-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 09 Mar 2024 10:38:51 -0500 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: mips64el Version: 3.5.25-0+deb11u1 Distribution: bullseye Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Scott Kitterman Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Changes: postfix (3.5.25-0+deb11u1) bullseye; urgency=medium . [Wietse Venema] . * 3.5.25 - Bugfix (defect introduced: Postfix 2.3, date 20051222): the Dovecot auth client did not reset the 'reason' from a previous Dovecot auth service response, before parsing the next Dovecot auth server response in the same SMTP session. Reported by Stephan Bosch, File: xsasl/xsasl_dovecot_server.c. - Cleanup: Postfix SMTP server response with an empty authentication failure reason. File: smtpd/smtpd_sasl_glue.c. - Bugfix (defect introduced: Postfix 3.1, date: 20151128): "postqueue -j" produced broken JSON when escaping a control character as \uXXXX. Found during code maintenance. File: postqueue/showq_json.c. - Cleanup: posttls-finger certificate match expectations for all TLS security levels, including warnings for levels that don't implement certificate matching. Viktor Dukhovni. File: posttls-finger.c. - Bugfix (defect introduced: Postfix 2.3): after prepending a message header with a Postfix access table PREPEND action, a Milter request to delete or update an existing header could have no effect, or it could target the wrong instance of an existing header. Root cause: the fix dated 20141018 for the Postfix Milter client was incomplete. The client did correctly hide the first, Postfix-generated, Received: header when sending message header information to a Milter with the smfi_header() application callback function, but it was still hiding the first header (instead of the first Received: header) when handling requests from a Milter to delete or update an existing header. Problem report by Carlos Velasco. This change was verified to have no effect on requests from a Milter to add or insert a header. File: cleanup/cleanup_milter.c. - Workaround: tlsmgr logfile spam. Some OS lies under load: it says that a socket is readable, then it says that the socket has unread data, and then it says that read returns EOF, causing Postfix to spam the log with a warning message. File: tlsmgr/tlsmgr.c. - Bugfix (defect introduced: Postfix 3.4): the SMTP server's BDAT command handler could be tricked to read $message_size_limit bytes into memory. Found during code maintenance. File: smtpd/smtpd.c. - Performance: eliminate worst-case behavior where the queue manager defers delivery to all destinations over a specific delivery transport, after only a single delivery agent failure. The scheduler now throttles one destination, and allows deliveries to other destinations to keep making progress. Files: *qmgr/qmgr_deliver.c. - Safety: drop and log over-size DNS responses resulting in more than 100 records. This 20x larger than the number of server addresses that the Postfix SMTP client is willing to consider when delivering mail, and is well below the number of records that could cause a tail recursion crash in dns_rr_append() as reported by Toshifumi Sakaguchi. This also limits the number of DNS requests from check_*_*_access restrictions. Files: dns/dns.h, dns/dns_lookup.c, dns/dns_rr.c, dns/test_dns_lookup.c, posttls-finger/posttls-finger.c, smtp/smtp_addr.c, smtpd/smtpd_check.c. Checksums-Sha1: 212d488f11f6263c09b6a4841a47284cf6653530 10720 postfix-cdb-dbgsym_3.5.25-0+deb11u1_mips64el.deb b0b8399067edfd5a01f09016838b59fb7914cb68 364572 postfix-cdb_3.5.25-0+deb11u1_mips64el.deb d9d8c2a27be6ddb5300ddcc225d2af19540df9f8 2217020 postfix-dbgsym_3.5.25-0+deb11u1_mips64el.deb 197e29291f4ea837995be6347886a34d416d14ea 22952 postfix-ldap-dbgsym_3.5.25-0+deb11u1_mips64el.deb 4acb819da6789486b087383e9c79eaaa2ee54af4 381736 postfix-ldap_3.5.25-0+deb11u1_mips64el.deb 4e2ff4101f6812153b4f5c718b5232a01e4d8e43 19484 postfix-lmdb-dbgsym_3.5.25-0+deb11u1_mips64el.deb 974238ba1731878fc47e8d840e5acf2444ecef88 370260 postfix-lmdb_3.5.25-0+deb11u1_mips64el.deb cca91d4e1afbc0fe9746857aa112b44864cb0e36 24360 postfix-mysql-dbgsym_3.5.25-0+deb11u1_mips64el.deb 45c79f877e092614234f0b9cead819a240f60974 371992 postfix-mysql_3.5.25-0+deb11u1_mips64el.deb bc742465ae352895e303f352d164aa348615a783 15076 postfix-pcre-dbgsym_3.5.25-0+deb11u1_mips64el.deb 3d5a51ed60ecccf69b5f87d4198a13711dce066b 370232 postfix-pcre_3.5.25-0+deb11u1_mips64el.deb 614fdee56258bd5063944278e578d38acb2388ad 14084 postfix-pgsql-dbgsym_3.5.25-0+deb11u1_mips64el.deb 733804144453fc1b626504cc973095dcd7d63452 370864 postfix-pgsql_3.5.25-0+deb11u1_mips64el.deb e2ca9a7fb1d690411ceb9f5f9d4bb1f4406df779 8184 postfix-sqlite-dbgsym_3.5.25-0+deb11u1_mips64el.deb 769049cb9c084c5fb0cce9da19ba0319837ff47a 367936 postfix-sqlite_3.5.25-0+deb11u1_mips64el.deb e4231f56ed8f2d5ea6f05f08f94e305363dcf8ac 12173 postfix_3.5.25-0+deb11u1_mips64el-buildd.buildinfo 18d7d8709d57c3bf4f4b6a61e3ac9cde04b0fce0 1494648 postfix_3.5.25-0+deb11u1_mips64el.deb Checksums-Sha256: 1a2d7e3413adcf18f5a0f6b05024e50fd890e00ba23dd1e6668d0f6c06bc13e4 10720 postfix-cdb-dbgsym_3.5.25-0+deb11u1_mips64el.deb e4519c621400542c022b56306750858c5fee7b019b4362f1c6a77139f1d5e24d 364572 postfix-cdb_3.5.25-0+deb11u1_mips64el.deb 6b6570851bf4b97503aa3a2bc6cf84eb2258d1714b72dd15eb688a8c542f7097 2217020 postfix-dbgsym_3.5.25-0+deb11u1_mips64el.deb bdd75fbbefe8647e32c2b98aca98ed65da99030db7d13ce3b9931f954f509480 22952 postfix-ldap-dbgsym_3.5.25-0+deb11u1_mips64el.deb a64bca13aea2398b598d312b97da96bdebf3a35b0991370513548ff8c7717a69 381736 postfix-ldap_3.5.25-0+deb11u1_mips64el.deb 517a045ff59f41aef9c97a3f08b28ecbfaa032a30d88db000b2c0451eedd67c6 19484 postfix-lmdb-dbgsym_3.5.25-0+deb11u1_mips64el.deb 8227d1ae1a69d0d8a78499bb3fbc74b2d8066a22890678936fc84a2f1ef843c6 370260 postfix-lmdb_3.5.25-0+deb11u1_mips64el.deb 7dd043010f2a590936a66b5f99e29a1531e6c919787669bbf0bcecbaba7456ec 24360 postfix-mysql-dbgsym_3.5.25-0+deb11u1_mips64el.deb 4998a7f659014c7b67deb8c319b04dbdd7f2a7fce728920fba3d2b3590b92fcf 371992 postfix-mysql_3.5.25-0+deb11u1_mips64el.deb 6ca1564560706246c5314dd4d1d8f56d5c72ce6a5f7a01d25206182eb2cbb754 15076 postfix-pcre-dbgsym_3.5.25-0+deb11u1_mips64el.deb 7998f2eb6a8c955ed0df2fda2ecbdaf9abdbf24e73516eb9b5f574e09ff9bf71 370232 postfix-pcre_3.5.25-0+deb11u1_mips64el.deb d023ee75dc4a1cce200087a6ee13b885708279d6e30136705f7b915c3f802c24 14084 postfix-pgsql-dbgsym_3.5.25-0+deb11u1_mips64el.deb a26f75d58b21d4d6c896a92349c3b7aa4667edb1e88e6945039b425b2707846c 370864 postfix-pgsql_3.5.25-0+deb11u1_mips64el.deb 471eec296237455ec3851affd3699d0d52339bf6a752616fdaa6be3ba7d31fd0 8184 postfix-sqlite-dbgsym_3.5.25-0+deb11u1_mips64el.deb 180bb2d0016c40043f1763386f704173c7bdfcf11f29973334b5ef1ab823bce5 367936 postfix-sqlite_3.5.25-0+deb11u1_mips64el.deb 6120bc21917fc7655ba1d15c1929de869650cb25ddaa2fa3b4ef799d80a8b927 12173 postfix_3.5.25-0+deb11u1_mips64el-buildd.buildinfo 0bf30ff485689636503509dc53b6409509329f4391837932a35f94ea703d3235 1494648 postfix_3.5.25-0+deb11u1_mips64el.deb Files: cb241cca947c1a5bef89043595d60ae4 10720 debug optional postfix-cdb-dbgsym_3.5.25-0+deb11u1_mips64el.deb 061bcf8d9a8889adc72a2eeeaa43a4e5 364572 mail optional postfix-cdb_3.5.25-0+deb11u1_mips64el.deb 2050e846e2918e81725e5bd96486173b 2217020 debug optional postfix-dbgsym_3.5.25-0+deb11u1_mips64el.deb a5e7f0a707e0ef6bee639ed57d6f4a61 22952 debug optional postfix-ldap-dbgsym_3.5.25-0+deb11u1_mips64el.deb cea47b95a4fada2730fc5fa64dd2e34f 381736 mail optional postfix-ldap_3.5.25-0+deb11u1_mips64el.deb affcc925daf53c53dcc9ffd8ba7bfc85 19484 debug optional postfix-lmdb-dbgsym_3.5.25-0+deb11u1_mips64el.deb 35a047393330c2fade488ce0fa883bd2 370260 mail optional postfix-lmdb_3.5.25-0+deb11u1_mips64el.deb 6e7b019d05a38e09b0860a01ed88ad22 24360 debug optional postfix-mysql-dbgsym_3.5.25-0+deb11u1_mips64el.deb 9ce49b00ab6549f0da019ea1871b6b88 371992 mail optional postfix-mysql_3.5.25-0+deb11u1_mips64el.deb 644f05853ec27aee8d43c2445fb4f027 15076 debug optional postfix-pcre-dbgsym_3.5.25-0+deb11u1_mips64el.deb 3b5cda68cd9ef230b911101af22adb0c 370232 mail optional postfix-pcre_3.5.25-0+deb11u1_mips64el.deb e24da5ebbedcede4f9508c84cf09ed7b 14084 debug optional postfix-pgsql-dbgsym_3.5.25-0+deb11u1_mips64el.deb 8376d93e3c719a2a485699573071e400 370864 mail optional postfix-pgsql_3.5.25-0+deb11u1_mips64el.deb 5250474717e5adae973e1fccfd049709 8184 debug optional postfix-sqlite-dbgsym_3.5.25-0+deb11u1_mips64el.deb e57fb0ca78898c948f539a77577515ae 367936 mail optional postfix-sqlite_3.5.25-0+deb11u1_mips64el.deb cd05b935544651657124d113a91ebd93 12173 mail optional postfix_3.5.25-0+deb11u1_mips64el-buildd.buildinfo 750698705b801a82cd12762e27e7e41d 1494648 mail optional postfix_3.5.25-0+deb11u1_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEunmvxaaGKuI+hxxClmZGXOM83t8FAmYm0QgACgkQlmZGXOM8 3t9aVQ//eIMnAAKpvGXdwxN6Zzo36lXKcHJeuOASaSJR8TiPBKpEtrXhmAitx+nr 2ktW8zfl5IiUFVy1WILvQEjArfNdkhAcJKw98QWmlDnLfuwPhJFcVD6DuRMwxKFh uKhRPzWhn2157UoRTBoV6UGbkGEtu/mgznhHxVjJhaz+3LHgohDbM5HzH03/TEXD PGcD4sMbRBZzScF2op+fp37iDSqK8RRk42De90qSXvNom6fpJA9CBiDyvR7HuMtS N9mQbua5f7RF/Dgs1eiwql+KDUn+6vAd/ONWbzcUtbA/M7sYZ9n306O0Hmhu49wb fm9zpBa4MpWM93xSXVhIC2pFWkTWZ70HNiEycaR5wORoqVSWYmsqW9pmj4t0Abps o999PlhQ4/mxBctcq98atTeC5bn0h9rnou7Nk0yaREnN9OFDD9JDdEsLpGa7l1v1 7K74qEMzEaUKEZYMP0vVzj7W9Qk10WboSmpOKkGaZ2f7dSTJmtaOFoGdTYLPJOGT 2Dw16I7dvQwT5ddqthVQd+1mA133lEFIx92jCRn02tVHz4YqWVPRerm6wzGLHF6y nn+JDUIK0RtjHrK5LKMRbrwG/lO/kgC0dpbn2H1avBMUYT2j7cv5SVYqvmQiePVW Uv1GpUSmIXa4ox3TPEMtE8gfROXcCicwIt59D20yjzK9zzjAqZo= =RHjx -----END PGP SIGNATURE-----