-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Aug 2026 19:35:04 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: riscv64 Version: 3.10.13-0+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: riscv64 Build Daemon (rv-manda-01) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Changes: postfix (3.10.13-0+deb13u1) trixie-security; urgency=medium . * new upstream stable/bugfix/security release From the release announcement by Wietse Wenema at https://www.postfix.org/announcements/postfix-3.11.6.html : . These defects were found by Qualys assisted by Claude Mythos Preview, and by OpenAI Security; more than half date from 20 or more years ago. When I implemented Postfix, I knew that there were going to be mistakes. That is the reason why Postfix has its architecture and safety nets. The number of defects may seem large, but considering that they were found in a code base of over 150 thousand lines, the error rate is still lower than what I designed for. . o Policy bypass: . - Bug (introduced: Postfix 2.2, date: 20041102): missing SMTP server resets of MAIL FROM and RCPT TO command state after smtpd_end_of_data_restrictions rejected a message. This resulted in SMTP protocol state desynchronization between the remote SMTP client and the Postfix SMTP server. . - A crafted remote SMTP client could then send RCPT TO and DATA without MAIL FROM, and deliver a second message. Then, smtpd_end_of_data_restrictions skipped check_recipient_access constraints, because a recipient counter was > 1. . - The failure to reset MAIL FROM and RCPT TO state also affected Milter support (added in Postfix 2.3). Here, after a Milter replied with "accept this message" based on the message envelope, and smtpd_end_of_data_restrictions rejected the message, the Postfix SMTP server as before accepted RCPT TO and DATA without MAIL FROM, and smtpd_end_of_data_restrictions as before skipped check_recipient_access constraints for the second message. Under these conditions, the Postfix Milter client remained in the "accept this message" state, skipping Milter policy enforcement for the second message. . o Denial of service: . - Bug (defect introduced: Postfix 3.4, date: 20180805): SMTP server command history memory exhaustion with a large number of very small BDAT requests. . - Bug (defect introduced: Postfix 1.1, date: 20021116): address verification cache poisoning. A local user could use the postdrop command to submit an address verification probe with envelope or message content that Postfix rejected later, resulting in a negative address verification cache entry for that address. On systems that enable address verification, the negative address verification cache entry would force the Postfix SMTP server to reject a message that it should accept (denial of service). . o Server crashes and panic()s: . - Bug (defect introduced: Postfix 3.4, date: 20180805): missing SMTP server reset of RCPT TO state, after a BDAT command error. A crafted remote SMTP client could then send a DATA command without MAIL FROM or RCPT TO, and crash a Postfix SMTP daemon process with a null pointer read error. . - Bug (defect introduced: Postfix 2.4, date: 20051222): null pointer read crash while parsing a malformed Dovecot AUTH server response. . o Read after free, uninitialized read, under/over read: . - Bug (defect introduced: Postfix 2.8, date: 20100914): read-after-free in the PSC_CALL_BACK_NOTIFY() macro. This had no effect on program execution, because myfree() wiped memory, and that memory was not yet reused. . - Read after free (no privilege escalation) in debug logging (defect introduced: Postfix 2.2, date: 20050117). . - Bug (defect introduced: Postfix 2.10, date: 20120617): uninitialized memory read in postscreen HaProxy client after remote I/O exception, causing garbage to be logged. . - Latent bug (defect introduced: Postfix 2.7, date: 20090618): uninitialized memory read after dnsblog(8) returns a string that is not an IPv4 address. . - Bug (defect introduced: before Postfix alpha, date 19970424): the DNS client could read up to two bytes past the end of an MX record, before discovering that the record was too short. This behavior was later copied with SRV records, potentially over-reading up to six bytes. . - Bug (defect introduced: Postfix 1,1, date: 20010524): the postsuper command under-read or over-read a very short queue filename. No crash, information leak, or privilege escalation. . o Other code hygiene: . - Bug (defect introduced: before Postfix alpha, date: 19971106): 'int' over-shift, in the queue file record-length parser. Postfix programs do not generate such records, but an attacker could cause postdrop to reject input or panic(). . - Bug (defect introduced: Postfix 2.2, date: 20050117): non-transitive comparison of IPv4 addresses. . - Bug (defect introduced: Postfix 1.0, date: 20000928): the fast flush server, used by the SMTP command "ETRN", and by the commands "postqueue -s site" and "postqueue -i queue_id" (and their sendmail(1) equivalents), used the wrong duplicate suppression API, resulting in unnecessary queue scans by the queue manager. . - Queue hygiene: the postdrop command accepted the null record type which the rest of Postfix ignores. Checksums-Sha1: 014171e711963f7e3035f7c4111eca8439f7aa4e 11024 postfix-cdb-dbgsym_3.10.13-0+deb13u1_riscv64.deb 682b05f6b1d26ef5c5449c037b6a7429d364e116 5104 postfix-cdb_3.10.13-0+deb13u1_riscv64.deb 73079d43b734950b7e29d235e660b4b567bd6ff8 1852984 postfix-dbgsym_3.10.13-0+deb13u1_riscv64.deb 58498dfb38a9f5b437e0f298c0fdf32865d9db07 22912 postfix-ldap-dbgsym_3.10.13-0+deb13u1_riscv64.deb 62c165a9b3159227eccf6f6bebf2061bd9977bcd 12208 postfix-ldap_3.10.13-0+deb13u1_riscv64.deb c49a4a71cdb1e562a1388082d49a3c8c18f07760 17980 postfix-lmdb-dbgsym_3.10.13-0+deb13u1_riscv64.deb 1fac1d2a8b2469123728da2795d75bff923c0ea9 7976 postfix-lmdb_3.10.13-0+deb13u1_riscv64.deb 54a1f5cb03c97517bfabaa9527c5ce1f5933bb51 13820 postfix-mongodb-dbgsym_3.10.13-0+deb13u1_riscv64.deb 8c124e48ded039d05f909f1f08c34872d3a19017 6064 postfix-mongodb_3.10.13-0+deb13u1_riscv64.deb d94802779871a49395da7c60938a0368cb26d54c 24212 postfix-mysql-dbgsym_3.10.13-0+deb13u1_riscv64.deb ded3035114c49f9183514515350053668fb399ca 7140 postfix-mysql_3.10.13-0+deb13u1_riscv64.deb a6d4c26ef248973e3b24a99fd170c131f7d5cb2a 15088 postfix-pcre-dbgsym_3.10.13-0+deb13u1_riscv64.deb 93c94d925388175f6dcafb59df6c97a1a2217083 6964 postfix-pcre_3.10.13-0+deb13u1_riscv64.deb 8dfbfdd51a906ef8405fd8c2e3b34036b46a16a0 14252 postfix-pgsql-dbgsym_3.10.13-0+deb13u1_riscv64.deb 487be9a282d11f1969fb56cddb378d5151aa819a 6920 postfix-pgsql_3.10.13-0+deb13u1_riscv64.deb 57b6d7fff70fc839940a9437ebe2ae9235b0e025 8516 postfix-sqlite-dbgsym_3.10.13-0+deb13u1_riscv64.deb bbe789006eb9ae0cabb3836cbfd46373711a4740 4720 postfix-sqlite_3.10.13-0+deb13u1_riscv64.deb 3e92790377331906427f7477c06b0e32e6d2e10d 12976 postfix_3.10.13-0+deb13u1_riscv64-buildd.buildinfo 0a966a3643fa08eac10dbe7612031fe61aa3b4e8 1590760 postfix_3.10.13-0+deb13u1_riscv64.deb Checksums-Sha256: c53522965931cab84d06e2cf128d6947f51099402217d8096e3d51ddeb6a7dc8 11024 postfix-cdb-dbgsym_3.10.13-0+deb13u1_riscv64.deb 579d2d6af7b35b48311d7ecabf6a5513d1ed429228b108b6d2443ebca4e13b07 5104 postfix-cdb_3.10.13-0+deb13u1_riscv64.deb 2caf703373d485fd1ca6aa67a24d28d108243f40cef8cf5d54581e6bcc856756 1852984 postfix-dbgsym_3.10.13-0+deb13u1_riscv64.deb 690818832c938ced85e44cebbf30025db53f94ffa4394cb92505133779fa3d64 22912 postfix-ldap-dbgsym_3.10.13-0+deb13u1_riscv64.deb dcc22ffff3619633b5356b1e241a3871203b74f1bd9a00e308d3690a80cb16a3 12208 postfix-ldap_3.10.13-0+deb13u1_riscv64.deb 7136962f83e1870c711d42519f62d8613261f1ca721108c24f5399d4b6dda64f 17980 postfix-lmdb-dbgsym_3.10.13-0+deb13u1_riscv64.deb 25e49d352da302611b85e77cf2c643dbfbe6aee051f3559fcf0a50960a535f36 7976 postfix-lmdb_3.10.13-0+deb13u1_riscv64.deb d24cce2bc7d6b66e914a503845258a6f0ceb6d56e3c272b05005ed3cef754e3c 13820 postfix-mongodb-dbgsym_3.10.13-0+deb13u1_riscv64.deb a22b96ef63104bf0fcc170e25a1631b0da60b0683cbbd94c3b4aea7cf5ea0c31 6064 postfix-mongodb_3.10.13-0+deb13u1_riscv64.deb db037072fa0d96c104bb1c69edef2eb459fd2b159fc50a49f05f1da7c62f6d4f 24212 postfix-mysql-dbgsym_3.10.13-0+deb13u1_riscv64.deb befd0ac73176afea0a114abbc6ce9b12dce88ad2af98439a55a1f8319be56a0c 7140 postfix-mysql_3.10.13-0+deb13u1_riscv64.deb d4a860485a9a59a81902da00ab3c2134f6299003c62b19e1234c7f3c3017bef8 15088 postfix-pcre-dbgsym_3.10.13-0+deb13u1_riscv64.deb a1f78cd253d57836e9d9f4cfd9bbf68f0616fe5ad11c7d846c6143975f84e6e8 6964 postfix-pcre_3.10.13-0+deb13u1_riscv64.deb 1002c2cba0383fd2bf48c4d2c698d5c938864f1543d08b1728c9060c183dd482 14252 postfix-pgsql-dbgsym_3.10.13-0+deb13u1_riscv64.deb 3a2e02054ee4e46ab3ec34632cd3dd6b62091cbf05d07f851a8555ec085c2c7d 6920 postfix-pgsql_3.10.13-0+deb13u1_riscv64.deb 845f2241e5d38af0888e93c38f54ae7c2a4b6eb5f34e7d2e74c17bc4b9ab5a7d 8516 postfix-sqlite-dbgsym_3.10.13-0+deb13u1_riscv64.deb 2f64fd64e9d20b7395408fb2b5469a5a9ef49c2e14761888934459d10fd50271 4720 postfix-sqlite_3.10.13-0+deb13u1_riscv64.deb 00619e5dc1da9372fac76ce1facd82e26e8c20c67a3a1ae66fac63874b9aa80c 12976 postfix_3.10.13-0+deb13u1_riscv64-buildd.buildinfo 20d43a29d365c4e38c25cc19831074b5541d20e926e1693d0aff1fc1ade59e9c 1590760 postfix_3.10.13-0+deb13u1_riscv64.deb Files: 819fb33f4f9755618e4489f5860b1d9b 11024 debug optional postfix-cdb-dbgsym_3.10.13-0+deb13u1_riscv64.deb 0adf7f261fdd99f852b09b379c789868 5104 mail optional postfix-cdb_3.10.13-0+deb13u1_riscv64.deb d74c802fe3e078c4df712b3a22f5ef1c 1852984 debug optional postfix-dbgsym_3.10.13-0+deb13u1_riscv64.deb 59d970552644b7790b0db005ec1417e8 22912 debug optional postfix-ldap-dbgsym_3.10.13-0+deb13u1_riscv64.deb 0b3d91dea9d6b60f438f295885c2baed 12208 mail optional postfix-ldap_3.10.13-0+deb13u1_riscv64.deb 268916331f915334171fbad8db0e5f4c 17980 debug optional postfix-lmdb-dbgsym_3.10.13-0+deb13u1_riscv64.deb f7765ec74f68d0a6d3f3d5b373065353 7976 mail optional postfix-lmdb_3.10.13-0+deb13u1_riscv64.deb a5a687a37884831c3aa5a74603c72e06 13820 debug optional postfix-mongodb-dbgsym_3.10.13-0+deb13u1_riscv64.deb 1b14c931a7ce3ee986dcaad64354923e 6064 mail optional postfix-mongodb_3.10.13-0+deb13u1_riscv64.deb d64f87a7e13cff7abef650056d5b2da9 24212 debug optional postfix-mysql-dbgsym_3.10.13-0+deb13u1_riscv64.deb a4b5fea51389588df6323993febde8a4 7140 mail optional postfix-mysql_3.10.13-0+deb13u1_riscv64.deb 028402f6e99f77ee4d38229464211b07 15088 debug optional postfix-pcre-dbgsym_3.10.13-0+deb13u1_riscv64.deb 931b7f2cb8c98f695822a9e1e3849d79 6964 mail optional postfix-pcre_3.10.13-0+deb13u1_riscv64.deb 43a2fd763c5ace3b78ff3627b8929142 14252 debug optional postfix-pgsql-dbgsym_3.10.13-0+deb13u1_riscv64.deb 2a943121ac7e84b980e5cca980cb46d4 6920 mail optional postfix-pgsql_3.10.13-0+deb13u1_riscv64.deb 6722174bbc771796a9ef86ce59157638 8516 debug optional postfix-sqlite-dbgsym_3.10.13-0+deb13u1_riscv64.deb 8f7725cd6301f1d5ce1082d8b3170c4d 4720 mail optional postfix-sqlite_3.10.13-0+deb13u1_riscv64.deb 0bc38cf74fc356a94f3e98dc32aadf58 12976 mail optional postfix_3.10.13-0+deb13u1_riscv64-buildd.buildinfo 1e65fd31a97fbfa78d3ffadbda40de24 1590760 mail optional postfix_3.10.13-0+deb13u1_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwN+C+Bc8deN4UliX50ghctvtZFQFAmp6CsUACgkQ50ghctvt ZFSqGQ/6Au6iz4RjfcavYF9H8t4UyEl+8Csy2Kv62YlmqHkkbJSjLs5VgdQyPgxD X/wzqvhlbZ01v98QDpPH6UZwaXA1vxSMzIrUUeYKtO80AIUjUOkbWwqaloYECu3F +MudjKpTiKLf2CdnJVUNi7wMH8q6VKtoszzqpzMhtSMRiqDz5vHMSVDXObtT07GI Wh3Q69H7XHoNvL5IY++ddE8jSrPYNVS6NhTTBLVx5V0SjKVKBknq0kGIs//djA6r zgw/ZNJ0oqp5lmdkeH3kxoi3eQjwQ5AqODVKU1TrwU9skv1AFRJhCfenWK9eGpsE odD6Sqn6MeQ3oWleyEGx61zZLX0txkLPHegpPB+BjPdfQwQL3Nxpz8VQ/nfJN4jj cE3pOZGdXmcGAidgvUUQxCmA5pqCUjDK9T25Vl4Ki9bRj4ZnUQNu4WaFxUD9Tpyu rmx1pAWyfW8rj/VJAl3Pydpchy07YTU6U3hXUK2ErwBgxA6ehDcedHmKKA56VlbW mauJQMrmLo7akp48GIkcfapxBiPqEs8OFPfAahy4WJqp58SAJCjq9AFdIGT8X8uz GaOagznqpVk3Z0I2krukakqtiX8Y0F1Htl1dQwIGx7yUvN0ghIAN4Y88svBbnzqT 4/jTM1l2SK2juduIKkbq/Fcpox51MMI1FSf09Fh8vdBhc0gvuLs= =/6mN -----END PGP SIGNATURE-----