-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 28 Oct 2025 13:24:35 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: arm64 Version: 3.10.5-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-conova-04) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Closes: 1115412 Changes: postfix (3.10.5-1~deb13u1) trixie; urgency=medium . * new upstream stable/bugfix 3.10.5 release, with multiple fixes. From the upstream release notes: - Workaround for an interface mis-match between the Postfix SMTP client and MTA-STS policy plugins. * The existing behavior is to connect to any MX host listed in DNS, and to match the server certificate against any STS policy MX host pattern. * The corrected behavior is to connect to an MX host only if its name matches any STS policy MX host pattern, and to match the server certificate against the MX hostname. The corrected behavior must be enabled in two places: in Postfix with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default: "yes") and in an MTA-STS plugin by enabling TLSRPT support, so that the plugin forwards STS policy attributes to Postfix. This works even if Postfix TLSRPT support is disabled at build time or at runtime. - TLSRPT Workaround: when a TLSRPT policy-type value is "no-policy-found", pretend that the TLSRPT policy domain value is equal to the recipient domain. This ignores that different policy types (TLSA, STS) use different policy domains. But this is what Microsoft does, and therefore, what other tools expect. - Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP client's connection reuse logic did not distinguish between sessions that require SMTPUTF8 support, and sessions that do not. The solution is 1) to store sessions with different SMTPUTF8 requirements under distinct connection cache storage keys, and 2) to not cache a connection when SMTPUTF8 is required but the server does not support that feature - Bugfix (defect introduced: Postfix 3.0, date 20140731): the smtpd 'disconnect' command statistics did not count commands with "bad syntax" and "bad UTF-8 syntax" errors - Postfix 3.11 forward compatibility: to avoid ugly warnings when Postfix 3.11 is rolled back to an older version, allow a preliminary 'size' record in maildrop queue files created with Postfix 3.11 or later - Bugfix (defect introduced: Postfix 3.8, date 20220128): non-reproducible build, because the 'postconf -e' output order for new main.cf entries was no longer deterministic - To make builds predictable, add missing meta_directory and shlib_directory settings to the stock main.cf file - Bugfix (defect introduced: Postfix 3.9, date 20230517): posttls-finger(1) logged an incorrectly-formatted port number * debian/patches/debian-defaults.patch: refresh, update for 2 new parameters (with defaults) in main.cf, and make it with less context * configure-instance.in: fix typo which caused recreating cadir in chroot and excessive logging (Closes: #1115412) Checksums-Sha1: 5c676782148759ccf64b3e0e1a8c83efb8c2dbce 11080 postfix-cdb-dbgsym_3.10.5-1~deb13u1_arm64.deb 71fbb3148f0ec74727ab3a3688f4fd2e635baedf 5192 postfix-cdb_3.10.5-1~deb13u1_arm64.deb c3d147101e4fb240947ac2050319121c57c1da4f 1876736 postfix-dbgsym_3.10.5-1~deb13u1_arm64.deb 71ad89157b20fdcd867035f003a8ca4a2f8b86e0 22732 postfix-ldap-dbgsym_3.10.5-1~deb13u1_arm64.deb b8442f9e3ceb38b99c259350ad6f03260e080b7a 12068 postfix-ldap_3.10.5-1~deb13u1_arm64.deb e18ef28d7a5dbc7c147f8ddc73875e3dc89e2369 18488 postfix-lmdb-dbgsym_3.10.5-1~deb13u1_arm64.deb 28af87c7ba45f33216173a1f2c6386bf4ca25af3 8272 postfix-lmdb_3.10.5-1~deb13u1_arm64.deb e209f486766d65e3932f9ac2d85e4accc82f8324 13848 postfix-mongodb-dbgsym_3.10.5-1~deb13u1_arm64.deb 24a5d58cafbe0d4e13884a2730bfd9f1e26754ee 6236 postfix-mongodb_3.10.5-1~deb13u1_arm64.deb 6805ed486b07fe2b1436d2a9c2ac2bb12cd2e385 24132 postfix-mysql-dbgsym_3.10.5-1~deb13u1_arm64.deb 00a3937b2a787f70d772c870db01e5166877bc7a 7272 postfix-mysql_3.10.5-1~deb13u1_arm64.deb dd0c89202a7f1fa8e171586096bc010036fd7eca 15104 postfix-pcre-dbgsym_3.10.5-1~deb13u1_arm64.deb 45b58f553b67944674514e82c6cd7c388ebdf26b 7068 postfix-pcre_3.10.5-1~deb13u1_arm64.deb 3139cad43e476baac43fc68437aa78dcceca0754 14156 postfix-pgsql-dbgsym_3.10.5-1~deb13u1_arm64.deb 85b920b11b801e018c96a5839941e0df61def031 6948 postfix-pgsql_3.10.5-1~deb13u1_arm64.deb 2c6f7382636f47bad219cac84304e408d318c931 8504 postfix-sqlite-dbgsym_3.10.5-1~deb13u1_arm64.deb 952c4523833dc2e68977d82a3186848d560ef45c 4980 postfix-sqlite_3.10.5-1~deb13u1_arm64.deb 34ee9a30ec7399f4b3828bb363882a1c6c6921d4 12638 postfix_3.10.5-1~deb13u1_arm64-buildd.buildinfo 2c547e057842a0fe04178b6f5eecab85a7c0fa4e 1543936 postfix_3.10.5-1~deb13u1_arm64.deb Checksums-Sha256: fefb6ea3320fd4629c819f35a1192c5ed843118d7bc35043deaa52602e4b3913 11080 postfix-cdb-dbgsym_3.10.5-1~deb13u1_arm64.deb cf992bb629b5ae72fa817d74825b5345d8adc01e505a1264af21b8fab6e1133f 5192 postfix-cdb_3.10.5-1~deb13u1_arm64.deb c6c1bcf1941dcdba02b3536663a84c9d413793565aa24ffc0de6a1656f57e7bf 1876736 postfix-dbgsym_3.10.5-1~deb13u1_arm64.deb 8a9305728ccbcaa7f83874b7fa83abbbf705f2c50467baeaa11c7f804d9f0221 22732 postfix-ldap-dbgsym_3.10.5-1~deb13u1_arm64.deb 42156b4c00997ed4d1788a3d3473a0a024e05d3af3e34f3d228e10b08a9228c3 12068 postfix-ldap_3.10.5-1~deb13u1_arm64.deb 5fcc0d29c6bbb0081fc57e42302d0741626920fd5dcf8fb24dcbb80affefe056 18488 postfix-lmdb-dbgsym_3.10.5-1~deb13u1_arm64.deb 4a0710f18b2728022569ab002e543bf63fdc0455e659b485f148b762d34425f4 8272 postfix-lmdb_3.10.5-1~deb13u1_arm64.deb 64fff98b8b81799273c29201b659a1472c2748d1b62bf2b0e5dca9a06e7bd3af 13848 postfix-mongodb-dbgsym_3.10.5-1~deb13u1_arm64.deb ce4234a6abe7769efb92716e7feccea2a55e70c45e5cf6f0294afdbd0d285b87 6236 postfix-mongodb_3.10.5-1~deb13u1_arm64.deb 7d5bd9488221e8f655a4e4d889d04cc5a51014e48d8662b2a9582c3bbe015e40 24132 postfix-mysql-dbgsym_3.10.5-1~deb13u1_arm64.deb d677963b195aa1d45556d4628bba9411749bb0168479766f0933edf876682834 7272 postfix-mysql_3.10.5-1~deb13u1_arm64.deb 4cdebfb6a87d96dd2fbf76ebb1ad70a16069f23d3e9f2b7eff43b10469ae4da4 15104 postfix-pcre-dbgsym_3.10.5-1~deb13u1_arm64.deb 77994956bcf2bc089f600436c94506cfeb5ce87fa9dc2eaf04bac93a398ccd44 7068 postfix-pcre_3.10.5-1~deb13u1_arm64.deb 34e18a016cd20a435df66b3a03c6338f60d6a22a54b607e60a3ce3eec96deb54 14156 postfix-pgsql-dbgsym_3.10.5-1~deb13u1_arm64.deb a16152bb5f24e0ee6b8b25bba881295035010f9d2c62133cf3233516744274d0 6948 postfix-pgsql_3.10.5-1~deb13u1_arm64.deb a39c565b43a5aeeaa9bc7c269f6b4349183fddefa0cd0b3e89c7a088cc74be9b 8504 postfix-sqlite-dbgsym_3.10.5-1~deb13u1_arm64.deb 2311bd930b48c2e2104e0ba8fe463d562c4763f36d28a992a350cc91592dba3f 4980 postfix-sqlite_3.10.5-1~deb13u1_arm64.deb 75aff8ce87c56d65972d98ddcdcc64264e646d1e585dde798daab3522e2dc972 12638 postfix_3.10.5-1~deb13u1_arm64-buildd.buildinfo 468cafacd3ec2a916a50a01b065855c07ccde2dfd9a07a196a8898d3fe2acee2 1543936 postfix_3.10.5-1~deb13u1_arm64.deb Files: f5354138e1e3d0abf0cbed645b3407de 11080 debug optional postfix-cdb-dbgsym_3.10.5-1~deb13u1_arm64.deb 91ccc06c5cfa9ed974e2a09f47c2caee 5192 mail optional postfix-cdb_3.10.5-1~deb13u1_arm64.deb dbd9667d3c49c42987be2b558dc1e9bc 1876736 debug optional postfix-dbgsym_3.10.5-1~deb13u1_arm64.deb aec22ed73db4eef3139827126f27fd7a 22732 debug optional postfix-ldap-dbgsym_3.10.5-1~deb13u1_arm64.deb 76e79553e82d3fa6e6a3a65db75eaae8 12068 mail optional postfix-ldap_3.10.5-1~deb13u1_arm64.deb 5eda923b08b01cf34c2968958f39fa92 18488 debug optional postfix-lmdb-dbgsym_3.10.5-1~deb13u1_arm64.deb 8474aff19033cda396fd03870bd529cd 8272 mail optional postfix-lmdb_3.10.5-1~deb13u1_arm64.deb e7e8ef16a02370377c791e12b15ccb94 13848 debug optional postfix-mongodb-dbgsym_3.10.5-1~deb13u1_arm64.deb 31f9accf31bb6caabe73a5acc100ec5c 6236 mail optional postfix-mongodb_3.10.5-1~deb13u1_arm64.deb 1cb33806ec6ec07f453f3c473551bf05 24132 debug optional postfix-mysql-dbgsym_3.10.5-1~deb13u1_arm64.deb 181baf759249a62adadc16b6085435a8 7272 mail optional postfix-mysql_3.10.5-1~deb13u1_arm64.deb 981597ccfc476f34e4d8db6df3f13223 15104 debug optional postfix-pcre-dbgsym_3.10.5-1~deb13u1_arm64.deb 13d9162159c2773b4d1b8b7e253a9803 7068 mail optional postfix-pcre_3.10.5-1~deb13u1_arm64.deb f0db7a0b153906d0397fa4fd85fcf3d5 14156 debug optional postfix-pgsql-dbgsym_3.10.5-1~deb13u1_arm64.deb dd428aab07947aa416b903657133ec0a 6948 mail optional postfix-pgsql_3.10.5-1~deb13u1_arm64.deb 0c2b9cf0de82f588c826745c8b329f95 8504 debug optional postfix-sqlite-dbgsym_3.10.5-1~deb13u1_arm64.deb a607e901bc281fb47a816719766ccf60 4980 mail optional postfix-sqlite_3.10.5-1~deb13u1_arm64.deb 7944ed2a7aeba0c041de2e81759721cb 12638 mail optional postfix_3.10.5-1~deb13u1_arm64-buildd.buildinfo 9db0eabc8f6145316439be978a7590ab 1543936 mail optional postfix_3.10.5-1~deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYxmcRLDHP0tCCM0oScpU3dYulLgFAmkGSvUACgkQScpU3dYu lLg96g//abiHmrX56F9zOSBXmvcltOG4aeSxVI11r91xv9HfCKTg1umoxG6vzp80 xwVkBfJPlK9l7FqQ2thuaq1YXbAyu9sNl6huMU/PzFMiMLRedjiv7LLJht2l0EW9 Au9QmY/ogjKTsZYeto8Q6VKtAaTZ6aEHocIYlo7jE9bb+DyqkO4FTm3eD9IiqZdf cn7nDUPyRvltkpNfdGj1uIBuoEYrZrIeq1o1KBLf6BnUGLhI+as9jSvlnO/Q1jBO d0yJiAUqlHMDMgW+xfk9w/xADwIwbXnkOTa1SZaMaZU/qatXpx/wVz9dQesZfWrJ KSXpqIAgC7l95122bdpEo7cVpMdosdQ1lqNUuLrPrrANs8qazfOWo8RohzgVUbB3 aOrZUtzBLbF/FVHYPFIJ1hDWHtWuXQmL3LLQGykyS7CysmYgAucX0jpSxdSWxDM0 T/Gey02EWOy3rPKbVlKvix81vR6Yg4ufHh5ccsUbrYDyW7Ujx3pXZ5UpsRQtUO6J zJ0aJk7lzp1RpSMcwIu9X9oXVr31RgPpM5bJie3Pu8ZAy5mULrcZ31lgLcpgIEKf aQoSE2JenjD9tI2myqi5lBufMl2GeiR1JeQ7rxbEAsvTyNmgQfcBhzC6k5FBcZeT X+5El58DpS9hpxjFIplbY6M6jwN3b1tzCD4AgrQyB7owXjaw49g= =vvFJ -----END PGP SIGNATURE-----