-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 06 Mar 2024 10:10:14 -0500 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: s390x Version: 3.7.11-0+deb12u1 Distribution: bookworm Urgency: medium Maintainer: s390x Build Daemon (zandonai) Changed-By: Scott Kitterman Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Changes: postfix (3.7.11-0+deb12u1) bookworm; urgency=medium . [Wietse Venema] . * 3.7.11 - Bugfix (defect introduced: Postfix 2.3, date 20051222): the Dovecot auth client did not reset the 'reason' from a previous Dovecot auth service response, before parsing the next Dovecot auth server response in the same SMTP session. Reported by Stephan Bosch, File: xsasl/xsasl_dovecot_server.c. - Cleanup: Postfix SMTP server response with an empty authentication failure reason. File: smtpd/smtpd_sasl_glue.c. - Bugfix (defect introduced: Postfix 3.1, date: 20151128): "postqueue -j" produced broken JSON when escaping a control character as \uXXXX. Found during code maintenance. File: postqueue/showq_json.c. - Cleanup: posttls-finger certificate match expectations for all TLS security levels, including warnings for levels that don't implement certificate matching. Viktor Dukhovni. File: posttls-finger.c. - Bugfix (defect introduced: Postfix 2.3): after prepending a message header with a Postfix access table PREPEND action, a Milter request to delete or update an existing header could have no effect, or it could target the wrong instance of an existing header. Root cause: the fix dated 20141018 for the Postfix Milter client was incomplete. The client did correctly hide the first, Postfix-generated, Received: header when sending message header information to a Milter with the smfi_header() application callback function, but it was still hiding the first header (instead of the first Received: header) when handling requests from a Milter to delete or update an existing header. Problem report by Carlos Velasco. This change was verified to have no effect on requests from a Milter to add or insert a header. File: cleanup/cleanup_milter.c. - Workaround: tlsmgr logfile spam. Some OS lies under load: it says that a socket is readable, then it says that the socket has unread data, and then it says that read returns EOF, causing Postfix to spam the log with a warning message. File: tlsmgr/tlsmgr.c. - Bugfix (defect introduced: Postfix 3.4): the SMTP server's BDAT command handler could be tricked to read $message_size_limit bytes into memory. Found during code maintenance. File: smtpd/smtpd.c. - Performance: eliminate worst-case behavior where the queue manager defers delivery to all destinations over a specific delivery transport, after only a single delivery agent failure. The scheduler now throttles one destination, and allows deliveries to other destinations to keep making progress. Files: *qmgr/qmgr_deliver.c. - Safety: drop and log over-size DNS responses resulting in more than 100 records. This 20x larger than the number of server addresses that the Postfix SMTP client is willing to consider when delivering mail, and is well below the number of records that could cause a tail recursion crash in dns_rr_append() as reported by Toshifumi Sakaguchi. This also limits the number of DNS requests from check_*_*_access restrictions. Files: dns/dns.h, dns/dns_lookup.c, dns/dns_rr.c, dns/test_dns_lookup.c, posttls-finger/posttls-finger.c, smtp/smtp_addr.c, smtpd/smtpd_check.c. Checksums-Sha1: 2b555ba52670753cd39f7026bb3fcd67381f8aaa 10476 postfix-cdb-dbgsym_3.7.11-0+deb12u1_s390x.deb b9848eb6dc61ba8a08a1f951a47095ee6caace59 333632 postfix-cdb_3.7.11-0+deb12u1_s390x.deb 81623d444130039463051982bb67ac106cf55364 1768856 postfix-dbgsym_3.7.11-0+deb12u1_s390x.deb ada1f108269e71e0bb963d8f4767e1ec1bbd3c5e 21932 postfix-ldap-dbgsym_3.7.11-0+deb12u1_s390x.deb 365cda936683e34cba7de2dd0a6fd4a203ce7511 350248 postfix-ldap_3.7.11-0+deb12u1_s390x.deb b53c0d95d0f52f69ce441ed010532afcdbe81066 18668 postfix-lmdb-dbgsym_3.7.11-0+deb12u1_s390x.deb 95f56b9d40bc02ec8a69520b32efa30604d8d2b1 338776 postfix-lmdb_3.7.11-0+deb12u1_s390x.deb 0a95ee206d89847a301e2ee3c281b47db93296cc 23156 postfix-mysql-dbgsym_3.7.11-0+deb12u1_s390x.deb 8093251c557a3754481d10fbcb1ab05ead7c63b3 341164 postfix-mysql_3.7.11-0+deb12u1_s390x.deb 3e8c97bb0964ddaa3ed77df4ec8c8d1f83851c27 14576 postfix-pcre-dbgsym_3.7.11-0+deb12u1_s390x.deb 19c6b027a8ded3debcc3b8e104e73c0bea3bb34b 339504 postfix-pcre_3.7.11-0+deb12u1_s390x.deb b54f57b6c625c8dddf9cb034b5aa96132daa2f3b 13552 postfix-pgsql-dbgsym_3.7.11-0+deb12u1_s390x.deb f7397401ecf9998f81f649b567668465e86e9980 339936 postfix-pgsql_3.7.11-0+deb12u1_s390x.deb ae6dcb14db070dab30e12609a2c70d25b5eb8d33 8280 postfix-sqlite-dbgsym_3.7.11-0+deb12u1_s390x.deb c2093e7679fcae66b79adbae536c3d8be151fb93 337128 postfix-sqlite_3.7.11-0+deb12u1_s390x.deb 161eeeaa3c63a05b5a3ab39c9cdf8b1bea1a48e6 11636 postfix_3.7.11-0+deb12u1_s390x-buildd.buildinfo a6c1cc066a0ebb58c7ca4b6880e6dd65532a1d13 1432608 postfix_3.7.11-0+deb12u1_s390x.deb Checksums-Sha256: 9f63c891e4ae3456ef6cad1c6be3665c8c58f93a3f7e1f6076b45cac0cb15db1 10476 postfix-cdb-dbgsym_3.7.11-0+deb12u1_s390x.deb ef03da54c0d734976c0c32f895c5844bb6afc34bfb596552b37d465f1e837ab6 333632 postfix-cdb_3.7.11-0+deb12u1_s390x.deb c190491261ee084ae7b1974e0ad71a271e29bfc1810d6b5ee704bc8518ceb3ee 1768856 postfix-dbgsym_3.7.11-0+deb12u1_s390x.deb e29a7b5e322043b1078d7dc8f6ec0c77d1c9ed530749595761ab4db67e51619a 21932 postfix-ldap-dbgsym_3.7.11-0+deb12u1_s390x.deb f23532bc5d408aa88a4ba37f2df11cbb600be02dd05429d940302ddc2ef8db4d 350248 postfix-ldap_3.7.11-0+deb12u1_s390x.deb a43a156d052265e49439d99b625024cacebc7f3c94b05dff58d3c0bed1690a6e 18668 postfix-lmdb-dbgsym_3.7.11-0+deb12u1_s390x.deb f0f8dbda551d71ba5bae504b19fee9283dcb899650f5106bce1ba8f12f761571 338776 postfix-lmdb_3.7.11-0+deb12u1_s390x.deb d5703872634ba67398d45a0fbb8ab3ee388398da56dc85f233781754e39fdeda 23156 postfix-mysql-dbgsym_3.7.11-0+deb12u1_s390x.deb fb9fb32afbb5155bc271c25d4484ff273e783f843a1597e138fd265e6dae841a 341164 postfix-mysql_3.7.11-0+deb12u1_s390x.deb 636ab2744dd93d9ee03fca2881d72c351c7bb839a0a1a7ec1d09c76135bc415a 14576 postfix-pcre-dbgsym_3.7.11-0+deb12u1_s390x.deb 87d917c7a3528f87987e3c61827a23667c784fa8dfe7274a69673092b1ad026a 339504 postfix-pcre_3.7.11-0+deb12u1_s390x.deb 8bf7d28adbb2d26d2aeef193700ffa57a066469036f6474d24dc662dce203835 13552 postfix-pgsql-dbgsym_3.7.11-0+deb12u1_s390x.deb e35ad4bc18e677ccad11e1f8dce8fb6e0d7df3a1dadd793ef052f3804f57067e 339936 postfix-pgsql_3.7.11-0+deb12u1_s390x.deb 61ff03967c7b83c7da6fbba1440d151e29fdff159591ae7bd45067b958f6b747 8280 postfix-sqlite-dbgsym_3.7.11-0+deb12u1_s390x.deb 03022b921a74ed4c1ec19a7689da7d9ea5d1204988ebaff723f29ba9be2e819c 337128 postfix-sqlite_3.7.11-0+deb12u1_s390x.deb b7a519fff4f46b576c03e9144750529aea73abecfd452c724aa049f5fbf76fa9 11636 postfix_3.7.11-0+deb12u1_s390x-buildd.buildinfo a67428462224ed3a1d553f919ceaff35f02b7d18460df02e4a550aaaa108b3b8 1432608 postfix_3.7.11-0+deb12u1_s390x.deb Files: 89e100d2269092b8c3e78773ea83f4a4 10476 debug optional postfix-cdb-dbgsym_3.7.11-0+deb12u1_s390x.deb 5a009b3774b1a0c2839682b77808b37a 333632 mail optional postfix-cdb_3.7.11-0+deb12u1_s390x.deb 72f8cbba22b90330fd1691dea7675e58 1768856 debug optional postfix-dbgsym_3.7.11-0+deb12u1_s390x.deb 3ad20da015356484d4e260487d79816f 21932 debug optional postfix-ldap-dbgsym_3.7.11-0+deb12u1_s390x.deb 43ea378c234bfa4651dbfe4342f63ba4 350248 mail optional postfix-ldap_3.7.11-0+deb12u1_s390x.deb f636058b6e2e9c6372ef7e7bc42f6426 18668 debug optional postfix-lmdb-dbgsym_3.7.11-0+deb12u1_s390x.deb 410c6184c2d01c4959ec69741f0d1cef 338776 mail optional postfix-lmdb_3.7.11-0+deb12u1_s390x.deb 9d716c2894ef53183193f38ff9be88a6 23156 debug optional postfix-mysql-dbgsym_3.7.11-0+deb12u1_s390x.deb a492c566b0426ffff274e0e88befc832 341164 mail optional postfix-mysql_3.7.11-0+deb12u1_s390x.deb 94dd85f5400c4db6eed8fe4662c29206 14576 debug optional postfix-pcre-dbgsym_3.7.11-0+deb12u1_s390x.deb e2e158f3aeccf2fd177ec35d2abe0a89 339504 mail optional postfix-pcre_3.7.11-0+deb12u1_s390x.deb da7dfeda6b07b4cc7e85da9f09974d17 13552 debug optional postfix-pgsql-dbgsym_3.7.11-0+deb12u1_s390x.deb 06e7a036799ec4bcf447787c97ed17e4 339936 mail optional postfix-pgsql_3.7.11-0+deb12u1_s390x.deb 38b16a23c058eb13cd5b1926436f0812 8280 debug optional postfix-sqlite-dbgsym_3.7.11-0+deb12u1_s390x.deb de5572cb390bdc94eb6aae3858756b28 337128 mail optional postfix-sqlite_3.7.11-0+deb12u1_s390x.deb 41d3ba830e6b3f53617d2e5c335af4b0 11636 mail optional postfix_3.7.11-0+deb12u1_s390x-buildd.buildinfo 5523f23bc677aebc621f86c6034c10ed 1432608 mail optional postfix_3.7.11-0+deb12u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEctqRAwcjFMIrbct74euoNlQ3ywQFAmYArlAACgkQ4euoNlQ3 ywQFew//eEJ9jmNTWWsk39hyyDKrXnSnfvx0VQ5yydr+E+6yI0w0gVhWRfmShHm1 /jQVToELQP0Qwnhjsv57c605wtGYYxfTfWkgDF46/GZ5S7TLIRN7G5g79rh51lW9 +knZmqnPOlHQ+AsMde5LLe3KM/VMxETEDOClxAizURwi71ZMkCNfVfX00laDWF9M 87eReuJDqTqM7PIi+6GYZ1kDspBIQv847FFr8mj3ZJFGYRoVoCof4HbExIRzUxPK iuzFCtwh3hOyGv4ysglCkDRWY8xkaMRmH03dZp2NPmyu+bzoXVsgtZMuGhXsF20f qc7G64UXoX9ij4leDYSpmh8x1mB9p0nxpoPMPinJr5jefa/+xYFzlFheHpzHgJ24 XKK8o8t29QCoEqetlo3tI2ymPNguaAiEesOpBrVYMpF5key7/goA+z03lDJI8AkW q8+FOEFybCLvBnoqy2PS8j4J0VY1WNAQ7/JsRmbU84l/UN+dlqSx/Ir/y2sOMtZx UTzQpnyvZbzBxajDue9Uj15/4l2bkhKPm6tROz+mBQlEIeOFfGMS+IGAluc1iejp 2oZ3xbwL79OO0Ty8oZ9FZBUBVxB0BAt18XxV4HM50UIS34/AxEvn3UE96EMF8iDF vJMK7g35qeTkMHCD2QAiMSGe2nmlG1EQ92ggm/ahLTEUZQbCuDU= =EZ6p -----END PGP SIGNATURE-----