-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 11 Nov 2026 00:52:57 +0900 Source: postfixadmin Architecture: source Version: 4.0.6+ds+~cs20.241.7-1 Distribution: unstable Urgency: medium Maintainer: Luke Yasuda <jing@jing.rocks> Changed-By: Luke Yasuda <jing@jing.rocks> Closes: 1153545 Changes: postfixadmin (4.0.6+ds+~cs20.241.7-1) unstable; urgency=medium . * New upstream version 4.0.6+ds+~cs20.241.7 (Closes: #1153545) (CVE-2026-121551) * d/control: downgrade php-bacon-qr-code from Depends to Recommends. php-bacon-qr-code is not built on armhf and i386, which made postfixadmin uninstallable on armhf and i386. But only the TOTP feature uses php-bacon-qr-code to generate a QR code. Even without php-bacon-qr-code, a TOTP secret can be manually entered into a password manager. This is not a hard runtime dependency. * d/control: remove the obsolete default-mysql-client from Depends * Salsa-CI: disable wrap-and-sort on CI Checksums-Sha1: ba01d278e5e1d883bb68dcffdfa8b2655803535e 3221 postfixadmin_4.0.6+ds+~cs20.241.7-1.dsc 0f46aa55a943c8bc4e8cf2e8abeeae0c2a88836e 8104 postfixadmin_4.0.6+ds+~cs20.241.7.orig-constant-time-encoding.tar.xz 867c10f7ab8830a857ee5aab6d11e94ad6aab183 10967584 postfixadmin_4.0.6+ds+~cs20.241.7.orig-endroid-qr-code.tar.xz 0a57e9e1b050a4c49dba2a54a1690614751f3050 15504 postfixadmin_4.0.6+ds+~cs20.241.7.orig-otphp.tar.xz ad1cff40c6556decf431240162831d0c31756d9c 12932 postfixadmin_4.0.6+ds+~cs20.241.7.orig-pacrypt.tar.xz 8a354e177e66d981d03e63a10a6c0fdda73457b7 3433376 postfixadmin_4.0.6+ds+~cs20.241.7.orig-zf1-future.tar.xz 81062643bb65988fda77a7e4fcae47777a2e64ed 1670384 postfixadmin_4.0.6+ds+~cs20.241.7.orig.tar.xz 66172f5e059a95356e41dcd74588b553572ab218 15888 postfixadmin_4.0.6+ds+~cs20.241.7-1.debian.tar.xz 0ec7c9fbd38ba989450a68114e9c65eacca915fc 6831 postfixadmin_4.0.6+ds+~cs20.241.7-1_source.buildinfo Checksums-Sha256: 804bff819059d1d3866b6e64138987a772ff5ade6e35b97e6498fc7054ce7bd3 3221 postfixadmin_4.0.6+ds+~cs20.241.7-1.dsc 2e258bacb856bbe89114c3becf1b64a69dbb61d3a7b7ecc4ab92b31042ee21a7 8104 postfixadmin_4.0.6+ds+~cs20.241.7.orig-constant-time-encoding.tar.xz 537c975124f5357c2b2a93692e28558b89f37cb3295967a652b7630e8ac21930 10967584 postfixadmin_4.0.6+ds+~cs20.241.7.orig-endroid-qr-code.tar.xz b2e37446e8dee78c6ca348f6aafd6ad438cef2efcc8efc4732544ceb0f5d6758 15504 postfixadmin_4.0.6+ds+~cs20.241.7.orig-otphp.tar.xz 6f7e5d5875d4d7e1ef308f805252ffffa1c3ce4124b1eab5336c7bf855fba84e 12932 postfixadmin_4.0.6+ds+~cs20.241.7.orig-pacrypt.tar.xz 88f585768fdd96a2d0fdb19e9ef32f7a53235ad98d27d85f71bc1c10d640bb96 3433376 postfixadmin_4.0.6+ds+~cs20.241.7.orig-zf1-future.tar.xz 45f5f73763fa054cbea613e752ab096575003d27fb025ed8177b2713166c7a8e 1670384 postfixadmin_4.0.6+ds+~cs20.241.7.orig.tar.xz 58dd97b0d4b8b34015fb2403ac68865e1f275ecf0235c28af3ce970139ac94ad 15888 postfixadmin_4.0.6+ds+~cs20.241.7-1.debian.tar.xz 1f08288e9f85f90d9022d52dd910630aaee854d15529c4df68cf389235179615 6831 postfixadmin_4.0.6+ds+~cs20.241.7-1_source.buildinfo Files: 8177713acbfca9b6ccc8c2ed92be1854 3221 admin optional postfixadmin_4.0.6+ds+~cs20.241.7-1.dsc 8db68ffd519a8bcabf3e3557d887f75c 8104 admin optional postfixadmin_4.0.6+ds+~cs20.241.7.orig-constant-time-encoding.tar.xz e2f47fe59fab93f0e5782cbc609ae59c 10967584 admin optional postfixadmin_4.0.6+ds+~cs20.241.7.orig-endroid-qr-code.tar.xz 91614bc4cc2f5ddee1e218615b38d55d 15504 admin optional postfixadmin_4.0.6+ds+~cs20.241.7.orig-otphp.tar.xz 7b4f3de2c80ae8db87136752306888a4 12932 admin optional postfixadmin_4.0.6+ds+~cs20.241.7.orig-pacrypt.tar.xz afe9f3c17b0eb02b1234d70416e481ff 3433376 admin optional postfixadmin_4.0.6+ds+~cs20.241.7.orig-zf1-future.tar.xz e07b05b4df5c7b69fe65cfc83b4badb4 1670384 admin optional postfixadmin_4.0.6+ds+~cs20.241.7.orig.tar.xz 905f244f581541d44a3d298bb98b1bd1 15888 admin optional postfixadmin_4.0.6+ds+~cs20.241.7-1.debian.tar.xz 43167c3680f6c5f7505842277f766172 6831 admin optional postfixadmin_4.0.6+ds+~cs20.241.7-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iIYEARYKAC4WIQQUNK5y7dM5LGmlOjiPRdGe/wwPKwUCavM+2xAcamluZ0BqaW5n LnJvY2tzAAoJEI9F0Z7/DA8r6VcBALRPKUrexRYNb2v0bSKoCkrCOlPTMB7W7Ltl Vt9IBFEhAP99Ch5xKgNzEsVbIoDD+8iD7cyNJEwS8AO5nA7LNdFoAw== =Ugd8 -----END PGP SIGNATURE-----