Format: 1.8
Date: Tue, 28 Oct 2025 13:24:35 +0300
Source: postfix
Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-doc postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym
Architecture: amd64 all
Version: 3.10.5-1~deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian Postfix Team <team+postfix@tracker.debian.org>
Changed-By: Michael Tokarev <mjt@tls.msk.ru>
Description:
 postfix    - High-performance mail transport agent
 postfix-cdb - CDB map support for Postfix
 postfix-doc - Documentation for Postfix
 postfix-ldap - LDAP map support for Postfix
 postfix-lmdb - LMDB map support for Postfix
 postfix-mongodb - MongoDB map support for Postfix
 postfix-mysql - MySQL map support for Postfix
 postfix-pcre - PCRE map support for Postfix
 postfix-pgsql - PostgreSQL map support for Postfix
 postfix-sqlite - SQLite map support for Postfix
Closes: 1115412
Changes:
 postfix (3.10.5-1~deb13u1) trixie; urgency=medium
 .
   * new upstream stable/bugfix 3.10.5 release, with multiple fixes.
     From the upstream release notes:
   - Workaround for an interface mis-match between the Postfix SMTP client
     and MTA-STS policy plugins.
      * The existing behavior is to connect to any MX host listed in DNS, and
        to match the server certificate against any STS policy MX host pattern.
      * The corrected behavior is to connect to an MX host only if its
        name matches any STS policy MX host pattern, and to match the server
        certificate against the MX hostname.
     The corrected behavior must be enabled in two places: in Postfix with a
     new parameter "smtp_tls_enforce_sts_mx_patterns" (default: "yes") and in
     an MTA-STS plugin by enabling TLSRPT support, so that the plugin forwards
     STS policy attributes to Postfix. This works even if Postfix TLSRPT
     support is disabled at build time or at runtime.
   - TLSRPT Workaround: when a TLSRPT policy-type value is "no-policy-found",
     pretend that the TLSRPT policy domain value is equal to the recipient
     domain. This ignores that different policy types (TLSA, STS) use different
     policy domains.  But this is what Microsoft does, and therefore,
     what other tools expect.
   - Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP client's
     connection reuse logic did not distinguish between sessions that
     require SMTPUTF8 support, and sessions that do not. The solution is
      1) to store sessions with different SMTPUTF8 requirements
         under distinct connection cache storage keys, and
      2) to not cache a connection when SMTPUTF8 is required
         but the server does not support that feature
   - Bugfix (defect introduced: Postfix 3.0, date 20140731):
     the smtpd 'disconnect' command statistics did not count commands
     with "bad syntax" and "bad UTF-8 syntax" errors
   - Postfix 3.11 forward compatibility: to avoid ugly warnings when
     Postfix 3.11 is rolled back to an older version, allow a preliminary
     'size' record in maildrop queue files created with Postfix 3.11 or later
   - Bugfix (defect introduced: Postfix 3.8, date 20220128):
     non-reproducible build, because the 'postconf -e' output order
     for new main.cf entries was no longer deterministic
   - To make builds predictable, add missing meta_directory and
     shlib_directory settings to the stock main.cf file
   - Bugfix (defect introduced: Postfix 3.9, date 20230517):
     posttls-finger(1) logged an incorrectly-formatted port number
   * configure-instance.in: fix typo which caused recreating
     cadir in chroot and excessive logging (Closes: #1115412)
Checksums-Sha1:
 a0e7f33627426535f35e4d9f10965b4b31549dec 11048 postfix-cdb-dbgsym_3.10.5-1~deb13u1_amd64.deb
 40848bdc5c7d3627c6e31e29434b8289db70fc8a 5416 postfix-cdb_3.10.5-1~deb13u1_amd64.deb
 4a5affaa0440bdd7f93e71c7d7ceafadb50bc171 1878124 postfix-dbgsym_3.10.5-1~deb13u1_amd64.deb
 897e0753ce721de5e5848f1542f709987133348d 1396576 postfix-doc_3.10.5-1~deb13u1_all.deb
 35b001e1f6e9c4ccd61476b8e7d4516dfc8642f7 22884 postfix-ldap-dbgsym_3.10.5-1~deb13u1_amd64.deb
 f1770cd599b2f0e9ad72c4d14f51811ddd3877be 13052 postfix-ldap_3.10.5-1~deb13u1_amd64.deb
 565e0f39b6faaa05ffc0982fbacda087533f7bce 18408 postfix-lmdb-dbgsym_3.10.5-1~deb13u1_amd64.deb
 8a61ae4346edade73020d0c650e8300a302b3b16 8708 postfix-lmdb_3.10.5-1~deb13u1_amd64.deb
 17315157f4e478cac8e237d92a694754939e89a6 13740 postfix-mongodb-dbgsym_3.10.5-1~deb13u1_amd64.deb
 033195aeb08c5cafd3b19d5142a6448a72e3f6df 6248 postfix-mongodb_3.10.5-1~deb13u1_amd64.deb
 ad143fdcfc9115b0e9d4f3c1c6fe41fc888467c1 24392 postfix-mysql-dbgsym_3.10.5-1~deb13u1_amd64.deb
 d52cc89022650137636a087b9d2c6d601435122c 7720 postfix-mysql_3.10.5-1~deb13u1_amd64.deb
 2ce05cc0683c42d0af244dea8cc6d4b76b7b759d 14916 postfix-pcre-dbgsym_3.10.5-1~deb13u1_amd64.deb
 4829941d93372674477149a1561504c8769f3a7b 7340 postfix-pcre_3.10.5-1~deb13u1_amd64.deb
 e7c3f5f3a8986ed0112d84a7b940a01d81d0fd60 14300 postfix-pgsql-dbgsym_3.10.5-1~deb13u1_amd64.deb
 ca418deefb34e897c7111170ef020b53e80864e5 7312 postfix-pgsql_3.10.5-1~deb13u1_amd64.deb
 a4fe0fb8c9d408a2e1b3df5a41f9021e518320fe 8264 postfix-sqlite-dbgsym_3.10.5-1~deb13u1_amd64.deb
 70d552bbc6a0be47b259829eaf7cb1492da70d1c 4976 postfix-sqlite_3.10.5-1~deb13u1_amd64.deb
 4037e8d5c6b3aa9b868530c640d8df0df2de8b96 12039 postfix_3.10.5-1~deb13u1_amd64.buildinfo
 0a956bc05e7ac5f1d0702abfbf706927f9494b72 1600044 postfix_3.10.5-1~deb13u1_amd64.deb
Checksums-Sha256:
 2cce4230700e2e2352f940aa91c735074c7977414c74237d1087a082fc8b3d43 11048 postfix-cdb-dbgsym_3.10.5-1~deb13u1_amd64.deb
 da09e5dcac407918fb65f81ae858d1be426f80ddbcf48bc9209c0512524a951d 5416 postfix-cdb_3.10.5-1~deb13u1_amd64.deb
 213b6ea6df853acaef7a0bdf0a40232a9f2fe291198be374bdbc99dbf4e02bba 1878124 postfix-dbgsym_3.10.5-1~deb13u1_amd64.deb
 7f14b81fa8f1515874c5fa179b8d322bc480a1860b9c94a7b5ce65c43e2677ab 1396576 postfix-doc_3.10.5-1~deb13u1_all.deb
 ceaa678dcfa074651869a454bd0a0c741d5d31d338d25f4e71cbd4e6982f14fe 22884 postfix-ldap-dbgsym_3.10.5-1~deb13u1_amd64.deb
 a8d5f359d499dea70d3d572858e6cdc1610d9eda2c34a7d3d6453bbda8dbc142 13052 postfix-ldap_3.10.5-1~deb13u1_amd64.deb
 596c6daee35465f3d856e857c5e6e79ffdec42d0c2fbba3d0ae6d31c68edf8bf 18408 postfix-lmdb-dbgsym_3.10.5-1~deb13u1_amd64.deb
 a9a4e225242aeec28b2e84bcf75e46dc69b6bafe54e82f403be38bf471190438 8708 postfix-lmdb_3.10.5-1~deb13u1_amd64.deb
 779e1c86ba8530413d65a00065afff4b6842bab7d293dc01bc8111c01b38ecdb 13740 postfix-mongodb-dbgsym_3.10.5-1~deb13u1_amd64.deb
 394eecdab0b1fa70f23c32faf61f45027b29e4eaed945c0d72e9a524044e94bb 6248 postfix-mongodb_3.10.5-1~deb13u1_amd64.deb
 50f17bfeb7083c32453b932406cfe85cffad463aec869ee56385ae66798ef5b2 24392 postfix-mysql-dbgsym_3.10.5-1~deb13u1_amd64.deb
 725bd1162936d4e7f95b8c4848732cda2a1fcb18a0fc967bf66f77920dc57a4a 7720 postfix-mysql_3.10.5-1~deb13u1_amd64.deb
 1c0db27b0ba52cdc18bfb7ced10e51cc4d67de85a1dea0196ca1a4a3b3e142db 14916 postfix-pcre-dbgsym_3.10.5-1~deb13u1_amd64.deb
 4912c35d32944413369946df96bef0c4143f9adb88e254116fb09108b0489de8 7340 postfix-pcre_3.10.5-1~deb13u1_amd64.deb
 4632b0151c456900b2e22d27f39a3a33fe6c4e9b732d020fbaf1eb689f2d5fb5 14300 postfix-pgsql-dbgsym_3.10.5-1~deb13u1_amd64.deb
 be1e5247b988d3f2f665326cdcbfe332f5ac2069fff78b2f88a51fe26f6835ac 7312 postfix-pgsql_3.10.5-1~deb13u1_amd64.deb
 2c52125d38b986f11dacae89c671a72f3acd25262e753ca4074b314e2ac625d7 8264 postfix-sqlite-dbgsym_3.10.5-1~deb13u1_amd64.deb
 a849dce06213927c91e586976935503801cfeba84fa584d7ecbdc80c3de9568a 4976 postfix-sqlite_3.10.5-1~deb13u1_amd64.deb
 91d8b9addf25d4766a29dbfada79c1cde392492315c2a76978df4039d98975e4 12039 postfix_3.10.5-1~deb13u1_amd64.buildinfo
 bd862fe382b2899262b14452313236fcc90c60b040ee94ed51461d8a19b06689 1600044 postfix_3.10.5-1~deb13u1_amd64.deb
Files:
 15d526f155c5b6a95e6ada5320698c31 11048 debug optional postfix-cdb-dbgsym_3.10.5-1~deb13u1_amd64.deb
 1ee8ae0d389d763082305d286e497433 5416 mail optional postfix-cdb_3.10.5-1~deb13u1_amd64.deb
 a291aeed6ea2531864b44631610781e2 1878124 debug optional postfix-dbgsym_3.10.5-1~deb13u1_amd64.deb
 1f121828a764a77f6a680869f65937c8 1396576 doc optional postfix-doc_3.10.5-1~deb13u1_all.deb
 a288051b0bc6c0d4d38547a45ae80ee5 22884 debug optional postfix-ldap-dbgsym_3.10.5-1~deb13u1_amd64.deb
 f38c8eb497e8244a5810aa3af632b708 13052 mail optional postfix-ldap_3.10.5-1~deb13u1_amd64.deb
 b6744b0b773dec3410f13c13510c2d10 18408 debug optional postfix-lmdb-dbgsym_3.10.5-1~deb13u1_amd64.deb
 784a8d10e79d4f6018840a54dea0c5b1 8708 mail optional postfix-lmdb_3.10.5-1~deb13u1_amd64.deb
 e66325863e71f7fe0de47aed033960d7 13740 debug optional postfix-mongodb-dbgsym_3.10.5-1~deb13u1_amd64.deb
 3aed66f31eb21284dbdec10e3402acc1 6248 mail optional postfix-mongodb_3.10.5-1~deb13u1_amd64.deb
 ce25ec186ceef1330d06547890d7d74c 24392 debug optional postfix-mysql-dbgsym_3.10.5-1~deb13u1_amd64.deb
 0c3b802293c9a252a4e60a7d76f7f221 7720 mail optional postfix-mysql_3.10.5-1~deb13u1_amd64.deb
 0ab0050841bbee515f0f2fb04c97aea1 14916 debug optional postfix-pcre-dbgsym_3.10.5-1~deb13u1_amd64.deb
 d0282a25d4c3c85689ff342489424495 7340 mail optional postfix-pcre_3.10.5-1~deb13u1_amd64.deb
 80ba0c510049b664717c30a861d59964 14300 debug optional postfix-pgsql-dbgsym_3.10.5-1~deb13u1_amd64.deb
 513627a7980b63692f9758ff7313fc73 7312 mail optional postfix-pgsql_3.10.5-1~deb13u1_amd64.deb
 db77cef61775386863cd9b9e03d5f34c 8264 debug optional postfix-sqlite-dbgsym_3.10.5-1~deb13u1_amd64.deb
 2b791abf5d2dd7cb981f4d30fe5c891c 4976 mail optional postfix-sqlite_3.10.5-1~deb13u1_amd64.deb
 61ab3a432c6d67614a8667e36e2fca90 12039 mail optional postfix_3.10.5-1~deb13u1_amd64.buildinfo
 9070ea489b4985678f0f973b24051d93 1600044 mail optional postfix_3.10.5-1~deb13u1_amd64.deb