-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 28 Oct 2025 13:24:35 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: s390x Version: 3.10.5-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: s390x Build Daemon (zani) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Closes: 1115412 Changes: postfix (3.10.5-1~deb13u1) trixie; urgency=medium . * new upstream stable/bugfix 3.10.5 release, with multiple fixes. From the upstream release notes: - Workaround for an interface mis-match between the Postfix SMTP client and MTA-STS policy plugins. * The existing behavior is to connect to any MX host listed in DNS, and to match the server certificate against any STS policy MX host pattern. * The corrected behavior is to connect to an MX host only if its name matches any STS policy MX host pattern, and to match the server certificate against the MX hostname. The corrected behavior must be enabled in two places: in Postfix with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default: "yes") and in an MTA-STS plugin by enabling TLSRPT support, so that the plugin forwards STS policy attributes to Postfix. This works even if Postfix TLSRPT support is disabled at build time or at runtime. - TLSRPT Workaround: when a TLSRPT policy-type value is "no-policy-found", pretend that the TLSRPT policy domain value is equal to the recipient domain. This ignores that different policy types (TLSA, STS) use different policy domains. But this is what Microsoft does, and therefore, what other tools expect. - Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP client's connection reuse logic did not distinguish between sessions that require SMTPUTF8 support, and sessions that do not. The solution is 1) to store sessions with different SMTPUTF8 requirements under distinct connection cache storage keys, and 2) to not cache a connection when SMTPUTF8 is required but the server does not support that feature - Bugfix (defect introduced: Postfix 3.0, date 20140731): the smtpd 'disconnect' command statistics did not count commands with "bad syntax" and "bad UTF-8 syntax" errors - Postfix 3.11 forward compatibility: to avoid ugly warnings when Postfix 3.11 is rolled back to an older version, allow a preliminary 'size' record in maildrop queue files created with Postfix 3.11 or later - Bugfix (defect introduced: Postfix 3.8, date 20220128): non-reproducible build, because the 'postconf -e' output order for new main.cf entries was no longer deterministic - To make builds predictable, add missing meta_directory and shlib_directory settings to the stock main.cf file - Bugfix (defect introduced: Postfix 3.9, date 20230517): posttls-finger(1) logged an incorrectly-formatted port number * debian/patches/debian-defaults.patch: refresh, update for 2 new parameters (with defaults) in main.cf, and make it with less context * configure-instance.in: fix typo which caused recreating cadir in chroot and excessive logging (Closes: #1115412) Checksums-Sha1: 89e853871b6fca8ee866cf5dfc6977e7b9d55e36 11060 postfix-cdb-dbgsym_3.10.5-1~deb13u1_s390x.deb 3187801e77415d0100abe741f1f457131a4daa54 5204 postfix-cdb_3.10.5-1~deb13u1_s390x.deb 0d1e27ae27d895641ec949b42b1ed52b7216fd7a 1856456 postfix-dbgsym_3.10.5-1~deb13u1_s390x.deb 250e6cb427d38e7e15d695ede1ff3373d7067617 22524 postfix-ldap-dbgsym_3.10.5-1~deb13u1_s390x.deb 1938b707776a2c4c1e3d6b025a7ddecb47dcd02d 12312 postfix-ldap_3.10.5-1~deb13u1_s390x.deb 93b678609285a19cb18a90554c2610617bd9a031 18520 postfix-lmdb-dbgsym_3.10.5-1~deb13u1_s390x.deb caace175a4a0b74415dbb655b80088777a438e87 8076 postfix-lmdb_3.10.5-1~deb13u1_s390x.deb 6b57e3bcd01489c1c7da62155491805617228913 13760 postfix-mongodb-dbgsym_3.10.5-1~deb13u1_s390x.deb dac60837bd1e969899b3df7e99768826e1f06d3e 5944 postfix-mongodb_3.10.5-1~deb13u1_s390x.deb a0bf99af3aaaef07b5ad148666cba6eca717cdda 24012 postfix-mysql-dbgsym_3.10.5-1~deb13u1_s390x.deb 663dc27ba29f86310373e943a3859c7b288a3ab1 7360 postfix-mysql_3.10.5-1~deb13u1_s390x.deb b3f22ef55cf4259cd9d3769b784f639b19af9820 14932 postfix-pcre-dbgsym_3.10.5-1~deb13u1_s390x.deb b537aabd60dcc31e3d93dd3328f01bd5a5f341b6 7048 postfix-pcre_3.10.5-1~deb13u1_s390x.deb 5cf73488bc4e14fc1dcce3c1d6a3d13405ea29db 14100 postfix-pgsql-dbgsym_3.10.5-1~deb13u1_s390x.deb 4f52624bf9becd127fc8461c5bd70432f2916dcf 6952 postfix-pgsql_3.10.5-1~deb13u1_s390x.deb c38db10fa1dd6a48853d2503fb7b5e60de7781ae 8372 postfix-sqlite-dbgsym_3.10.5-1~deb13u1_s390x.deb 358601e88db9c7881e19b553ea28f13063daa3c0 4788 postfix-sqlite_3.10.5-1~deb13u1_s390x.deb afdae00c085504dc0106a8669c0c86861cd4fc5f 12513 postfix_3.10.5-1~deb13u1_s390x-buildd.buildinfo 3754ed98310556c32140c52c61de83150f98d33f 1560728 postfix_3.10.5-1~deb13u1_s390x.deb Checksums-Sha256: eac6f2d7ab80ab37e6b78cd3dc51714fa7484cafe598efc535030b8dd075232f 11060 postfix-cdb-dbgsym_3.10.5-1~deb13u1_s390x.deb 7bfea610e2645ece11002bd02a2034f96080b69f859907dace96bcc8e97735c5 5204 postfix-cdb_3.10.5-1~deb13u1_s390x.deb e0bdbafbffc7d9d411e31025c8a1a45b4e5203c85ef3a68df9c6ecb0a0754739 1856456 postfix-dbgsym_3.10.5-1~deb13u1_s390x.deb f6c233cb54cd6e721120570c719f6840b3d3d52c8b75b68a1a567c4358f446ae 22524 postfix-ldap-dbgsym_3.10.5-1~deb13u1_s390x.deb ce8f54db4d0223c0dd16f542095cac0561743e51053777ea94f2fb98c91fc5c3 12312 postfix-ldap_3.10.5-1~deb13u1_s390x.deb 61ce82c3e375afd324495e6cd0a8d264f474e3f37e5e374498d9e48c27eb7365 18520 postfix-lmdb-dbgsym_3.10.5-1~deb13u1_s390x.deb a514b0cd8a8a04fd6e755b7c30c2260c727e60f29a339add0f3a672b753a30fb 8076 postfix-lmdb_3.10.5-1~deb13u1_s390x.deb 3686f408bc870420ac00bf93ac212abec2edebdff2c06268576fc5ab69bbe98d 13760 postfix-mongodb-dbgsym_3.10.5-1~deb13u1_s390x.deb 85c4ee299a796a1aba24d35d4618b1520481e1d8cf0838b71dc63407bc083f0a 5944 postfix-mongodb_3.10.5-1~deb13u1_s390x.deb f7c914097bd8c48ab1e0a60fba044a6688103d6a2eab491e3596afe52536ddc3 24012 postfix-mysql-dbgsym_3.10.5-1~deb13u1_s390x.deb c5670a943bd0f7ae3dc3611d1179d0718cec24777f217e23cb1de92e012e2237 7360 postfix-mysql_3.10.5-1~deb13u1_s390x.deb 73681682b45a13db955283014d684f4ce06b8ade417ff4c1f26080e05320c505 14932 postfix-pcre-dbgsym_3.10.5-1~deb13u1_s390x.deb 7ce87018d4353dd92e84ddd6c6f98da6472f5388ffa162d10f6e5c1274d509dd 7048 postfix-pcre_3.10.5-1~deb13u1_s390x.deb 799aa169ae92697c37269a26c2d6e06a91fd796ad85107c48d7c907d57cc2de9 14100 postfix-pgsql-dbgsym_3.10.5-1~deb13u1_s390x.deb fc6ea32f48fd4c906ba7f4f1cab809fe7827f0c3ce03bdd07cc918691f83ab71 6952 postfix-pgsql_3.10.5-1~deb13u1_s390x.deb 71b3cd1ebcee49abd0a915aa29ec31a9af96d6c3ca994c17867ebf0569de979c 8372 postfix-sqlite-dbgsym_3.10.5-1~deb13u1_s390x.deb 150adecfc25b877be2cf6e26a8fefad1c6a7ed7fcd9c15bb4f26bb79dbe72f7f 4788 postfix-sqlite_3.10.5-1~deb13u1_s390x.deb 307b276c561df2642693a797b343df3bfef7af08aaf1ce8cb95485aaf03561dc 12513 postfix_3.10.5-1~deb13u1_s390x-buildd.buildinfo 03e3bdbfe5546617c600a7a699e0df93b13ad27ac85cb09bc067fb4dbd9e8855 1560728 postfix_3.10.5-1~deb13u1_s390x.deb Files: c0305da7c809c44396273e4e7e7db791 11060 debug optional postfix-cdb-dbgsym_3.10.5-1~deb13u1_s390x.deb 56adb62ccabfa234c130c17850b9f77a 5204 mail optional postfix-cdb_3.10.5-1~deb13u1_s390x.deb 4a07d1b20c6e36a14269dccfce5915d6 1856456 debug optional postfix-dbgsym_3.10.5-1~deb13u1_s390x.deb 6ae174266c59478eb6b0c29f8f639882 22524 debug optional postfix-ldap-dbgsym_3.10.5-1~deb13u1_s390x.deb c963ccc543dff9310e309867d40bbb1f 12312 mail optional postfix-ldap_3.10.5-1~deb13u1_s390x.deb d795c0d0c61b9ba64049bfc42edabdbd 18520 debug optional postfix-lmdb-dbgsym_3.10.5-1~deb13u1_s390x.deb 280b0f39ce213d325d56cdfbdfe8e14f 8076 mail optional postfix-lmdb_3.10.5-1~deb13u1_s390x.deb a2e125a7b8c83f942e4573466dd1d500 13760 debug optional postfix-mongodb-dbgsym_3.10.5-1~deb13u1_s390x.deb d883cdfec6425488a0ddfaed3a3f0066 5944 mail optional postfix-mongodb_3.10.5-1~deb13u1_s390x.deb d5739b15d9e96249e30225cce3de81a0 24012 debug optional postfix-mysql-dbgsym_3.10.5-1~deb13u1_s390x.deb d01562f4610ce5b2434b31bb82c99bb1 7360 mail optional postfix-mysql_3.10.5-1~deb13u1_s390x.deb 6bc4ad170f5df0308d82fd5327e3c876 14932 debug optional postfix-pcre-dbgsym_3.10.5-1~deb13u1_s390x.deb 4bbffd1aec7340d433d00a581321bf20 7048 mail optional postfix-pcre_3.10.5-1~deb13u1_s390x.deb f107f75e4de9f701fd9d81212c615310 14100 debug optional postfix-pgsql-dbgsym_3.10.5-1~deb13u1_s390x.deb 20e858b28e84629f9b0089783254e344 6952 mail optional postfix-pgsql_3.10.5-1~deb13u1_s390x.deb 226c3140a0729632273350519d55fca9 8372 debug optional postfix-sqlite-dbgsym_3.10.5-1~deb13u1_s390x.deb 7af6f57883b6a795247c80f07a9c620d 4788 mail optional postfix-sqlite_3.10.5-1~deb13u1_s390x.deb dbab7b83d12fe58e949f22e193674086 12513 mail optional postfix_3.10.5-1~deb13u1_s390x-buildd.buildinfo 474ac34a9067b47632c593f6f60882d2 1560728 mail optional postfix_3.10.5-1~deb13u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmkGUVsACgkQkaCrxAR3 BY0MMxAAjXrrx/n1HYlchqoXf4tFRJEzb3zLxJ6Tk99PCBXfQZVn34EBtQNa7hF+ 37vDMkAqvtdDy2tfehu6jt+2vb5BBSv06dfxEWUcXwMOc8axL+D0F/zpYhcf6xRu TH5Ot5lZYLwPUj9OraJ70nKQDwGXbCGjMQi9JqY+PMA1Tfby21YaAFpLXpbpaftZ r94bfK/aWQ0hIcyUbq+xjqJPvRJ5SiSHlhO+NuDzi62a2w3WtxP2KRSLa91xuydd YpErEqoTf7UhP1mUN8pG+mgli6DurE+VdmMhVZWgcBQgA9DAlPhPp9lV0U1bXZ7t dUl5T32/A7D9b8Wr/aLSuW73FyQdb/Ci0WEcfp/Tq/iZ82CRotJfmoLnYprBulad TpG47PsXqxCI98kz/7clk7yo59F/TiSxYERyWObslxAv2r4KuTaeQhJfoT7OGb+X JRzqn5Mwi2b0mrDk+G2l4oICbR2P3y49BJB6KpJDovUX/TezIiYzwljqcyBVq9BZ giAN4VOT8tYe99FIv0XOwHctQbGN+58Q5kOyggYRWJEex66wis6tsp8Kk5t8F75D FTEVuFo8o6CzT+VaiUHdbz32+YPq10za7RCg9tFWi2gP8dMGA+nxFwwmmoWHtvDC bowGTvU29q1kXQgPmBgLCVBY4pbIsp7Dc9mhiIoWayVx2H0in3Y= =POdo -----END PGP SIGNATURE-----