-
postfix (3.4.13-0ubuntu1.4) focal-security; urgency=medium
* SECURITY UPDATE: SMTP smuggling (LP: #2049337)
- debian/patches/CVE-2023-51764-2.patch: improved fix with reduced
risks of regression. Introduced
"smtpd_forbid_bare_newline = normalize".
- CVE-2023-51764
-- Allen Huang <email address hidden> Mon, 29 Jan 2024 16:49:03 +0800
-
postfix (3.4.13-0ubuntu1.3) focal-security; urgency=medium
* SECURITY UPDATE: SMTP smuggling (LP: #2049337)
- debian/patches/CVE-2023-51764.patch: introduced
`smtpd_forbid_bare_newline`. With "smtpd_forbid_bare_newline = yes",
the Postfix SMTP server disconnects a remote SMTP client that
sends a line ending in a 'bare newline'.
- CVE-2023-51764
-- Allen Huang <email address hidden> Tue, 16 Jan 2024 16:03:32 +0000
-
postfix (3.4.13-0ubuntu1.2) focal; urgency=medium
* d/rules: Removed LDFLAG -Bsymbolic-functions (LP: #1885403).
-- Miriam España Acebal <email address hidden> Tue, 07 Sep 2021 08:58:01 +0200
-
postfix (3.4.13-0ubuntu1.1) focal; urgency=medium
* d/postfix.postinst: tolerate search domain with a leading dot
(LP: #1906970)
-- Paride Legovini <email address hidden> Thu, 12 Aug 2021 14:26:09 +0200
-
postfix (3.4.13-0ubuntu1) focal; urgency=medium
* New upstream release: 3.4.13
- Workaround for broken DANE support after an incompatible change in
GLIBC 2.31 (LP: #1868955)
- Fix "postfix tls deploy-server-cert", now it handles a missing optional
argument (LP: #1881196)
* Drop patch 80_glibc2.30-ftbfs.diff. This patch is not needed anymore and
it does not cleanly apply to this new upstream release.
-- Lucas Kanashiro <email address hidden> Fri, 19 Jun 2020 14:11:03 -0300
-
postfix (3.4.10-1ubuntu1) focal; urgency=medium
* d/configure-instance.sh: fix typo in tls_CApath copying (LP: #1872288)
-- Lucas Kanashiro <email address hidden> Thu, 16 Apr 2020 14:48:33 -0300
-
postfix (3.4.10-1) unstable; urgency=medium
[Scott Kitterman]
* Update postfix.postinst text to refer to systemctl vice service
[Wietse Venema]
* 3.4.10
-- Scott Kitterman <email address hidden> Fri, 13 Mar 2020 01:11:35 -0400
-
postfix (3.4.9-1build1) focal; urgency=medium
* No-change rebuild for icu soname change.
-- Matthias Klose <email address hidden> Tue, 03 Mar 2020 21:35:07 +0100
-
postfix (3.4.9-1) unstable; urgency=medium
[Scott Kitterman]
* Correct Debian's smtp (8) man page name in d/p/debian-man-name.diff for
lmtp. Closes: #920356
* Fix d/init.d running change so it works with multi-instance again
- Thanks to <email address hidden> for the fix. Closes: #944922
* Bump standards-version to 4.5.0 without further change
* Switch from debian/compat to debhelper-compat and bump compat to 12
- Update debian/rules to use dh_installsystemd instead of
dh_systemd_enable and dh_systemd_start
- Update debian/rules for new example install path
[Wietse Venema]
* 3.4.9
-- Scott Kitterman <email address hidden> Sat, 15 Feb 2020 22:34:22 -0500
-
postfix (3.4.8-1build1) focal; urgency=medium
* No-change rebuild for icu soname change.
-- Matthias Klose <email address hidden> Thu, 13 Feb 2020 09:09:21 +0100
-
postfix (3.4.8-1) unstable; urgency=medium
[Scott Kitterman]
* Stop generating obsolete Upstream substvar
* Bump standards-version to 4.4.1 without further change
* Use -l instead of LD_LIBRARY_PATH for dh_shlibdeps
* Check GPG signature when downloading new versions via uscan
[Wietse Venema]
* 3.4.8
-- Scott Kitterman <email address hidden> Sun, 12 Jan 2020 02:26:14 -0500
-
postfix (3.4.7-2) unstable; urgency=medium
[Andreas Hasenack]
* Update autopkgtest to use python3. Closes: #943212 LP: #1845334
[Scott Kitterman]
* Update smtp_tls_CApath to /etc/ssl/certs so it actually works.
Closes: #923083
* Refactor running status detection in sysv init based on upstream
postfix-script so it works in docker. Closes: #941293
-- Scott Kitterman <email address hidden> Sun, 03 Nov 2019 13:09:50 -0500
-
postfix (3.4.7-1) unstable; urgency=medium
[Andreas Hasenack]
* * d/p/80_glibc2.30-ftbfs.diff: fix build with glibc 2.30 (LP: #1842923)
[Scott Kitterman]
* Refresh patches
* Modernize default TLS setup:
- Drop addition of smtpd_tls_session_cache_database to TLS parameters (no
longer needed since TLS session tickets are used now). Closes: #934803
- Replace use of obsolescent smtpd_use_tls=yes with
smtpd_tls_security_level=may in default TLS setting. Closes: #520936
- Add smtp_tls_security_level=may to default TLS settings so that both
client and server TLS are now enabled be default for new installations.
Closes: #163144
- Stop copying smtp_tls_CAfile into chroot, not needed per postfix docs
- Also copy smtpd_tls_CApath files into chroot. Closes: #579248
- Add smtp_tls_CApath using /usr/share/ca-certificates/ to default TLS
configuration so postfix smtp client can use the system certificate
store to verify smtp server certificates, add ca-certificates to postfix
Recommends. Closes: #923083
* Bump standards version to 4.4.0 without further change
* Fix spelling errors in Debian provided man pages
[Christian Göttsche]
* Fix debian/rules so build flags are applied Closes: #879668
[Wietse Venema]
* 3.4.6
* 3.4.7
-- Scott Kitterman <email address hidden> Sun, 22 Sep 2019 16:21:17 -0400
-
postfix (3.4.5-1ubuntu1) eoan; urgency=medium
* d/p/80_glibc2.30-ftbfs.diff: fix build with glibc 2.30 (LP: #1842923)
-- Andreas Hasenack <email address hidden> Thu, 05 Sep 2019 10:01:24 -0300
