-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 06 Mar 2024 10:10:14 -0500 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: mips64el Version: 3.7.11-0+deb12u1 Distribution: bookworm Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-04) Changed-By: Scott Kitterman Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Changes: postfix (3.7.11-0+deb12u1) bookworm; urgency=medium . [Wietse Venema] . * 3.7.11 - Bugfix (defect introduced: Postfix 2.3, date 20051222): the Dovecot auth client did not reset the 'reason' from a previous Dovecot auth service response, before parsing the next Dovecot auth server response in the same SMTP session. Reported by Stephan Bosch, File: xsasl/xsasl_dovecot_server.c. - Cleanup: Postfix SMTP server response with an empty authentication failure reason. File: smtpd/smtpd_sasl_glue.c. - Bugfix (defect introduced: Postfix 3.1, date: 20151128): "postqueue -j" produced broken JSON when escaping a control character as \uXXXX. Found during code maintenance. File: postqueue/showq_json.c. - Cleanup: posttls-finger certificate match expectations for all TLS security levels, including warnings for levels that don't implement certificate matching. Viktor Dukhovni. File: posttls-finger.c. - Bugfix (defect introduced: Postfix 2.3): after prepending a message header with a Postfix access table PREPEND action, a Milter request to delete or update an existing header could have no effect, or it could target the wrong instance of an existing header. Root cause: the fix dated 20141018 for the Postfix Milter client was incomplete. The client did correctly hide the first, Postfix-generated, Received: header when sending message header information to a Milter with the smfi_header() application callback function, but it was still hiding the first header (instead of the first Received: header) when handling requests from a Milter to delete or update an existing header. Problem report by Carlos Velasco. This change was verified to have no effect on requests from a Milter to add or insert a header. File: cleanup/cleanup_milter.c. - Workaround: tlsmgr logfile spam. Some OS lies under load: it says that a socket is readable, then it says that the socket has unread data, and then it says that read returns EOF, causing Postfix to spam the log with a warning message. File: tlsmgr/tlsmgr.c. - Bugfix (defect introduced: Postfix 3.4): the SMTP server's BDAT command handler could be tricked to read $message_size_limit bytes into memory. Found during code maintenance. File: smtpd/smtpd.c. - Performance: eliminate worst-case behavior where the queue manager defers delivery to all destinations over a specific delivery transport, after only a single delivery agent failure. The scheduler now throttles one destination, and allows deliveries to other destinations to keep making progress. Files: *qmgr/qmgr_deliver.c. - Safety: drop and log over-size DNS responses resulting in more than 100 records. This 20x larger than the number of server addresses that the Postfix SMTP client is willing to consider when delivering mail, and is well below the number of records that could cause a tail recursion crash in dns_rr_append() as reported by Toshifumi Sakaguchi. This also limits the number of DNS requests from check_*_*_access restrictions. Files: dns/dns.h, dns/dns_lookup.c, dns/dns_rr.c, dns/test_dns_lookup.c, posttls-finger/posttls-finger.c, smtp/smtp_addr.c, smtpd/smtpd_check.c. Checksums-Sha1: 6df196f8da263452b810beedb8b28a2cad1b70c7 11380 postfix-cdb-dbgsym_3.7.11-0+deb12u1_mips64el.deb f4863bfe1b55b5791a850dbbc971a2daf991afa8 333780 postfix-cdb_3.7.11-0+deb12u1_mips64el.deb cb5bc42fdcb05d3e19b85495df1a30258084fb45 1895124 postfix-dbgsym_3.7.11-0+deb12u1_mips64el.deb 369f5ab156f7c05bd73f67180474ce6d0c0ae8b6 23768 postfix-ldap-dbgsym_3.7.11-0+deb12u1_mips64el.deb fc72bc749e826221c30c94cba2239a38bfe6eb99 350156 postfix-ldap_3.7.11-0+deb12u1_mips64el.deb 84f5a7f50362ea5d4b2050ca3b241c4c436cb0d5 19932 postfix-lmdb-dbgsym_3.7.11-0+deb12u1_mips64el.deb caf533b7c067d992e8b12d432807b50745e578b9 338824 postfix-lmdb_3.7.11-0+deb12u1_mips64el.deb 68131a23d49bbb1c048e557779c8e4f0b344ce6c 24556 postfix-mysql-dbgsym_3.7.11-0+deb12u1_mips64el.deb bcb36acd8217e444aca101df167089683ea65a59 341280 postfix-mysql_3.7.11-0+deb12u1_mips64el.deb 5d67437dd2dd545aef11ecda20b41cef16311364 15840 postfix-pcre-dbgsym_3.7.11-0+deb12u1_mips64el.deb 47855988763f12e9c34c7b473aa08aadcb7dd38e 339752 postfix-pcre_3.7.11-0+deb12u1_mips64el.deb 7482ecb529a90b2ff19031a2298e083c772cab12 14752 postfix-pgsql-dbgsym_3.7.11-0+deb12u1_mips64el.deb f9a8907d0cd9557a499f88b5914515d1f252006a 340148 postfix-pgsql_3.7.11-0+deb12u1_mips64el.deb a80f01c40f3a66dd4474b35d88eeaaa2bea6fde7 8876 postfix-sqlite-dbgsym_3.7.11-0+deb12u1_mips64el.deb 7eb73ccf2ef6765e5051ca82bc005b7b5985fe85 337300 postfix-sqlite_3.7.11-0+deb12u1_mips64el.deb 6d3f3da86f32481aa0c5078cfe12c9340fe1ff12 11719 postfix_3.7.11-0+deb12u1_mips64el-buildd.buildinfo 603cebfabb7ffbcf6f87e431a2ef4e3cfeb562f1 1417188 postfix_3.7.11-0+deb12u1_mips64el.deb Checksums-Sha256: ab7e74ad2a1c405e3ef16ef108042ca8ae4e8d6f5e54c24d14aeb28d04410dff 11380 postfix-cdb-dbgsym_3.7.11-0+deb12u1_mips64el.deb 208c75b07acaa98d4d9c4002694f218a46fb82d8f2a1d44e4a7062792cf46915 333780 postfix-cdb_3.7.11-0+deb12u1_mips64el.deb 15bf2dd44262b79a731b3bdcd5760daa51210a30392ba614821bf445e9ecd053 1895124 postfix-dbgsym_3.7.11-0+deb12u1_mips64el.deb 887022c83b8bbe45244cc512fbff31831a9793a7c2d2e0aaed96008e8602a357 23768 postfix-ldap-dbgsym_3.7.11-0+deb12u1_mips64el.deb 4c4eb2cc8c3ca0a248d4949305a9ba631252d608e2ed35f301a9a93d3a5d81da 350156 postfix-ldap_3.7.11-0+deb12u1_mips64el.deb 70fed03812cf84b05c75a9ec03715b589d7d370f48e099a50c9b75b18595e313 19932 postfix-lmdb-dbgsym_3.7.11-0+deb12u1_mips64el.deb 9efee0814f6a8b648aa05939b700a17c72259cc47e3b15c160581d6015c07a38 338824 postfix-lmdb_3.7.11-0+deb12u1_mips64el.deb cd2b2a843d23c75a8106ead7278c98be9121e964d7f5219bd9fb61935355e69a 24556 postfix-mysql-dbgsym_3.7.11-0+deb12u1_mips64el.deb 55cf67015ef100f3bf8818995ec3ff6a38b597b876072bb833526c4b64c13357 341280 postfix-mysql_3.7.11-0+deb12u1_mips64el.deb 84fd7e8a8e5c81a9e67bd746b49bfe000aedcee0741b34f3ea711bf018519520 15840 postfix-pcre-dbgsym_3.7.11-0+deb12u1_mips64el.deb fe2c57aa4cec183e97b72764371f037b67170bdff392d80c9e76f8f18a5ff169 339752 postfix-pcre_3.7.11-0+deb12u1_mips64el.deb c0b0d106fa15b40922a17cddf00c816d9217908f54e0c6cda57a6057ac21fd8a 14752 postfix-pgsql-dbgsym_3.7.11-0+deb12u1_mips64el.deb 793359897fe69440001bf3a1e1639b506749ce438428ea2a65ecc2af8ac613e5 340148 postfix-pgsql_3.7.11-0+deb12u1_mips64el.deb 6c6a064bd10b49a5d6551cf9182be7d63cb44813a0e7d8697343b1b294237644 8876 postfix-sqlite-dbgsym_3.7.11-0+deb12u1_mips64el.deb 8a728978f4c8896075dfe3df4506b7d698a3ab56200c350378ee2c17db64bbad 337300 postfix-sqlite_3.7.11-0+deb12u1_mips64el.deb 111760e1fcd13893f8eaaadbf223ce4cc50be3f14cbcb28f6a70c59d69b58682 11719 postfix_3.7.11-0+deb12u1_mips64el-buildd.buildinfo 497b0e86742f3286f4a050d2f69eff1c60efb6e45c1de5f36020e78894ac1717 1417188 postfix_3.7.11-0+deb12u1_mips64el.deb Files: 88ee40ed0b0b09b8886c8fcadb949502 11380 debug optional postfix-cdb-dbgsym_3.7.11-0+deb12u1_mips64el.deb 3e940d2d52f7f9e25d36a764f9df4e8f 333780 mail optional postfix-cdb_3.7.11-0+deb12u1_mips64el.deb 5e4339280ac962f32ea19273678d1fa1 1895124 debug optional postfix-dbgsym_3.7.11-0+deb12u1_mips64el.deb dfee176e07859b80c771aeb2bcefbcaf 23768 debug optional postfix-ldap-dbgsym_3.7.11-0+deb12u1_mips64el.deb 5e93b4f7fbf08a288764250469bfe6b4 350156 mail optional postfix-ldap_3.7.11-0+deb12u1_mips64el.deb d2e4fbb0e145967ec7d8d6181000a828 19932 debug optional postfix-lmdb-dbgsym_3.7.11-0+deb12u1_mips64el.deb 33fff6732fbb89e8ee55290fb2665f14 338824 mail optional postfix-lmdb_3.7.11-0+deb12u1_mips64el.deb 5d57157d8a8fb4209cdfea63aae34b7b 24556 debug optional postfix-mysql-dbgsym_3.7.11-0+deb12u1_mips64el.deb c58fae593b282c6ed62260d700daae53 341280 mail optional postfix-mysql_3.7.11-0+deb12u1_mips64el.deb d51468586bda9ab868f81497f13fe84c 15840 debug optional postfix-pcre-dbgsym_3.7.11-0+deb12u1_mips64el.deb 5b9db9277110349d62436da0aa78bf50 339752 mail optional postfix-pcre_3.7.11-0+deb12u1_mips64el.deb 9a13e1fef5b6a44bdfa014ab51c89aea 14752 debug optional postfix-pgsql-dbgsym_3.7.11-0+deb12u1_mips64el.deb 7e98d49bee7853b531b244406543e7e5 340148 mail optional postfix-pgsql_3.7.11-0+deb12u1_mips64el.deb 17724b8e400e53ccea2d7dbf77059b75 8876 debug optional postfix-sqlite-dbgsym_3.7.11-0+deb12u1_mips64el.deb c242e4a4800b493a277f9591dea39189 337300 mail optional postfix-sqlite_3.7.11-0+deb12u1_mips64el.deb 4c2a22b576a07dbcdf7ed337947b061c 11719 mail optional postfix_3.7.11-0+deb12u1_mips64el-buildd.buildinfo 6d281ae685feb531af7f66647e670090 1417188 mail optional postfix_3.7.11-0+deb12u1_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEEmZlxOBLdXDBxnwAL00bee7O74EFAmYApJQACgkQL00bee7O 74GxKBAAr/LgHFWGJRLj/fsLBM2meLTF1CLwpLSXxq13htdk/2MUT6iusdE79r7j YWGM1NIfRBVGPUbo9nUz8nSsWyPleQeMlJkiLYyBVGWhJ0SVMNf/WtKpbvIAwZIG NNGPT0wXVyk8veV8OgitO77rS5EXedE38gJoiakkVMHkHPgqxbzr0SG95iUxtVc3 UtW4qgVbhJDh+UfOoNXmIBVCpoT3JUPNNHO4nxIhNa4hUcGn65GX3W1Ov9I8+rvn +5TwlSlmXhV2/p8JlKlX8Egg1Noe/QwOrajFfyDiqElSJSqZk3rB2Jb5A1a+gfGh 8dd45deT/c9muaHWSi72nDvsSlpAf0Nzv6XMhQC93TntmuBk783sSovLy4EHOcbj c9S7wPnVix+6Y2nKy3A4d7w0kSHCuzhDdRxLhFGgfvi4J70KGRJhr0a/xGJwWEi3 K7YeBhqS8IqZpQaulMQFrhqR1zjssyjIjeA0cRSvdcdDtxnngRwOEljrl0UbwLDP nRRZgLzXuw68Vw/SSx82XJqFZD+aKmR3Tx/rcRB+H6mnUhBdhpZBlkmb98Tlvm9R 4NlI+9xP/6WPBSCY+fj1EyiWsQa/CiKyZ7emJ8eZpU7RkAcggfGx9BpNcK31Xbe1 7N8ygvp6hEZ1PvVqmbdI3AIL6j3Ugs/pZ/SvpqyKRztbGEfr2fo= =+JgO -----END PGP SIGNATURE-----