-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Aug 2026 19:35:04 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: armel Version: 3.10.13-0+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: armel Build Daemon (arm-ubc-04) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Changes: postfix (3.10.13-0+deb13u1) trixie-security; urgency=medium . * new upstream stable/bugfix/security release From the release announcement by Wietse Wenema at https://www.postfix.org/announcements/postfix-3.11.6.html : . These defects were found by Qualys assisted by Claude Mythos Preview, and by OpenAI Security; more than half date from 20 or more years ago. When I implemented Postfix, I knew that there were going to be mistakes. That is the reason why Postfix has its architecture and safety nets. The number of defects may seem large, but considering that they were found in a code base of over 150 thousand lines, the error rate is still lower than what I designed for. . o Policy bypass: . - Bug (introduced: Postfix 2.2, date: 20041102): missing SMTP server resets of MAIL FROM and RCPT TO command state after smtpd_end_of_data_restrictions rejected a message. This resulted in SMTP protocol state desynchronization between the remote SMTP client and the Postfix SMTP server. . - A crafted remote SMTP client could then send RCPT TO and DATA without MAIL FROM, and deliver a second message. Then, smtpd_end_of_data_restrictions skipped check_recipient_access constraints, because a recipient counter was > 1. . - The failure to reset MAIL FROM and RCPT TO state also affected Milter support (added in Postfix 2.3). Here, after a Milter replied with "accept this message" based on the message envelope, and smtpd_end_of_data_restrictions rejected the message, the Postfix SMTP server as before accepted RCPT TO and DATA without MAIL FROM, and smtpd_end_of_data_restrictions as before skipped check_recipient_access constraints for the second message. Under these conditions, the Postfix Milter client remained in the "accept this message" state, skipping Milter policy enforcement for the second message. . o Denial of service: . - Bug (defect introduced: Postfix 3.4, date: 20180805): SMTP server command history memory exhaustion with a large number of very small BDAT requests. . - Bug (defect introduced: Postfix 1.1, date: 20021116): address verification cache poisoning. A local user could use the postdrop command to submit an address verification probe with envelope or message content that Postfix rejected later, resulting in a negative address verification cache entry for that address. On systems that enable address verification, the negative address verification cache entry would force the Postfix SMTP server to reject a message that it should accept (denial of service). . o Server crashes and panic()s: . - Bug (defect introduced: Postfix 3.4, date: 20180805): missing SMTP server reset of RCPT TO state, after a BDAT command error. A crafted remote SMTP client could then send a DATA command without MAIL FROM or RCPT TO, and crash a Postfix SMTP daemon process with a null pointer read error. . - Bug (defect introduced: Postfix 2.4, date: 20051222): null pointer read crash while parsing a malformed Dovecot AUTH server response. . o Read after free, uninitialized read, under/over read: . - Bug (defect introduced: Postfix 2.8, date: 20100914): read-after-free in the PSC_CALL_BACK_NOTIFY() macro. This had no effect on program execution, because myfree() wiped memory, and that memory was not yet reused. . - Read after free (no privilege escalation) in debug logging (defect introduced: Postfix 2.2, date: 20050117). . - Bug (defect introduced: Postfix 2.10, date: 20120617): uninitialized memory read in postscreen HaProxy client after remote I/O exception, causing garbage to be logged. . - Latent bug (defect introduced: Postfix 2.7, date: 20090618): uninitialized memory read after dnsblog(8) returns a string that is not an IPv4 address. . - Bug (defect introduced: before Postfix alpha, date 19970424): the DNS client could read up to two bytes past the end of an MX record, before discovering that the record was too short. This behavior was later copied with SRV records, potentially over-reading up to six bytes. . - Bug (defect introduced: Postfix 1,1, date: 20010524): the postsuper command under-read or over-read a very short queue filename. No crash, information leak, or privilege escalation. . o Other code hygiene: . - Bug (defect introduced: before Postfix alpha, date: 19971106): 'int' over-shift, in the queue file record-length parser. Postfix programs do not generate such records, but an attacker could cause postdrop to reject input or panic(). . - Bug (defect introduced: Postfix 2.2, date: 20050117): non-transitive comparison of IPv4 addresses. . - Bug (defect introduced: Postfix 1.0, date: 20000928): the fast flush server, used by the SMTP command "ETRN", and by the commands "postqueue -s site" and "postqueue -i queue_id" (and their sendmail(1) equivalents), used the wrong duplicate suppression API, resulting in unnecessary queue scans by the queue manager. . - Queue hygiene: the postdrop command accepted the null record type which the rest of Postfix ignores. Checksums-Sha1: 400b6543a660e286200f1b3b09d108d5d16e15d5 11224 postfix-cdb-dbgsym_3.10.13-0+deb13u1_armel.deb 27f9a15c7c932573dfeab0842857ae4205c77feb 4848 postfix-cdb_3.10.13-0+deb13u1_armel.deb bfa10033fc15b09b89853ebc3bc487b76e319973 1808172 postfix-dbgsym_3.10.13-0+deb13u1_armel.deb 50a2de4894bf77119ad074cbf148a88b37c7996f 22348 postfix-ldap-dbgsym_3.10.13-0+deb13u1_armel.deb d0fffe47ee1bdb8643a0fbaaa0d441031f450c0b 11860 postfix-ldap_3.10.13-0+deb13u1_armel.deb b54d79eaa7a49588eec34b41a1e4307944a6d09a 18536 postfix-lmdb-dbgsym_3.10.13-0+deb13u1_armel.deb b44669d381914bbe3a5cb99647c6944b900e80f4 7416 postfix-lmdb_3.10.13-0+deb13u1_armel.deb 1003119f35b09bf781548499e16ed1ac9735a87d 13852 postfix-mongodb-dbgsym_3.10.13-0+deb13u1_armel.deb cea12781dcadd7fd6f8c3299b5d3473caf501fc9 5608 postfix-mongodb_3.10.13-0+deb13u1_armel.deb 5849b7b47f1b30c3cc38f2368a0658500fdd6ef4 24468 postfix-mysql-dbgsym_3.10.13-0+deb13u1_armel.deb a2dcedc1cb9fd1d2e4557084454af8cee76f103a 7940 postfix-mysql_3.10.13-0+deb13u1_armel.deb c6a3a6e3e640f7ccdec6c16725a061cc8c345965 14716 postfix-pcre-dbgsym_3.10.13-0+deb13u1_armel.deb 6ad2acc12013e583a167d04b98ec914844257184 6392 postfix-pcre_3.10.13-0+deb13u1_armel.deb bd0d168ef9a1ffd3eeeecddc5f9ed92db655b4f5 14516 postfix-pgsql-dbgsym_3.10.13-0+deb13u1_armel.deb a7b17358924ebaedb606fa4b3f6b86ba93d222aa 7656 postfix-pgsql_3.10.13-0+deb13u1_armel.deb 08e6501b5de0b37c8445215caa2935f8128d253d 8492 postfix-sqlite-dbgsym_3.10.13-0+deb13u1_armel.deb 6c0129586f9f7c2670e3bf33cbd4b4463a61ac07 4632 postfix-sqlite_3.10.13-0+deb13u1_armel.deb e16e437a5eb992ed21f2f7c4ff747a51a2c1296e 12788 postfix_3.10.13-0+deb13u1_armel-buildd.buildinfo 4a3b3e938616bdb65f169abd10cee889227f8c6e 1509936 postfix_3.10.13-0+deb13u1_armel.deb Checksums-Sha256: f4970b91fa577957a024c9c49bd7eb310c24579fe61e4b395607f705f95f50be 11224 postfix-cdb-dbgsym_3.10.13-0+deb13u1_armel.deb fc036c3c66b913240ad03a695597fa2eeb73b4d33e449764e714ff2001cf1687 4848 postfix-cdb_3.10.13-0+deb13u1_armel.deb 61012b49684e9fd934b716e26f5ec8390e1d14c66b9a6b55c89411ff65988e72 1808172 postfix-dbgsym_3.10.13-0+deb13u1_armel.deb 9fd875435982db0cc521b36312c478dc92cbb1dfe37e05ef2cc1c501db115d26 22348 postfix-ldap-dbgsym_3.10.13-0+deb13u1_armel.deb 4ff8db7844886995c3a80e6fcb5f69764a534f6466071b34327f63b029f7d9c9 11860 postfix-ldap_3.10.13-0+deb13u1_armel.deb 6a6cbe48b1d0f475bcbeb2e072c4aba59d4f7ecacede8fd6fbb776dbba9858a1 18536 postfix-lmdb-dbgsym_3.10.13-0+deb13u1_armel.deb 9d151330628d067d484b4da4c8e78e25152685af5981d87d045c24035bf6e37c 7416 postfix-lmdb_3.10.13-0+deb13u1_armel.deb 1fea1cfca0d53c9a959c8aa949069e65fa6c296af5e80e3afb2bff7258e09a30 13852 postfix-mongodb-dbgsym_3.10.13-0+deb13u1_armel.deb 78778c3ad79c9318fc3da70aa939567f30304ed4cc125ffb2a78637293dad902 5608 postfix-mongodb_3.10.13-0+deb13u1_armel.deb 2997d28e1e7424cecc33fa7e357c447910f96c3f8a44298f2b93f4ea07163834 24468 postfix-mysql-dbgsym_3.10.13-0+deb13u1_armel.deb 2e08f28a14b6f880daa7d2b334a1ec212483213c3fec290519d0e134e52548cc 7940 postfix-mysql_3.10.13-0+deb13u1_armel.deb 2e230ecb291a2cf8fa546bce935376a75958692e4dc0596d725ee4f97527512b 14716 postfix-pcre-dbgsym_3.10.13-0+deb13u1_armel.deb c1087cfa492a11dac2082610abb9782160e14fea7a24000f7583c6c929553cc1 6392 postfix-pcre_3.10.13-0+deb13u1_armel.deb 41e259a89624998d72dc72530c18185f05f7a95f44911310b2e450113000e28b 14516 postfix-pgsql-dbgsym_3.10.13-0+deb13u1_armel.deb 6e390f873dfdde611aca45a16478fa6267332b45f89da5d1816988864555dadc 7656 postfix-pgsql_3.10.13-0+deb13u1_armel.deb b19c82c3ad5667a51f4b61b52b0b8b809174677e95dde77fe8ec5c327d2c3dab 8492 postfix-sqlite-dbgsym_3.10.13-0+deb13u1_armel.deb 101ceb12b1b6b7c8a0a66eb3a668738a00222a5312adb183c2a89c231f721424 4632 postfix-sqlite_3.10.13-0+deb13u1_armel.deb 5c0bd4b65de341d150a2296fb2b2c66c450a1abb48b6a182a803516333421db7 12788 postfix_3.10.13-0+deb13u1_armel-buildd.buildinfo 614e8a9ece649e1d657b25b8438782b0a8252a78c974f56112b9512872350c52 1509936 postfix_3.10.13-0+deb13u1_armel.deb Files: b868eb47bac8257ae4152f4e44afd5d3 11224 debug optional postfix-cdb-dbgsym_3.10.13-0+deb13u1_armel.deb 96590d020d2b8b05f8789402700b7f61 4848 mail optional postfix-cdb_3.10.13-0+deb13u1_armel.deb 6e6078ceff27c9476459c4e19e3d7f7e 1808172 debug optional postfix-dbgsym_3.10.13-0+deb13u1_armel.deb 03aae71db389cde4b47753eb192abd66 22348 debug optional postfix-ldap-dbgsym_3.10.13-0+deb13u1_armel.deb f0e6330c5f6accd3028fe945f05786c2 11860 mail optional postfix-ldap_3.10.13-0+deb13u1_armel.deb edb02ba8d2a3f96671f5835fd1adaaab 18536 debug optional postfix-lmdb-dbgsym_3.10.13-0+deb13u1_armel.deb 6476968d0f73cefcfa95311dfb44a20f 7416 mail optional postfix-lmdb_3.10.13-0+deb13u1_armel.deb fe47cc62fb804e83f1b1cd0aed9bed7a 13852 debug optional postfix-mongodb-dbgsym_3.10.13-0+deb13u1_armel.deb f675eb11a6251a12c889e0aba0427ffc 5608 mail optional postfix-mongodb_3.10.13-0+deb13u1_armel.deb a116bcc5b8dde079310e2b31c31a0b6d 24468 debug optional postfix-mysql-dbgsym_3.10.13-0+deb13u1_armel.deb 7e3edaa47dacd31a173cc5120a5822ae 7940 mail optional postfix-mysql_3.10.13-0+deb13u1_armel.deb 66c625ce55fa5c683424f5a0a06041b1 14716 debug optional postfix-pcre-dbgsym_3.10.13-0+deb13u1_armel.deb acc86b5d52ebb0e19d8399453b5e35f2 6392 mail optional postfix-pcre_3.10.13-0+deb13u1_armel.deb eaabcedd3a060074acb3bb349d9a085b 14516 debug optional postfix-pgsql-dbgsym_3.10.13-0+deb13u1_armel.deb 12cc67f26c879d05040b97520bae8e55 7656 mail optional postfix-pgsql_3.10.13-0+deb13u1_armel.deb b6a819fa59e03a152a823c7d6b86d48f 8492 debug optional postfix-sqlite-dbgsym_3.10.13-0+deb13u1_armel.deb 6d639dfa768d6a65fe1a5b0d67379165 4632 mail optional postfix-sqlite_3.10.13-0+deb13u1_armel.deb 354ff4445ded129a71ab70b14b86bec3 12788 mail optional postfix_3.10.13-0+deb13u1_armel-buildd.buildinfo a7f2b65cc324b26eb0e7b98690cfb8ac 1509936 mail optional postfix_3.10.13-0+deb13u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEECx5fXZYVNP9tMtwlK1PZBedPspoFAmp6BfMACgkQK1PZBedP spokRRAAmP3zC5pEnKZ0c6rLuIGqrChqphSQnSQDCurOHDGOlgNEe5P3OgBcb/Lc l9EDfTjG8hsL7TQsjLC/iVJp011pCWgWUCqcg1IGSYsCzAAvSRQwOjcAmDy7xwA6 Y6r897bslSd5rvzBUz4uc1s8264Y8/W1Xd0bMc92HSOelvqb3bk0TzBjLlBkDRHp keyzckyV2fnb9xB3lNaeeNoG8/R2rHr60u5wbqWQlVCU6cr0ZeVKp1mBqKnb1qde SPR/X5J2E3O+UyEwwRlIAkgAuozcQtMBjiR9t7KmnQ+NP512WWik065pxov+OCiC Wy9beHMRt/Qjk0SHtjJLQUczNOhUlCvkaToU1o2mNLRWJvnTogTx6Vccc5VUWTZz gleHs3kP+yO7ki3z8iuAkhJQI1Y17HjZy8q0/Lt0w80EqLukajRwLf6/Y9WO3R7x DADkqsFxtuUZ37G/PXfNx08mEoIDn8EplJsiV+PM+hiVFheM7VnMFsJCNdkaxAql fNh+xa6lvjTMVedcygqrL7tc0ub7U2DBEELX+OENzzSxssmyWMTVkzcFnb6yiJNb I9Megpqq9DQoRK/nNRvgkt7ZNJUD2FUdJYSnpVENJqZAeqd2FrS4oAlH0eogFxB6 POr/phXXLay28Xh8MYaRXQB+l9tL40qHTRlgfFcp0sCenkQus8Q= =Ti3s -----END PGP SIGNATURE-----