-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Aug 2026 19:35:04 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: i386 Version: 3.10.13-0+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Changes: postfix (3.10.13-0+deb13u1) trixie-security; urgency=medium . * new upstream stable/bugfix/security release From the release announcement by Wietse Wenema at https://www.postfix.org/announcements/postfix-3.11.6.html : . These defects were found by Qualys assisted by Claude Mythos Preview, and by OpenAI Security; more than half date from 20 or more years ago. When I implemented Postfix, I knew that there were going to be mistakes. That is the reason why Postfix has its architecture and safety nets. The number of defects may seem large, but considering that they were found in a code base of over 150 thousand lines, the error rate is still lower than what I designed for. . o Policy bypass: . - Bug (introduced: Postfix 2.2, date: 20041102): missing SMTP server resets of MAIL FROM and RCPT TO command state after smtpd_end_of_data_restrictions rejected a message. This resulted in SMTP protocol state desynchronization between the remote SMTP client and the Postfix SMTP server. . - A crafted remote SMTP client could then send RCPT TO and DATA without MAIL FROM, and deliver a second message. Then, smtpd_end_of_data_restrictions skipped check_recipient_access constraints, because a recipient counter was > 1. . - The failure to reset MAIL FROM and RCPT TO state also affected Milter support (added in Postfix 2.3). Here, after a Milter replied with "accept this message" based on the message envelope, and smtpd_end_of_data_restrictions rejected the message, the Postfix SMTP server as before accepted RCPT TO and DATA without MAIL FROM, and smtpd_end_of_data_restrictions as before skipped check_recipient_access constraints for the second message. Under these conditions, the Postfix Milter client remained in the "accept this message" state, skipping Milter policy enforcement for the second message. . o Denial of service: . - Bug (defect introduced: Postfix 3.4, date: 20180805): SMTP server command history memory exhaustion with a large number of very small BDAT requests. . - Bug (defect introduced: Postfix 1.1, date: 20021116): address verification cache poisoning. A local user could use the postdrop command to submit an address verification probe with envelope or message content that Postfix rejected later, resulting in a negative address verification cache entry for that address. On systems that enable address verification, the negative address verification cache entry would force the Postfix SMTP server to reject a message that it should accept (denial of service). . o Server crashes and panic()s: . - Bug (defect introduced: Postfix 3.4, date: 20180805): missing SMTP server reset of RCPT TO state, after a BDAT command error. A crafted remote SMTP client could then send a DATA command without MAIL FROM or RCPT TO, and crash a Postfix SMTP daemon process with a null pointer read error. . - Bug (defect introduced: Postfix 2.4, date: 20051222): null pointer read crash while parsing a malformed Dovecot AUTH server response. . o Read after free, uninitialized read, under/over read: . - Bug (defect introduced: Postfix 2.8, date: 20100914): read-after-free in the PSC_CALL_BACK_NOTIFY() macro. This had no effect on program execution, because myfree() wiped memory, and that memory was not yet reused. . - Read after free (no privilege escalation) in debug logging (defect introduced: Postfix 2.2, date: 20050117). . - Bug (defect introduced: Postfix 2.10, date: 20120617): uninitialized memory read in postscreen HaProxy client after remote I/O exception, causing garbage to be logged. . - Latent bug (defect introduced: Postfix 2.7, date: 20090618): uninitialized memory read after dnsblog(8) returns a string that is not an IPv4 address. . - Bug (defect introduced: before Postfix alpha, date 19970424): the DNS client could read up to two bytes past the end of an MX record, before discovering that the record was too short. This behavior was later copied with SRV records, potentially over-reading up to six bytes. . - Bug (defect introduced: Postfix 1,1, date: 20010524): the postsuper command under-read or over-read a very short queue filename. No crash, information leak, or privilege escalation. . o Other code hygiene: . - Bug (defect introduced: before Postfix alpha, date: 19971106): 'int' over-shift, in the queue file record-length parser. Postfix programs do not generate such records, but an attacker could cause postdrop to reject input or panic(). . - Bug (defect introduced: Postfix 2.2, date: 20050117): non-transitive comparison of IPv4 addresses. . - Bug (defect introduced: Postfix 1.0, date: 20000928): the fast flush server, used by the SMTP command "ETRN", and by the commands "postqueue -s site" and "postqueue -i queue_id" (and their sendmail(1) equivalents), used the wrong duplicate suppression API, resulting in unnecessary queue scans by the queue manager. . - Queue hygiene: the postdrop command accepted the null record type which the rest of Postfix ignores. Checksums-Sha1: fb26897098c83ab7711c193b6c18bc4e3c3f07f4 10156 postfix-cdb-dbgsym_3.10.13-0+deb13u1_i386.deb 1d41f57cf091507b628eba6e6f0bfa22202b9f37 5692 postfix-cdb_3.10.13-0+deb13u1_i386.deb 78a4a754f286708fbab5b08cb6b0ec86d6431cac 1626248 postfix-dbgsym_3.10.13-0+deb13u1_i386.deb 2420c856ec66f302252a1b65a03f0d69edb828a0 19652 postfix-ldap-dbgsym_3.10.13-0+deb13u1_i386.deb 06c903c499012c5bc31f22be8afa8b0ce9950df4 13804 postfix-ldap_3.10.13-0+deb13u1_i386.deb 00be84f9a4136c2da1dd332e843830778beb9b25 16496 postfix-lmdb-dbgsym_3.10.13-0+deb13u1_i386.deb 33abf9cc7ab05c20c75fcd1c4c63eed9d92d0c09 9060 postfix-lmdb_3.10.13-0+deb13u1_i386.deb 6a880a53fc05ec8a11354a695a6500cb0b551911 12808 postfix-mongodb-dbgsym_3.10.13-0+deb13u1_i386.deb 1bb0769549a3217413e4f73b7bedba8ce0927ae4 6476 postfix-mongodb_3.10.13-0+deb13u1_i386.deb d9973233e02f004f0a811616bec39fc43809aa5f 23096 postfix-mysql-dbgsym_3.10.13-0+deb13u1_i386.deb 4cd5c2229ad23329300142ed9026f694694e2e6f 8196 postfix-mysql_3.10.13-0+deb13u1_i386.deb 2c9638bd8012026104e6229311d2f2fccabbf57a 13832 postfix-pcre-dbgsym_3.10.13-0+deb13u1_i386.deb b02ef47576f11c06174783939d57c5b6c24cf2c7 7644 postfix-pcre_3.10.13-0+deb13u1_i386.deb 44182e98619f1ba3afc85b3e044e007d74ff9bed 13176 postfix-pgsql-dbgsym_3.10.13-0+deb13u1_i386.deb bff775bd13a6064385b353f822ff574c58308820 7744 postfix-pgsql_3.10.13-0+deb13u1_i386.deb aeaf135febb36a9884d7d3dca6098ea6500942f4 7596 postfix-sqlite-dbgsym_3.10.13-0+deb13u1_i386.deb f201a351db2f0bfa55c879972a1e43c59378f8cc 5096 postfix-sqlite_3.10.13-0+deb13u1_i386.deb aa0531350b377e8e3cab95526c493cc4694a2e73 12789 postfix_3.10.13-0+deb13u1_i386-buildd.buildinfo d7f0f221d53c8aff400b164b4e8e5836cbc0a6ac 1639760 postfix_3.10.13-0+deb13u1_i386.deb Checksums-Sha256: 0b0ceebda865e4744fd3f88a74c64ed351a38e19308f707dcb7a98ebf9a4ea7f 10156 postfix-cdb-dbgsym_3.10.13-0+deb13u1_i386.deb 5aeaaac67b15b29b7bee1850b25ff97491dff3353247e3afa5451bbe65da188c 5692 postfix-cdb_3.10.13-0+deb13u1_i386.deb f35029bd1924ff8eac2b62db0c394b2334f32e06fd17fa9c44a64aa551bb8add 1626248 postfix-dbgsym_3.10.13-0+deb13u1_i386.deb b0a3be7083d7b84adb66a52307ef8455e2e3dbbea5155a4d71eb38999c389501 19652 postfix-ldap-dbgsym_3.10.13-0+deb13u1_i386.deb b3970437ea2b516d6e2ebfde0043d7b86eec453b20b5774c815656f0ed089486 13804 postfix-ldap_3.10.13-0+deb13u1_i386.deb 870117258c61ba65764ef206afa319c5bf2315067a9fda4dc6797fad682783f8 16496 postfix-lmdb-dbgsym_3.10.13-0+deb13u1_i386.deb 974b9665b232265293f9294f74a93a347fdd1a278cbe3206f0d521d07978397d 9060 postfix-lmdb_3.10.13-0+deb13u1_i386.deb 5ec40175ef971c403fe1757cc3af09db580a63c5fd35167cb35786946db8f3b9 12808 postfix-mongodb-dbgsym_3.10.13-0+deb13u1_i386.deb 1fc1dabd3d290005bbf1935c0d041e96af833b929f7bcd11e2cef697687ae556 6476 postfix-mongodb_3.10.13-0+deb13u1_i386.deb 7e0cd18182496be143a489dc1e95fc6cde7280926faecb214597537ee0d3f73f 23096 postfix-mysql-dbgsym_3.10.13-0+deb13u1_i386.deb 6a6e300d6b8693b37e39b3812b66ab275736280805c7ee5c125d5f63f3ea29ca 8196 postfix-mysql_3.10.13-0+deb13u1_i386.deb 10fb11787dde4ece79dafbbfbfda76e77d71b40210a5ecb16ef76ba32e3acb1a 13832 postfix-pcre-dbgsym_3.10.13-0+deb13u1_i386.deb 5685cb7c66929e500cf95d12cab60cf00d95c082b559c711b8afc9c6459e52ff 7644 postfix-pcre_3.10.13-0+deb13u1_i386.deb e9971614eb98509f6cd5497585b5efef732197c4a64f0b5b53e37bda72ca2171 13176 postfix-pgsql-dbgsym_3.10.13-0+deb13u1_i386.deb c39175f977486841dcfa64f5cc8ae5749f74b89d5ec813b04c03ddba348fb3c4 7744 postfix-pgsql_3.10.13-0+deb13u1_i386.deb 36fb4b1073e349fa1a0195442e8a6ce995e802ff72165cee12aecd92cc098e3d 7596 postfix-sqlite-dbgsym_3.10.13-0+deb13u1_i386.deb 6e17c384bfc94ad84d1e96f61aba4b475cc42ed3fa309c0ef3646358b83d105c 5096 postfix-sqlite_3.10.13-0+deb13u1_i386.deb b1fa9e641a770559e2292fc936a383e583b28129bc1907704cd8a4e5faf39b8f 12789 postfix_3.10.13-0+deb13u1_i386-buildd.buildinfo a00406507040573e0ea4060fdbfcb8348f008930873aeab328ea0efdcdd3a7f7 1639760 postfix_3.10.13-0+deb13u1_i386.deb Files: 6ccc730e5ea1ae34d96eaa4b5c628d3f 10156 debug optional postfix-cdb-dbgsym_3.10.13-0+deb13u1_i386.deb 9e79eee6fd3583ad63a08553d09aeca2 5692 mail optional postfix-cdb_3.10.13-0+deb13u1_i386.deb c571b5674caea98e7b3d1305284e7f59 1626248 debug optional postfix-dbgsym_3.10.13-0+deb13u1_i386.deb 7c02c0dce716d22dd46915266dc24f95 19652 debug optional postfix-ldap-dbgsym_3.10.13-0+deb13u1_i386.deb 298ec1f823f566c61cd7113e09fe1be3 13804 mail optional postfix-ldap_3.10.13-0+deb13u1_i386.deb 36f8a685fc3cfc39e94fb8f6006d2a44 16496 debug optional postfix-lmdb-dbgsym_3.10.13-0+deb13u1_i386.deb 2e3efec0020d61cf85f1bc4e29944eb6 9060 mail optional postfix-lmdb_3.10.13-0+deb13u1_i386.deb fae7e46ccaef0db4db85ce63794d0ba0 12808 debug optional postfix-mongodb-dbgsym_3.10.13-0+deb13u1_i386.deb 1672279fb3835b8c404ea1c04593a36e 6476 mail optional postfix-mongodb_3.10.13-0+deb13u1_i386.deb be5aa2437bb1b0cc288382e5cfe72300 23096 debug optional postfix-mysql-dbgsym_3.10.13-0+deb13u1_i386.deb 6b718768b3892f45666005abd43cba2a 8196 mail optional postfix-mysql_3.10.13-0+deb13u1_i386.deb 2832541482bee73ce43bd754ede0004e 13832 debug optional postfix-pcre-dbgsym_3.10.13-0+deb13u1_i386.deb f477d857b5980393aef2bc07b960265c 7644 mail optional postfix-pcre_3.10.13-0+deb13u1_i386.deb 3e345f426f0d11e4ab2881ffddb46ceb 13176 debug optional postfix-pgsql-dbgsym_3.10.13-0+deb13u1_i386.deb 52775bef079c355359c4734c207483ce 7744 mail optional postfix-pgsql_3.10.13-0+deb13u1_i386.deb 843b36ae6b596be80a9e00164cd7c524 7596 debug optional postfix-sqlite-dbgsym_3.10.13-0+deb13u1_i386.deb 772589d1b9a4c0d715aec11591b3388d 5096 mail optional postfix-sqlite_3.10.13-0+deb13u1_i386.deb 929e51b0a20828df9a20fd8881f44b3d 12789 mail optional postfix_3.10.13-0+deb13u1_i386-buildd.buildinfo 368a9400ee0d16a64ede119c49159097 1639760 mail optional postfix_3.10.13-0+deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+i/sCsF3puL4e7qIGNGWmfrqILEFAmp6BewACgkQGNGWmfrq ILHCBA/+LsXQ2D2j90gxuBG6khx8JpaOvusEnF3g4YmmyEZqiZDDlBp4Tp7pXMLi gknEo+5nlyf9HzRpJq0k1qlaiNgtEvTuPr2U+ruDLzc05PgCK1dxhScEKEzS7e9b V3BMHdyFWYCetJcAqvke1l8ahydjR/i47JWbz34NyMo7+bdfr+rWWHp/4JbRmiek r3vpZmYTOlnRbgHZtawxw6fSaz1pxaOU+BBJZ1na0qWvHPgLSYsIdyMFta7kneW5 H63CLlBNzHa22jZRRsN6KjOhbudV0RhhDKpUVRzVYuxKsu5Sxi6achFF13s7yBpg l9lkt8kOqyH2BibsCnBgXOmZukWViO+IoaMzvuyHAr8CdrBaOZnRBZ1T0u0mdyRS re9CLie4sbgpkGTcretEL76oQbdaFSpxJ9hO5nhIVjGL/RgR+67Bi+Jlosfpe/zD 2uGiIN2CyZmCfT8f3coRmEOaCY4RmCbkdXO0GGNiaFZGOmI62wIsLLNl//375xEV MkrgEiWX/VJyLDJBNrW+cPdgpSlJ/PUMfo6k40fhHDA38gvN0V+q5a4szbyDfiZZ qu1uNBBPuCyoWKJI+OpgeCEU30mQ6CnxUayDeXepSNbNehUTD5ra6mjbCgXyYA1d FrHLU0B4jpcp3Dv+RJZU9c5VmSdUDSUWIBr5DfEC179y6qy7aCI= =oBsy -----END PGP SIGNATURE-----