-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Aug 2026 19:35:04 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: ppc64el Version: 3.10.13-0+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-conova-01) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Changes: postfix (3.10.13-0+deb13u1) trixie-security; urgency=medium . * new upstream stable/bugfix/security release From the release announcement by Wietse Wenema at https://www.postfix.org/announcements/postfix-3.11.6.html : . These defects were found by Qualys assisted by Claude Mythos Preview, and by OpenAI Security; more than half date from 20 or more years ago. When I implemented Postfix, I knew that there were going to be mistakes. That is the reason why Postfix has its architecture and safety nets. The number of defects may seem large, but considering that they were found in a code base of over 150 thousand lines, the error rate is still lower than what I designed for. . o Policy bypass: . - Bug (introduced: Postfix 2.2, date: 20041102): missing SMTP server resets of MAIL FROM and RCPT TO command state after smtpd_end_of_data_restrictions rejected a message. This resulted in SMTP protocol state desynchronization between the remote SMTP client and the Postfix SMTP server. . - A crafted remote SMTP client could then send RCPT TO and DATA without MAIL FROM, and deliver a second message. Then, smtpd_end_of_data_restrictions skipped check_recipient_access constraints, because a recipient counter was > 1. . - The failure to reset MAIL FROM and RCPT TO state also affected Milter support (added in Postfix 2.3). Here, after a Milter replied with "accept this message" based on the message envelope, and smtpd_end_of_data_restrictions rejected the message, the Postfix SMTP server as before accepted RCPT TO and DATA without MAIL FROM, and smtpd_end_of_data_restrictions as before skipped check_recipient_access constraints for the second message. Under these conditions, the Postfix Milter client remained in the "accept this message" state, skipping Milter policy enforcement for the second message. . o Denial of service: . - Bug (defect introduced: Postfix 3.4, date: 20180805): SMTP server command history memory exhaustion with a large number of very small BDAT requests. . - Bug (defect introduced: Postfix 1.1, date: 20021116): address verification cache poisoning. A local user could use the postdrop command to submit an address verification probe with envelope or message content that Postfix rejected later, resulting in a negative address verification cache entry for that address. On systems that enable address verification, the negative address verification cache entry would force the Postfix SMTP server to reject a message that it should accept (denial of service). . o Server crashes and panic()s: . - Bug (defect introduced: Postfix 3.4, date: 20180805): missing SMTP server reset of RCPT TO state, after a BDAT command error. A crafted remote SMTP client could then send a DATA command without MAIL FROM or RCPT TO, and crash a Postfix SMTP daemon process with a null pointer read error. . - Bug (defect introduced: Postfix 2.4, date: 20051222): null pointer read crash while parsing a malformed Dovecot AUTH server response. . o Read after free, uninitialized read, under/over read: . - Bug (defect introduced: Postfix 2.8, date: 20100914): read-after-free in the PSC_CALL_BACK_NOTIFY() macro. This had no effect on program execution, because myfree() wiped memory, and that memory was not yet reused. . - Read after free (no privilege escalation) in debug logging (defect introduced: Postfix 2.2, date: 20050117). . - Bug (defect introduced: Postfix 2.10, date: 20120617): uninitialized memory read in postscreen HaProxy client after remote I/O exception, causing garbage to be logged. . - Latent bug (defect introduced: Postfix 2.7, date: 20090618): uninitialized memory read after dnsblog(8) returns a string that is not an IPv4 address. . - Bug (defect introduced: before Postfix alpha, date 19970424): the DNS client could read up to two bytes past the end of an MX record, before discovering that the record was too short. This behavior was later copied with SRV records, potentially over-reading up to six bytes. . - Bug (defect introduced: Postfix 1,1, date: 20010524): the postsuper command under-read or over-read a very short queue filename. No crash, information leak, or privilege escalation. . o Other code hygiene: . - Bug (defect introduced: before Postfix alpha, date: 19971106): 'int' over-shift, in the queue file record-length parser. Postfix programs do not generate such records, but an attacker could cause postdrop to reject input or panic(). . - Bug (defect introduced: Postfix 2.2, date: 20050117): non-transitive comparison of IPv4 addresses. . - Bug (defect introduced: Postfix 1.0, date: 20000928): the fast flush server, used by the SMTP command "ETRN", and by the commands "postqueue -s site" and "postqueue -i queue_id" (and their sendmail(1) equivalents), used the wrong duplicate suppression API, resulting in unnecessary queue scans by the queue manager. . - Queue hygiene: the postdrop command accepted the null record type which the rest of Postfix ignores. Checksums-Sha1: 5811f8464a560438de26d6833c3da423923e2dc8 11536 postfix-cdb-dbgsym_3.10.13-0+deb13u1_ppc64el.deb bf75b9d968f09e732c50ae40bc99c5416c8994ee 5688 postfix-cdb_3.10.13-0+deb13u1_ppc64el.deb dc50179424f08600cee44e18d0c2fcc1919513f6 1925692 postfix-dbgsym_3.10.13-0+deb13u1_ppc64el.deb 7a0109507ea9f34cf677f4d1ac4b7dd8248bab9a 23700 postfix-ldap-dbgsym_3.10.13-0+deb13u1_ppc64el.deb bbfc3f23b189f570c7abaf2403cdb4c303bb9871 13100 postfix-ldap_3.10.13-0+deb13u1_ppc64el.deb 7c6bfe825812ee402be0d0ef633396319c26710c 19152 postfix-lmdb-dbgsym_3.10.13-0+deb13u1_ppc64el.deb e2e0681bb328c38d3a78e56e50aa17e48a0a0c3d 8608 postfix-lmdb_3.10.13-0+deb13u1_ppc64el.deb afee383267bb2e20466f74d01d8051888d4f149c 14188 postfix-mongodb-dbgsym_3.10.13-0+deb13u1_ppc64el.deb 502cfdfeb0ab8bee090448ccd74e8be463f6f5a1 6716 postfix-mongodb_3.10.13-0+deb13u1_ppc64el.deb 550660ad9079e8a4ea4c5d6b589bac738b569938 25056 postfix-mysql-dbgsym_3.10.13-0+deb13u1_ppc64el.deb 6b4aaa55f66338d7ab021ced0e3e09058c0a941e 8420 postfix-mysql_3.10.13-0+deb13u1_ppc64el.deb 0d10addb0b174df4b9c8fee79bc049187e93fbd7 15348 postfix-pcre-dbgsym_3.10.13-0+deb13u1_ppc64el.deb 0a2063a739a1cb3700a63a018e1cb70ba2284bd7 7872 postfix-pcre_3.10.13-0+deb13u1_ppc64el.deb 88b503bdc93d915a1863a322fd3842bb0ad062b7 15040 postfix-pgsql-dbgsym_3.10.13-0+deb13u1_ppc64el.deb 98679b782b2713ed54de35eec29a6ace4a23d37f 8056 postfix-pgsql_3.10.13-0+deb13u1_ppc64el.deb 39b16e86106d7fa078e3194aec078786ffc15eac 8708 postfix-sqlite-dbgsym_3.10.13-0+deb13u1_ppc64el.deb 60e86d0f37086dffa9c1d353b719f7ffa0421a3a 5052 postfix-sqlite_3.10.13-0+deb13u1_ppc64el.deb f92e550b1dc2c8c971cc47c404fee10f13723118 13031 postfix_3.10.13-0+deb13u1_ppc64el-buildd.buildinfo 8dcd315956828a0a675e327f35270f96f23194fd 1643780 postfix_3.10.13-0+deb13u1_ppc64el.deb Checksums-Sha256: a87872f7d429324300babf78f9f41a906fea64b7d9ae2bace19160f084b9086a 11536 postfix-cdb-dbgsym_3.10.13-0+deb13u1_ppc64el.deb 20a4b0de9b461d32f6cd8a807312548f245dcfa5dca3890e13d7aa468111a941 5688 postfix-cdb_3.10.13-0+deb13u1_ppc64el.deb 7916165db37d34e3bb83e5a1e075dba629879c57fdd9a09269b151a3155107a8 1925692 postfix-dbgsym_3.10.13-0+deb13u1_ppc64el.deb 65f456256f2a7fdc4a745beb3d19ac394c86b7d4aaec56b2324e40b5a5edd056 23700 postfix-ldap-dbgsym_3.10.13-0+deb13u1_ppc64el.deb e11a2f1f875d49dffa5ef149d2328699c717240db77c1903baa98467641e50ad 13100 postfix-ldap_3.10.13-0+deb13u1_ppc64el.deb c7270b9fdaeef49aa74354dbff91202c4fc32cff7cfa267bfed7b4b5aa280318 19152 postfix-lmdb-dbgsym_3.10.13-0+deb13u1_ppc64el.deb 4e4ddeae3e98ebb148bd1cf77e7b90c1ede1d1f0a51bd5357239fb0b23dd641b 8608 postfix-lmdb_3.10.13-0+deb13u1_ppc64el.deb d53fd68292b20158feee85e1accc01d904f1a2a9fd8b43dd95ec7d4ee76ae4e4 14188 postfix-mongodb-dbgsym_3.10.13-0+deb13u1_ppc64el.deb cc7a2ad22bb64ddb1111d6252258e0153b3880c56ec12c9127662b3fc9564a50 6716 postfix-mongodb_3.10.13-0+deb13u1_ppc64el.deb 4a38edf78ba33c1a426f247cc52cf64c19c6f4fd8648636d5f7309eb1c641e5c 25056 postfix-mysql-dbgsym_3.10.13-0+deb13u1_ppc64el.deb eb75c8bfeb8b7caa467086df3335315c70f09daed616bfa51f86fcfacf49995a 8420 postfix-mysql_3.10.13-0+deb13u1_ppc64el.deb 243aa9d9d17c52922ee55709d553677cccad08454e3a4386cd45ac4a1322b546 15348 postfix-pcre-dbgsym_3.10.13-0+deb13u1_ppc64el.deb c675fda18d5446bd7847bad5d9f1dfaedcd258e42280dfbff25a3f5655e0593a 7872 postfix-pcre_3.10.13-0+deb13u1_ppc64el.deb 68036a05d46c93809ab87a25da3f30780806a8edaaa9734e448bf33d2ec2b86f 15040 postfix-pgsql-dbgsym_3.10.13-0+deb13u1_ppc64el.deb b1b4a7a9a9278b024295bbec9d5196d6f463d9390a11de6014532b1611aba690 8056 postfix-pgsql_3.10.13-0+deb13u1_ppc64el.deb ae8a8ee7725216f22155e1d5cdbaa9f0ea5b8b81f5d77ffd52269916322b8688 8708 postfix-sqlite-dbgsym_3.10.13-0+deb13u1_ppc64el.deb 4f714abfe7bd1f685245afd54d039b72e92883dbb39a7f113eefb70773403c1f 5052 postfix-sqlite_3.10.13-0+deb13u1_ppc64el.deb a3ca833e423b793e2e70f21c95abd2530e5b8a73b60d29ca0252436b350457af 13031 postfix_3.10.13-0+deb13u1_ppc64el-buildd.buildinfo d2cd645bc2a3ba818084043ffb2c482e4e4a6b1a2d133293714fb5869a4a5946 1643780 postfix_3.10.13-0+deb13u1_ppc64el.deb Files: 4703438f9b095840a33941369a1a2579 11536 debug optional postfix-cdb-dbgsym_3.10.13-0+deb13u1_ppc64el.deb 25647559ff7587a30de42ae86f2464d7 5688 mail optional postfix-cdb_3.10.13-0+deb13u1_ppc64el.deb b794fa66d44e6f8ba15ad77fcc83ccc1 1925692 debug optional postfix-dbgsym_3.10.13-0+deb13u1_ppc64el.deb 8f6cc06e074a26127dd8da9967814b7e 23700 debug optional postfix-ldap-dbgsym_3.10.13-0+deb13u1_ppc64el.deb b9d3471d46496464b552d1e548aa984f 13100 mail optional postfix-ldap_3.10.13-0+deb13u1_ppc64el.deb 3c52c7e007ad50a487165a15f7b8821e 19152 debug optional postfix-lmdb-dbgsym_3.10.13-0+deb13u1_ppc64el.deb ba6ccfb41569f49a766f39604434d2ab 8608 mail optional postfix-lmdb_3.10.13-0+deb13u1_ppc64el.deb a09c492a80405c4286b3519950a6d4f7 14188 debug optional postfix-mongodb-dbgsym_3.10.13-0+deb13u1_ppc64el.deb bd2a4fa4b9a43939f1446475ae974aea 6716 mail optional postfix-mongodb_3.10.13-0+deb13u1_ppc64el.deb 8e73cd7ee2fe26bffa3dff555188422b 25056 debug optional postfix-mysql-dbgsym_3.10.13-0+deb13u1_ppc64el.deb 5a8fa17412fa85e459c720f4a3d31190 8420 mail optional postfix-mysql_3.10.13-0+deb13u1_ppc64el.deb fc0df604bba5d537a465c6ccbe69422a 15348 debug optional postfix-pcre-dbgsym_3.10.13-0+deb13u1_ppc64el.deb 112b9c2f8af440388b96e6ad1db7987a 7872 mail optional postfix-pcre_3.10.13-0+deb13u1_ppc64el.deb 4ef8743c7081637f89680c9aac87e729 15040 debug optional postfix-pgsql-dbgsym_3.10.13-0+deb13u1_ppc64el.deb 87f22919c3913457290ebb0aad7356bd 8056 mail optional postfix-pgsql_3.10.13-0+deb13u1_ppc64el.deb b458e5c9058d3db516a94919f45f3add 8708 debug optional postfix-sqlite-dbgsym_3.10.13-0+deb13u1_ppc64el.deb 26263fa5d5d36a54f40f4dc04db75c3f 5052 mail optional postfix-sqlite_3.10.13-0+deb13u1_ppc64el.deb e8fee33e3b17817cfe5cad3e5e327e9a 13031 mail optional postfix_3.10.13-0+deb13u1_ppc64el-buildd.buildinfo 25eb46882e2fa21e5ef7b4cd5bdc4ab2 1643780 mail optional postfix_3.10.13-0+deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEDoRc43uRWMOoIqIgDNLUPhbmg7MFAmp6BcUACgkQDNLUPhbm g7M3bQ/+M7C2u9AaZz8ovE0YOHuVJn4+d3Jvygt+2QnyN48eqGi/DfNuqfyHeYMr sTpAvmRvaV1msvEh/KsaQxVBuq99GIgnJShi89ZB53y7LT3DmEHMdItndGdF9HyI e1IBojkkOVDLpNTZbxappdecmTKjAbaUS6TXUurHLQiJKWQMbFFqlBQh5PveCB67 pOlZSDfQxR1z4BZovzIzxRVStWLfY/1NL5DVjx+CtoCmJPIxrjrz2mXXZoAbpmNr kNhkS1635+DYsTBiNIukE0so7jApzDalJAzUbvv3OXGh7uTLOE1cLdOe0JxCT0tJ /ZWtKhpDqIQpnSb9JcGlhkgqOnnuTdjq4cus0RIJ42Uo/VcnEXPM2U8hH0IbcSVu jKgGLHY8Ud73q+wJI4qV7lY7E7Qs8X+ZpKbMxayG7XaOCIh86Gfzgl4LMbOjznDB TOlfPsSFyd1EAayg7WnecP4EPzQFxlyw4UL8/8BzHzuPXbJcnBl/vg7+sL0qx9h/ WWLe9ACOpl6/oCh3mlmY2EANZJ+dZtSxVWESgqtX0BB2xmZ93lstIOvnHR8+BG3E z27GLzEYihppeDomnLF670oemxgoz+YE+6cs7paNCXPnOVGvlHLewhXNiV1FUeQ2 s4Hjhp/nHkCJygDA4xKv8yu83550BlLyL6KiBzmwSIwC7umQgM0= =MA2p -----END PGP SIGNATURE-----