On Tue, Aug 24, 2021 at 02:28:12PM -0400, Wietse Venema wrote: > > I'll start adding RES_TRUSTAD support to the 3.3-3.5 stable releases. > > It will combine nicely with the OpenSSL 3.x bitrot patch. > > RES_TRUSTAD support was already released last January with Postfix > 3.3.9, 3.4.11, and 3.5.1. So we already solved this 7 months ago. > Why isn't this fix available in downstream distros?
I guess we're not generating enough security bugs to trigger urgent updates. :-) Looking at <https://tracker.debian.org/pkg/postfix> I see that the latest stable snapshot in 3.5.6-1 dating back 2020-08-05 and not updated since. So likely none of the subsequent updates have been merged into Debian stable. postfix-3.5.6 Jul 26 2020 postfix-3.5.7 Aug 30 2020 postfix-3.5.8 Nov 7 2020 postfix-3.5.9 Jan 17 2021 postfix-3.5.10 Apr 11 2021 postfix-3.5.11 Jun 13 2021 postfix-3.5.12 Jul 24 2021 Perhaps Debian needs a Postfix maintainer with more cycles to proactively keep it up to date? -- Viktor.
