-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 28 Oct 2025 13:24:35 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: armhf Version: 3.10.5-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Closes: 1115412 Changes: postfix (3.10.5-1~deb13u1) trixie; urgency=medium . * new upstream stable/bugfix 3.10.5 release, with multiple fixes. From the upstream release notes: - Workaround for an interface mis-match between the Postfix SMTP client and MTA-STS policy plugins. * The existing behavior is to connect to any MX host listed in DNS, and to match the server certificate against any STS policy MX host pattern. * The corrected behavior is to connect to an MX host only if its name matches any STS policy MX host pattern, and to match the server certificate against the MX hostname. The corrected behavior must be enabled in two places: in Postfix with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default: "yes") and in an MTA-STS plugin by enabling TLSRPT support, so that the plugin forwards STS policy attributes to Postfix. This works even if Postfix TLSRPT support is disabled at build time or at runtime. - TLSRPT Workaround: when a TLSRPT policy-type value is "no-policy-found", pretend that the TLSRPT policy domain value is equal to the recipient domain. This ignores that different policy types (TLSA, STS) use different policy domains. But this is what Microsoft does, and therefore, what other tools expect. - Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP client's connection reuse logic did not distinguish between sessions that require SMTPUTF8 support, and sessions that do not. The solution is 1) to store sessions with different SMTPUTF8 requirements under distinct connection cache storage keys, and 2) to not cache a connection when SMTPUTF8 is required but the server does not support that feature - Bugfix (defect introduced: Postfix 3.0, date 20140731): the smtpd 'disconnect' command statistics did not count commands with "bad syntax" and "bad UTF-8 syntax" errors - Postfix 3.11 forward compatibility: to avoid ugly warnings when Postfix 3.11 is rolled back to an older version, allow a preliminary 'size' record in maildrop queue files created with Postfix 3.11 or later - Bugfix (defect introduced: Postfix 3.8, date 20220128): non-reproducible build, because the 'postconf -e' output order for new main.cf entries was no longer deterministic - To make builds predictable, add missing meta_directory and shlib_directory settings to the stock main.cf file - Bugfix (defect introduced: Postfix 3.9, date 20230517): posttls-finger(1) logged an incorrectly-formatted port number * debian/patches/debian-defaults.patch: refresh, update for 2 new parameters (with defaults) in main.cf, and make it with less context * configure-instance.in: fix typo which caused recreating cadir in chroot and excessive logging (Closes: #1115412) Checksums-Sha1: d6bcd71d3f666352487de4949c308557a018c05d 11240 postfix-cdb-dbgsym_3.10.5-1~deb13u1_armhf.deb 0aeff223143752579265184276daa7096fbbb4df 4812 postfix-cdb_3.10.5-1~deb13u1_armhf.deb 780ca319bda5cb32b919ed51669aeabdae35bd58 1826536 postfix-dbgsym_3.10.5-1~deb13u1_armhf.deb bcc0af5b7d09651e0594331895262bbedd516936 22500 postfix-ldap-dbgsym_3.10.5-1~deb13u1_armhf.deb 3cfb26fd466d54c201a3ae805baa3e634b227b10 11928 postfix-ldap_3.10.5-1~deb13u1_armhf.deb 3bd98bd6e80ad5e43c5add27da690d11d814cbbd 18624 postfix-lmdb-dbgsym_3.10.5-1~deb13u1_armhf.deb a2ab0e1fc88405e767bae0d4a27c22ebffbe7dcd 7416 postfix-lmdb_3.10.5-1~deb13u1_armhf.deb ee16a2208f1c71c829a86791f991420724c9b712 13968 postfix-mongodb-dbgsym_3.10.5-1~deb13u1_armhf.deb 75913d635a2d0be734628f7e2d5eddd1fee6c236 5632 postfix-mongodb_3.10.5-1~deb13u1_armhf.deb f8cfc8680ffa9586cec8d18497252a4b389b9e95 24408 postfix-mysql-dbgsym_3.10.5-1~deb13u1_armhf.deb 509678930ee80f706da3297f3510ff03fe7633c5 6984 postfix-mysql_3.10.5-1~deb13u1_armhf.deb f5af6533c5f2eb899231982c8eb37c5037523117 14916 postfix-pcre-dbgsym_3.10.5-1~deb13u1_armhf.deb 2cb0d029025f3dc26d56c9350d3ffdf139217f72 6312 postfix-pcre_3.10.5-1~deb13u1_armhf.deb dabc42b6a05e1ad45a324cfc503988db68b3f564 14400 postfix-pgsql-dbgsym_3.10.5-1~deb13u1_armhf.deb 54c5f320b34714218bfdb8856f45cc290836158c 6584 postfix-pgsql_3.10.5-1~deb13u1_armhf.deb f5aef32d81f5b9c55ea170cb7d069f2800b7d57f 8600 postfix-sqlite-dbgsym_3.10.5-1~deb13u1_armhf.deb d5043c59a783f5ed15f60968ae833b7cd1c14d08 4576 postfix-sqlite_3.10.5-1~deb13u1_armhf.deb ba0f7e754cea9fbf2ca5747de7585f56b64960c1 12517 postfix_3.10.5-1~deb13u1_armhf-buildd.buildinfo 42d1bc387c176a4a1135c395a6edad546961fb0b 1518712 postfix_3.10.5-1~deb13u1_armhf.deb Checksums-Sha256: 56b4481f04997cec0c93dc3515a68f4b83f989cbcf1994b5eda2829df5cb66ef 11240 postfix-cdb-dbgsym_3.10.5-1~deb13u1_armhf.deb 43e09c4303a53614fb8973e265f6d645fea7dec6d0999f2b93da0467da7bb575 4812 postfix-cdb_3.10.5-1~deb13u1_armhf.deb 037685ce3fec637b27a4fc5befc4e48e04583ff004728e0a97a4925ebe3bf29b 1826536 postfix-dbgsym_3.10.5-1~deb13u1_armhf.deb 922396c928057ec2bfe75a0fc1312e3c9082efa655fb55a1bc357e8db0b708ef 22500 postfix-ldap-dbgsym_3.10.5-1~deb13u1_armhf.deb 154368633dfa882e47cb9497599f8c36632722d8f086a4a5b8bb287395352587 11928 postfix-ldap_3.10.5-1~deb13u1_armhf.deb acd2fa665f58f2ea9dcadd25077f23ba2cda5781d091b8a4fc412089467f316e 18624 postfix-lmdb-dbgsym_3.10.5-1~deb13u1_armhf.deb 6603e02b94669c6bce024e6384c71ad3b76a054d88b73a81ca928ef666224f4d 7416 postfix-lmdb_3.10.5-1~deb13u1_armhf.deb 0a563760334abec97dcb355ea8e981b2068584977011884d3b1a899b70613cc3 13968 postfix-mongodb-dbgsym_3.10.5-1~deb13u1_armhf.deb 93250c7497329bab0d617e653ac177921c9084dd30a1148e32bdc39a91726f57 5632 postfix-mongodb_3.10.5-1~deb13u1_armhf.deb 2105a347e0db8e0e0984772e3ae1bb1205d99a2a0179e7954c0dcd3f7eca7f5f 24408 postfix-mysql-dbgsym_3.10.5-1~deb13u1_armhf.deb ba51695d86ecdaf1eaa53b026534042b2142a37583b91b3be31d53deb0c28692 6984 postfix-mysql_3.10.5-1~deb13u1_armhf.deb e417eaf846df1fd34dc2a8f427b9919e6cc2eee8a5bbadcba196d9d00ecb8528 14916 postfix-pcre-dbgsym_3.10.5-1~deb13u1_armhf.deb ca85e482923654ba38fd9ac7c087b3ac4a9d5ab8cff54bc51cc5238dfca750f8 6312 postfix-pcre_3.10.5-1~deb13u1_armhf.deb 0d6ea0a277472a300558a3e7642c544d0ffe20e465787871653d357a622611a7 14400 postfix-pgsql-dbgsym_3.10.5-1~deb13u1_armhf.deb df3d8891989258de842d23bdb467c429b38dcfb43179a2eefad32d30b533f589 6584 postfix-pgsql_3.10.5-1~deb13u1_armhf.deb 60a906f8917666148d9feccd4f14a655c0481036f668ea6bccf50634d9203bf2 8600 postfix-sqlite-dbgsym_3.10.5-1~deb13u1_armhf.deb 2fe9143ed535bf63804a18ebfd7f9dfe1f8de22733e6a5ef5582f2aa10b78a99 4576 postfix-sqlite_3.10.5-1~deb13u1_armhf.deb 48f6f1b24eb211f5231e34c17dc1dc60f2ad6ab674ac7831001a90eb4c84b5df 12517 postfix_3.10.5-1~deb13u1_armhf-buildd.buildinfo 29f2f83e9b1e37364c91484fab0ac938cce2d0b49f0c2fc3515a0694df5d3210 1518712 postfix_3.10.5-1~deb13u1_armhf.deb Files: a0a0dcdbe75d76839d173a41ad96001a 11240 debug optional postfix-cdb-dbgsym_3.10.5-1~deb13u1_armhf.deb 3b20c582cb423a6862e02d54e4fc6c67 4812 mail optional postfix-cdb_3.10.5-1~deb13u1_armhf.deb 3baf15503b296a1f6f95a8a353b26d2d 1826536 debug optional postfix-dbgsym_3.10.5-1~deb13u1_armhf.deb 5ab4fe0c214a53c2677e650a04a5f459 22500 debug optional postfix-ldap-dbgsym_3.10.5-1~deb13u1_armhf.deb 127230af4d5bc19030030b0c1a1ceb9a 11928 mail optional postfix-ldap_3.10.5-1~deb13u1_armhf.deb d5dd261aaefd737c54727ae46933c271 18624 debug optional postfix-lmdb-dbgsym_3.10.5-1~deb13u1_armhf.deb 6089edbccdcf4df4a4f6d0e880fde27a 7416 mail optional postfix-lmdb_3.10.5-1~deb13u1_armhf.deb 85a6b283432791afa26403614104076e 13968 debug optional postfix-mongodb-dbgsym_3.10.5-1~deb13u1_armhf.deb 50006332ef37629cfbf35543d7f6b501 5632 mail optional postfix-mongodb_3.10.5-1~deb13u1_armhf.deb a67d4c251b0385357fbc2bb870cf6eb0 24408 debug optional postfix-mysql-dbgsym_3.10.5-1~deb13u1_armhf.deb d36fb1646926b09fd22e90eed9ace1fa 6984 mail optional postfix-mysql_3.10.5-1~deb13u1_armhf.deb b8441aec4d80eb8f8da98c87dc9bdf5a 14916 debug optional postfix-pcre-dbgsym_3.10.5-1~deb13u1_armhf.deb 6d65bd72b27230d60d580872719a3913 6312 mail optional postfix-pcre_3.10.5-1~deb13u1_armhf.deb f46675af9dd57205ae8edf648d43ab95 14400 debug optional postfix-pgsql-dbgsym_3.10.5-1~deb13u1_armhf.deb 08fef14babfd1bffe778a33fce39c9fa 6584 mail optional postfix-pgsql_3.10.5-1~deb13u1_armhf.deb 6ed812d00dc09a0c78e84a0cf54f9f4c 8600 debug optional postfix-sqlite-dbgsym_3.10.5-1~deb13u1_armhf.deb a706ada65f0431b7273e6c920a8a13b1 4576 mail optional postfix-sqlite_3.10.5-1~deb13u1_armhf.deb 3c1dee87a7aec153450aad86bd168983 12517 mail optional postfix_3.10.5-1~deb13u1_armhf-buildd.buildinfo d886e7ae901d765d3b207f149fa1b561 1518712 mail optional postfix_3.10.5-1~deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmkGS04ACgkQ8U6eOZMp j68Yfw//YbzcP03f2Wbrnffn5HfslFVffh88vtprjf7V/MR7LioKXigMoHJojGaq pAQfblVRJN1iYSuLrGdGqpwU2T9WdQDrQsk4DOcTD/WHAaSmXfg2n4vCBGch0T93 2dpbe0mjhJv/oOTIzpXbHOA0q9l2XT1W9Xd7uyU2BtjxiOu7WZHZ/WYkItztVSEv 6QXIVYlrF6WezzN/HlbT7a0//o7pdVocX3ZYUN5dtUfHH0OuTrPmxn1YPFdDA6tS PCgm/9ZpsIB0vP4NLyfh7lm+byMobzIbI9+7DtsHgUhNCHlJ35SkctfI3sJR207v wDqAp70J7y9/4azP2HEoS1fsdo2YbW+YyOSKG/KHFgAV+rBbYD+5UVX3uhODpjdV KvJ9EdAmntxg/D730l8WeH822Ud1DuWz8Oo6zdY42cik+3R56+zS9z6PkvKPPQJ7 7ID/Tt5s0SEstyIxAknvrrsQPJRC3zXxiX1+z4kQVLhWzxO2Ox+g8XsEGCD/dQLa Y/crS6EiBQBHHDdo6+1wjRStcNt5vzg6j7Bm2/q/wsKuevMUiy9Kqqdsbg29A+gp 2LqZ35/386EUzRU3uHruPLeIjWwFosxIc9jr0HAXp8RsIz1TwQHC10PCb0OasRYU rjzkpIDTU2HlOQ2tiMWQ2KawxWqZ/AA/Foo/epoBnqIpWsnGOS8= =9OAM -----END PGP SIGNATURE-----