-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 28 Oct 2025 13:24:35 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: armel Version: 3.10.5-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-ubc-03) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Closes: 1115412 Changes: postfix (3.10.5-1~deb13u1) trixie; urgency=medium . * new upstream stable/bugfix 3.10.5 release, with multiple fixes. From the upstream release notes: - Workaround for an interface mis-match between the Postfix SMTP client and MTA-STS policy plugins. * The existing behavior is to connect to any MX host listed in DNS, and to match the server certificate against any STS policy MX host pattern. * The corrected behavior is to connect to an MX host only if its name matches any STS policy MX host pattern, and to match the server certificate against the MX hostname. The corrected behavior must be enabled in two places: in Postfix with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default: "yes") and in an MTA-STS plugin by enabling TLSRPT support, so that the plugin forwards STS policy attributes to Postfix. This works even if Postfix TLSRPT support is disabled at build time or at runtime. - TLSRPT Workaround: when a TLSRPT policy-type value is "no-policy-found", pretend that the TLSRPT policy domain value is equal to the recipient domain. This ignores that different policy types (TLSA, STS) use different policy domains. But this is what Microsoft does, and therefore, what other tools expect. - Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP client's connection reuse logic did not distinguish between sessions that require SMTPUTF8 support, and sessions that do not. The solution is 1) to store sessions with different SMTPUTF8 requirements under distinct connection cache storage keys, and 2) to not cache a connection when SMTPUTF8 is required but the server does not support that feature - Bugfix (defect introduced: Postfix 3.0, date 20140731): the smtpd 'disconnect' command statistics did not count commands with "bad syntax" and "bad UTF-8 syntax" errors - Postfix 3.11 forward compatibility: to avoid ugly warnings when Postfix 3.11 is rolled back to an older version, allow a preliminary 'size' record in maildrop queue files created with Postfix 3.11 or later - Bugfix (defect introduced: Postfix 3.8, date 20220128): non-reproducible build, because the 'postconf -e' output order for new main.cf entries was no longer deterministic - To make builds predictable, add missing meta_directory and shlib_directory settings to the stock main.cf file - Bugfix (defect introduced: Postfix 3.9, date 20230517): posttls-finger(1) logged an incorrectly-formatted port number * debian/patches/debian-defaults.patch: refresh, update for 2 new parameters (with defaults) in main.cf, and make it with less context * configure-instance.in: fix typo which caused recreating cadir in chroot and excessive logging (Closes: #1115412) Checksums-Sha1: c225369a1c089c624078d09dccbe00c884683c31 11236 postfix-cdb-dbgsym_3.10.5-1~deb13u1_armel.deb a7f576cb09e2b2f964276656ab97f2830feabe59 4848 postfix-cdb_3.10.5-1~deb13u1_armel.deb 326a88a59ed65ebbd361a13748c79cb9eb6b978a 1806560 postfix-dbgsym_3.10.5-1~deb13u1_armel.deb 8d5a3d952782a1c6acf8216d34e86a10537d267f 22328 postfix-ldap-dbgsym_3.10.5-1~deb13u1_armel.deb 4de16e3cbaa4496b11cbb6b25bce961f5473f5be 11856 postfix-ldap_3.10.5-1~deb13u1_armel.deb 7f48445df59cb0979a254780df97983d16c36903 18532 postfix-lmdb-dbgsym_3.10.5-1~deb13u1_armel.deb 338c06d9106b041028cd2a8a899b4eca3818cd55 7416 postfix-lmdb_3.10.5-1~deb13u1_armel.deb 52755d505ca0dbdb8a56796dc899c311bd1ab0d8 13844 postfix-mongodb-dbgsym_3.10.5-1~deb13u1_armel.deb 5e72a1dd8ee3d56dde47eb18de4cd3fc842a081a 5608 postfix-mongodb_3.10.5-1~deb13u1_armel.deb bfa69cdd20010053ea2b6e5dd33ed3887c65e6db 24452 postfix-mysql-dbgsym_3.10.5-1~deb13u1_armel.deb 564e63b2593b29797c606a19276d2cb4246ad6d1 7940 postfix-mysql_3.10.5-1~deb13u1_armel.deb 7f813cc0cf766949c0ac408f4c9a07625de02ace 14688 postfix-pcre-dbgsym_3.10.5-1~deb13u1_armel.deb d5d3eeadf9491f38decd1f22362d6ee2f67dda5b 6372 postfix-pcre_3.10.5-1~deb13u1_armel.deb 880b9a4a7ca0330c710dfcd9b41676b31b386020 14464 postfix-pgsql-dbgsym_3.10.5-1~deb13u1_armel.deb ece5d8096011a4b3e2a57a97bece0358fabebc31 7644 postfix-pgsql_3.10.5-1~deb13u1_armel.deb 553a4bfdf3c1e8f3e18febceb81e5486e55c7c2a 8500 postfix-sqlite-dbgsym_3.10.5-1~deb13u1_armel.deb df4d9a81ef341c792a67dba1039297786c593a09 4632 postfix-sqlite_3.10.5-1~deb13u1_armel.deb 75a2837d70c19a2eac8578902d7d15fc2bc95280 12503 postfix_3.10.5-1~deb13u1_armel-buildd.buildinfo 8eef8b1739ea99c372710bed843920541afba7f8 1498360 postfix_3.10.5-1~deb13u1_armel.deb Checksums-Sha256: edd369fab9922175161704bec669843548fc4fb35620a9a89c77d1c715b083f1 11236 postfix-cdb-dbgsym_3.10.5-1~deb13u1_armel.deb 1b89f5bc77b72b9f4f53f1afebc82a5bd46a049660ec86f502337d545906b00e 4848 postfix-cdb_3.10.5-1~deb13u1_armel.deb 581ce46c5cf7ba87cda8bfaa95f2c76a2aaba4972e4415e8828501fde4a4de2f 1806560 postfix-dbgsym_3.10.5-1~deb13u1_armel.deb 5f94890ff4e6c75bdc632e9a1ea3edb8f4dd1c84f4e56e74852000a31ce9c009 22328 postfix-ldap-dbgsym_3.10.5-1~deb13u1_armel.deb e70ab72812ca265f7ee57768dd401ba8d314f1952e3073a0845d04764ff77733 11856 postfix-ldap_3.10.5-1~deb13u1_armel.deb 0c3518c4f1785412b2131099b18fa6744b946ce3e3f246ab078e4794a9fa5d4e 18532 postfix-lmdb-dbgsym_3.10.5-1~deb13u1_armel.deb 45fe56c1b2429cc499c8eb758dfaa16537c209cefe689eb2b5c22785ca9beb6b 7416 postfix-lmdb_3.10.5-1~deb13u1_armel.deb c3b42d17e54f6a63ec586b0b1b81e6271a335ceb7bb619bc9d41baef3ae13161 13844 postfix-mongodb-dbgsym_3.10.5-1~deb13u1_armel.deb 5c01b027c629d9d5a5bec32dae17caa2fed0945a6b89823cba71aa98aec9aa07 5608 postfix-mongodb_3.10.5-1~deb13u1_armel.deb e288429484ada4662f0621c1ae8976693670a8960b7d038a6c29fe6c64332817 24452 postfix-mysql-dbgsym_3.10.5-1~deb13u1_armel.deb 75fbe6658917994d7de90938888b60a431f998b4876917b225f742dedd65e929 7940 postfix-mysql_3.10.5-1~deb13u1_armel.deb 076242c86dac09306b3e9a85ed975e69010913ae401b3289ad607497ea9893aa 14688 postfix-pcre-dbgsym_3.10.5-1~deb13u1_armel.deb 824caa98e108abcf7f51a6b22845179ccd1ab3d7014a327b7b8bf072c2632b19 6372 postfix-pcre_3.10.5-1~deb13u1_armel.deb 0676907cdc6fc74a73d5834720ff4262940d104e394afd25b52eb98df441ac01 14464 postfix-pgsql-dbgsym_3.10.5-1~deb13u1_armel.deb fa40becdb074c61031487d1d68b8a9c5f3787ee7682161779d95b87588ff9180 7644 postfix-pgsql_3.10.5-1~deb13u1_armel.deb b9cf3a6f63b6be3fe8a3e68f9c6db9b2e3a40d6e0b14b59b8b3dcd0a7bd14c09 8500 postfix-sqlite-dbgsym_3.10.5-1~deb13u1_armel.deb b07618b3d62e7a13845b89b47f296e492b29859226187fc3631421c6d989a3c2 4632 postfix-sqlite_3.10.5-1~deb13u1_armel.deb 509356cd26499de5299b39e1f26d47ee54c04ec3b512056c561dc482c25d5239 12503 postfix_3.10.5-1~deb13u1_armel-buildd.buildinfo 46db07435f5b096942ba290e79c48403b9d7477979b217ff0110e3214a938ea4 1498360 postfix_3.10.5-1~deb13u1_armel.deb Files: ec3304dd6ccc2d6ad8c7f69154b2e80e 11236 debug optional postfix-cdb-dbgsym_3.10.5-1~deb13u1_armel.deb 3e935ecad89c75b5a33fd61ccebba2ab 4848 mail optional postfix-cdb_3.10.5-1~deb13u1_armel.deb 6c76fa957e07c91a07b45db5c8c06fe8 1806560 debug optional postfix-dbgsym_3.10.5-1~deb13u1_armel.deb e591f8747ebd9ff8dde58b5e06789af7 22328 debug optional postfix-ldap-dbgsym_3.10.5-1~deb13u1_armel.deb e2d4d08705fce6ee07315e2329977710 11856 mail optional postfix-ldap_3.10.5-1~deb13u1_armel.deb 70a1004633dd4617dc51b4f46129a4c1 18532 debug optional postfix-lmdb-dbgsym_3.10.5-1~deb13u1_armel.deb a8b483a3d8bd7d3ba7813a40e69a98f0 7416 mail optional postfix-lmdb_3.10.5-1~deb13u1_armel.deb 54c063192c29625565e386764f6f70d5 13844 debug optional postfix-mongodb-dbgsym_3.10.5-1~deb13u1_armel.deb 1e3fabd8b06eebfbca930524fdd7367e 5608 mail optional postfix-mongodb_3.10.5-1~deb13u1_armel.deb e2dfb6c0086c83b3ab17faf493994c87 24452 debug optional postfix-mysql-dbgsym_3.10.5-1~deb13u1_armel.deb f19276d1dedafa923bb67a786e5f5de9 7940 mail optional postfix-mysql_3.10.5-1~deb13u1_armel.deb 6bef42c8630659b0e934ea2b97b85253 14688 debug optional postfix-pcre-dbgsym_3.10.5-1~deb13u1_armel.deb be23bd44c742e34c09fa54932f6fe64d 6372 mail optional postfix-pcre_3.10.5-1~deb13u1_armel.deb 559f658608da59dacd636189be5db537 14464 debug optional postfix-pgsql-dbgsym_3.10.5-1~deb13u1_armel.deb 0711f8e7fda789c4aea0328ed8bc7dcb 7644 mail optional postfix-pgsql_3.10.5-1~deb13u1_armel.deb 578f98e2e7e6b5285cc9b835938c1a62 8500 debug optional postfix-sqlite-dbgsym_3.10.5-1~deb13u1_armel.deb 6dce4cd0bdb8eddbd171bc47152772c0 4632 mail optional postfix-sqlite_3.10.5-1~deb13u1_armel.deb b2d3630b00bdfb53301c79102dd8944e 12503 mail optional postfix_3.10.5-1~deb13u1_armel-buildd.buildinfo eab600d50800d7247893685c6d3790df 1498360 mail optional postfix_3.10.5-1~deb13u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEENsdrABvTD8MQ0UffVza3l394K2AFAmkGS14ACgkQVza3l394 K2DKww//RJ8pZrKbfKscT/aMK9fWhep76YbZqtEr2P0hxfvU0Ir3PV7Vxk/eaO4F T84uWZ1Kn0vxwn26Rsf94DXr12cuR8uY0rIhJfATDlaz2MephCMAhGXREW+xMLLb pg3LKWQPrFqeR3f9328zQ3hUM8bj19uMINsYT7A9qaB41JyWFBo8ZlBeo3RStUX5 sgQtjMmSH1j0r9lS28zupOdtVTbZbMWAmELmz8oOHl/lsTYGFSTwHuvZ4q+rZ1eB bxRTiYsOiX/SjsILIiwAMDpQGefiambCpuhVyRupRKdWamqpoHg3I6NzA5dOnFyA Q2vBmIyzIEGAxHfb6SzDpZplcBXE9jxU93JKaz+RuMRTQp/TWe9HGOKICoI/KWMH 8XoJ97fdVOHzXRWnN9VbJdT0qqBH3sBRN/uHUSfoSeabTXYAwe6n7LVg/dGiYTda fNoxeFxH0gXLuyPr5AdJE6GoEvkfjJ1UBtp5ykUTkQXu6xfMVhCWnpcamjsk9Yxf o4ujRBZBd4EkRafX7nfuRJp4dRLKE3D2Em9V3lQzQG8vSxAN0x2CglmiPtxKmVPc ggnONNGNtQGQmLcW46kbDfP3DVD4vU5/mb7AAaGE+xGthGx03nM7I9pKCO3DzywR 6g6Jsk1Zbja+IiFT948M445o0VTyXN+CDyZPyGVuGG1JUdeMaGs= =wIDg -----END PGP SIGNATURE-----