-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 22 Aug 2025 09:51:46 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: i386 Version: 3.10.4-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Closes: 1100100 1110704 Changes: postfix (3.10.4-1~deb13u1) trixie; urgency=medium . * New upstream stable/bugfix version 3.10.4, with a handful of fixes. From the upstream release notes: - Fixes for postscreen(8): * Bugfix (defect introduced: Postfix 2.2, date 20050203): after detecting a lookup table change, and after starting a new postscreen process, the old postscreen process logged an ENOTSOCK error while attempting to accept a connection on a socket that it was no longer listening on. This error was introduced first in the multi_server skeleton code, and was five years later duplicated in the event_server skeleton that was created for postscreen. Problem reported by Florian Piekert. * Bugfix (defect introduced: Postfix 2.8, date 20101230): after detecting a cache table change and before starting a new postscreen process, the old postscreen process did not close the postscreen_cache_map, and therefore kept an exclusive lock that could prevent a new postscreen process from starting. Problem reported by Florian Piekert. - Fixes for tlsproxy(8): * Bugfix (defect introduced: Postfix 3.7): incorrect backwards compatible support for the legacy configuration parameters tlsproxy_client_level and tlsproxy_client_policy. This disabled the tlsproxy TLS client role when a legacy parameter was set (instead of the newer tlsproxy_client_security_level or tlsproxy_client_policy_maps). Reported by John Doe, diagnosed by Viktor Dukhovni. * Bugfix (defect introduced: Postfix 3.4): with the TLS client role disabled by configuration, the tlsproxy daemon dereferenced a null pointer while handling a tlsproxy client request. Reported by John Doe. - Reducing process churn: Postfix daemons no longer automatically restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file modification time change, when they opened that table for writing. - Portability: deleted an build dependency, because the feature is being removed from OpenSSL, and Postfix no longer needs it. - Cleanup: with "tls_required_enable = yes", the Postfix SMTP client will no longer maintain TLSRPT statistics for messages that contain a "TLS-Required: no" header. This can prevent TLSRPT notifications for TLSRPT notifications. - Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS client code logged "Untrusted TLS connection" (wrong) instead of "Trusted TLS connection" (right), for a new or resumed TLS session, when a server offered a trusted (valid PKI trust chain) certificate that did not match the expected server name pattern. Fix by Viktor Dukhovni. * d/gbp.conf: debian-branch=debian/trixie * configure-instance.in: fix typo * configure-instance.in: limit maxdepth=1 in /etc/ssl/certs dirs * configure-instance.in: use home-grown file copy procedure to sync chroot There are a few issues with using cp(1) to update files in chroot, - a file should be copied even if the source date is *less* than the target date (eg, if a package has been downgraded), which is not done by `cp -u` (#1110704), a file should be copied atomically (copy+rename, not truncate+copy), and care should be taken with extra attributes (#1100100). Use a simple perl-based script (using just perl-base) to update files instead, which fixes all this stuff. (Closes: #1100100, #1110704) Checksums-Sha1: 5aa1972d6569c55e8b6914f002d385ce4a7f423d 10152 postfix-cdb-dbgsym_3.10.4-1~deb13u1_i386.deb a58e7e6b79998538a839ad14caef1c509d03f121 5688 postfix-cdb_3.10.4-1~deb13u1_i386.deb 77afdc94dfe679ed1151ad14602e950884eea8bd 1623860 postfix-dbgsym_3.10.4-1~deb13u1_i386.deb d0e6e4a45059f21bb9bb8c8539df350a3113e550 19652 postfix-ldap-dbgsym_3.10.4-1~deb13u1_i386.deb 7e303e32a2f0cbd1dd3e2f30bb2c36e2635509be 13808 postfix-ldap_3.10.4-1~deb13u1_i386.deb 6aaba2814f486fcc4fb159593fad9711b43fcb69 16484 postfix-lmdb-dbgsym_3.10.4-1~deb13u1_i386.deb 63a6a9569083f20c84e4aa97016c7453d62e2f10 9048 postfix-lmdb_3.10.4-1~deb13u1_i386.deb 8fae5b265b3b92c5a5fb97bb7f2e95b3dd48516f 12824 postfix-mongodb-dbgsym_3.10.4-1~deb13u1_i386.deb 2ff00e07742dc90885bd443e998593093f5353af 6480 postfix-mongodb_3.10.4-1~deb13u1_i386.deb d6e516dd104215b777ab7763c8db2428189b288d 23100 postfix-mysql-dbgsym_3.10.4-1~deb13u1_i386.deb 828552ebcd2e1ef870dc73d8ad5f03dcb9251c48 8188 postfix-mysql_3.10.4-1~deb13u1_i386.deb 4153f055b39021a7720032c7718e67f5722eb495 13820 postfix-pcre-dbgsym_3.10.4-1~deb13u1_i386.deb 89b4bbc1f08da9e8593b205fa8d459814265572d 7620 postfix-pcre_3.10.4-1~deb13u1_i386.deb 1c57b39e69443c8fd0dc7847a4c709b386f2f5f4 13112 postfix-pgsql-dbgsym_3.10.4-1~deb13u1_i386.deb 22246f9c38fab5f2ded6469c03ca84832db7550f 7688 postfix-pgsql_3.10.4-1~deb13u1_i386.deb f4d22d9bb5dc5c403efdea26e20d2169a668af53 7584 postfix-sqlite-dbgsym_3.10.4-1~deb13u1_i386.deb c24ae7fdb01fc8315b5a4e5421b64f99d210b8a9 5092 postfix-sqlite_3.10.4-1~deb13u1_i386.deb 9150dd75b8ff0f847efa419885578994da92a391 12368 postfix_3.10.4-1~deb13u1_i386-buildd.buildinfo c5f68cc9b866ea1131148a71d543884624f836e2 1622272 postfix_3.10.4-1~deb13u1_i386.deb Checksums-Sha256: d5731b406ca5200a356c4f28dc6e03e1f1a2d8558c16a2d27e9077acba8b93ec 10152 postfix-cdb-dbgsym_3.10.4-1~deb13u1_i386.deb 0ed52dbe02e398193f9b667d54d32342962cf865acbe172cf5be1f93ef47a354 5688 postfix-cdb_3.10.4-1~deb13u1_i386.deb ce9a13da669ea067e14c246b84e432f4391a4db4bbebfa92cd023a6c097ab34c 1623860 postfix-dbgsym_3.10.4-1~deb13u1_i386.deb b345bf27062e82c336a308547c7009a21c9e07729ae5138c2856acdcaa0c3a85 19652 postfix-ldap-dbgsym_3.10.4-1~deb13u1_i386.deb 8a0790669c3a3a4209cd8fc0935102cfa50cb0d66922b3231dd3deb66a7c50f5 13808 postfix-ldap_3.10.4-1~deb13u1_i386.deb d44be6186e3466ab7a599b8431794e379625df97337f2bfe45fba2b416214213 16484 postfix-lmdb-dbgsym_3.10.4-1~deb13u1_i386.deb afa0bdb06cfe8efc002b47bbdbaa11cfc3ba4dbbdc6555aae78567ef4e5a13fb 9048 postfix-lmdb_3.10.4-1~deb13u1_i386.deb a1880f8e73a22e6d079347dc1fcd63fa3e2f95388d2974fbe84ca7eb48cf8999 12824 postfix-mongodb-dbgsym_3.10.4-1~deb13u1_i386.deb b0562c4c030d10fa19ed874cb3ef458ca3553d0e7c3bc5d75b7574e3955e0668 6480 postfix-mongodb_3.10.4-1~deb13u1_i386.deb 6cf1b826f7d10c2e20d536df9f3861403a23ded9b2a66f8018dffe216db4bb59 23100 postfix-mysql-dbgsym_3.10.4-1~deb13u1_i386.deb ed096c80ff061dd0fb814350aa3767a3e2023123a7c824bd573d3eca02d9a91d 8188 postfix-mysql_3.10.4-1~deb13u1_i386.deb 45e36cd1f0769209980c7f6646dfa88bd3d42e093c43d6064245f457359847c5 13820 postfix-pcre-dbgsym_3.10.4-1~deb13u1_i386.deb 70bff2f02bca89b2b5ff230c56ab7b9b0401ca406ea5e837eb9acfdf94cfcc12 7620 postfix-pcre_3.10.4-1~deb13u1_i386.deb 00b901c47a0330859d5f1f9214f2d6d5eb8327aee407048358c80a9748115af8 13112 postfix-pgsql-dbgsym_3.10.4-1~deb13u1_i386.deb 5a28a75a02b6b4e289aebb2460ad4904dd369c915b97d297e41ff58f90d37bb2 7688 postfix-pgsql_3.10.4-1~deb13u1_i386.deb e3a8b1c9fee6fc55cd0b0a2a37c97aba727c4808ef77b111a848ca450164d1f7 7584 postfix-sqlite-dbgsym_3.10.4-1~deb13u1_i386.deb f2a04a3eb072eaa1d808ee306d4a410e2e8219afc4c9d4cf93adb598ebd1ec4e 5092 postfix-sqlite_3.10.4-1~deb13u1_i386.deb b824a200f8bbcf0b4c67ab72ae27e02c3a40c5692d11b30155ac541dd072f3d3 12368 postfix_3.10.4-1~deb13u1_i386-buildd.buildinfo 75ffc55fa4174ed25649b39052df37028343b8c3f961667b35f46c72876ec963 1622272 postfix_3.10.4-1~deb13u1_i386.deb Files: fecdd892054e621a0b9a3a67050e6766 10152 debug optional postfix-cdb-dbgsym_3.10.4-1~deb13u1_i386.deb 69e6f286657abcb3598c53c5ac1145f9 5688 mail optional postfix-cdb_3.10.4-1~deb13u1_i386.deb 2ea6303cecc2204b4d01736346bc3303 1623860 debug optional postfix-dbgsym_3.10.4-1~deb13u1_i386.deb 177169be2de53957dc1a4b0cfb63249f 19652 debug optional postfix-ldap-dbgsym_3.10.4-1~deb13u1_i386.deb 3aa22747c830adc9ca9732b9c75e42a0 13808 mail optional postfix-ldap_3.10.4-1~deb13u1_i386.deb 8e5e2a1ce45ec562bc8577eff7ef5376 16484 debug optional postfix-lmdb-dbgsym_3.10.4-1~deb13u1_i386.deb f6034afa5abb16829c12a1d9d74d361f 9048 mail optional postfix-lmdb_3.10.4-1~deb13u1_i386.deb 26de4a9f157249362376ddea2a85e0e2 12824 debug optional postfix-mongodb-dbgsym_3.10.4-1~deb13u1_i386.deb 127dea98ce1746d7f398fc5c1cd2783e 6480 mail optional postfix-mongodb_3.10.4-1~deb13u1_i386.deb baff9e7e0882f4b50492d585bafdab6c 23100 debug optional postfix-mysql-dbgsym_3.10.4-1~deb13u1_i386.deb 9979f7c2d9ae33e6f02a3480840c968d 8188 mail optional postfix-mysql_3.10.4-1~deb13u1_i386.deb da872fd3ba54ded2b40eb67ab4e81fdd 13820 debug optional postfix-pcre-dbgsym_3.10.4-1~deb13u1_i386.deb 5f73e7662271f38adfb0eff8176ad6d9 7620 mail optional postfix-pcre_3.10.4-1~deb13u1_i386.deb 63b0d1eeddc66778b473ac3eb63a5b8c 13112 debug optional postfix-pgsql-dbgsym_3.10.4-1~deb13u1_i386.deb 7051fe2becb420e633a069483081c554 7688 mail optional postfix-pgsql_3.10.4-1~deb13u1_i386.deb 3888b25c685818c8a264bb8e57986486 7584 debug optional postfix-sqlite-dbgsym_3.10.4-1~deb13u1_i386.deb a6c82edfa07bd759baa78ac90f83c4dc 5092 mail optional postfix-sqlite_3.10.4-1~deb13u1_i386.deb 9609592bb17dc2d81aee54f10e719e6b 12368 mail optional postfix_3.10.4-1~deb13u1_i386-buildd.buildinfo 7d994a70e6a6b4e0a95363aff1e4a2ca 1622272 mail optional postfix_3.10.4-1~deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErwLLVsiCiGZggzpHJuP6X4A0XeIFAmixFjgACgkQJuP6X4A0 XeL7fg/+IhIlWXRdDI6lpnrd8/3Op/9NRYASwTv0Fs4zIm7agtK3fyc8RxJ2vE/r Yj+YeD5FUBTRD68VqrryfyKG2QdewEs66cNFh0w+cFdVsXSB+nqK9FGheWBR0AV9 AF4dws0Gh3TkHjvLHhWfImgN8XPR9UpmpX9k9i1FR0GOQ2lNNfj1XWtGKfYUHClp L2fhXILKYbSiwBm2hy1aoAch69IivIFETH3VFCwIR6m+1IXXJPzghG6X8fYuAyDu mhhyz3J5ByiyZfx87nYBaoOfQ6HXq5pNR213DEzd5x26z4MP0F/8RbWLAVJBlLnJ mN49YqixvOHHbCE7EBXRo7scTSDFGtSqwlr4OF+nXckRIS7BOknG9zrkxG7gyb+H 58YXLjZCoCka0Pburf4zFEDs4saiIMA23qpHAyOavnufMZBMzCnQDud/9A3MWUUr nmdT5KGkPozCXLDWG+yQZ+SLjIZhS8Fbd/E/NE+KVfXa0PMwD81x+9WOSbDkRHXI 2lV313ccVdTVX9+YR1LHVy3ZZI8u1lao8n5XuCfLELKJ3H0n7eSUG9xQRbdPXD+u pmFz4ZN7BAbCpBhq302arZxE1xCZmYf8RVeT1Njil0wXf6y1k60VNF5Uo9bC4mbH PoSKXZgjfrFzCWDP5No/kEe7pN7VBjnbbndK75rBS0CoSP+qdSQ= =RI1D -----END PGP SIGNATURE-----