-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 25 Mar 2019 01:01:51 -0400 Source: postfix Binary: postfix postfix-ldap postfix-lmdb postfix-cdb postfix-pcre postfix-mysql postfix-pgsql postfix-sqlite postfix-doc Architecture: source Version: 3.1.12-0+deb9u1 Distribution: stretch Urgency: medium Maintainer: LaMont Jones <lamont@debian.org> Changed-By: Scott Kitterman <scott@kitterman.com> Description: postfix - High-performance mail transport agent postfix-cdb - CDB map support for Postfix postfix-doc - Documentation for Postfix postfix-ldap - LDAP map support for Postfix postfix-lmdb - LMDB map support for Postfix postfix-mysql - MySQL map support for Postfix postfix-pcre - PCRE map support for Postfix postfix-pgsql - PostgreSQL map support for Postfix postfix-sqlite - SQLite map support for Postfix Closes: 917512 919444 Changes: postfix (3.1.12-0+deb9u1) stretch; urgency=medium . [Scott Kitterman] . * Add detailed smarthost instructions to README.Debian. Thanks to Celejar for the input. Closes: #919444 * Refresh patches . [Wietse Venema] . * 3.1.10 - Bugfix (introduced: Postfix 2.11): minor memory leak when minting issuer certs. This affects a tiny minority of use cases. Viktor Dukhovni, based on a fix by Juan Altmayer Pizzorno for the ssl_dane library. File: tls/tls_dane.c. - Bugfix (introduced: Postfix 3.0): with smtputf8_enable=yes, table lookups could casefold the search string when searching a lookup table that does not use fixed-string keys (regexp, pcre, tcp, etc.). Historically, Postfix would not case-fold the search string with such tables. File: util/dict_utf8.c. Closes: #917512 - Multiple 'bit rot' fixes for OpenSSL API changes, including support to disable TLSv1.3, to avoid issuing multiple session tickets. Viktor Dukhovni. Files: proto/postconf.proto, proto/TLS_README.html, tls/tls.h, tls/tls_server.c, tls/tls_misc.c. - Bugfix (introduced: 3.0): smtpd_discard_ehlo_keywords could not disable "SMTPUTF8". because the lookup table was using "EHLO_MASK_SMTPUTF8" instead. File: global/ehlo_mask.c. - Documentation: update documentation for Postfix versions that support disabling TLS 1.3. File: proto/postconf.proto. - Improved logging of TLS 1.3 summary information, and improved reporting of the same info in Received: message headers. Viktor Dukhovni. Files: proto/FORWARD_SECRECY_README.html, posttls-finger/posttls-finger.c, smtpd/smtpd.c, tls/tls.h, tls/tls_client.c, tls/tls_misc.c, tls/tls_proxy.h, tls/tls_proxy_context_print.c, tls/tls_proxy_context_scan.c, tls/tls_server.c. * 3.1.11 - Bugfix (introduced: postfix-2.11): with posttls-finger, connections to unix-domain servers always resulted in "Failed to establish session" even after a connection was established. Jaroslav Skarva. File: posttls-finger/posttls-finger.c. * 3.1.12 - Bugfix (introduced: Postfix 2.2): reject_multi_recipient_bounce has been producing false rejects starting with the Postfix 2.2 smtpd_end_of_data_restrictons, and for the same reasons, did the same with the Postfix 3.4 BDAT command. The latter was reported by Andreas Schulze. File: smtpd/smtpd_check.c. - Bugfix (introduced: Postfix 3.0): LMTP connections over UNIX-domain sockets were cached but not reused, due to a cache lookup key mismatch. Therefore, idle cached connections could exhaust LMTP server resources, resulting in two-second pauses between email deliveries. This problem was investigated by Juliana Rodrigueiro. File: smtp/smtp_connect.c. Checksums-Sha1: 2e326989498bb1af360c4f2c39c8672fc591fb91 2685 postfix_3.1.12-0+deb9u1.dsc 13833e4efd2a1f592de62fe0994351067b5a9d9c 4341732 postfix_3.1.12.orig.tar.gz ce5c889494e28ab0eb3e5a4ac07e64be2fad370a 195420 postfix_3.1.12-0+deb9u1.debian.tar.xz 3ca092dbe272ff72a88fad9983a50e0ac1751d3c 6549 postfix_3.1.12-0+deb9u1_source.buildinfo Checksums-Sha256: bdf65327e23397de49465411339cef9fe772b13f44f52974fef5cfd88f9ff778 2685 postfix_3.1.12-0+deb9u1.dsc 2231b52625006cbdee78ebb74da58545ef7a448dbd6eb10733e6cea8c8ff0409 4341732 postfix_3.1.12.orig.tar.gz cf20917089226dcc27c8acece7c454153f7f76cfb3f64e22c82ff7f11090f5ae 195420 postfix_3.1.12-0+deb9u1.debian.tar.xz 9bc3ecc17a5d6278a4efbef952c55a32e14fa18ca77446d5a6c22492bcaa8969 6549 postfix_3.1.12-0+deb9u1_source.buildinfo Files: 18355c8f1473cc97bfb9e5a88a3b629c 2685 mail extra postfix_3.1.12-0+deb9u1.dsc 57eb9b7437ddfaf8b001afaf273eacb9 4341732 mail extra postfix_3.1.12.orig.tar.gz 4a0f4016028ba739685faef3cca6a861 195420 mail extra postfix_3.1.12-0+deb9u1.debian.tar.xz 2a528043b1ac49f2a753546acffd5dd0 6549 mail extra postfix_3.1.12-0+deb9u1_source.buildinfo -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJcs1UzAAoJEHjX3vua1ZrxdvoQAJG02G9tFgUFyqLu0CqLAHN9 epvYs8tN6WSQFvDCiuBzhaU4lUpTZHaoi/5qyUhE18Syx30XsrklTlgNRHWG8AiZ kK4dUEkZGpvGhTgCeJRmTqIyFCPO/oo11TK5w1KaMbBZNL0j7r/ur5f7p2Dsmeva oxOXmuGININsosX+Iv8RkL7sVMhS/9OQ0G8oOUAg6hE31OXMNaKV45I0bYXJqLWq GgQLPcJsoXDl5WrmlcAihyWpcNB3z9bTzeAfjonjg+PKs3iQyGtFBwpIgsYjpUlw Mn0ewlqI0wXHvm9uS83GW2ix9XYx5N/hw6hqF8UnForHRH1wEhpfMnP9MfG1LZtw xQ0r+NjmHuxur9slRtUVBxm05Dxv+EDGXBxP+bafiPBdmsefVWI3sARTSrVVkBRI IjpuhxnHtMUudAir7qttzDQMEsWgCDoReTAZN+psaTik1HwwKian96bHXjlyXSaf eMHzirIikdREIheYof++hF9hp5POYaWaD0clj8Ss/KD8J8ENIt4OwdOgqiaIp2yT xjAZJxErfk+9KlTeoJqJ5a/drZKdG/C0CS1AZbPpOB4/0k+LhB7ipa/WhYCE0xqn p1lCbgCuvQ6ylLGwLlglge+3tEI4QQ3wKcpnEjQbbB3VsLYKF+Kb97hpPOkD+WFp ZAHCZ+5Le9DoTYfGp/RY =eG6R -----END PGP SIGNATURE-----
