-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Aug 2026 19:35:04 +0300 Source: postfix Binary: postfix postfix-cdb postfix-cdb-dbgsym postfix-dbgsym postfix-ldap postfix-ldap-dbgsym postfix-lmdb postfix-lmdb-dbgsym postfix-mongodb postfix-mongodb-dbgsym postfix-mysql postfix-mysql-dbgsym postfix-pcre postfix-pcre-dbgsym postfix-pgsql postfix-pgsql-dbgsym postfix-sqlite postfix-sqlite-dbgsym Architecture: armhf Version: 3.10.13-0+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: armhf Build Daemon (arm-ubc-05) Changed-By: Michael Tokarev Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mongodb - MongoDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Changes: postfix (3.10.13-0+deb13u1) trixie-security; urgency=medium . * new upstream stable/bugfix/security release From the release announcement by Wietse Wenema at https://www.postfix.org/announcements/postfix-3.11.6.html : . These defects were found by Qualys assisted by Claude Mythos Preview, and by OpenAI Security; more than half date from 20 or more years ago. When I implemented Postfix, I knew that there were going to be mistakes. That is the reason why Postfix has its architecture and safety nets. The number of defects may seem large, but considering that they were found in a code base of over 150 thousand lines, the error rate is still lower than what I designed for. . o Policy bypass: . - Bug (introduced: Postfix 2.2, date: 20041102): missing SMTP server resets of MAIL FROM and RCPT TO command state after smtpd_end_of_data_restrictions rejected a message. This resulted in SMTP protocol state desynchronization between the remote SMTP client and the Postfix SMTP server. . - A crafted remote SMTP client could then send RCPT TO and DATA without MAIL FROM, and deliver a second message. Then, smtpd_end_of_data_restrictions skipped check_recipient_access constraints, because a recipient counter was > 1. . - The failure to reset MAIL FROM and RCPT TO state also affected Milter support (added in Postfix 2.3). Here, after a Milter replied with "accept this message" based on the message envelope, and smtpd_end_of_data_restrictions rejected the message, the Postfix SMTP server as before accepted RCPT TO and DATA without MAIL FROM, and smtpd_end_of_data_restrictions as before skipped check_recipient_access constraints for the second message. Under these conditions, the Postfix Milter client remained in the "accept this message" state, skipping Milter policy enforcement for the second message. . o Denial of service: . - Bug (defect introduced: Postfix 3.4, date: 20180805): SMTP server command history memory exhaustion with a large number of very small BDAT requests. . - Bug (defect introduced: Postfix 1.1, date: 20021116): address verification cache poisoning. A local user could use the postdrop command to submit an address verification probe with envelope or message content that Postfix rejected later, resulting in a negative address verification cache entry for that address. On systems that enable address verification, the negative address verification cache entry would force the Postfix SMTP server to reject a message that it should accept (denial of service). . o Server crashes and panic()s: . - Bug (defect introduced: Postfix 3.4, date: 20180805): missing SMTP server reset of RCPT TO state, after a BDAT command error. A crafted remote SMTP client could then send a DATA command without MAIL FROM or RCPT TO, and crash a Postfix SMTP daemon process with a null pointer read error. . - Bug (defect introduced: Postfix 2.4, date: 20051222): null pointer read crash while parsing a malformed Dovecot AUTH server response. . o Read after free, uninitialized read, under/over read: . - Bug (defect introduced: Postfix 2.8, date: 20100914): read-after-free in the PSC_CALL_BACK_NOTIFY() macro. This had no effect on program execution, because myfree() wiped memory, and that memory was not yet reused. . - Read after free (no privilege escalation) in debug logging (defect introduced: Postfix 2.2, date: 20050117). . - Bug (defect introduced: Postfix 2.10, date: 20120617): uninitialized memory read in postscreen HaProxy client after remote I/O exception, causing garbage to be logged. . - Latent bug (defect introduced: Postfix 2.7, date: 20090618): uninitialized memory read after dnsblog(8) returns a string that is not an IPv4 address. . - Bug (defect introduced: before Postfix alpha, date 19970424): the DNS client could read up to two bytes past the end of an MX record, before discovering that the record was too short. This behavior was later copied with SRV records, potentially over-reading up to six bytes. . - Bug (defect introduced: Postfix 1,1, date: 20010524): the postsuper command under-read or over-read a very short queue filename. No crash, information leak, or privilege escalation. . o Other code hygiene: . - Bug (defect introduced: before Postfix alpha, date: 19971106): 'int' over-shift, in the queue file record-length parser. Postfix programs do not generate such records, but an attacker could cause postdrop to reject input or panic(). . - Bug (defect introduced: Postfix 2.2, date: 20050117): non-transitive comparison of IPv4 addresses. . - Bug (defect introduced: Postfix 1.0, date: 20000928): the fast flush server, used by the SMTP command "ETRN", and by the commands "postqueue -s site" and "postqueue -i queue_id" (and their sendmail(1) equivalents), used the wrong duplicate suppression API, resulting in unnecessary queue scans by the queue manager. . - Queue hygiene: the postdrop command accepted the null record type which the rest of Postfix ignores. Checksums-Sha1: 76dd227a7e980465e8828db82a3b99b038aea164 11232 postfix-cdb-dbgsym_3.10.13-0+deb13u1_armhf.deb 80587cac0250cd9c924a40b65277900e77edfa26 4820 postfix-cdb_3.10.13-0+deb13u1_armhf.deb 03d56925ff0c13257493aa19096bf17b7473be6e 1828584 postfix-dbgsym_3.10.13-0+deb13u1_armhf.deb 7dc833373b5e288280fa9562ccf9b3c18df14c3b 22472 postfix-ldap-dbgsym_3.10.13-0+deb13u1_armhf.deb 86792bf0ab952f58728e3b367c0be2dd41158fb9 11928 postfix-ldap_3.10.13-0+deb13u1_armhf.deb 70ef025f534108b16cdfe0e1427b2b7e6acd6054 18632 postfix-lmdb-dbgsym_3.10.13-0+deb13u1_armhf.deb 3023e4512d3c21b30420aa391b187a71e5a6d49d 7428 postfix-lmdb_3.10.13-0+deb13u1_armhf.deb 4306d931c7ff4517fe2796e3e3364bc91bf4ed21 13960 postfix-mongodb-dbgsym_3.10.13-0+deb13u1_armhf.deb 0145b744144b7cd65aadb188eec8ab4bb63922bf 5640 postfix-mongodb_3.10.13-0+deb13u1_armhf.deb 11ca6335aa1501b26efc140cb941f496ab793826 24408 postfix-mysql-dbgsym_3.10.13-0+deb13u1_armhf.deb cf7c411893d1802a1390b9b654c1c28dd6cf3988 6980 postfix-mysql_3.10.13-0+deb13u1_armhf.deb 55870120b6f9031369fa656786d6a722ba65a0dd 14964 postfix-pcre-dbgsym_3.10.13-0+deb13u1_armhf.deb 63b95df010e244b4883e668a7b3c19e20cf07cc3 6344 postfix-pcre_3.10.13-0+deb13u1_armhf.deb 95e5f9cfc60e322b4090654258eab552c3d87f1b 14524 postfix-pgsql-dbgsym_3.10.13-0+deb13u1_armhf.deb e4cae2e7f1eaaa6357186e688dccac69a4d2924b 6616 postfix-pgsql_3.10.13-0+deb13u1_armhf.deb 5da8050b51ecf1d15b5b69bf9ffe7f793b2183c4 8592 postfix-sqlite-dbgsym_3.10.13-0+deb13u1_armhf.deb 444d72856218e58fcc9a1ae68aa48274a4a415d7 4580 postfix-sqlite_3.10.13-0+deb13u1_armhf.deb dbc73f23276659b88782b0b53522e42c519c0103 12802 postfix_3.10.13-0+deb13u1_armhf-buildd.buildinfo 9c28397e94c035da8a9fe0258d41085be654da68 1531756 postfix_3.10.13-0+deb13u1_armhf.deb Checksums-Sha256: fdb7fe792e09136d47ef15d83c625b4f50179d7051179c1de5b46448e7e16bec 11232 postfix-cdb-dbgsym_3.10.13-0+deb13u1_armhf.deb f6dea3d66517845a3009365076df4c8df1329f3c8f1e8ebd32ac863cda401df6 4820 postfix-cdb_3.10.13-0+deb13u1_armhf.deb f43ce89e7a93229d93cdc81a7e72332f8fe7f242e17d23a10f48bbe100f47130 1828584 postfix-dbgsym_3.10.13-0+deb13u1_armhf.deb c6d1babddcb7420ab479fe8287a147b43e19b22bb257d3cfb39ab619d2589cc1 22472 postfix-ldap-dbgsym_3.10.13-0+deb13u1_armhf.deb f9c8845c22045acff19c751c86614adedcb7f356b861043c87a7836b84250b4d 11928 postfix-ldap_3.10.13-0+deb13u1_armhf.deb 86fefec107d31dc5a40578b024e8a4ebda62fc2f5b53edb9adee08a454b802a4 18632 postfix-lmdb-dbgsym_3.10.13-0+deb13u1_armhf.deb 663c97aae54c0ebea84f8e46eca45e5e646a95305be1c2226710dd6f27bb9bf8 7428 postfix-lmdb_3.10.13-0+deb13u1_armhf.deb c91c226d6010775ead01869be370e3d59b83843a5e3ac4d0017129ee27d6885c 13960 postfix-mongodb-dbgsym_3.10.13-0+deb13u1_armhf.deb b875d0f082fa8741c78b58224de65cb86c09559f5da9a51c8532452829945e31 5640 postfix-mongodb_3.10.13-0+deb13u1_armhf.deb 2e119d5715279e76cdadd7abd5431d813b1e317afb7d147d335ff138d8b6d161 24408 postfix-mysql-dbgsym_3.10.13-0+deb13u1_armhf.deb 0fe9efc939460753bc251f86695b663f102cbcf4f27362430da91f1ec30d9343 6980 postfix-mysql_3.10.13-0+deb13u1_armhf.deb fd8fa1cf2d12564e7de8592482e5feea416115258968625e1b0ae4efa1cc5dfd 14964 postfix-pcre-dbgsym_3.10.13-0+deb13u1_armhf.deb 1b5b5bb7f97afd5c8feb5fa044606c703e4310daff6fc879a6832ad1eb063817 6344 postfix-pcre_3.10.13-0+deb13u1_armhf.deb e2ba9c6c51f5af8f6247a011efc595bd0ac504705f448b31a6d89b4d2eea70af 14524 postfix-pgsql-dbgsym_3.10.13-0+deb13u1_armhf.deb 64265be3ce7cb1f9c36dc373a72def7766c8c711bc5b5a079c58e9e2bca5e28c 6616 postfix-pgsql_3.10.13-0+deb13u1_armhf.deb 822cc1991b85a868d29f07126fd4e0493ae8e82770e9f71d23cb8a4d85f674df 8592 postfix-sqlite-dbgsym_3.10.13-0+deb13u1_armhf.deb 9b3376a487d591493906aa7144f8a49ae0fa8303766aeefc4bc5dc7ebdc22eee 4580 postfix-sqlite_3.10.13-0+deb13u1_armhf.deb f375261b5ceb0d789c5394517a6ad83109e1d9ac8cf7b9b272517ecc91a7846f 12802 postfix_3.10.13-0+deb13u1_armhf-buildd.buildinfo ec4530761937422cde85dba8567b80d9c21eee2f96296d8bbe4200c51bf734d6 1531756 postfix_3.10.13-0+deb13u1_armhf.deb Files: f16d838bb251cd11990b641fd25b00b0 11232 debug optional postfix-cdb-dbgsym_3.10.13-0+deb13u1_armhf.deb 58ba4b2ad795eba21d0943ef006aae6b 4820 mail optional postfix-cdb_3.10.13-0+deb13u1_armhf.deb c383339655460c4a98422dc160fec2b9 1828584 debug optional postfix-dbgsym_3.10.13-0+deb13u1_armhf.deb aa79813050b800f61d062383ecfbe2a2 22472 debug optional postfix-ldap-dbgsym_3.10.13-0+deb13u1_armhf.deb cff12e9048a6bf4bc017c8810a5ee306 11928 mail optional postfix-ldap_3.10.13-0+deb13u1_armhf.deb 25dd03f18142a05f97b32b9a38cdf10a 18632 debug optional postfix-lmdb-dbgsym_3.10.13-0+deb13u1_armhf.deb f9b8b030a74fcb6c91cd40c482784839 7428 mail optional postfix-lmdb_3.10.13-0+deb13u1_armhf.deb 11e7be111a48869d6585a8d6263ce987 13960 debug optional postfix-mongodb-dbgsym_3.10.13-0+deb13u1_armhf.deb 8326b041da515c83c892393ff4d00b91 5640 mail optional postfix-mongodb_3.10.13-0+deb13u1_armhf.deb a65db69375d2cc2f4b2af567195aab97 24408 debug optional postfix-mysql-dbgsym_3.10.13-0+deb13u1_armhf.deb b209614758015699fac493487ccb3407 6980 mail optional postfix-mysql_3.10.13-0+deb13u1_armhf.deb 7595e67e36226e7e312e55a8dd744ed9 14964 debug optional postfix-pcre-dbgsym_3.10.13-0+deb13u1_armhf.deb 35f6c3af3177c16d9f8917f57fa66116 6344 mail optional postfix-pcre_3.10.13-0+deb13u1_armhf.deb 06a2655f741f1b1320248343d5d215d3 14524 debug optional postfix-pgsql-dbgsym_3.10.13-0+deb13u1_armhf.deb fae14a500ad3cc62ee81c0a0f096f834 6616 mail optional postfix-pgsql_3.10.13-0+deb13u1_armhf.deb 80b7cc45d035b2ca8ead3557257823ad 8592 debug optional postfix-sqlite-dbgsym_3.10.13-0+deb13u1_armhf.deb e19816c5dd8782483b7e6a3b284d59e9 4580 mail optional postfix-sqlite_3.10.13-0+deb13u1_armhf.deb 3dad2e66f22adb4b5cf0c8fb875a94ce 12802 mail optional postfix_3.10.13-0+deb13u1_armhf-buildd.buildinfo 5ba82681a4f3b6a40b423c23be5f71cf 1531756 mail optional postfix_3.10.13-0+deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7rv+l3KtZdQea77lnwznazfjXToFAmp6BcoACgkQnwznazfj XTqBGBAAm5cNW8UkVxdlaiPLdCeBfl/oLvMJFX5/bHl3Wa9Wra/dUby8q39Tfuhr aPY8+p0/ftimMzSthCDKMVgY3JK7vhOrLhm9Sp235L/vNAJVqJUIVDnzUl6uaDRq jJTF9+qGXm8zjkQgo3ySr8+Zvmy36RvcdQkja0A9aMdZL23N3suJSm3iK93SZ1WA O823rqBRlLekhsywbb9fN8KqYp/I3C1xTxr587Bp7JATnYsW47sEwd2QLO63x8D0 ba1ngLFvJaEjk6lLy5W2NDJQGJjlMV+6Any0DcbzhG6okbBgG/KuZkQRZzdJFRNR WZ2ogZY3KukbfpunzQyouqbJIxKsnxFr3CWvfCIoX3qrQ5mqryf4lSWRIaLIf9Vg GEvuKmRyKv22uTEUHYClYmRRseQa0jOvSB0VfD4FJlZMBZwWqyuN19+9fA0HcUzW YQiHhd9oe2DZLNZFK+gcORK6utE1s6+w0C1qxOGhFiBidhjyrPehqpt4XqIMozVI aZQY6e5KlN+XioF2/1v90nsdzsRV0CZkZOvTbpVIgj1iyB5Vbx3+AA6OvSboeL1Y /vLjXzv8l5FZhBKZGAjmsuw9Ku/Fbfb6BSAyoRhOYilw0xzKMUdIFJ7E7Lw6E1/m 8EE3YpjQt0bVP6pBtUOLABmEDyyzwp/xPw99MG+mI1FfiRUTDBA= =wN9H -----END PGP SIGNATURE-----