-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 22 Aug 2025 09:51:46 +0300 Source: postfix Binary: postfix-doc Architecture: all Version: 3.10.4-1~deb13u1 Distribution: trixie Urgency: medium Maintainer: all Build Daemon (x86-csail-02) Changed-By: Michael Tokarev Description: postfix-doc - Documentation for Postfix Closes: 1100100 1110704 Changes: postfix (3.10.4-1~deb13u1) trixie; urgency=medium . * New upstream stable/bugfix version 3.10.4, with a handful of fixes. From the upstream release notes: - Fixes for postscreen(8): * Bugfix (defect introduced: Postfix 2.2, date 20050203): after detecting a lookup table change, and after starting a new postscreen process, the old postscreen process logged an ENOTSOCK error while attempting to accept a connection on a socket that it was no longer listening on. This error was introduced first in the multi_server skeleton code, and was five years later duplicated in the event_server skeleton that was created for postscreen. Problem reported by Florian Piekert. * Bugfix (defect introduced: Postfix 2.8, date 20101230): after detecting a cache table change and before starting a new postscreen process, the old postscreen process did not close the postscreen_cache_map, and therefore kept an exclusive lock that could prevent a new postscreen process from starting. Problem reported by Florian Piekert. - Fixes for tlsproxy(8): * Bugfix (defect introduced: Postfix 3.7): incorrect backwards compatible support for the legacy configuration parameters tlsproxy_client_level and tlsproxy_client_policy. This disabled the tlsproxy TLS client role when a legacy parameter was set (instead of the newer tlsproxy_client_security_level or tlsproxy_client_policy_maps). Reported by John Doe, diagnosed by Viktor Dukhovni. * Bugfix (defect introduced: Postfix 3.4): with the TLS client role disabled by configuration, the tlsproxy daemon dereferenced a null pointer while handling a tlsproxy client request. Reported by John Doe. - Reducing process churn: Postfix daemons no longer automatically restart after a btree:, dbm:, hash:, lmdb:, or sdbm: table file modification time change, when they opened that table for writing. - Portability: deleted an build dependency, because the feature is being removed from OpenSSL, and Postfix no longer needs it. - Cleanup: with "tls_required_enable = yes", the Postfix SMTP client will no longer maintain TLSRPT statistics for messages that contain a "TLS-Required: no" header. This can prevent TLSRPT notifications for TLSRPT notifications. - Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS client code logged "Untrusted TLS connection" (wrong) instead of "Trusted TLS connection" (right), for a new or resumed TLS session, when a server offered a trusted (valid PKI trust chain) certificate that did not match the expected server name pattern. Fix by Viktor Dukhovni. * d/gbp.conf: debian-branch=debian/trixie * configure-instance.in: fix typo * configure-instance.in: limit maxdepth=1 in /etc/ssl/certs dirs * configure-instance.in: use home-grown file copy procedure to sync chroot There are a few issues with using cp(1) to update files in chroot, - a file should be copied even if the source date is *less* than the target date (eg, if a package has been downgraded), which is not done by `cp -u` (#1110704), a file should be copied atomically (copy+rename, not truncate+copy), and care should be taken with extra attributes (#1100100). Use a simple perl-based script (using just perl-base) to update files instead, which fixes all this stuff. (Closes: #1100100, #1110704) Checksums-Sha1: 561d1e4e622791ccb5cf0239d202406d13cbafe4 1393660 postfix-doc_3.10.4-1~deb13u1_all.deb 67f5dc0e08a64e5d87c935cfdfaaa9512ee8ef3c 7280 postfix_3.10.4-1~deb13u1_all-buildd.buildinfo Checksums-Sha256: 515a660e5a0d5053b08d5530a9641a48618334fc3ce57746d6c043a8a62baf2e 1393660 postfix-doc_3.10.4-1~deb13u1_all.deb 13a1c47e41eceb626e6ede56514610be1fbd4fbd87d8b238d43e9e880c39cc1a 7280 postfix_3.10.4-1~deb13u1_all-buildd.buildinfo Files: 3ff52bcc214f7bf6df26a1846dd2939e 1393660 doc optional postfix-doc_3.10.4-1~deb13u1_all.deb 021fa1b0c6a2138588708b5aaa4035b4 7280 mail optional postfix_3.10.4-1~deb13u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEELusn8jY95Sf7obGlx30Wh8LXl/YFAmixFZIACgkQx30Wh8LX l/aDOg//Qz85YdYH0RWhIT8cea/X9zMlVuANOI8CUhUF7IkkfE1ZNkurON8VYbug +Jt47cCtWZhk33sd9LTipWEq/BbycAztgaY3Tnpf6QmpEI1xsNQeBYj9BUDRf3fP ItEkqlIbCifjB5u26E0hRDnSxlkD1cm9l78ADdUm1HLrJxqJa08hH4jKi7Pa1t31 mtErSsiERe6Nh9NHo0mcWXGZa6KfeBaFy0Zy8HXlnBSvseDZb+HJOx0bhkB0OB9q +MiafA4WQrIrwyT4vR1fDOflkod9CJe8HWAtaD0Eb2xS0kN4L7lH4ZtlyM27kivb vv5pzQbiQrK1z9apvhmY1wf3r3kM2sCFAxHmC8jupltWRaSEjXgaaBWagGuPXI5y LlLNTR81kKpHbGBucG0VRt/KWUO6hBNgCeS9UAiwZgV9sMKuRdhjdf62n2r58/+G TqTmUdQDboVdUAQAI33GvAi716UJh/KMWU86cVwwP0axVfQP9uZtGzilAXmGm9x3 MIy1ZdeopAcPxK6jKurA6vht7fU6JfLdjPFlyTz/wongCxJ8B4z7tE3VIH2lps0D mmlMeqZEmuSt+vq1NAgeA2vS+O9+dPgJjQ0iG4meiyvQAxgqy/OXF6LsIKu9Xrxw CzymHImdkj/3XpEai+aRr3YzbaU22o8DoDW2W5UPURAJr8En/Qo= =sP5q -----END PGP SIGNATURE-----