postfix-3.10.6

[Bruce Dubbs]

New point version.

[Bruce Dubbs]

Postfix stable release 3.10.6 and legacy releases 3.9.7, 3.8.13, 3.7.18

Fixes for Postfix 3.10 only:

• Bugfix (defect introduced: Postfix 3.10, date: 20250117). Symptom: warning messages that smtp_tls_wrappermode requires "smtp_tls_security_level = encrypt".
  • Root cause: Support for "TLS-Required: no" broke client-side TLS wrappermode support, by downgrading a connection to TLS security level 'may'.
  • The fix changes the downgrade level for wrappermode connections to 'encrypt'.
  • Rationale: by design, TLS can be optional only for connections that use STARTTLS. The downgrade to unauthenticated 'encrypt' allows a sender to avoid an email delivery problem.

• New logging: the Postfix SMTP client will log a warning when an MX hostname does not match STS policy MX patterns, with "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with TLSRPT support enabled in a TLS policy plugin. It will log a successful match only when verbose logging is enabled.

• Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP client null pointer crash when an STS policy plugin sends no policy_string or no mx_pattern attributes. This can happen only during tests with a fake STS plugin.

Fixes for Postfix 3.10, 3.9, 3.8, 3.7:

• Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault when a duplicate parameter name is given to "postconf -X" or "postconf -#'.

• Documentation: removed incorrect text from the parameter description for smtp_cname_overrides_servername. File: proto/postconf.proto.

[Bruce Dubbs]

Fixed at commits

829c5f869e Update to upower-1.91.0.
bc48755b19 Update to postfix-3.10.6.
4d36e3f7ba Update to libinput-1.30.0.

[Bruce Dubbs]

Milestone renamed