-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 28 Oct 2025 13:24:35 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: ppc64el Version: 3.10.5-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Closes: 1115412 Changes: postfix (3.10.5-1~deb13u1) trixie; urgency=medium . * new upstream stable/bugfix 3.10.5 release, with multiple fixes. From the upstream release notes: - Workaround for an interface mis-match between the Postfix SMTP client and MTA-STS policy plugins. * The existing behavior is to connect to any MX host listed in DNS, and to match the server certificate against any STS policy MX host pattern. * The corrected behavior is to connect to an MX host only if its name matches any STS policy MX host pattern, and to match the server certificate against the MX hostname. The corrected behavior must be enabled in two places: in Postfix with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default: "yes") and in an MTA-STS plugin by enabling TLSRPT support, so that the plugin forwards STS policy attributes to Postfix. This works even if Postfix TLSRPT support is disabled at build time or at runtime. - TLSRPT Workaround: when a TLSRPT policy-type value is "no-policy-found", pretend that the TLSRPT policy domain value is equal to the recipient domain. This ignores that different policy types (TLSA, STS) use different policy domains. But this is what Microsoft does, and therefore, what other tools expect. - Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP client's connection reuse logic did not distinguish between sessions that require SMTPUTF8 support, and sessions that do not. The solution is 1) to store sessions with different SMTPUTF8 requirements under distinct connection cache storage keys, and 2) to not cache a connection when SMTPUTF8 is required but the server does not support that feature - Bugfix (defect introduced: Postfix 3.0, date 20140731): the smtpd 'disconnect' command statistics did not count commands with "bad syntax" and "bad UTF-8 syntax" errors - Postfix 3.11 forward compatibility: to avoid ugly warnings when Postfix 3.11 is rolled back to an older version, allow a preliminary 'size' record in maildrop queue files created with Postfix 3.11 or later - Bugfix (defect introduced: Postfix 3.8, date 20220128): non-reproducible build, because the 'postconf -e' output order for new main.cf entries was no longer deterministic - To make builds predictable, add missing meta_directory and shlib_directory settings to the stock main.cf file - Bugfix (defect introduced: Postfix 3.9, date 20230517): posttls-finger(1) logged an incorrectly-formatted port number * debian/patches/debian-defaults.patch: refresh, update for 2 new parameters (with defaults) in main.cf, and make it with less context * configure-instance.in: fix typo which caused recreating cadir in chroot and excessive logging (Closes: #1115412) Checksums-Sha1: 713f24b1759dfead1fb8c080b7393796a5c36771 11540 postfix-cdb-dbgsym_3.10.5-1~deb13u1_ppc64el.deb a798d8db4992589bf46e4a5cd77bbd8500ca7ef0 5684 postfix-cdb_3.10.5-1~deb13u1_ppc64el.deb 71cf45f4c53f721c3b0898ed757330f81969e312 1923224 postfix-dbgsym_3.10.5-1~deb13u1_ppc64el.deb 4eda212972d2ef3b1f5386503d8639cdec53711e 23680 postfix-ldap-dbgsym_3.10.5-1~deb13u1_ppc64el.deb 811b4fa229815bd7762365b90982d36d605f15a9 13072 postfix-ldap_3.10.5-1~deb13u1_ppc64el.deb e5fcc549249d142863bd247d559392541f9bd0dd 19184 postfix-lmdb-dbgsym_3.10.5-1~deb13u1_ppc64el.deb dd2225f060caed921b7d0d423d7e07dcccf5c223 8616 postfix-lmdb_3.10.5-1~deb13u1_ppc64el.deb 8560599a59099c397487a1f82ba1b7a6324658e1 14180 postfix-mongodb-dbgsym_3.10.5-1~deb13u1_ppc64el.deb 7f316d3cc84c78d65ab0da4995acdcdfb453ac07 6708 postfix-mongodb_3.10.5-1~deb13u1_ppc64el.deb a4af3fd10b8827bc3c5296ed0cfbd9f62276bfde 25052 postfix-mysql-dbgsym_3.10.5-1~deb13u1_ppc64el.deb b2294e165663ce35b9f61253a7c6ae84345da1d1 8416 postfix-mysql_3.10.5-1~deb13u1_ppc64el.deb 074dc065cac086a58f84bdc3b717ddcbbb467f5c 15320 postfix-pcre-dbgsym_3.10.5-1~deb13u1_ppc64el.deb de98f4bcd45f5724bc63d072f4090608f1b06514 7824 postfix-pcre_3.10.5-1~deb13u1_ppc64el.deb a283521ae79e94312f5a9907a2308319f6c5a2a2 15040 postfix-pgsql-dbgsym_3.10.5-1~deb13u1_ppc64el.deb a1a8e571a67b35676980f47e7f7a35bca37072cd 8036 postfix-pgsql_3.10.5-1~deb13u1_ppc64el.deb bf30d060fb1eb1193237c1a6c09b52ab20b93a62 8724 postfix-sqlite-dbgsym_3.10.5-1~deb13u1_ppc64el.deb daf8608bf53611299e4a8d65552cbf6ccc8ddca6 5052 postfix-sqlite_3.10.5-1~deb13u1_ppc64el.deb f24cb5078e60eacbe70a6d837590442520e0a172 12746 postfix_3.10.5-1~deb13u1_ppc64el-buildd.buildinfo 9b8540978af847f4d0607f7c00e75e29ad280657 1630216 postfix_3.10.5-1~deb13u1_ppc64el.deb Checksums-Sha256: 14f282035091c9c6e384e0f80b81910cce79240fbc78a039f31ed8f3166a2aa7 11540 postfix-cdb-dbgsym_3.10.5-1~deb13u1_ppc64el.deb c1026d1a37f4fa8324f977e53de89f48f885b5657797e986358e184318b0798d 5684 postfix-cdb_3.10.5-1~deb13u1_ppc64el.deb e25e2f2e5d96b5e4a717327196d948538e75a71ff20563c7a6ee53e8925cea7d 1923224 postfix-dbgsym_3.10.5-1~deb13u1_ppc64el.deb 753d73c8f67799feaef2e7d5036186e858740a6125a2724836e40f418d6d8606 23680 postfix-ldap-dbgsym_3.10.5-1~deb13u1_ppc64el.deb 15d49222e1bd589acbbb3d84d90e457a25806905db58911f1a094d76526d9bd4 13072 postfix-ldap_3.10.5-1~deb13u1_ppc64el.deb 203342240531cdd2aa77baa19aeaa22b56a076c477d58128170c6f0e53f7927e 19184 postfix-lmdb-dbgsym_3.10.5-1~deb13u1_ppc64el.deb 59ebb49970b7926c6ac112ce00eaea313bbc16d4da9316fa13725a43d96801a6 8616 postfix-lmdb_3.10.5-1~deb13u1_ppc64el.deb fe28d0acdd230b47f3cbdb9fe9b5f43309a2903b079fff083a22a3b4fe15fcdf 14180 postfix-mongodb-dbgsym_3.10.5-1~deb13u1_ppc64el.deb 86abde86e2ba8423c96fa0c77b91545d48f16c930cba997f4b8e81ee86676f4b 6708 postfix-mongodb_3.10.5-1~deb13u1_ppc64el.deb 8675d3399b1b08e0cace87c88f3190938c63c7eeb516bdda7262f162a8e79634 25052 postfix-mysql-dbgsym_3.10.5-1~deb13u1_ppc64el.deb 2e3d6b45a38d36f79669286533c7342b120b6b4eb6ef66480aec94aad370b4c4 8416 postfix-mysql_3.10.5-1~deb13u1_ppc64el.deb 712a77716e0c0926c6bb2f2b9ad3f65585e2b97f686d5f23b72f93d4a8e01b36 15320 postfix-pcre-dbgsym_3.10.5-1~deb13u1_ppc64el.deb 485e75e818395198198115667434d3e19ae660836862823244d40dd84bce659c 7824 postfix-pcre_3.10.5-1~deb13u1_ppc64el.deb 5a94e3ec04a3a22ec7d71999081ccf5f26446ce49fd1a306ad74723a36ed0e99 15040 postfix-pgsql-dbgsym_3.10.5-1~deb13u1_ppc64el.deb 5d575366eb73cde7b0a365eb744180c01945c4ff3d7df0f4beb93e9ca63b4ae6 8036 postfix-pgsql_3.10.5-1~deb13u1_ppc64el.deb 17bc0627deba4852f495118caf7fd5708009e10c2bf424d087e1fcf1a137fd40 8724 postfix-sqlite-dbgsym_3.10.5-1~deb13u1_ppc64el.deb ffc50b34eef1e09521eadc3db2c31edd872249f7b95d1b397742a3ce23e41d65 5052 postfix-sqlite_3.10.5-1~deb13u1_ppc64el.deb 08e4b0b8005b47417006eafb959363596c02020573dd6bd6ebbd0685ffee3888 12746 postfix_3.10.5-1~deb13u1_ppc64el-buildd.buildinfo ab7efe31e435bcd51f2343cb92f1633a42ef671129cefb2391de314dc296d3fe 1630216 postfix_3.10.5-1~deb13u1_ppc64el.deb Files: ec725e546424a63d77d00b52c248fa9d 11540 debug optional postfix-cdb-dbgsym_3.10.5-1~deb13u1_ppc64el.deb bc08b280e6cd074ddd58d3edea31b79a 5684 mail optional postfix-cdb_3.10.5-1~deb13u1_ppc64el.deb b628b675a5bc49e1ed701428e6a89970 1923224 debug optional postfix-dbgsym_3.10.5-1~deb13u1_ppc64el.deb cac5f4b2e13a48c041325cb3e6755ef2 23680 debug optional postfix-ldap-dbgsym_3.10.5-1~deb13u1_ppc64el.deb 77212c0a67425be90685dee6f4788060 13072 mail optional postfix-ldap_3.10.5-1~deb13u1_ppc64el.deb 01ff3c0b2685790a4f3944beefc1c208 19184 debug optional postfix-lmdb-dbgsym_3.10.5-1~deb13u1_ppc64el.deb 8dc96176732f5d5d208e7ef8435f9c9c 8616 mail optional postfix-lmdb_3.10.5-1~deb13u1_ppc64el.deb 6875b43e0bd0b0b0cb0fd5a4d7e2bf89 14180 debug optional postfix-mongodb-dbgsym_3.10.5-1~deb13u1_ppc64el.deb 361c3a9a40e747944766c128c30cff07 6708 mail optional postfix-mongodb_3.10.5-1~deb13u1_ppc64el.deb b19b913d798abf38076a1958ae3a5e4d 25052 debug optional postfix-mysql-dbgsym_3.10.5-1~deb13u1_ppc64el.deb 82db2c768e89e477d4300b34553b4db6 8416 mail optional postfix-mysql_3.10.5-1~deb13u1_ppc64el.deb 58c1d17ba9d6e7e5bbbb677006337df1 15320 debug optional postfix-pcre-dbgsym_3.10.5-1~deb13u1_ppc64el.deb 7c2bbddc3b1212693082f33137483331 7824 mail optional postfix-pcre_3.10.5-1~deb13u1_ppc64el.deb 4fc3dbb162bebd41acb5eac5bb7fc90e 15040 debug optional postfix-pgsql-dbgsym_3.10.5-1~deb13u1_ppc64el.deb a17e957e6c2af13aac12eb034e48986e 8036 mail optional postfix-pgsql_3.10.5-1~deb13u1_ppc64el.deb d602cb48c1080ad44d4e4ef9e3a8e977 8724 debug optional postfix-sqlite-dbgsym_3.10.5-1~deb13u1_ppc64el.deb ca89e55ef2291f0d6cdcf87719892088 5052 mail optional postfix-sqlite_3.10.5-1~deb13u1_ppc64el.deb 2e510732827167c7aa1b700942c7d5ba 12746 mail optional postfix_3.10.5-1~deb13u1_ppc64el-buildd.buildinfo b75b73403fcba9ba1d6de3dfd2cb4dce 1630216 mail optional postfix_3.10.5-1~deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYo4fOZBRi9qmvTxH1PowSTJ8+YQFAmkGSv8ACgkQ1PowSTJ8 +YQAHBAAvu1HwwnqVYqXdlleQPoGVyGd8NU7sL9kc0BNOxdYCga+FAiB+5H1gc3P arFuVQgwGTGCaRhT5LTROoGTCLMh+eZZ52VsnoHLH5wIycJfIQQ/W62ur8NAeZdQ VzG6mxGUlJVuFnBg5/ZjFl1UriZzH5yMHQhdwrNUctvxoYklK0ITRudhFsi1BNv1 OZfEVzqH/9/oKVVsP2qNW6KZnuJAVrlezo6xEp8uQymJdc0Nx4kAo0B5Dbv2EEqm Pv4bjN+p3cpCU+gJ/sBTHVF/gDRI8O7+6YKt5THC7aXQW5QnRMdesriw/h7EioJP 8uDOJ4MQ5szx8jNAXU/hnK6AAXdsWzNKRzauhwjky/Cdo8EC+UOw1zgbN+WU3f1Z 2N1l3YzslBtEzgZR2ud4xEX3M9yIMBEV9MLOGOb8kXcSUP13UkzOsMMbE/5Akma7 HLmxuLvi+cpnzK5Tdx0QNsqu+zrnwtjuLEiJl+wsC0e98xm6fgCAMqGPY9XnmICB lr4ND3baafJrW77Kx2k546CmCAi9/7Kgt5dijb8pRQg2Hnt7PVhrFeuyqxCAI89t WlX0Lvg8EUPisG2BiVtKgq2f83GTK7j5Qph90rEtzCq2SbGDkq50NLdROWQ7N9+/ ka1INc46WclCsmw5P4dnmTQYl7AQSX97+vIw2GGk2w0b7ltMQtQ= =YSrw -----END PGP SIGNATURE-----