-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 28 Oct 2025 13:24:35 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: i386 Version: 3.10.5-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Closes: 1115412 Changes: postfix (3.10.5-1~deb13u1) trixie; urgency=medium . * new upstream stable/bugfix 3.10.5 release, with multiple fixes. From the upstream release notes: - Workaround for an interface mis-match between the Postfix SMTP client and MTA-STS policy plugins. * The existing behavior is to connect to any MX host listed in DNS, and to match the server certificate against any STS policy MX host pattern. * The corrected behavior is to connect to an MX host only if its name matches any STS policy MX host pattern, and to match the server certificate against the MX hostname. The corrected behavior must be enabled in two places: in Postfix with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default: "yes") and in an MTA-STS plugin by enabling TLSRPT support, so that the plugin forwards STS policy attributes to Postfix. This works even if Postfix TLSRPT support is disabled at build time or at runtime. - TLSRPT Workaround: when a TLSRPT policy-type value is "no-policy-found", pretend that the TLSRPT policy domain value is equal to the recipient domain. This ignores that different policy types (TLSA, STS) use different policy domains. But this is what Microsoft does, and therefore, what other tools expect. - Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP client's connection reuse logic did not distinguish between sessions that require SMTPUTF8 support, and sessions that do not. The solution is 1) to store sessions with different SMTPUTF8 requirements under distinct connection cache storage keys, and 2) to not cache a connection when SMTPUTF8 is required but the server does not support that feature - Bugfix (defect introduced: Postfix 3.0, date 20140731): the smtpd 'disconnect' command statistics did not count commands with "bad syntax" and "bad UTF-8 syntax" errors - Postfix 3.11 forward compatibility: to avoid ugly warnings when Postfix 3.11 is rolled back to an older version, allow a preliminary 'size' record in maildrop queue files created with Postfix 3.11 or later - Bugfix (defect introduced: Postfix 3.8, date 20220128): non-reproducible build, because the 'postconf -e' output order for new main.cf entries was no longer deterministic - To make builds predictable, add missing meta_directory and shlib_directory settings to the stock main.cf file - Bugfix (defect introduced: Postfix 3.9, date 20230517): posttls-finger(1) logged an incorrectly-formatted port number * debian/patches/debian-defaults.patch: refresh, update for 2 new parameters (with defaults) in main.cf, and make it with less context * configure-instance.in: fix typo which caused recreating cadir in chroot and excessive logging (Closes: #1115412) Checksums-Sha1: 030941d7cd77b6b79d0e598a8e588e57a37a9df5 10148 postfix-cdb-dbgsym_3.10.5-1~deb13u1_i386.deb c5d1a218f7eece241425c0611c227247a1191738 5688 postfix-cdb_3.10.5-1~deb13u1_i386.deb b0ca7a2776fe5178065d68576e67e54512617421 1624524 postfix-dbgsym_3.10.5-1~deb13u1_i386.deb a9a9d9bf620bcb869d0a8d2334b01848a1da9dda 19652 postfix-ldap-dbgsym_3.10.5-1~deb13u1_i386.deb edf32f87321561ddc3229ee0b6ed792a2e1c7a4f 13792 postfix-ldap_3.10.5-1~deb13u1_i386.deb 9e3b7b297ed684742189106f0c9fedf85f92b4c5 16496 postfix-lmdb-dbgsym_3.10.5-1~deb13u1_i386.deb e95c7617b501ebb50bd90e8860b23af876925a38 9056 postfix-lmdb_3.10.5-1~deb13u1_i386.deb 3169ff6aa9e347fb688750c1ab364969bbad8547 12820 postfix-mongodb-dbgsym_3.10.5-1~deb13u1_i386.deb 347bf44dac771a348ed262704c229fc3bcdd0c40 6488 postfix-mongodb_3.10.5-1~deb13u1_i386.deb 711f09131964c38f31da75c8fc23b9608970817b 23096 postfix-mysql-dbgsym_3.10.5-1~deb13u1_i386.deb 98c068ea3f3a0506413c04fd74a655c4f726ea79 8192 postfix-mysql_3.10.5-1~deb13u1_i386.deb 617a31a51d95f8af2e743afe56714d15c98c1d7d 13828 postfix-pcre-dbgsym_3.10.5-1~deb13u1_i386.deb 1923b96b97eb697f4ca9c23aadb825045ce6cd7d 7612 postfix-pcre_3.10.5-1~deb13u1_i386.deb 00b979409c17b08c572a104ac89a51c1c006d114 13116 postfix-pgsql-dbgsym_3.10.5-1~deb13u1_i386.deb 94e6fd5b3080fbc3e42994ff29d2060c52c58f3d 7692 postfix-pgsql_3.10.5-1~deb13u1_i386.deb c3dfe695bec31fac508374e907b4b64a1aaad14d 7588 postfix-sqlite-dbgsym_3.10.5-1~deb13u1_i386.deb 2cdaa4e1fc495fc0ad78c108366e8fae3691ec55 5084 postfix-sqlite_3.10.5-1~deb13u1_i386.deb 6f45f7fc6c30fa2155a9622279d682953977195c 12504 postfix_3.10.5-1~deb13u1_i386-buildd.buildinfo 84425050f1cc4df97e3a9b488af93ee3f894948e 1625412 postfix_3.10.5-1~deb13u1_i386.deb Checksums-Sha256: cc255f0cdb9213775df075cdbaf63ebdaa0883ad1e517307ac81d61a036aac04 10148 postfix-cdb-dbgsym_3.10.5-1~deb13u1_i386.deb 8f41b8cd6ece44d117c20c3c1f62fe188837663da484fd69fb1372081da8e6c4 5688 postfix-cdb_3.10.5-1~deb13u1_i386.deb b37786f45cb136c91201a4bee86e12b4901fe3079770c78dca056df3d977b86b 1624524 postfix-dbgsym_3.10.5-1~deb13u1_i386.deb 9627122a25d20343c3645056bae244ad83ce4ac6b92cf0baee80f1054c33ca45 19652 postfix-ldap-dbgsym_3.10.5-1~deb13u1_i386.deb cd17f6c678d43c70b0183f14c225fe8ed5de33c49e2e5a342ce5bd0c5ccc905c 13792 postfix-ldap_3.10.5-1~deb13u1_i386.deb e160067121428d45c60f45e6d0bfdb1982b9904c95c7d86b29b0288f37b238c8 16496 postfix-lmdb-dbgsym_3.10.5-1~deb13u1_i386.deb 8f3ebfc38fdc3b8ad347bda6f4bffef9c1f66646a93eef13b9a7a44d8ed0bee7 9056 postfix-lmdb_3.10.5-1~deb13u1_i386.deb 94ba9e659b6fe99f37d46a9a0a8a46d9e3ce398c3ef104b6b975c014417f4067 12820 postfix-mongodb-dbgsym_3.10.5-1~deb13u1_i386.deb d64df4e241c854ea31b7d107e4946184376d314959f4bade205a3783ef05ea94 6488 postfix-mongodb_3.10.5-1~deb13u1_i386.deb debda242f60b26a54d7828c5fd6e64aff800cde96c1b67f2763a4d76a05f8b54 23096 postfix-mysql-dbgsym_3.10.5-1~deb13u1_i386.deb 419313eee21b3b8b67d0537279e6ca06a3368efa7239a92b2085ffb3cd3b8d90 8192 postfix-mysql_3.10.5-1~deb13u1_i386.deb bd60ace267284b1bb2c6742a4ec012806c3978fa1e627ede774908af5bdf4734 13828 postfix-pcre-dbgsym_3.10.5-1~deb13u1_i386.deb 38b900b1b1622755adfb9fa2c82ca0a8a4d97e28df7ac962efe79bdfbf9dde61 7612 postfix-pcre_3.10.5-1~deb13u1_i386.deb 6c19609d847cbd583b8d2ecf2e25c1c1ef4b2d23435cdaff3d81e132c13c1b9d 13116 postfix-pgsql-dbgsym_3.10.5-1~deb13u1_i386.deb 9d46221700794c34c8c0c3546c8c998f064b3a752fe15e59c444cb04cbb51296 7692 postfix-pgsql_3.10.5-1~deb13u1_i386.deb 807f125270038efcc668b5df145e61073178a1d3f6e7c72d972cb492b27e57ad 7588 postfix-sqlite-dbgsym_3.10.5-1~deb13u1_i386.deb be0c05ecd2f586030c66c80d47920185a04faba7a76f2db5dbb7583ed5f61af9 5084 postfix-sqlite_3.10.5-1~deb13u1_i386.deb 03e488467e476dcb103461110d5701152ef03d97ce07a936e518f2440c3257bd 12504 postfix_3.10.5-1~deb13u1_i386-buildd.buildinfo b4d0f327ef2379c3afe7d2201497021b4f114942a2cccd23647a0ff2ebcdae95 1625412 postfix_3.10.5-1~deb13u1_i386.deb Files: c7296029aab8787344a33efed99f1423 10148 debug optional postfix-cdb-dbgsym_3.10.5-1~deb13u1_i386.deb ae7726df4c691bd6753b4bae6ae60204 5688 mail optional postfix-cdb_3.10.5-1~deb13u1_i386.deb e57a210751d4e1f499e07670c0a61145 1624524 debug optional postfix-dbgsym_3.10.5-1~deb13u1_i386.deb 1e777c94c2941641251a6da2396a27a0 19652 debug optional postfix-ldap-dbgsym_3.10.5-1~deb13u1_i386.deb 4e5f64792aaab7a362ebf690a61829e1 13792 mail optional postfix-ldap_3.10.5-1~deb13u1_i386.deb fc4b73d45a8d6f18e6af72587ca94800 16496 debug optional postfix-lmdb-dbgsym_3.10.5-1~deb13u1_i386.deb 3e8fb984984b2565863c5de74a487a9e 9056 mail optional postfix-lmdb_3.10.5-1~deb13u1_i386.deb c68807edd72910d85d0f107cbaa7c34e 12820 debug optional postfix-mongodb-dbgsym_3.10.5-1~deb13u1_i386.deb 79fb5b9da364aff86fe439817881b349 6488 mail optional postfix-mongodb_3.10.5-1~deb13u1_i386.deb c27977f67b158ad00fe78c2752ed2c0b 23096 debug optional postfix-mysql-dbgsym_3.10.5-1~deb13u1_i386.deb 1c764d9f0ae3dd74a63483b90d5ba000 8192 mail optional postfix-mysql_3.10.5-1~deb13u1_i386.deb de4316fa3a987b513201213791292865 13828 debug optional postfix-pcre-dbgsym_3.10.5-1~deb13u1_i386.deb 5db907e74950870f8da17cbd6d6da8e1 7612 mail optional postfix-pcre_3.10.5-1~deb13u1_i386.deb 76bdb08072e4e7214082894c0b463785 13116 debug optional postfix-pgsql-dbgsym_3.10.5-1~deb13u1_i386.deb 3f0604b75a52fd470c9b063f072b9c5c 7692 mail optional postfix-pgsql_3.10.5-1~deb13u1_i386.deb 4a01874ed6018a6065fcf1e81a77d240 7588 debug optional postfix-sqlite-dbgsym_3.10.5-1~deb13u1_i386.deb a6f49966c8068843caf3f91d379304bb 5084 mail optional postfix-sqlite_3.10.5-1~deb13u1_i386.deb 88e4266c2ecc2247accfac7d5546f047 12504 mail optional postfix_3.10.5-1~deb13u1_i386-buildd.buildinfo 92296504823ffca11883bb02ee45bc59 1625412 mail optional postfix_3.10.5-1~deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEc5vuvf2HND40bnI+8IREj/cRiTMFAmkGSzEACgkQ8IREj/cR iTN6Og/+IsoT2NJAtcgR76Qkm2DH+T9GAGHkPFHIpfUX3r/Ojr2Dx8ZI1c/SPinW qblLzwT9oSZ4tywZCOiQ/Si+UKT9EkI+wVwQryNpJ3EzbqhIvXsyWUGkZfDB9X3F vaE25kV2MT9Kp1xC6F8arKG6Wg9fGmcFlGEoXV+4MCNJKaGzkj4hm9O2CV8msvj9 oF6vogkEUzItPtsXDLFuo/3DipCMJ/waCDj6IklAhT/GCT/bJRpLB+vxiiNxIN7T KtITAyKnhatNlZln3+4tw78XTpHWpY+RTi54iVuM4RSjRH7/W2chf0TgQR6VN0AW CoM4vFin5MxYD6vj2kGnCt0SIuVVpgHdmQQQB1PmOuCt9uIaHTllP/G0Sr/b9Ckl oSnHsf8XB+px2prdVmDpQXocEet6s1BBeJecWPZ+OZXijXHLCdtjX8XzAcf+8jfA moDG1LgQ4ZL4vRv9nh4L5JH1KUI3n/IK3D0ovDjJCyvYdxUenY4Y5bLJHPHny9aF vVU996X3MVyMppv42W+HgTRRqMskDPo+3G5D3MEchsbMreeBAEQCEH12Nn5zWkm4 RzJnZ3b8QpDKDKZO9OaM2oYN7rYTssZT+gFBU2Y0YIJUQRhsDJf7j2KGXIzve0a2 fnrlB1T+nj7Ma5nQWpNTjPZraKvjstHTEDMgoRrW0K/DJ7c/0+U= =xgGS -----END PGP SIGNATURE-----