-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Aug 2026 19:35:04 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: arm64 Version: 3.10.13-0+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: arm64 Build Daemon (arm-conova-03) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Changes: postfix (3.10.13-0+deb13u1) trixie-security; urgency=medium . * new upstream stable/bugfix/security release From the release announcement by Wietse Wenema at https://www.postfix.org/announcements/postfix-3.11.6.html : . These defects were found by Qualys assisted by Claude Mythos Preview, and by OpenAI Security; more than half date from 20 or more years ago. When I implemented Postfix, I knew that there were going to be mistakes. That is the reason why Postfix has its architecture and safety nets. The number of defects may seem large, but considering that they were found in a code base of over 150 thousand lines, the error rate is still lower than what I designed for. . o Policy bypass: . - Bug (introduced: Postfix 2.2, date: 20041102): missing SMTP server resets of MAIL FROM and RCPT TO command state after smtpd_end_of_data_restrictions rejected a message. This resulted in SMTP protocol state desynchronization between the remote SMTP client and the Postfix SMTP server. . - A crafted remote SMTP client could then send RCPT TO and DATA without MAIL FROM, and deliver a second message. Then, smtpd_end_of_data_restrictions skipped check_recipient_access constraints, because a recipient counter was > 1. . - The failure to reset MAIL FROM and RCPT TO state also affected Milter support (added in Postfix 2.3). Here, after a Milter replied with "accept this message" based on the message envelope, and smtpd_end_of_data_restrictions rejected the message, the Postfix SMTP server as before accepted RCPT TO and DATA without MAIL FROM, and smtpd_end_of_data_restrictions as before skipped check_recipient_access constraints for the second message. Under these conditions, the Postfix Milter client remained in the "accept this message" state, skipping Milter policy enforcement for the second message. . o Denial of service: . - Bug (defect introduced: Postfix 3.4, date: 20180805): SMTP server command history memory exhaustion with a large number of very small BDAT requests. . - Bug (defect introduced: Postfix 1.1, date: 20021116): address verification cache poisoning. A local user could use the postdrop command to submit an address verification probe with envelope or message content that Postfix rejected later, resulting in a negative address verification cache entry for that address. On systems that enable address verification, the negative address verification cache entry would force the Postfix SMTP server to reject a message that it should accept (denial of service). . o Server crashes and panic()s: . - Bug (defect introduced: Postfix 3.4, date: 20180805): missing SMTP server reset of RCPT TO state, after a BDAT command error. A crafted remote SMTP client could then send a DATA command without MAIL FROM or RCPT TO, and crash a Postfix SMTP daemon process with a null pointer read error. . - Bug (defect introduced: Postfix 2.4, date: 20051222): null pointer read crash while parsing a malformed Dovecot AUTH server response. . o Read after free, uninitialized read, under/over read: . - Bug (defect introduced: Postfix 2.8, date: 20100914): read-after-free in the PSC_CALL_BACK_NOTIFY() macro. This had no effect on program execution, because myfree() wiped memory, and that memory was not yet reused. . - Read after free (no privilege escalation) in debug logging (defect introduced: Postfix 2.2, date: 20050117). . - Bug (defect introduced: Postfix 2.10, date: 20120617): uninitialized memory read in postscreen HaProxy client after remote I/O exception, causing garbage to be logged. . - Latent bug (defect introduced: Postfix 2.7, date: 20090618): uninitialized memory read after dnsblog(8) returns a string that is not an IPv4 address. . - Bug (defect introduced: before Postfix alpha, date 19970424): the DNS client could read up to two bytes past the end of an MX record, before discovering that the record was too short. This behavior was later copied with SRV records, potentially over-reading up to six bytes. . - Bug (defect introduced: Postfix 1,1, date: 20010524): the postsuper command under-read or over-read a very short queue filename. No crash, information leak, or privilege escalation. . o Other code hygiene: . - Bug (defect introduced: before Postfix alpha, date: 19971106): 'int' over-shift, in the queue file record-length parser. Postfix programs do not generate such records, but an attacker could cause postdrop to reject input or panic(). . - Bug (defect introduced: Postfix 2.2, date: 20050117): non-transitive comparison of IPv4 addresses. . - Bug (defect introduced: Postfix 1.0, date: 20000928): the fast flush server, used by the SMTP command "ETRN", and by the commands "postqueue -s site" and "postqueue -i queue_id" (and their sendmail(1) equivalents), used the wrong duplicate suppression API, resulting in unnecessary queue scans by the queue manager. . - Queue hygiene: the postdrop command accepted the null record type which the rest of Postfix ignores. Checksums-Sha1: 8377c9d9f81565a5310bb8464b4ed86dbd722308 11084 postfix-cdb-dbgsym_3.10.13-0+deb13u1_arm64.deb 79e15aa3b0e0374c02e8d6959bec188cad79d5ba 5204 postfix-cdb_3.10.13-0+deb13u1_arm64.deb 31d9f07fc18d2de32546517717a5dbc42300a473 1877652 postfix-dbgsym_3.10.13-0+deb13u1_arm64.deb 4322041081988addb33cd5a84d92ef7d13c0da5b 22744 postfix-ldap-dbgsym_3.10.13-0+deb13u1_arm64.deb 904eade45a33a41491318e3f6fd823d6aec9d7f1 12064 postfix-ldap_3.10.13-0+deb13u1_arm64.deb d45386ede05e3add8d4420875cd9c66b62f6eae3 18500 postfix-lmdb-dbgsym_3.10.13-0+deb13u1_arm64.deb f9bab3abb0d9448d8361f7a454155cfcc411c9d5 8276 postfix-lmdb_3.10.13-0+deb13u1_arm64.deb 9057ab5d62323ecd37646d0031c6e8fbd49de709 13836 postfix-mongodb-dbgsym_3.10.13-0+deb13u1_arm64.deb a8747766dd4264378231d5e25cc2be3df436d5b1 6260 postfix-mongodb_3.10.13-0+deb13u1_arm64.deb b7a0caf3d5ced501fec918d766d9a01172a96950 24156 postfix-mysql-dbgsym_3.10.13-0+deb13u1_arm64.deb c72a4f2f4bfe71618ea4ec1909de300fb952ea3f 7268 postfix-mysql_3.10.13-0+deb13u1_arm64.deb fc4b479faddb845a11740a1e3cc72fd9718e524e 15112 postfix-pcre-dbgsym_3.10.13-0+deb13u1_arm64.deb 0fd356096c71ae7bab2b22da0ef71c0e79b5e1de 7100 postfix-pcre_3.10.13-0+deb13u1_arm64.deb 8d077553d56edeb643fed1edf27237827963b725 14204 postfix-pgsql-dbgsym_3.10.13-0+deb13u1_arm64.deb 94d5fe78715057431a0d65883a00bf4400962062 6980 postfix-pgsql_3.10.13-0+deb13u1_arm64.deb f3782241a8fb5e676d26533dae561704f2581c1a 8512 postfix-sqlite-dbgsym_3.10.13-0+deb13u1_arm64.deb 66afbdc27ec8033419fa69f8ed473b4cf3da2547 4980 postfix-sqlite_3.10.13-0+deb13u1_arm64.deb 72cd06f887ee1ee6558c7ad8205952b3f94ce2a9 12920 postfix_3.10.13-0+deb13u1_arm64-buildd.buildinfo 8cc4486158841a9db9378d57a749e2f8a3e5433c 1559228 postfix_3.10.13-0+deb13u1_arm64.deb Checksums-Sha256: f13bd91b38643dc65ac228641bdd9269ec6256b3c3ecd0854e933c6f5b8fc146 11084 postfix-cdb-dbgsym_3.10.13-0+deb13u1_arm64.deb 9cacc65694774b82b29d575cafb5cd04f5f49773ee56213d437badc85f700337 5204 postfix-cdb_3.10.13-0+deb13u1_arm64.deb d1811986002f3ee767800aa51f8e68688d043acc693ce3a91c56890712155e07 1877652 postfix-dbgsym_3.10.13-0+deb13u1_arm64.deb ab1a13c50d1fdea815d8863c3d2e5b1a3fae2dcc1eb6716dde73f4e7d9c92c97 22744 postfix-ldap-dbgsym_3.10.13-0+deb13u1_arm64.deb d5b70d133d9f20385d0a52a60ae6e5f8a4e2717b6b3ac6d984cf9168ed54b676 12064 postfix-ldap_3.10.13-0+deb13u1_arm64.deb 878cd26da2bfb1168159750681ecea89539d3a647aa9d4eae54888cfceeeb64b 18500 postfix-lmdb-dbgsym_3.10.13-0+deb13u1_arm64.deb b3c186788a5433c7710a82535483b7687178941e352b1233cccc64359d8635e6 8276 postfix-lmdb_3.10.13-0+deb13u1_arm64.deb 66f1a502ab0fd334e9e43cc16b0e1789f7ad72e4d2fb2e936cee1e9e44c99457 13836 postfix-mongodb-dbgsym_3.10.13-0+deb13u1_arm64.deb 37def3834c6196bcbb7d8c4bcb681555519b73e08d443c1221c9f75af11645cd 6260 postfix-mongodb_3.10.13-0+deb13u1_arm64.deb 1e2b7490e848e884c3887c483998ee1ef8adc0a744402411b6523aa1a46eafa2 24156 postfix-mysql-dbgsym_3.10.13-0+deb13u1_arm64.deb d785a9aa192b15cb0902441356e311d9e08dd8ce869670e0895707ff447b4594 7268 postfix-mysql_3.10.13-0+deb13u1_arm64.deb 8122acc70216ca3330d6245aa46f7e7a3eb25c538253f17c8197aa4285bebb0a 15112 postfix-pcre-dbgsym_3.10.13-0+deb13u1_arm64.deb 8cdc4729d2d5c444b3efba46f62a25e58f74bbaa94d4ddfd75aa40513cb364f7 7100 postfix-pcre_3.10.13-0+deb13u1_arm64.deb c51984918b508af4cb3c2b3ec8d917c1afdacea9126e62f553ab3441875704cc 14204 postfix-pgsql-dbgsym_3.10.13-0+deb13u1_arm64.deb 3c7d6a16ba96db5373015f8d17695fec5c5ea71f018f9476745efb16356e5dbd 6980 postfix-pgsql_3.10.13-0+deb13u1_arm64.deb 601f7a6113a3847e1bdffffcd6b5bf6c1cc1ee1fbfca80eccec33b65aa83a097 8512 postfix-sqlite-dbgsym_3.10.13-0+deb13u1_arm64.deb e1fb0a0345cc2b46bce667a681d2e025b0b947e29a46a3b5dfb82644692ae70b 4980 postfix-sqlite_3.10.13-0+deb13u1_arm64.deb fbbefc0d9fd34d566739bfda248529c5c163abc41e3160b49258f43a38dea170 12920 postfix_3.10.13-0+deb13u1_arm64-buildd.buildinfo b63bcc670efe3b84d5487072ba85d1346f6370e9df0615182e4cb4e56fa1e07b 1559228 postfix_3.10.13-0+deb13u1_arm64.deb Files: ff718aa25abe4f95fda7a3a1460a183a 11084 debug optional postfix-cdb-dbgsym_3.10.13-0+deb13u1_arm64.deb 73fd8f0255352a44361aaca014abcaad 5204 mail optional postfix-cdb_3.10.13-0+deb13u1_arm64.deb f6f59d89121e1c9d7cb823190d0412b2 1877652 debug optional postfix-dbgsym_3.10.13-0+deb13u1_arm64.deb 8a60cb6ea3198e13d3128085f9d068ef 22744 debug optional postfix-ldap-dbgsym_3.10.13-0+deb13u1_arm64.deb 72472a7b159950ccc17cc4887d4723ee 12064 mail optional postfix-ldap_3.10.13-0+deb13u1_arm64.deb d40323ffd902520d657605fb1ad3544b 18500 debug optional postfix-lmdb-dbgsym_3.10.13-0+deb13u1_arm64.deb 9b8eaa7f594bac60b8a03dda506e5c88 8276 mail optional postfix-lmdb_3.10.13-0+deb13u1_arm64.deb 56b47209e7ef6509944683f9df27a41a 13836 debug optional postfix-mongodb-dbgsym_3.10.13-0+deb13u1_arm64.deb 4ca5458701ca5389d06766709ed0eeff 6260 mail optional postfix-mongodb_3.10.13-0+deb13u1_arm64.deb 43d79aa78a4951f04cde2683e6e9e5f9 24156 debug optional postfix-mysql-dbgsym_3.10.13-0+deb13u1_arm64.deb 592530f939c79ac67cbe0e841f603a09 7268 mail optional postfix-mysql_3.10.13-0+deb13u1_arm64.deb 3c1ab1e9ecd93e09ba58ea92ada58574 15112 debug optional postfix-pcre-dbgsym_3.10.13-0+deb13u1_arm64.deb 4b07447275e1e8038355e8867ad46558 7100 mail optional postfix-pcre_3.10.13-0+deb13u1_arm64.deb d6e17ef01fe158f30e5a760cd36e9259 14204 debug optional postfix-pgsql-dbgsym_3.10.13-0+deb13u1_arm64.deb b81202b6032a97435f7623a09aaf599c 6980 mail optional postfix-pgsql_3.10.13-0+deb13u1_arm64.deb e57bd65cb2ae5315a7469a5f448e76f7 8512 debug optional postfix-sqlite-dbgsym_3.10.13-0+deb13u1_arm64.deb 46f5c504bdf2ded3020970065649d2ed 4980 mail optional postfix-sqlite_3.10.13-0+deb13u1_arm64.deb 6e85bc207f8307472c5be83a0727baa0 12920 mail optional postfix_3.10.13-0+deb13u1_arm64-buildd.buildinfo 4839c694a8d2776b2f563f887694f10d 1559228 mail optional postfix_3.10.13-0+deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEElFiH1oZRZh1t4FSiXVp1sEH/1mIFAmp6BcgACgkQXVp1sEH/ 1mKT3w//dLj4TrQsVSr3oquGV6Wv1VB/qTaPAWsUkrrf3vP3LA+aOjesZT8TIAEW ToOeqqd8rR9JdrYl+aSjtTqU+MZcXIsDwCUUgzMRZAbay9tsY8pQ/1UH7QXPMTDs kJtpO6h8dI3JuFnnCzmufG5/waGSm+ssLJ9PBfSaULJ1b2OT2vMENkC3O6uCRMJ/ SIu6KpXmN6GTVVUxs0f90bVWfLtjL56MQO2WYcdReJgsyJLGYCxdUnf69BUEQvnn CLShQPz3iT3xFMtrBytf7TC3Ng3BolkXTBrCZ1Pmbw9/A6qPS5w6NeZevMgrRNcN /0SLBqIMRQ6qF6goucu3zTq67zFZ+wv/Z+0wJo44CmZLJ4BmuJ/0xS0SHuvwzxYu Pt1UqKMCHxA8jTUgHAByA2cF4kPFWrcQMiMaVotzuCR6fRRg/OJS/VJG4Joeuktu 0cHwkeUDudkh3Zky9DT827M/3HKk9f+Rzjk0+NzsGrB6p8ghHpJS5jAvOaJSY0Wc iQmCJRn9/F9kbTkezhf55rcv4trczCDgJ5G6HCa67qbD2KXb8G3kyoHrvG8PAg5Z +m+x7GUJxYJPmAEl9IyCqz9NmhvIkbajc0OY54aR7atDOGSmZje4k41QKKJKl2OK cFrHEbzonFKqaQZhegivVAQ5yPHegSiogyTL4vnkrgsSptHkVuA= =Olx8 -----END PGP SIGNATURE-----