-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 28 Oct 2025 13:24:35 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: riscv64 Version: 3.10.5-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: riscv64 Build Daemon (rv-osuosl-02) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Closes: 1115412 Changes: postfix (3.10.5-1~deb13u1) trixie; urgency=medium . * new upstream stable/bugfix 3.10.5 release, with multiple fixes. From the upstream release notes: - Workaround for an interface mis-match between the Postfix SMTP client and MTA-STS policy plugins. * The existing behavior is to connect to any MX host listed in DNS, and to match the server certificate against any STS policy MX host pattern. * The corrected behavior is to connect to an MX host only if its name matches any STS policy MX host pattern, and to match the server certificate against the MX hostname. The corrected behavior must be enabled in two places: in Postfix with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default: "yes") and in an MTA-STS plugin by enabling TLSRPT support, so that the plugin forwards STS policy attributes to Postfix. This works even if Postfix TLSRPT support is disabled at build time or at runtime. - TLSRPT Workaround: when a TLSRPT policy-type value is "no-policy-found", pretend that the TLSRPT policy domain value is equal to the recipient domain. This ignores that different policy types (TLSA, STS) use different policy domains. But this is what Microsoft does, and therefore, what other tools expect. - Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP client's connection reuse logic did not distinguish between sessions that require SMTPUTF8 support, and sessions that do not. The solution is 1) to store sessions with different SMTPUTF8 requirements under distinct connection cache storage keys, and 2) to not cache a connection when SMTPUTF8 is required but the server does not support that feature - Bugfix (defect introduced: Postfix 3.0, date 20140731): the smtpd 'disconnect' command statistics did not count commands with "bad syntax" and "bad UTF-8 syntax" errors - Postfix 3.11 forward compatibility: to avoid ugly warnings when Postfix 3.11 is rolled back to an older version, allow a preliminary 'size' record in maildrop queue files created with Postfix 3.11 or later - Bugfix (defect introduced: Postfix 3.8, date 20220128): non-reproducible build, because the 'postconf -e' output order for new main.cf entries was no longer deterministic - To make builds predictable, add missing meta_directory and shlib_directory settings to the stock main.cf file - Bugfix (defect introduced: Postfix 3.9, date 20230517): posttls-finger(1) logged an incorrectly-formatted port number * debian/patches/debian-defaults.patch: refresh, update for 2 new parameters (with defaults) in main.cf, and make it with less context * configure-instance.in: fix typo which caused recreating cadir in chroot and excessive logging (Closes: #1115412) Checksums-Sha1: 9ea77d6c465af09a2be2842d00672c5a1756c413 11052 postfix-cdb-dbgsym_3.10.5-1~deb13u1_riscv64.deb 9c2aae74707e9a58f4ba7e027795d721b8294e0e 5104 postfix-cdb_3.10.5-1~deb13u1_riscv64.deb 36d90c8839d8b92080c94dba5513760e09868ad7 1850272 postfix-dbgsym_3.10.5-1~deb13u1_riscv64.deb f775f6ef8492a8ea93bc701b2669c8cf577ebfc3 22904 postfix-ldap-dbgsym_3.10.5-1~deb13u1_riscv64.deb bf157481f904dbad6d5ba4a24febc6dc3323a615 12176 postfix-ldap_3.10.5-1~deb13u1_riscv64.deb 14619fd3d2f85ccb0565d899cf06188d72c43b74 17980 postfix-lmdb-dbgsym_3.10.5-1~deb13u1_riscv64.deb 436338f02713c834c23cc4fce2ac9211abd92949 7972 postfix-lmdb_3.10.5-1~deb13u1_riscv64.deb 37626854706c6778e85b79ed6fa27e8f5be1aa3a 13840 postfix-mongodb-dbgsym_3.10.5-1~deb13u1_riscv64.deb 71658a6bf14ed2eefc809da45c4373de962c0786 6064 postfix-mongodb_3.10.5-1~deb13u1_riscv64.deb 7649ceda5191870e519261fe85643d2d2215717a 24200 postfix-mysql-dbgsym_3.10.5-1~deb13u1_riscv64.deb 7fa6e375968e1a4ad9f90d420c796ad65c01bb1f 7160 postfix-mysql_3.10.5-1~deb13u1_riscv64.deb f94c95c8c5958955b4688c3b7fdf453f6df4d921 15052 postfix-pcre-dbgsym_3.10.5-1~deb13u1_riscv64.deb 76c25336fd7669b2fa7f3db8f5e136d4e4da6e04 6928 postfix-pcre_3.10.5-1~deb13u1_riscv64.deb d0758cd237347de3c74a840c9aa7129711095fc3 14264 postfix-pgsql-dbgsym_3.10.5-1~deb13u1_riscv64.deb be2a6048c8f18f951a655f514e84c8843c4347b2 6892 postfix-pgsql_3.10.5-1~deb13u1_riscv64.deb 06d71113e421cc9daa4a4013ec253e3bfea98630 8516 postfix-sqlite-dbgsym_3.10.5-1~deb13u1_riscv64.deb d58e71950c6c617fb10e5495f4d13ec1893f9459 4728 postfix-sqlite_3.10.5-1~deb13u1_riscv64.deb 5c3d9f3e0c6c00ad33e0bf10c65e000cd8d8b367 12691 postfix_3.10.5-1~deb13u1_riscv64-buildd.buildinfo 25b54b26b0303bfbc55e94e45ec416ac3da1d46e 1578152 postfix_3.10.5-1~deb13u1_riscv64.deb Checksums-Sha256: 8b958723adb606fa05684fb6bd255eaad6d47a78da881a77bf5bf7657875012b 11052 postfix-cdb-dbgsym_3.10.5-1~deb13u1_riscv64.deb 7e4482e359740f9bb58285818adb925dad1b7b6f5dc52b102126cf4c5e1463a4 5104 postfix-cdb_3.10.5-1~deb13u1_riscv64.deb 599c8b00d488082736cf40597d44de10be69d32dcea5fd11df74f8ae298bee11 1850272 postfix-dbgsym_3.10.5-1~deb13u1_riscv64.deb 47b66e62a3a157827342440d69e0de962ce34584778cd088f74ff747a82be04a 22904 postfix-ldap-dbgsym_3.10.5-1~deb13u1_riscv64.deb 8233d314f75f4afc69e73d742a50433395c6db45b4e0fb43f650503a0f4b54f0 12176 postfix-ldap_3.10.5-1~deb13u1_riscv64.deb 5d6b2c200fa9e83f176037e38b59e559e6c7270c22f0446f64bbdd1d14cfedfe 17980 postfix-lmdb-dbgsym_3.10.5-1~deb13u1_riscv64.deb 3f2e45d04c64aba7c9dd650989604f10dc3c9356f209ffcd65a0781b27b58a8f 7972 postfix-lmdb_3.10.5-1~deb13u1_riscv64.deb 44cfa262f380a3e7564647352c966ce88755f65d27294a03703841ec9e4da57a 13840 postfix-mongodb-dbgsym_3.10.5-1~deb13u1_riscv64.deb 2df524fdc5f191971adb269e8970e88fac06f870856e53c8ac3153ab1686a1a5 6064 postfix-mongodb_3.10.5-1~deb13u1_riscv64.deb 3adb32fa9c6e82372f69937b2723d8d8a11d3da2000d180b7989ea0136c1eb6c 24200 postfix-mysql-dbgsym_3.10.5-1~deb13u1_riscv64.deb 8e1bb587ef9cae44b7f8958b1543b047c659589f3c9cd560c5b7b43471418d74 7160 postfix-mysql_3.10.5-1~deb13u1_riscv64.deb 11dfe60a4fe8a1e492c595b9b64a91fa862594d2b0f04474c91a3d4216ed1dc1 15052 postfix-pcre-dbgsym_3.10.5-1~deb13u1_riscv64.deb c0408d05a444715379109183d6df9011cad6a94f8bb54bf8db7628a9a92d755f 6928 postfix-pcre_3.10.5-1~deb13u1_riscv64.deb cdf5541e5a21fa5c51b5833de189af0f9cc4cbb437f8048210ae0466600282ee 14264 postfix-pgsql-dbgsym_3.10.5-1~deb13u1_riscv64.deb e01c16b55758db7ff903711bb76ed836dd2b5c26d87aa6c1d9bbe72edb5a1d55 6892 postfix-pgsql_3.10.5-1~deb13u1_riscv64.deb 0a43b5ac1d7c0daf5a393ce8ae70879d430361e2630e60e7286738460afbc752 8516 postfix-sqlite-dbgsym_3.10.5-1~deb13u1_riscv64.deb b5455d6efa0be7dfe9b948f4e4fc73afca49ee2902adbe2e942853469e86ae66 4728 postfix-sqlite_3.10.5-1~deb13u1_riscv64.deb ed619d290014a68095f159a272d8b1bcd41a21b6f7d9ae4eb7200fab1610740d 12691 postfix_3.10.5-1~deb13u1_riscv64-buildd.buildinfo 3b6d6b204353831003badd2c518180739ca15bab57babff1b430e699d2e84c57 1578152 postfix_3.10.5-1~deb13u1_riscv64.deb Files: 2e2d8a587cc68fb927d15e5c8e80d668 11052 debug optional postfix-cdb-dbgsym_3.10.5-1~deb13u1_riscv64.deb 8e7f135ea6f4f93d4be5626516890e04 5104 mail optional postfix-cdb_3.10.5-1~deb13u1_riscv64.deb 390716740c787414e094b9ef73e305ec 1850272 debug optional postfix-dbgsym_3.10.5-1~deb13u1_riscv64.deb 28a7c0ce302910dbd436a24bbb4ed8be 22904 debug optional postfix-ldap-dbgsym_3.10.5-1~deb13u1_riscv64.deb 03f98ff1b43c255700bc4d54cacd5ccb 12176 mail optional postfix-ldap_3.10.5-1~deb13u1_riscv64.deb 8258074f8942d0399d20a00236fa02db 17980 debug optional postfix-lmdb-dbgsym_3.10.5-1~deb13u1_riscv64.deb 5fd7b44caf7074ccb8ca427fb2fec812 7972 mail optional postfix-lmdb_3.10.5-1~deb13u1_riscv64.deb 5e6bee4143769fa13ca09dd4c6d228b4 13840 debug optional postfix-mongodb-dbgsym_3.10.5-1~deb13u1_riscv64.deb 5e4c64704b4864cd6c4078823665560f 6064 mail optional postfix-mongodb_3.10.5-1~deb13u1_riscv64.deb c0dcedbf4823108065bc0e297bc2dbc6 24200 debug optional postfix-mysql-dbgsym_3.10.5-1~deb13u1_riscv64.deb 1263cfd4574d7338ee2c862268fd75a3 7160 mail optional postfix-mysql_3.10.5-1~deb13u1_riscv64.deb 992dda83348a0c78a215c6c3ca61b3a3 15052 debug optional postfix-pcre-dbgsym_3.10.5-1~deb13u1_riscv64.deb cd36f90c16d9d1071a51414b32ee6a15 6928 mail optional postfix-pcre_3.10.5-1~deb13u1_riscv64.deb 23466b349f79a4756c1f1ec1194ce461 14264 debug optional postfix-pgsql-dbgsym_3.10.5-1~deb13u1_riscv64.deb bdd7157192d56d09db7f17cc331d541d 6892 mail optional postfix-pgsql_3.10.5-1~deb13u1_riscv64.deb b63604abb9ddadccf64ddf6d29a9e7c1 8516 debug optional postfix-sqlite-dbgsym_3.10.5-1~deb13u1_riscv64.deb e8ab1df77e806c3e39a4a46af5a980c5 4728 mail optional postfix-sqlite_3.10.5-1~deb13u1_riscv64.deb 64762bef70a1a494e34354d770cb0211 12691 mail optional postfix_3.10.5-1~deb13u1_riscv64-buildd.buildinfo 42735b818bac78dc9ca70d5ba39c1443 1578152 mail optional postfix_3.10.5-1~deb13u1_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8KVeqNwdhjrwBuds9GqgrNxgH+IFAmkGZ8QACgkQ9GqgrNxg H+KPUQ/+PCffAUcepC2coEb6o1l9NymJ7fpOL3wTV3ycBhTHMr6fsWT7HOAQqPKT ZEO0lTNrkC3jxxwixDHr1lnbY3E0YNNFcnFMArqCN9bAntsuQBwji9cUTy+oOvqF o1f/xefrAxsb0UuIMX5f3ybMRp+cieNEezW2ZD1cCUbc48ms4kVW6wuZ4XxadYlI lCNGG5oDYtUKL/x71dBX5u23RsLR7rci1L43kEvJ0UYpBQ/M477ak29w/E6C7gbi mh27f7LDbdHTX8yebMNMsRnximHb9QHIh9UQGhl5OEVq4ot6ANp5OjCPfryXvB2i NTATukvTYUKEu9IjNBUMz/P+k/1E6VQHjBBJCudeQGdV/9AWFrcJehRzlaMmRG2C HjQ591OcasAIt/aPfdIhlR8GYj2h/ikPSevLLPxKhuAuHlzNfiUq4NvvtU83uQ0P cxx72pUEDNw4w9PEHSstQAxiEftKj0YoGliEox0pMu/FebmEx4/ACegUprixYBP/ 8DK/Px5PfonlfzSbpVqPFxNfXvW+zcRWFXGaR8W5BSXISNX9OMc6TBwT5ReG2WVf RyfQOPXjRDI5tsjaAgKk72n94yXmSZ8vxkSPNyQXh/cA/DT+dHIGUd0ybBnSrSga AqqL9e8TvC3Rq1LiKU8nZsGP6VNPxXcM1zEMS+cDyK9k8wLnemM= =MxyF -----END PGP SIGNATURE-----