Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1189276 > unrolled thread

Bug#1065562: bookworm-pu: package postfix/3.7.10-0+deb12u1

Back to article view | Back to linux.debian.bugs.dist

Contents

  Bug#1065562: bookworm-pu: package postfix/3.7.10-0+deb12u1 Scott Kitterman <debian@kitterman.com> - 2024-03-06 18:10 +0100

#1189276 — Bug#1065562: bookworm-pu: package postfix/3.7.10-0+deb12u1

[Multipart message — attachments visible in raw view] — view raw

Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian.org@packages.debian.org
Usertags: pu
X-Debbugs-Cc: postfix@packages.debian.org
Control: affects -1 + src:postfix

[ Reason ]
Standard postfix post-release update

[ Impact ]
They will still have the bugs that are fixed by this update.

[ Tests ]
There is an autopkgtest, which passes locally.  I also have the package
in production on one server and it is running fine.

[ Risks ]
Risk is low.  Changes are relatively minor and are as released by
upstream, which has an excellent track record for such things.

[ Checklist ]
  [X] *all* changes are documented in the d/changelog
  [X] I reviewed all changes and I approve them
  [X] attach debdiff against the package in (old)stable
  [X] the issue is verified as fixed in unstable

[ Changes ]
  * 3.7.11
    - Bugfix (defect introduced: Postfix 2.3, date 20051222): the
      Dovecot auth client did not reset the 'reason' from  a
      previous Dovecot auth service response, before parsing the
      next Dovecot auth server response in the same SMTP session.
      Reported by Stephan Bosch, File: xsasl/xsasl_dovecot_server.c.
    - Cleanup: Postfix SMTP server response with an empty
      authentication failure reason. File: smtpd/smtpd_sasl_glue.c.
    - Bugfix (defect introduced: Postfix 3.1, date: 20151128):
      "postqueue -j" produced broken JSON when escaping a control
      character as \uXXXX. Found during code maintenance. File:
      postqueue/showq_json.c.
    - Cleanup: posttls-finger certificate match expectations for
      all TLS security levels, including warnings for levels that
      don't implement certificate matching. Viktor Dukhovni.
      File: posttls-finger.c.
    - Bugfix (defect introduced: Postfix 2.3): after prepending
      a message header with a Postfix access table PREPEND action,
      a Milter request to delete or update an existing header
      could have no effect, or it could target the wrong instance
      of an existing header. Root cause: the fix dated 20141018
      for the Postfix Milter client was incomplete. The client
      did correctly hide the first, Postfix-generated, Received:
      header when sending message header information to a Milter
      with the smfi_header() application callback function, but
      it was still hiding the first header (instead of the first
      Received: header) when handling requests from a Milter to
      delete or update an existing header. Problem report by
      Carlos Velasco. This change was verified to have no effect
      on requests from a Milter to add or insert a header. File:
      cleanup/cleanup_milter.c.
    - Workaround: tlsmgr logfile spam. Some OS lies under load:
      it says that a socket is readable, then it says that the
      socket has unread data, and then it says that read returns
      EOF, causing Postfix to spam the log with a warning message.
      File: tlsmgr/tlsmgr.c.
    - Bugfix (defect introduced: Postfix 3.4): the SMTP server's
      BDAT command handler could be tricked to read $message_size_limit
      bytes into memory. Found during code maintenance. File:
      smtpd/smtpd.c.
    - Performance: eliminate worst-case behavior where the queue
      manager defers delivery to all destinations over a specific
      delivery transport, after only a single delivery agent
      failure. The scheduler now throttles one destination, and
      allows deliveries to other destinations to keep making
      progress. Files: *qmgr/qmgr_deliver.c.
    - Safety: drop and log over-size DNS responses resulting in
      more than 100 records. This 20x larger than the number of
      server addresses that the Postfix SMTP client is willing
      to consider when delivering mail, and is well below the
      number of records that could cause a tail recursion crash
      in dns_rr_append() as reported by Toshifumi Sakaguchi. This
      also limits the number of DNS requests from check_*_*_access
      restrictions. Files: dns/dns.h, dns/dns_lookup.c, dns/dns_rr.c,
      dns/test_dns_lookup.c, posttls-finger/posttls-finger.c,
      smtp/smtp_addr.c, smtpd/smtpd_check.c.

[ Other info ]
N/A

Scott K

[toc] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web