later duplicated in the event_server skeleton that was created for postscreen. Problem reported by Florian Piekert. * Bugfix (defect introduced: Postfix 2.8, date 20101230): after detecting a cache table change and before starting a new postscreen process, the old postscreen process did not close the postscreen_cache_map, and therefore kept an exclusive lock that could prevent a new postscreen process from starting. Problem reported by Florian Piekert. - Fixes for tlsproxy(8): * Bugfix (defect introduced: Postfix 3.7): incorrect backwards compatible support for the legacy configuration parameters tlsproxy_client_level and tlsproxy_client_policy. This disabled the tlsproxy TLS client role when a legacy parameter was set (instead of the newer tlsproxy_client_security_level or tlsproxy_client_policy_maps). Reported by John Doe, diagnosed by Viktor Dukhovni. * Bugfix (defect introduced: Postfix 3.4): with the TLS client role disabled by configuration, the tlsproxy daemon dereferenced a null pointer while handling a tlsproxy client request. Reported by John Doe. - Reducing process churn: Postfix daemons no longer automatically restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file modification time change, when they opened that table for writing. - Portability: deleted an build dependency, because the feature is being removed from OpenSSL, and Postfix no longer needs it. - Cleanup: with "tls_required_enable = yes", the Postfix SMTP client will no longer maintain TLSRPT statistics for messages that contain a "TLS-Required: no" header. This can prevent TLSRPT notifications for TLSRPT notifications. - Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS client code logged "Untrusted TLS connection" (wrong) instead of "Trusted TLS connection" (right), for a new or resumed TLS session, when a server offered a trusted (valid PKI trust chain) certificate that did not match the expected server name pattern. Fix by Viktor Dukhovni. * d/gbp.conf: debian-branch=debian/trixie * configure-instance.in: fix typo * configure-instance.in: limit maxdepth=1 in /etc/ssl/certs dirs * configure-instance.in: use home-grown file copy procedure to sync chroot There are a few issues with using cp(1) to update files in chroot, - a file should be copied even if the source date is *less* than the target date (eg, if a package has been downgraded), which is not done by `cp -u` (#1110704), a file should be copied atomically (copy+rename, not truncate+copy), and care should be taken with extra attributes (#1100100). Use a simple perl-based script (using just perl-base) to update files instead, which fixes all this stuff. (Closes: #1100100, #1110704) Checksums-Sha1: d873f8f5a75f89c62cf7826f4f06bbe4654b72b2 11232 postfix-cdb-dbgsym_3.10.4-1~deb13u1_armel.deb c4bb07c636f7eefdcbc1f16c68c0af823f9e9545 4832 postfix-cdb_3.10.4-1~deb13u1_armel.deb b6edd05bc7feb634b0314b4e19a3516c7cbc783e 1806032 postfix-dbgsym_3.10.4-1~deb13u1_armel.deb b5cb95b08759e92aede08032aca38f87c8ab51b9 22336 postfix-ldap-dbgsym_3.10.4-1~deb13u1_armel.deb bf7e3aa214532217de01c0c578abfa7580b071d5 11876 postfix-ldap_3.10.4-1~deb13u1_armel.deb c10fc6a3abc50a87c9a82961af5f738d2eaf07cc 18520 postfix-lmdb-dbgsym_3.10.4-1~deb13u1_armel.deb b364ac6f210cf0a8359f18064e7be1b84b481c47 7420 postfix-lmdb_3.10.4-1~deb13u1_armel.deb b88fd7f371dd360c9dbdc7ec9a15fdf9b77785fb 13860 postfix-mongodb-dbgsym_3.10.4-1~deb13u1_armel.deb e80381e2bba2fd67b3d67742cc15dc2b5cf18451 5612 postfix-mongodb_3.10.4-1~deb13u1_armel.deb b44c407a80fdd074fff0ade458533dc197291e7d 24452 postfix-mysql-dbgsym_3.10.4-1~deb13u1_armel.deb 940f735ec03d79a58568454236eeae38653f6df5 7964 postfix-mysql_3.10.4-1~deb13u1_armel.deb 246d0de0591d3e4c8ec1e0f344879ee2d1698140 14692 postfix-pcre-dbgsym_3.10.4-1~deb13u1_armel.deb 84e866dcf41d8288457f7d73b5fa361646ce4de4 6376 postfix-pcre_3.10.4-1~deb13u1_armel.deb 232c42acd6e4bccb4bf2aec2265e72614ad14481 14468 postfix-pgsql-dbgsym_3.10.4-1~deb13u1_armel.deb 5a36b46fb375f5be1c50bb42c4e189e6052ffa58 7648 postfix-pgsql_3.10.4-1~deb13u1_armel.deb 3a474519a9b0e64ac4ed133bac578b285d17fc1c 8488 postfix-sqlite-dbgsym_3.10.4-1~deb13u1_armel.deb 30103d17c5ef603d1da3956d2e203fe50d02cf3c 4612 postfix-sqlite_3.10.4-1~deb13u1_armel.deb ca05da29e0e1fc71b5648dbc2a4f98e185fcdb12 12367 postfix_3.10.4-1~deb13u1_armel-buildd.buildinfo 2b35b5261d25d29d824e6af414a8d09ff6b1dbec 1495124 postfix_3.10.4-1~deb13u1_armel.deb Checksums-Sha256: f96855995cd89c2034e065438520b8d13980cda9dd3a2124fe503937cc89ca1a 11232 postfix-cdb-dbgsym_3.10.4-1~deb13u1_armel.deb 65284c910effdba38b7f80a2b20a208be00fab21e1e964995be47bbb39fb1ea8 4832 postfix-cdb_3.10.4-1~deb13u1_armel.deb adf5dde139ac904bc7fae0437518ad1dcbbdcc0bfb940b97501d79e16cae78cb 1806032 postfix-dbgsym_3.10.4-1~deb13u1_armel.deb 7bc0477c7528ab812b5fc56a1219750f7cfcc5efd049a060a782f5921a3cca11 22336 postfix-ldap-dbgsym_3.10.4-1~deb13u1_armel.deb f2aeb78d3640924eb5b91a1a3347cf94f4dae84af61bae0a5c78c596be4ed76d 11876 postfix-ldap_3.10.4-1~deb13u1_armel.deb fc9d6469d876e6809f9c2b4aff8d06f65b448580188d1af8673b26d6efdb2eb7 18520 postfix-lmdb-dbgsym_3.10.4-1~deb13u1_armel.deb e8f874f93de923d5f59ad9ef6ea77574040a1bec68616ad86e1ea7050ecfd342 7420 postfix-lmdb_3.10.4-1~deb13u1_armel.deb f7d4aadaeeff527564939603c7746bccc4683c23216afe8e33c68a5f27a4a71e 13860 postfix-mongodb-dbgsym_3.10.4-1~deb13u1_armel.deb 22bfadd6f14f5cf77544bbd9c291d956273485328c3b2f96ab1b474ca60906b5 5612 postfix-mongodb_3.10.4-1~deb13u1_armel.deb 5e0c88d23e88ce5bf0bf2e375597c44dca6f897e149d5e7c5fb3317e098704fc 24452 postfix-mysql-dbgsym_3.10.4-1~deb13u1_armel.deb 3df84f663d32d560e0f7cf0801dbee4f8d270e3969eee8524bec2b9b1cdc38a6 7964 postfix-mysql_3.10.4-1~deb13u1_armel.deb e500b7f481db8d063a4260194bb224ee00e27c3f81b978f5c8003a0e3893a2d6 14692 postfix-pcre-dbgsym_3.10.4-1~deb13u1_armel.deb 923cf33bfce1959e5309e96cb02dd76c808ddee716d7dd724ed0a324e62b62e6 6376 postfix-pcre_3.10.4-1~deb13u1_armel.deb 022824d03d064323c725ee952c2a29bc53bd9531df6ca8c2a9a0ca069a4cd1b7 14468 postfix-pgsql-dbgsym_3.10.4-1~deb13u1_armel.deb 03b2c73fd90e0a1756cbb5c60e62083dc5bab1c6b8d76631f9642457fbe8dc8e 7648 postfix-pgsql_3.10.4-1~deb13u1_armel.deb 01dd5c9fcd0394e2aea0b567db7c63ddfc4212733c6e44710f8cb862c4eff2e1 8488 postfix-sqlite-dbgsym_3.10.4-1~deb13u1_armel.deb 1b6abd02fc85c550cec91ab1831f4d7b5fde21d9090d8389394427b4b631fdbd 4612 postfix-sqlite_3.10.4-1~deb13u1_armel.deb c9c5d9a36dc200a25e59c7e55e15161aceae59c7f44a3a094afb4ecbf515685d 12367 postfix_3.10.4-1~deb13u1_armel-buildd.buildinfo 3b880a34f228d47f7c86e83cec67719bb9469705bd8536e8155dd1cdc9971bd2 1495124 postfix_3.10.4-1~deb13u1_armel.deb Files: 2fe5a3373c0b4a165d7f0938d04c5e0d 11232 debug optional postfix-cdb-dbgsym_3.10.4-1~deb13u1_armel.deb 94abad097aa4957700e77b27cc5571ea 4832 mail optional postfix-cdb_3.10.4-1~deb13u1_armel.deb d649986dde7b31871b412cf839809c2e 1806032 debug optional postfix-dbgsym_3.10.4-1~deb13u1_armel.deb 65e7a1c075cf18f1b970f4854ffe8998 22336 debug optional postfix-ldap-dbgsym_3.10.4-1~deb13u1_armel.deb d648774145f0397163ba0bcbe1415425 11876 mail optional postfix-ldap_3.10.4-1~deb13u1_armel.deb 163d8ab5de3beb352d13468f855ec0d1 18520 debug optional postfix-lmdb-dbgsym_3.10.4-1~deb13u1_armel.deb 24e526786f515d7ec4f4f37b36a05cab 7420 mail optional postfix-lmdb_3.10.4-1~deb13u1_armel.deb e0bb57dc774c03852b0a682fff210830 13860 debug optional postfix-mongodb-dbgsym_3.10.4-1~deb13u1_armel.deb c03c729589d5f4ea45c8be3bd925ad6a 5612 mail optional postfix-mongodb_3.10.4-1~deb13u1_armel.deb 55a846ce701681aa89f4d9295dd3d628 24452 debug optional postfix-mysql-dbgsym_3.10.4-1~deb13u1_armel.deb 92ce7c8420ed770f12437a021b1635ea 7964 mail optional postfix-mysql_3.10.4-1~deb13u1_armel.deb cc3366e2040d2260072139852f0fd385 14692 debug optional postfix-pcre-dbgsym_3.10.4-1~deb13u1_armel.deb 8956dde8af1a82c125cbf802b435d93e 6376 mail optional postfix-pcre_3.10.4-1~deb13u1_armel.deb 03aba2fadab68cdf02160d0e9f443aef 14468 debug optional postfix-pgsql-dbgsym_3.10.4-1~deb13u1_armel.deb f4a828d4aa9fb3d7795e7a81eddc3274 7648 mail optional postfix-pgsql_3.10.4-1~deb13u1_armel.deb e20de5114b822ed9005e6f5fc901f126 8488 debug optional postfix-sqlite-dbgsym_3.10.4-1~deb13u1_armel.deb e8b4ec594f681529bb5ba04c7ce08098 4612 mail optional postfix-sqlite_3.10.4-1~deb13u1_armel.deb 77078a1f2a8cfb529a3f6867985e0a97 12367 mail optional postfix_3.10.4-1~deb13u1_armel-buildd.buildinfo 779c4ee93475ed55947e87cb0cd5b6a7 1495124 mail optional postfix_3.10.4-1~deb13u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvEwFZ4bqkVI+Rh6t+N4VxR6LZYEFAmixFnwACgkQ+N4VxR6L ZYHjEg/8C3nnEgaVG9jHnNvlkUQ21yERZawuKIHgMBWNQNII9R/B6uoP+iGZpH9O zit31cQtG+CYPm+rAKd2cR8fV0bH/sFIuiOG9Y91wpZX8yNXcMiscjejwvdDl3pV Rksapqfy7dT18rZvelaOPHUfHm1rIAyJs7P61Mfj2jlfckPixZJNw5/xgF8SatvW +eY+6Ig3IDMIW6upSnSZ7I4KVxlC4hA+zg4L3uf+4yF3xhatJgO41yruOjjy+w9c DgCujgMVBb70QEozSOoC3UcZHlsYnl+F2tVaq1xXjwGzscQ+e5lcxXCpA+xmRFM2 Rx/FQhvQooQPM4QyUW7ex2Av3ziiIaVjd01DgTocH59eMt1iurQm44/2pRbhgYDs ra+wnQNJB8BKH5nIAz+guAzECNvybswFE4MuY0WgHkPZXqaz5PHvd9SpFP3nFhYw 6QDC7F8E6HBRDDtrxz3aF8YGkm83J3L6OeyoLT4ovgShvlbT3LYh310grMiJ1dPf 6Bre/9dJwxuqqHcZrpA3vDpEm4xGx1vFd1n0IiU1ihAmVkA45Sjjzx8zG6Zsmczv fwtAVIBpnEIeje5AGox3Vc1e3oPHzH8q/1DikMa6l32HN3Assv6w/7gtAgw4DrTJ YsZjctXJ8/cUrs+yBqTRXJsqLcxi7o4ifC8Ora1YLe0VxjmOSrM= =ENge -----END PGP SIGNATURE-----