-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Aug 2026 19:35:04 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: amd64 Version: 3.10.13-0+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: amd64 Build Daemon (x86-grnet-01) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Changes: postfix (3.10.13-0+deb13u1) trixie-security; urgency=medium . * new upstream stable/bugfix/security release From the release announcement by Wietse Wenema at https://www.postfix.org/announcements/postfix-3.11.6.html : . These defects were found by Qualys assisted by Claude Mythos Preview, and by OpenAI Security; more than half date from 20 or more years ago. When I implemented Postfix, I knew that there were going to be mistakes. That is the reason why Postfix has its architecture and safety nets. The number of defects may seem large, but considering that they were found in a code base of over 150 thousand lines, the error rate is still lower than what I designed for. . o Policy bypass: . - Bug (introduced: Postfix 2.2, date: 20041102): missing SMTP server resets of MAIL FROM and RCPT TO command state after smtpd_end_of_data_restrictions rejected a message. This resulted in SMTP protocol state desynchronization between the remote SMTP client and the Postfix SMTP server. . - A crafted remote SMTP client could then send RCPT TO and DATA without MAIL FROM, and deliver a second message. Then, smtpd_end_of_data_restrictions skipped check_recipient_access constraints, because a recipient counter was > 1. . - The failure to reset MAIL FROM and RCPT TO state also affected Milter support (added in Postfix 2.3). Here, after a Milter replied with "accept this message" based on the message envelope, and smtpd_end_of_data_restrictions rejected the message, the Postfix SMTP server as before accepted RCPT TO and DATA without MAIL FROM, and smtpd_end_of_data_restrictions as before skipped check_recipient_access constraints for the second message. Under these conditions, the Postfix Milter client remained in the "accept this message" state, skipping Milter policy enforcement for the second message. . o Denial of service: . - Bug (defect introduced: Postfix 3.4, date: 20180805): SMTP server command history memory exhaustion with a large number of very small BDAT requests. . - Bug (defect introduced: Postfix 1.1, date: 20021116): address verification cache poisoning. A local user could use the postdrop command to submit an address verification probe with envelope or message content that Postfix rejected later, resulting in a negative address verification cache entry for that address. On systems that enable address verification, the negative address verification cache entry would force the Postfix SMTP server to reject a message that it should accept (denial of service). . o Server crashes and panic()s: . - Bug (defect introduced: Postfix 3.4, date: 20180805): missing SMTP server reset of RCPT TO state, after a BDAT command error. A crafted remote SMTP client could then send a DATA command without MAIL FROM or RCPT TO, and crash a Postfix SMTP daemon process with a null pointer read error. . - Bug (defect introduced: Postfix 2.4, date: 20051222): null pointer read crash while parsing a malformed Dovecot AUTH server response. . o Read after free, uninitialized read, under/over read: . - Bug (defect introduced: Postfix 2.8, date: 20100914): read-after-free in the PSC_CALL_BACK_NOTIFY() macro. This had no effect on program execution, because myfree() wiped memory, and that memory was not yet reused. . - Read after free (no privilege escalation) in debug logging (defect introduced: Postfix 2.2, date: 20050117). . - Bug (defect introduced: Postfix 2.10, date: 20120617): uninitialized memory read in postscreen HaProxy client after remote I/O exception, causing garbage to be logged. . - Latent bug (defect introduced: Postfix 2.7, date: 20090618): uninitialized memory read after dnsblog(8) returns a string that is not an IPv4 address. . - Bug (defect introduced: before Postfix alpha, date 19970424): the DNS client could read up to two bytes past the end of an MX record, before discovering that the record was too short. This behavior was later copied with SRV records, potentially over-reading up to six bytes. . - Bug (defect introduced: Postfix 1,1, date: 20010524): the postsuper command under-read or over-read a very short queue filename. No crash, information leak, or privilege escalation. . o Other code hygiene: . - Bug (defect introduced: before Postfix alpha, date: 19971106): 'int' over-shift, in the queue file record-length parser. Postfix programs do not generate such records, but an attacker could cause postdrop to reject input or panic(). . - Bug (defect introduced: Postfix 2.2, date: 20050117): non-transitive comparison of IPv4 addresses. . - Bug (defect introduced: Postfix 1.0, date: 20000928): the fast flush server, used by the SMTP command "ETRN", and by the commands "postqueue -s site" and "postqueue -i queue_id" (and their sendmail(1) equivalents), used the wrong duplicate suppression API, resulting in unnecessary queue scans by the queue manager. . - Queue hygiene: the postdrop command accepted the null record type which the rest of Postfix ignores. Checksums-Sha1: 5cb7190dfee30a178a224e3a925c08e6bcd825e6 11072 postfix-cdb-dbgsym_3.10.13-0+deb13u1_amd64.deb d967270642dd86c04f620e041c2f5a064de0c5d1 5420 postfix-cdb_3.10.13-0+deb13u1_amd64.deb e13af3ef7d7774f1e5182d0c7bbe3309d1ac5f49 1880324 postfix-dbgsym_3.10.13-0+deb13u1_amd64.deb 38208058757821187ebd7170b199ee917c81c0ed 22924 postfix-ldap-dbgsym_3.10.13-0+deb13u1_amd64.deb f143423c95760587ab2fb7a2a097ada6b9401ed5 13064 postfix-ldap_3.10.13-0+deb13u1_amd64.deb 5f817c5c122e5d00627649ceb113dd7e3e36eddf 18416 postfix-lmdb-dbgsym_3.10.13-0+deb13u1_amd64.deb 3a9c833b7ddd09d3f1f621d88c2bed9f0551407f 8724 postfix-lmdb_3.10.13-0+deb13u1_amd64.deb 577db2305d6d6c1fff1fd9f02450c68f9e1410d4 13752 postfix-mongodb-dbgsym_3.10.13-0+deb13u1_amd64.deb 96a1e63005ce397d6c8ddac046bded5c39fed0b2 6248 postfix-mongodb_3.10.13-0+deb13u1_amd64.deb dd583f21f0b0cd0d958baacf3b603cfe4f0f75ae 24424 postfix-mysql-dbgsym_3.10.13-0+deb13u1_amd64.deb 112f24b0878a5475a302de9021fe4c0de94caa14 7736 postfix-mysql_3.10.13-0+deb13u1_amd64.deb 9328a0efcb2b2a13e990dfce743b78402bd9a9ca 14976 postfix-pcre-dbgsym_3.10.13-0+deb13u1_amd64.deb 57d8603c75790f05518a20f7fd6d70de48da11d2 7364 postfix-pcre_3.10.13-0+deb13u1_amd64.deb 635cecf8fbc668c9b2e8705c5161f8e4edf87875 14324 postfix-pgsql-dbgsym_3.10.13-0+deb13u1_amd64.deb f3f2e47797d712dbe2c4d3b6d9c46125383642bb 7328 postfix-pgsql_3.10.13-0+deb13u1_amd64.deb e34cd3105787b837039f6df85a3fe5051409f8f6 8276 postfix-sqlite-dbgsym_3.10.13-0+deb13u1_amd64.deb 39ac6215542fa994e1838171209404e8e2a880d8 4980 postfix-sqlite_3.10.13-0+deb13u1_amd64.deb 6cfaece0ca70d14a9e94c3ec0ed09a32f3655398 12936 postfix_3.10.13-0+deb13u1_amd64-buildd.buildinfo 520411384aa36a4415082ea5f754f2d32c4452f1 1612316 postfix_3.10.13-0+deb13u1_amd64.deb Checksums-Sha256: 8cfb28401c3ec90f5f017515e7233028d13e779c5e69c2fecbedd8ddead9281b 11072 postfix-cdb-dbgsym_3.10.13-0+deb13u1_amd64.deb c634bd5097fd596dade74f765aafabe84239acb6ed91787d2bf9a03f1c4dcb9a 5420 postfix-cdb_3.10.13-0+deb13u1_amd64.deb a14f5cd35124307abe9c2cbb45f2f3b32025de9ca209e1aa4c54b168b5a90219 1880324 postfix-dbgsym_3.10.13-0+deb13u1_amd64.deb 99f96f7b5c435dfc3049d184af8c982149ad312d26ce560566636712124981e4 22924 postfix-ldap-dbgsym_3.10.13-0+deb13u1_amd64.deb bb67114ab70ebf7d6f942a7209a25cc82e205e7a3a980438291ec969171b3902 13064 postfix-ldap_3.10.13-0+deb13u1_amd64.deb 4ff9de9661638bb1dab21a17e3d13d369fbb7f4f77db44e6c33554e7e7abaf87 18416 postfix-lmdb-dbgsym_3.10.13-0+deb13u1_amd64.deb 73f00b722ad05fba7f66c7bfa0a9d014462586b6bbe0e7668f47828d85374748 8724 postfix-lmdb_3.10.13-0+deb13u1_amd64.deb 0ed29715ce0f08fe42d2e0b5029ce77aac95030557fd404309b9601a3028b614 13752 postfix-mongodb-dbgsym_3.10.13-0+deb13u1_amd64.deb bf0891b7181ad2de4c87b569921a36585cb47a0da9754b694c10982d771e13b6 6248 postfix-mongodb_3.10.13-0+deb13u1_amd64.deb 9429cc1b95f4a08b1a91eeb392b6d03258d66a3960db5421d5ca8fb9ffd3237f 24424 postfix-mysql-dbgsym_3.10.13-0+deb13u1_amd64.deb 16ef44dddb2a6294e22e1aea67d4f6e66c1a86a1860e32b33d8c232710c4dc6a 7736 postfix-mysql_3.10.13-0+deb13u1_amd64.deb 41922b58ced070978df7c7fc45297c9dec57346552a085a92e44ea931ea45771 14976 postfix-pcre-dbgsym_3.10.13-0+deb13u1_amd64.deb c7bbd1d062dca872ea442c22aad5da20c40a76fefe168d2e762e16ac36c77660 7364 postfix-pcre_3.10.13-0+deb13u1_amd64.deb 5de0f9860994fb2acda167106acb9fda18c3905f90b6fe9c0948e4a395b5a896 14324 postfix-pgsql-dbgsym_3.10.13-0+deb13u1_amd64.deb a5f0cbb8b06963c8e8a68cb77c63a51a4a8608306ea582fe4ee2c3ecc3b2e8c5 7328 postfix-pgsql_3.10.13-0+deb13u1_amd64.deb 945864b41f9c1a4080b6b1b94847497127a11c53baeaa897ae3f9ea12ae6179e 8276 postfix-sqlite-dbgsym_3.10.13-0+deb13u1_amd64.deb df856ddb2f64ef379c23192a4a3c8c649428fb82f0c05214807d806636e264cb 4980 postfix-sqlite_3.10.13-0+deb13u1_amd64.deb af9c0535aaa204c15db457ad7ba35bbd4a48ba17b7a15121171658599965e35a 12936 postfix_3.10.13-0+deb13u1_amd64-buildd.buildinfo 8ce131d062484f3beb5f56615b3f731347e766c0087f5a198acf824e5f034aa2 1612316 postfix_3.10.13-0+deb13u1_amd64.deb Files: b94d0b0aa3d213f522b50f525d28b471 11072 debug optional postfix-cdb-dbgsym_3.10.13-0+deb13u1_amd64.deb 20d21835a4df904c4df549f6527c20fe 5420 mail optional postfix-cdb_3.10.13-0+deb13u1_amd64.deb 2cf3634fdee6c5d423d5b09cc7869873 1880324 debug optional postfix-dbgsym_3.10.13-0+deb13u1_amd64.deb 6c261287f9d6341154e5e9355c3a7877 22924 debug optional postfix-ldap-dbgsym_3.10.13-0+deb13u1_amd64.deb 48fc1bda58f05a827fc245974d7ae276 13064 mail optional postfix-ldap_3.10.13-0+deb13u1_amd64.deb e92c9271f53d2d60b0ca85c6dd36e5b0 18416 debug optional postfix-lmdb-dbgsym_3.10.13-0+deb13u1_amd64.deb 46d1edc0710aa6861ec9f22e9f451375 8724 mail optional postfix-lmdb_3.10.13-0+deb13u1_amd64.deb 597d2d7f550b1730f109a950e0ae5536 13752 debug optional postfix-mongodb-dbgsym_3.10.13-0+deb13u1_amd64.deb d6b3b2697e5627498345e29b1115e16e 6248 mail optional postfix-mongodb_3.10.13-0+deb13u1_amd64.deb 9277a8690bc726e555d7bb5af498cf83 24424 debug optional postfix-mysql-dbgsym_3.10.13-0+deb13u1_amd64.deb 2cb0e36b7871cb9be35e3cc7e8ce9cf5 7736 mail optional postfix-mysql_3.10.13-0+deb13u1_amd64.deb cbe857c942d8ecd6bb1f8acbe66edaa3 14976 debug optional postfix-pcre-dbgsym_3.10.13-0+deb13u1_amd64.deb 7b510a606840ac0ce540d36f58f49530 7364 mail optional postfix-pcre_3.10.13-0+deb13u1_amd64.deb 3d10c50d461bf3d7e40b2bb4fb2c7b1f 14324 debug optional postfix-pgsql-dbgsym_3.10.13-0+deb13u1_amd64.deb 0d2f71ffbae11959fb7771a18957be66 7328 mail optional postfix-pgsql_3.10.13-0+deb13u1_amd64.deb 73cbd716c03940262fd3ad38ca3b38a8 8276 debug optional postfix-sqlite-dbgsym_3.10.13-0+deb13u1_amd64.deb 9e935a621c9d1b453d1d48e0582fff53 4980 mail optional postfix-sqlite_3.10.13-0+deb13u1_amd64.deb dfe2ca16ef60788185ef65b47b61b615 12936 mail optional postfix_3.10.13-0+deb13u1_amd64-buildd.buildinfo 4564ec7563fe0d620be523d2f0e8e046 1612316 mail optional postfix_3.10.13-0+deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmp6BecACgkQf2INRiCd aWJHPQ/+NiU9xLJNFnOrkae5aKFqGlkhZdU7xJSL7lojdjtEwOPoeMCvzkWXIJ7R PeGqXyh9ROPUN0+MPdXuyEgOv2htRhZVrc0lUjgAsedoLV0GDP7fokZLhVliIkvT B2cM3VQpz5aOsgnHTsVWVhZdnz8wIjOKgpm3AykSdXfdXHg/VcYtn0UIzQudrWmE wPDR63ANuOxfeX1OxtoZRPbzQiUQVdXPupjrvpqtsWbez/O3isreObElT57xCfmw H2E+6ki1GobozpfBuZC1NZnwvZ0H77uxEFBSQ50xo8t/rZv7o4SNiIXblmIRifSA spEA67+KE+CLQE7WrgTT+uFGL4T1cpqj/v5FSt2/q3040c4EawlC61nZUKqshN4+ HQpxpBVO193S+TTkIdBcLjVC4ip8wspdrhqS8+jTsEDep8lVJ+XbHv20Fl2JE0Xn YHbIQwW82VvXylfjDg0lha+JpxVLE7n5YlzVTogTDkQiuAX1q1XJm9cR8TChw3x3 uUSw41qdOBOpEkQDR/io1ExHMxAlB32DN0tps2/AeIaXQYe31CJliTvT57xUoqRk UxZEVPsgcmXvI/B5ZY4PBbvoJBmIo46GtTx7QEVvLvYzXhspTWYMoLEsqXi60uvj Ou7cYgwunMGOl+w7UWP6xFESAzrupZMX7c1pZKYX3lkRbqsc+8c= =ldOe -----END PGP SIGNATURE-----