-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Aug 2026 19:35:04 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: s390x Version: 3.10.13-0+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: s390x Build Daemon (ziehrer) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Changes: postfix (3.10.13-0+deb13u1) trixie-security; urgency=medium . * new upstream stable/bugfix/security release From the release announcement by Wietse Wenema at https://www.postfix.org/announcements/postfix-3.11.6.html : . These defects were found by Qualys assisted by Claude Mythos Preview, and by OpenAI Security; more than half date from 20 or more years ago. When I implemented Postfix, I knew that there were going to be mistakes. That is the reason why Postfix has its architecture and safety nets. The number of defects may seem large, but considering that they were found in a code base of over 150 thousand lines, the error rate is still lower than what I designed for. . o Policy bypass: . - Bug (introduced: Postfix 2.2, date: 20041102): missing SMTP server resets of MAIL FROM and RCPT TO command state after smtpd_end_of_data_restrictions rejected a message. This resulted in SMTP protocol state desynchronization between the remote SMTP client and the Postfix SMTP server. . - A crafted remote SMTP client could then send RCPT TO and DATA without MAIL FROM, and deliver a second message. Then, smtpd_end_of_data_restrictions skipped check_recipient_access constraints, because a recipient counter was > 1. . - The failure to reset MAIL FROM and RCPT TO state also affected Milter support (added in Postfix 2.3). Here, after a Milter replied with "accept this message" based on the message envelope, and smtpd_end_of_data_restrictions rejected the message, the Postfix SMTP server as before accepted RCPT TO and DATA without MAIL FROM, and smtpd_end_of_data_restrictions as before skipped check_recipient_access constraints for the second message. Under these conditions, the Postfix Milter client remained in the "accept this message" state, skipping Milter policy enforcement for the second message. . o Denial of service: . - Bug (defect introduced: Postfix 3.4, date: 20180805): SMTP server command history memory exhaustion with a large number of very small BDAT requests. . - Bug (defect introduced: Postfix 1.1, date: 20021116): address verification cache poisoning. A local user could use the postdrop command to submit an address verification probe with envelope or message content that Postfix rejected later, resulting in a negative address verification cache entry for that address. On systems that enable address verification, the negative address verification cache entry would force the Postfix SMTP server to reject a message that it should accept (denial of service). . o Server crashes and panic()s: . - Bug (defect introduced: Postfix 3.4, date: 20180805): missing SMTP server reset of RCPT TO state, after a BDAT command error. A crafted remote SMTP client could then send a DATA command without MAIL FROM or RCPT TO, and crash a Postfix SMTP daemon process with a null pointer read error. . - Bug (defect introduced: Postfix 2.4, date: 20051222): null pointer read crash while parsing a malformed Dovecot AUTH server response. . o Read after free, uninitialized read, under/over read: . - Bug (defect introduced: Postfix 2.8, date: 20100914): read-after-free in the PSC_CALL_BACK_NOTIFY() macro. This had no effect on program execution, because myfree() wiped memory, and that memory was not yet reused. . - Read after free (no privilege escalation) in debug logging (defect introduced: Postfix 2.2, date: 20050117). . - Bug (defect introduced: Postfix 2.10, date: 20120617): uninitialized memory read in postscreen HaProxy client after remote I/O exception, causing garbage to be logged. . - Latent bug (defect introduced: Postfix 2.7, date: 20090618): uninitialized memory read after dnsblog(8) returns a string that is not an IPv4 address. . - Bug (defect introduced: before Postfix alpha, date 19970424): the DNS client could read up to two bytes past the end of an MX record, before discovering that the record was too short. This behavior was later copied with SRV records, potentially over-reading up to six bytes. . - Bug (defect introduced: Postfix 1,1, date: 20010524): the postsuper command under-read or over-read a very short queue filename. No crash, information leak, or privilege escalation. . o Other code hygiene: . - Bug (defect introduced: before Postfix alpha, date: 19971106): 'int' over-shift, in the queue file record-length parser. Postfix programs do not generate such records, but an attacker could cause postdrop to reject input or panic(). . - Bug (defect introduced: Postfix 2.2, date: 20050117): non-transitive comparison of IPv4 addresses. . - Bug (defect introduced: Postfix 1.0, date: 20000928): the fast flush server, used by the SMTP command "ETRN", and by the commands "postqueue -s site" and "postqueue -i queue_id" (and their sendmail(1) equivalents), used the wrong duplicate suppression API, resulting in unnecessary queue scans by the queue manager. . - Queue hygiene: the postdrop command accepted the null record type which the rest of Postfix ignores. Checksums-Sha1: 16215d7a093e3c5af1e5fdfb0f873c8b252c17fb 11044 postfix-cdb-dbgsym_3.10.13-0+deb13u1_s390x.deb 17f00031b203caeb5d9ed043a9ad47b35673ce5d 5216 postfix-cdb_3.10.13-0+deb13u1_s390x.deb 5dccdfb9f5b95c201897c2260b55dbb523e70ef1 1858804 postfix-dbgsym_3.10.13-0+deb13u1_s390x.deb af0b2cf392bfed9f5f4861a24a4acd8ee344c090 22536 postfix-ldap-dbgsym_3.10.13-0+deb13u1_s390x.deb f590ad531099d7c1302d84b0d893d08c78c11df5 12300 postfix-ldap_3.10.13-0+deb13u1_s390x.deb 8a74ae341a8ac8e2b0617283ed9e7b04cb263eec 18520 postfix-lmdb-dbgsym_3.10.13-0+deb13u1_s390x.deb 40c57d273e345cd922038360d94820b5fe5eb61d 8084 postfix-lmdb_3.10.13-0+deb13u1_s390x.deb ac7fbe2513476b8885c565649edbb58503199b66 13768 postfix-mongodb-dbgsym_3.10.13-0+deb13u1_s390x.deb e4c35ed07dcaa7e3a92ff7ddff8be2fcc5a93bd6 5944 postfix-mongodb_3.10.13-0+deb13u1_s390x.deb 554edc4dbb5a254b4af66c2b838d25afde2de93f 24008 postfix-mysql-dbgsym_3.10.13-0+deb13u1_s390x.deb 11dd711597a14279bc9c302674f3c40d43e78ef7 7368 postfix-mysql_3.10.13-0+deb13u1_s390x.deb 615da43a1112d0ad62317ebcb517ec9e940b390a 14944 postfix-pcre-dbgsym_3.10.13-0+deb13u1_s390x.deb 28a70228df6cba917b8e7a652c2306363257ec29 7092 postfix-pcre_3.10.13-0+deb13u1_s390x.deb 8bf7694f14a7597420ee0f69ff2d54b06cfbeb34 14116 postfix-pgsql-dbgsym_3.10.13-0+deb13u1_s390x.deb a007d42f491224b5eeba829482c6e8774a244165 6972 postfix-pgsql_3.10.13-0+deb13u1_s390x.deb cb210780d14d1b43fd3e07aa556cc38d98c55fc8 8372 postfix-sqlite-dbgsym_3.10.13-0+deb13u1_s390x.deb e668467933e8280f573a7947b30484c9a2d09a8f 4780 postfix-sqlite_3.10.13-0+deb13u1_s390x.deb 4227299bf31eba9ebb662e9e2a3d587aa433821a 12798 postfix_3.10.13-0+deb13u1_s390x-buildd.buildinfo 483b136816e77446f8a5b73ed68d29ab08672cbd 1574832 postfix_3.10.13-0+deb13u1_s390x.deb Checksums-Sha256: 495f1ed33f28ae44e56c1d0ebf9d1fdd22c12c55b81387fb1d9a3c3de779c813 11044 postfix-cdb-dbgsym_3.10.13-0+deb13u1_s390x.deb 12cc6309641a5929796c549badd0d74f8ddd2c893e41ecb4211787ef559f7e3a 5216 postfix-cdb_3.10.13-0+deb13u1_s390x.deb afbee2de59601fa7c448bac4a1dd09f1c7ee7a4d2a065df7e880ebd9a1caf967 1858804 postfix-dbgsym_3.10.13-0+deb13u1_s390x.deb 5e6a09be996782c44cf211406ac926740a23438b88d1c57e118205f8a82c4910 22536 postfix-ldap-dbgsym_3.10.13-0+deb13u1_s390x.deb 9a2108198640a4606339f51c5149533d16b52647f917870dc22833c0053ec355 12300 postfix-ldap_3.10.13-0+deb13u1_s390x.deb cfeca2e2120ac5eeecd2dec82442f59841a1734e3d427df1d31e733000b21419 18520 postfix-lmdb-dbgsym_3.10.13-0+deb13u1_s390x.deb 20d61d12ee3f38513a3b1587da569d2d43b5d9611ca110dd7e2916e64ba36d28 8084 postfix-lmdb_3.10.13-0+deb13u1_s390x.deb ffb2ecb23c8e80366e0fbf8acb8210ee78c7b5ab40499e98dc9afb7f7c625166 13768 postfix-mongodb-dbgsym_3.10.13-0+deb13u1_s390x.deb 5dff508871b929f3386430d1ec7d1d2008bd32bf4fa0a69fc8fbdf759ec5974d 5944 postfix-mongodb_3.10.13-0+deb13u1_s390x.deb 3b7201333975174960cb9848ba7c6b1220d01d4858eb5e724ab0fdad36b71bfb 24008 postfix-mysql-dbgsym_3.10.13-0+deb13u1_s390x.deb 55b616035443f728534e0f7b036cd29749ea0e59d34248651a0c2ddfba88b927 7368 postfix-mysql_3.10.13-0+deb13u1_s390x.deb 7bc60279a4e5b40a62f9cb48de5e1190e91f7d6efc1afd75577cd6a312388394 14944 postfix-pcre-dbgsym_3.10.13-0+deb13u1_s390x.deb 16f86bcb04b46f3d14d66aa1230e130766335d216a8a73c1bc339ebaaaf7aa61 7092 postfix-pcre_3.10.13-0+deb13u1_s390x.deb cee6d1506380719fb49a95da2fb4b299e4158fb27c0e17a8b63354ce2b08a323 14116 postfix-pgsql-dbgsym_3.10.13-0+deb13u1_s390x.deb 9ce03fb04cb04ce0c8a6468b332f74596e3893a64683f2e4f9c9d94f7871860b 6972 postfix-pgsql_3.10.13-0+deb13u1_s390x.deb bb992a9e1372af0c0fb27edfbd4dfd24e50756eb80afb03df1009bb934722811 8372 postfix-sqlite-dbgsym_3.10.13-0+deb13u1_s390x.deb 546c667f1a0825c78a1af658d7029f02224928989c32b2c8874168f24b3f55d6 4780 postfix-sqlite_3.10.13-0+deb13u1_s390x.deb 3d57f5b8257a561fed794c510df87b7dd6371c0f761fdea2a4faf4663e040069 12798 postfix_3.10.13-0+deb13u1_s390x-buildd.buildinfo cc1b0dab43158c12e180b6363eaab5b9e80ae909542df50d5ee61b86045e4195 1574832 postfix_3.10.13-0+deb13u1_s390x.deb Files: 25b8eefb281ce1915ee1c7ecc0451a21 11044 debug optional postfix-cdb-dbgsym_3.10.13-0+deb13u1_s390x.deb 007c2d58615b07a2d596b89406a42854 5216 mail optional postfix-cdb_3.10.13-0+deb13u1_s390x.deb 3345280104b8acc28c339a42d35ed381 1858804 debug optional postfix-dbgsym_3.10.13-0+deb13u1_s390x.deb 12b98539790e06124b4854d05a1ff096 22536 debug optional postfix-ldap-dbgsym_3.10.13-0+deb13u1_s390x.deb 9551216f7833fd24f41d1e64d804fd69 12300 mail optional postfix-ldap_3.10.13-0+deb13u1_s390x.deb 8fd924440c167e38d03c863251bc2858 18520 debug optional postfix-lmdb-dbgsym_3.10.13-0+deb13u1_s390x.deb 2683dfddb2063c7c8f0b058e833766c3 8084 mail optional postfix-lmdb_3.10.13-0+deb13u1_s390x.deb 45c7f4bbfefe20737504eecfdc2fd594 13768 debug optional postfix-mongodb-dbgsym_3.10.13-0+deb13u1_s390x.deb 6bc2957f2e79010d77ac57270ad8e4f5 5944 mail optional postfix-mongodb_3.10.13-0+deb13u1_s390x.deb 4aecc5110d8b8d8d29717855fd672d9a 24008 debug optional postfix-mysql-dbgsym_3.10.13-0+deb13u1_s390x.deb 486972eafdb4710376fb6909f5ff9ad8 7368 mail optional postfix-mysql_3.10.13-0+deb13u1_s390x.deb 164fa1ed37abceebd924208340bce88b 14944 debug optional postfix-pcre-dbgsym_3.10.13-0+deb13u1_s390x.deb 8a9067cff885b3193be8de049b815f64 7092 mail optional postfix-pcre_3.10.13-0+deb13u1_s390x.deb d6cafe141d1d15728e763bc80cdbd6ff 14116 debug optional postfix-pgsql-dbgsym_3.10.13-0+deb13u1_s390x.deb 9391232ec712261ac3b7b5d9f6828061 6972 mail optional postfix-pgsql_3.10.13-0+deb13u1_s390x.deb fa13056a83edbae06f07d5ed351c3243 8372 debug optional postfix-sqlite-dbgsym_3.10.13-0+deb13u1_s390x.deb d3fbafd6b2da06fa0cf70ac8fed89b87 4780 mail optional postfix-sqlite_3.10.13-0+deb13u1_s390x.deb 558d1fe610ce1b0ddde8e5ae58b07f8b 12798 mail optional postfix_3.10.13-0+deb13u1_s390x-buildd.buildinfo 78dbaba6d9c2b260b1d5ee39c0288e46 1574832 mail optional postfix_3.10.13-0+deb13u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEl0BM/nR+Oj597wRWMWUFebkHnoQFAmp6BaoACgkQMWUFebkH noSFDhAAiprRjXrs4l5zVQRb/xbWsYyyy1FuvaRHGP3piMmUmKNXBVKiC/R9j0kS V49XgSZ7anIBPVp9FbzR8l/i9h4JfgGHXkSD/9Fb29FTLCiz7M/RYQvEPjrKUrMw zxlHdXHdh2vAxBEjzaHn9UyPNhUqHepYiOfovrAMa8FIu/Lbw8V+EMA8h6wLe/s7 /BRlPK/20WXrvGOAdeCNtqcid8Er2egNYXxMFRoOgbzCQZwsGVq6O05N1I4hd13H KA1wRWikZtwc9rx19Xi4k7hzhU7MZilKGOqrcAQanpYBaCUC7NsPKnnseb/7ThUJ osa0Y6O4oryU5saUWqrPJwVmMTcfXNH0HB+NQNZ0HlBFQGfN5uGxkW45YfaZuav/ R3oC6PfVG/qKRq6E98joBdw6rM5qiFYzK4ediu1erqqZuJaohsvrvru8XuKpqAXs ipvK2RiTnR7VkLrloQxBFOhlogIdYCphu66+lRONKBvyJmo47ZvYrj6J/PvQiIBQ vcE4+2N1NvAWIWBEFF5LfoBJQxq+vH7pX8cqkwGPoPqpHVYtxE8MsWO34wNUWfbT bIC1qBbj+H2apT7Y8Yycw/3gskqUcdNt3EMm32/ZRvzdbw/Rvj+h/T/p6Tz/4Rrq wpUx9BQ8njKKO48zP3yOCHqeSX8mReG20Ym36mFfygOllR0/PO0= =ZD+2 -----END PGP SIGNATURE-----