-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 06 Mar 2024 10:10:14 -0500 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: mipsel Version: 3.7.11-0+deb12u1 Distribution: bookworm Urgency: medium Maintainer: mips64el Build Daemon (mipsel-osuosl-01) Changed-By: Scott Kitterman Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Changes: postfix (3.7.11-0+deb12u1) bookworm; urgency=medium . [Wietse Venema] . * 3.7.11 - Bugfix (defect introduced: Postfix 2.3, date 20051222): the Dovecot auth client did not reset the 'reason' from a previous Dovecot auth service response, before parsing the next Dovecot auth server response in the same SMTP session. Reported by Stephan Bosch, File: xsasl/xsasl_dovecot_server.c. - Cleanup: Postfix SMTP server response with an empty authentication failure reason. File: smtpd/smtpd_sasl_glue.c. - Bugfix (defect introduced: Postfix 3.1, date: 20151128): "postqueue -j" produced broken JSON when escaping a control character as \uXXXX. Found during code maintenance. File: postqueue/showq_json.c. - Cleanup: posttls-finger certificate match expectations for all TLS security levels, including warnings for levels that don't implement certificate matching. Viktor Dukhovni. File: posttls-finger.c. - Bugfix (defect introduced: Postfix 2.3): after prepending a message header with a Postfix access table PREPEND action, a Milter request to delete or update an existing header could have no effect, or it could target the wrong instance of an existing header. Root cause: the fix dated 20141018 for the Postfix Milter client was incomplete. The client did correctly hide the first, Postfix-generated, Received: header when sending message header information to a Milter with the smfi_header() application callback function, but it was still hiding the first header (instead of the first Received: header) when handling requests from a Milter to delete or update an existing header. Problem report by Carlos Velasco. This change was verified to have no effect on requests from a Milter to add or insert a header. File: cleanup/cleanup_milter.c. - Workaround: tlsmgr logfile spam. Some OS lies under load: it says that a socket is readable, then it says that the socket has unread data, and then it says that read returns EOF, causing Postfix to spam the log with a warning message. File: tlsmgr/tlsmgr.c. - Bugfix (defect introduced: Postfix 3.4): the SMTP server's BDAT command handler could be tricked to read $message_size_limit bytes into memory. Found during code maintenance. File: smtpd/smtpd.c. - Performance: eliminate worst-case behavior where the queue manager defers delivery to all destinations over a specific delivery transport, after only a single delivery agent failure. The scheduler now throttles one destination, and allows deliveries to other destinations to keep making progress. Files: *qmgr/qmgr_deliver.c. - Safety: drop and log over-size DNS responses resulting in more than 100 records. This 20x larger than the number of server addresses that the Postfix SMTP client is willing to consider when delivering mail, and is well below the number of records that could cause a tail recursion crash in dns_rr_append() as reported by Toshifumi Sakaguchi. This also limits the number of DNS requests from check_*_*_access restrictions. Files: dns/dns.h, dns/dns_lookup.c, dns/dns_rr.c, dns/test_dns_lookup.c, posttls-finger/posttls-finger.c, smtp/smtp_addr.c, smtpd/smtpd_check.c. Checksums-Sha1: e4ee65dc11868bb797944c4e72d3e2eb28c17158 11080 postfix-cdb-dbgsym_3.7.11-0+deb12u1_mipsel.deb 465d014452e33f2e50589f6310af57348e5e2ded 333728 postfix-cdb_3.7.11-0+deb12u1_mipsel.deb e7302270ac4485eb2a3c5cf5d4f0a5095c05eb85 1827596 postfix-dbgsym_3.7.11-0+deb12u1_mipsel.deb 260ef5d1dc32f99b679c8a2c7a2e29122414c645 22832 postfix-ldap-dbgsym_3.7.11-0+deb12u1_mipsel.deb 0c54c65892976605c0eb41248966d16aa6593a88 350108 postfix-ldap_3.7.11-0+deb12u1_mipsel.deb 1e4f5796adb01ac2cbfade6f4395b84c4a767e64 19356 postfix-lmdb-dbgsym_3.7.11-0+deb12u1_mipsel.deb 2747fa07897ece852934a8490b8d86fbdd93802a 338668 postfix-lmdb_3.7.11-0+deb12u1_mipsel.deb 435faada6fa057be62c6060eb2f1104478827ee9 23984 postfix-mysql-dbgsym_3.7.11-0+deb12u1_mipsel.deb f6233a00f49bbac92b1d3ddc51ad20d2d34b15b3 341148 postfix-mysql_3.7.11-0+deb12u1_mipsel.deb 9d36cc64963dfc1d15770e4ab021a7df28a38279 15272 postfix-pcre-dbgsym_3.7.11-0+deb12u1_mipsel.deb 499b395c0b2dbb36d0ef5c42d6faa87e4f35d77c 339548 postfix-pcre_3.7.11-0+deb12u1_mipsel.deb 55778ac5ff349513a2df9622cd9b8555439a6a51 14312 postfix-pgsql-dbgsym_3.7.11-0+deb12u1_mipsel.deb 3ffc8cd1902fb7b0b3f903cd5e1f4d68c04bdc84 340040 postfix-pgsql_3.7.11-0+deb12u1_mipsel.deb c46440ba49281356a739bb25fb9c9e259fa22e00 8592 postfix-sqlite-dbgsym_3.7.11-0+deb12u1_mipsel.deb e4bc28ecb09e5cd87bb3e2dc388e50b710d56618 337164 postfix-sqlite_3.7.11-0+deb12u1_mipsel.deb f61e2d535aafc7c2b8c2f17142f780ee3816cde4 11612 postfix_3.7.11-0+deb12u1_mipsel-buildd.buildinfo 96521600d10e0d07b132ae1d1d194d42f021a264 1421964 postfix_3.7.11-0+deb12u1_mipsel.deb Checksums-Sha256: 42d365778ab4e52e4848af7ea000bda6c0a99899661c85c48155e78f49cbb247 11080 postfix-cdb-dbgsym_3.7.11-0+deb12u1_mipsel.deb 3382e8b7e81efd62d4db79fe5c6ac28a72bdf09298642943f5716b400564e64e 333728 postfix-cdb_3.7.11-0+deb12u1_mipsel.deb 81b04d25efe2b82e03aef407b35181f718734b83836b16a032b1c264acc7a373 1827596 postfix-dbgsym_3.7.11-0+deb12u1_mipsel.deb 7e68e57315e189ae800d5076ba773be2f29ba39e7979e7706f3d52659ca5d8f7 22832 postfix-ldap-dbgsym_3.7.11-0+deb12u1_mipsel.deb 88fbff74330bce0faa9086aae3d502e9540c7b6404410f4ba0438d45e3e79dba 350108 postfix-ldap_3.7.11-0+deb12u1_mipsel.deb b5ef607550155c591c3b20e47c8360f000e6439210d384d089397d3e0a8f71cf 19356 postfix-lmdb-dbgsym_3.7.11-0+deb12u1_mipsel.deb ad4a765d92fdb2f8d9fb2d7cacd0a0152a603153ea418beeccb1f3d831151d76 338668 postfix-lmdb_3.7.11-0+deb12u1_mipsel.deb 28c55f4c22bc3c49a03aa036e0926d238a3224d4a9fa9d9fab42e8a16f51240d 23984 postfix-mysql-dbgsym_3.7.11-0+deb12u1_mipsel.deb 8cb9c0a47cfca02643b63e31c9e271c9d84b1c694663dca156fcfa61b55e2cda 341148 postfix-mysql_3.7.11-0+deb12u1_mipsel.deb c4ec7554f4c6f587d66f1ec69759b94da865172756d8013451df1c231aeef86b 15272 postfix-pcre-dbgsym_3.7.11-0+deb12u1_mipsel.deb 4ca9458572e040aafae7ef821c70de874a686a4bdfbe2300e5284ab08836eef3 339548 postfix-pcre_3.7.11-0+deb12u1_mipsel.deb a56354c1f12dade33be448a1fc4848ac2fc678d8a5e3c7a9327fa368cd4fdc43 14312 postfix-pgsql-dbgsym_3.7.11-0+deb12u1_mipsel.deb 145a66c424668702781210776283b2dfdee8aab22741757e3712ea90aaf0625f 340040 postfix-pgsql_3.7.11-0+deb12u1_mipsel.deb 024d82f866f3e5e0f23152b6a74715c27fa3d5b4a0334ebeab5b1ebe1100368e 8592 postfix-sqlite-dbgsym_3.7.11-0+deb12u1_mipsel.deb fed1fa5594c108661f01c4d393c90353ef6947752ccaabaac9ce4ecded1dac52 337164 postfix-sqlite_3.7.11-0+deb12u1_mipsel.deb f1a815ba962f6d8b569c1f7ceaddf0cdcd7f91697886f8b7b262c4cbc3da06d7 11612 postfix_3.7.11-0+deb12u1_mipsel-buildd.buildinfo a50e5c33a31a6ca9b37fecd7fca61033abba453ed7702b74d1383d70d34b7182 1421964 postfix_3.7.11-0+deb12u1_mipsel.deb Files: 9f423bd0c228378aade47245a45d64e2 11080 debug optional postfix-cdb-dbgsym_3.7.11-0+deb12u1_mipsel.deb e4f238f49cd4a57410cb1e17954e408d 333728 mail optional postfix-cdb_3.7.11-0+deb12u1_mipsel.deb 636e6c7ae86b08cb198ea12ed1ca641c 1827596 debug optional postfix-dbgsym_3.7.11-0+deb12u1_mipsel.deb 0d465973057c8d8e74120ee2795cb6e9 22832 debug optional postfix-ldap-dbgsym_3.7.11-0+deb12u1_mipsel.deb 0445152ddca60352e0d4385fa3ad5e0b 350108 mail optional postfix-ldap_3.7.11-0+deb12u1_mipsel.deb 98c8a38d430ec947024c387bb5ed3d66 19356 debug optional postfix-lmdb-dbgsym_3.7.11-0+deb12u1_mipsel.deb 9622c91a44d3d96ac80b524e9701b6b2 338668 mail optional postfix-lmdb_3.7.11-0+deb12u1_mipsel.deb 3215b5c6617d5718e4918cf41065cb0a 23984 debug optional postfix-mysql-dbgsym_3.7.11-0+deb12u1_mipsel.deb eb0b7ada7c511baae534947c71cfe6e7 341148 mail optional postfix-mysql_3.7.11-0+deb12u1_mipsel.deb fec608b92e999d0489c101db3b74dcd8 15272 debug optional postfix-pcre-dbgsym_3.7.11-0+deb12u1_mipsel.deb f9aafa6549b8b386b5e46657f5fe632d 339548 mail optional postfix-pcre_3.7.11-0+deb12u1_mipsel.deb af1cbe7816ea473904e3055afffe01ad 14312 debug optional postfix-pgsql-dbgsym_3.7.11-0+deb12u1_mipsel.deb 95b67163a20d663d4a7b099bc1f9fea4 340040 mail optional postfix-pgsql_3.7.11-0+deb12u1_mipsel.deb c5af708509b741f8fb6a97376a2a7490 8592 debug optional postfix-sqlite-dbgsym_3.7.11-0+deb12u1_mipsel.deb 67b064430c29a232f78c78c0be75f7d0 337164 mail optional postfix-sqlite_3.7.11-0+deb12u1_mipsel.deb 1671e583dfcc72962b6e91d74ee42e9d 11612 mail optional postfix_3.7.11-0+deb12u1_mipsel-buildd.buildinfo f443acb3d9c4621b83d997878af06321 1421964 mail optional postfix_3.7.11-0+deb12u1_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERCYbPUzzGtvq4mlq066AbFDPUlEFAmYArzsACgkQ066AbFDP UlF/zxAAjTkxUph5V/6RXEjdgdbUttANEoLu61MertU7ApAHMViKREfB0RKgxDIa Ki9Eh+adFbFinAFTKDdqNkkK2hjJJF3ll43Qy/f6A7H8Fyh0dtRFdQE3ClvoGNEr LH/rQQOWMg7xVAKK0jO1ZeFah8f003thCwBA4RCVMxiD4Wype6nBiJAJhaATz4Q1 09qe7J6ixAjCZJeIfMjv/RLNOZ/g7M8nQgaLbCYltzkZSxE94w72J08NJ2HMCBdC vvCEOAzoykZb8pKPjVqmQyanUpTGYDiMuHKyfcRx5uCLlSVv1rl6o37vs0xyLSOL u2hy1HUKdD02dpyPK79NAvk27la4xLXJVX7d2IoN8Q/GXGPpYMT7GVINkzChi+xJ IM1xp80jxYeP0e1jQFdtBmdS2FS3o/yt/IaSeyawQdMpfjaeOqw+nS/CqzENoj2M p/4pTfdqlSszwLYyyd4CzaPOsNv+OrEGXLSX8iOguZBIPs9owui/SVAjWJdvbEyp Yj2fm5pkLCfWPQQ1IOApQnHOulyN772Ql89V/pxWqkj9Fc+xbpXbcS7j79REylBA WfotU+66vl9jmiS9Rdv/8Cca3FCXiTlBszm41+5N3F5c2fezdX2U+e4BX//119zd 6YUDR+a/Qe1OJZGCIct0mxHclUV8RdK23mKRVkFmCG1pAFxxwaM= =stHO -----END PGP SIGNATURE-----