-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 22 Aug 2025 09:51:46 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: s390x Version: 3.10.4-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: s390x Build Daemon (zandonai) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Closes: 1100100 1110704 Changes: postfix (3.10.4-1~deb13u1) trixie; urgency=medium . * New upstream stable/bugfix version 3.10.4, with a handful of fixes. From the upstream release notes: - Fixes for postscreen(8): * Bugfix (defect introduced: Postfix 2.2, date 20050203): after detecting a lookup table change, and after starting a new postscreen process, the old postscreen process logged an ENOTSOCK error while attempting to accept a connection on a socket that it was no longer listening on. This error was introduced first in the multi_server skeleton code, and was five years later duplicated in the event_server skeleton that was created for postscreen. Problem reported by Florian Piekert. * Bugfix (defect introduced: Postfix 2.8, date 20101230): after detecting a cache table change and before starting a new postscreen process, the old postscreen process did not close the postscreen_cache_map, and therefore kept an exclusive lock that could prevent a new postscreen process from starting. Problem reported by Florian Piekert. - Fixes for tlsproxy(8): * Bugfix (defect introduced: Postfix 3.7): incorrect backwards compatible support for the legacy configuration parameters tlsproxy_client_level and tlsproxy_client_policy. This disabled the tlsproxy TLS client role when a legacy parameter was set (instead of the newer tlsproxy_client_security_level or tlsproxy_client_policy_maps). Reported by John Doe, diagnosed by Viktor Dukhovni. * Bugfix (defect introduced: Postfix 3.4): with the TLS client role disabled by configuration, the tlsproxy daemon dereferenced a null pointer while handling a tlsproxy client request. Reported by John Doe. - Reducing process churn: Postfix daemons no longer automatically restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file modification time change, when they opened that table for writing. - Portability: deleted an build dependency, because the feature is being removed from OpenSSL, and Postfix no longer needs it. - Cleanup: with "tls_required_enable = yes", the Postfix SMTP client will no longer maintain TLSRPT statistics for messages that contain a "TLS-Required: no" header. This can prevent TLSRPT notifications for TLSRPT notifications. - Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS client code logged "Untrusted TLS connection" (wrong) instead of "Trusted TLS connection" (right), for a new or resumed TLS session, when a server offered a trusted (valid PKI trust chain) certificate that did not match the expected server name pattern. Fix by Viktor Dukhovni. * d/gbp.conf: debian-branch=debian/trixie * configure-instance.in: fix typo * configure-instance.in: limit maxdepth=1 in /etc/ssl/certs dirs * configure-instance.in: use home-grown file copy procedure to sync chroot There are a few issues with using cp(1) to update files in chroot, - a file should be copied even if the source date is *less* than the target date (eg, if a package has been downgraded), which is not done by `cp -u` (#1110704), a file should be copied atomically (copy+rename, not truncate+copy), and care should be taken with extra attributes (#1100100). Use a simple perl-based script (using just perl-base) to update files instead, which fixes all this stuff. (Closes: #1100100, #1110704) Checksums-Sha1: fa18213ca3b2c82f439b6b3ec2123544eaa73e3c 11044 postfix-cdb-dbgsym_3.10.4-1~deb13u1_s390x.deb d7e7782a6ca26623492f68e6a0fbe72722053160 5200 postfix-cdb_3.10.4-1~deb13u1_s390x.deb 3cb3cadbd0a3864521153e30b118d3a46db71af5 1855192 postfix-dbgsym_3.10.4-1~deb13u1_s390x.deb 63d6ec433b4453f0ea2a2dfb526b05a2c74ffc72 22524 postfix-ldap-dbgsym_3.10.4-1~deb13u1_s390x.deb 169805da193a85b45658439550e635d508d89ddf 12304 postfix-ldap_3.10.4-1~deb13u1_s390x.deb 7012a48b631544bcf8782973eb9b9b4148648181 18524 postfix-lmdb-dbgsym_3.10.4-1~deb13u1_s390x.deb c05e19b204474b0508434ac655de3632692b976b 8064 postfix-lmdb_3.10.4-1~deb13u1_s390x.deb 4d963cb37aed63e401b81920b47193afa1dad85e 13768 postfix-mongodb-dbgsym_3.10.4-1~deb13u1_s390x.deb c7ce99d9469edc57b1eae8bc502768c640be2a5a 5948 postfix-mongodb_3.10.4-1~deb13u1_s390x.deb d6641d72a3a937bc0c6a1b9281ae2c8765fd0f5a 24012 postfix-mysql-dbgsym_3.10.4-1~deb13u1_s390x.deb 9a6e3b54b11ff9cfc917355a7b201b1700f54a1a 7356 postfix-mysql_3.10.4-1~deb13u1_s390x.deb b15a90c18810c3874cce33fe9b7cc819a6ab82fe 14936 postfix-pcre-dbgsym_3.10.4-1~deb13u1_s390x.deb a7831720b5af2873a84a9ac42292d8d5fdd94e0f 7064 postfix-pcre_3.10.4-1~deb13u1_s390x.deb a7bd687372f2b96ef995f16ebe003411a19e5052 14108 postfix-pgsql-dbgsym_3.10.4-1~deb13u1_s390x.deb d8ce443ac2900c3859816f1d48fcb208a82ee309 6948 postfix-pgsql_3.10.4-1~deb13u1_s390x.deb 1256d139633dfbde124ce7049e1364fe2962ca5a 8372 postfix-sqlite-dbgsym_3.10.4-1~deb13u1_s390x.deb 1c9b8e98885802ad8a45696e209a47260691c391 4788 postfix-sqlite_3.10.4-1~deb13u1_s390x.deb f34ad3c61a98bad26103841896c4405c24bebbd9 12377 postfix_3.10.4-1~deb13u1_s390x-buildd.buildinfo d2910ec3acd26cdf37e7b3e0d9efc28eb93e7c7d 1557068 postfix_3.10.4-1~deb13u1_s390x.deb Checksums-Sha256: 71371bed285e49f1e23de35eaafeb4ecf8c07023b9b0aa6f6010ff207f546dc5 11044 postfix-cdb-dbgsym_3.10.4-1~deb13u1_s390x.deb 581faf9bd332b88d8f8b092e390c4add1cc4bd92f215962cc63399d02bf963c6 5200 postfix-cdb_3.10.4-1~deb13u1_s390x.deb 811c018863932d2e24057c9c26e0b936052f37c8d88c6f0b91161c385f4dea66 1855192 postfix-dbgsym_3.10.4-1~deb13u1_s390x.deb f2ab10a3832f1493a2dadc7034f33874aebff92acb0f19e530e70ddc7f3d3eda 22524 postfix-ldap-dbgsym_3.10.4-1~deb13u1_s390x.deb 1f77e6be7c0a1fb18af3bdf57e4da919faa68b842c169c20d154d4a50eddc7f9 12304 postfix-ldap_3.10.4-1~deb13u1_s390x.deb 7531c0408a8c1102ec61dde73149e496e32d512fbd3ba32c8fb5c19b8efbcfd0 18524 postfix-lmdb-dbgsym_3.10.4-1~deb13u1_s390x.deb 5d3b82af6d802ebab287a2038c7e950b4aa1d210d02af192d2d6433c6e69849f 8064 postfix-lmdb_3.10.4-1~deb13u1_s390x.deb 4db664427e2f666c98853254fc395deedcbe87ad65d3d53b67af9d9e1ff0c814 13768 postfix-mongodb-dbgsym_3.10.4-1~deb13u1_s390x.deb a0a2f94f8adff4f7ad65bf2a12ba0e9c72dbb3f95c9281c2929b633dcb49e295 5948 postfix-mongodb_3.10.4-1~deb13u1_s390x.deb b2255a0fe70e7560da960eac27d685f348b8d4d48213095144027069ec900336 24012 postfix-mysql-dbgsym_3.10.4-1~deb13u1_s390x.deb c5758b85407596c4fb704ac4842d70d10b38172a4fb68df477c0c4d0df9dee1f 7356 postfix-mysql_3.10.4-1~deb13u1_s390x.deb 18e2a832bc137a6ab4c68ca4ed5cdafad25a777db277bfdd543d7471c3572b02 14936 postfix-pcre-dbgsym_3.10.4-1~deb13u1_s390x.deb 30f47445bbb043a3598f42d3c35bb6a1a9cb52d388f8be8d553759c8abcd2109 7064 postfix-pcre_3.10.4-1~deb13u1_s390x.deb c805d97405475233235726bf864d7c09e9e37cba04b4aec109e51bf8a1aa8aa7 14108 postfix-pgsql-dbgsym_3.10.4-1~deb13u1_s390x.deb f6ca9dcc1c65245262c05766faaa967cb1bbdecbf56d5778cb76f6e9e71de2ff 6948 postfix-pgsql_3.10.4-1~deb13u1_s390x.deb bf6753cfb0e2da3e86cb29894dd66506036987a7b063916d0379bacdd2e5ce29 8372 postfix-sqlite-dbgsym_3.10.4-1~deb13u1_s390x.deb 371fa21607a578b70c8db3f3fe4bd62d4bbb9e675ee2d970b3aca4cd7e032483 4788 postfix-sqlite_3.10.4-1~deb13u1_s390x.deb eda96f0ef746b8212a84e592b454d991daf17ed71aa76977d445771ef6d255fb 12377 postfix_3.10.4-1~deb13u1_s390x-buildd.buildinfo f4467cef232e866d14856c7ce92abcf3faa7b2c38053fc379b135c426b6856f8 1557068 postfix_3.10.4-1~deb13u1_s390x.deb Files: 1375bfa9b0471f3dedace69ec45d525d 11044 debug optional postfix-cdb-dbgsym_3.10.4-1~deb13u1_s390x.deb 068d85f9da94f88023c571047e964d90 5200 mail optional postfix-cdb_3.10.4-1~deb13u1_s390x.deb 1de6f26b8c6ae496a95543908172f618 1855192 debug optional postfix-dbgsym_3.10.4-1~deb13u1_s390x.deb 6fd64f177fcd22fc577ad5d1fd0823d0 22524 debug optional postfix-ldap-dbgsym_3.10.4-1~deb13u1_s390x.deb bbb44bb2009854ab819f1b2fabf52677 12304 mail optional postfix-ldap_3.10.4-1~deb13u1_s390x.deb 13508ab55befc23b62b6f283ed754f81 18524 debug optional postfix-lmdb-dbgsym_3.10.4-1~deb13u1_s390x.deb 02598dfee4ab3cb089a529c56e0fd732 8064 mail optional postfix-lmdb_3.10.4-1~deb13u1_s390x.deb 9f98b9dd8036b7428fc823a956601df6 13768 debug optional postfix-mongodb-dbgsym_3.10.4-1~deb13u1_s390x.deb e86d23d57a7a34c6829282f860c94f14 5948 mail optional postfix-mongodb_3.10.4-1~deb13u1_s390x.deb 6880cad2aea4aa537e0813886b9621cd 24012 debug optional postfix-mysql-dbgsym_3.10.4-1~deb13u1_s390x.deb dec79034ae4bd94e8df3d707be725051 7356 mail optional postfix-mysql_3.10.4-1~deb13u1_s390x.deb eb5d241fa3c52b02aeceba3eeea80bf5 14936 debug optional postfix-pcre-dbgsym_3.10.4-1~deb13u1_s390x.deb fa27b57e9d833323e5734bf10b97e408 7064 mail optional postfix-pcre_3.10.4-1~deb13u1_s390x.deb 2b37c0723611cee32bdc0d65b2fc9398 14108 debug optional postfix-pgsql-dbgsym_3.10.4-1~deb13u1_s390x.deb cc06d6373cd49254ecbc8022b391b7b0 6948 mail optional postfix-pgsql_3.10.4-1~deb13u1_s390x.deb daf52bcc62064449e3413e4ad94577ff 8372 debug optional postfix-sqlite-dbgsym_3.10.4-1~deb13u1_s390x.deb 6630dd45edf81c52587c85798a9154fc 4788 mail optional postfix-sqlite_3.10.4-1~deb13u1_s390x.deb 02a75b2105889835e9d5064d161dd030 12377 mail optional postfix_3.10.4-1~deb13u1_s390x-buildd.buildinfo 9856c9114c87e3cc7c04e17ebc95fd4e 1557068 mail optional postfix_3.10.4-1~deb13u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEu0D/YpnnSxv8epH9AKOyQzsWVasFAmixIgUACgkQAKOyQzsW Vasrxg//SO8DxOFQSDNLTZ5GvAmaCo4+mMDjUdaZKo5C0WkxgRgrCNOSRWVq2tV/ xLu2XqY68IDWoywHUdNpAM3PECgA1XQTlxZKYVvUmypY6y7jyeIpZRjtD0y/Etdk ASA0ifAhHx5Yo1kl1VEt0cxjYhOvxXymLLc7LIBSv7U/VrquolJDKmAD634wtDNu lXrvI8+oFOtJ7oMDhb/YSpessu6swkXDF6Q5TTczH6Rn+IVlbwtWgDgOnAQ2acuV NMktwnB6wtyiQliT4qwSHL3L2wNeP9EB8ADjr6+nw97XyQswgwFg1zIbXDCSGy8k FHmY1SIi7NkUdHThAy/IhqBn4bRF5Je4fS9di69mBoyz4UtiPEVjoGaqLRO+Cv1m Q8aWni623NKf1i3hL+Lp6Fj61nxucRVgy5LbLd8Jv1VZXGvOIeaWFCEymwFhoGa7 QB3L8B9V3Ldd/OGWM6xMi49OAK9oLpgL8mUAPojyAdfUelBMnSwkpxgavFyoqzCn CZSObfHp8gwelaHn1rbt2qnP2nTBVIGQ2GaAKc6A3pROnq8B0iyhhMNtmq1n+Rqc IKL8jpyx+hzvD6zwsBcdWJRSCt6iLnHrsU00BoNaYPzDon7GEFEL/nwRD7IVNj3t FIIEfYqQy253W70FEkd2EkZvVXkTtcGf5gRQV2V1FR71HtZQzbE= =0ggu -----END PGP SIGNATURE-----