Viktor Dukhovni:
> > RES_TRUSTAD support was already released last January with Postfix
> > 3.3.9, 3.4.11, and 3.5.1. So we already solved this 7 months ago.
> > Why isn't this fix available in downstream distros?

Woops, the fix was released by Apr 18, 2020 in Postfix 3.5.1, 3.4.11,
3.3.9.  That is more than a year ago.

> I guess we're not generating enough security bugs to trigger urgent
> updates. :-)

That will not help with maintainers like this one, who cherrypick
patches and ignore glibc portability/bitrot fixes.

> Looking at <https://tracker.debian.org/pkg/postfix> I see that the
> latest stable snapshot in 3.5.6-1 dating back 2020-08-05 and not updated
> since.  So likely none of the subsequent updates have been merged into
> Debian stable.

Or any number of preceding updates, like the Postfix 3.5.1 glibc
portability/bitrot fix.

> Perhaps Debian needs a Postfix maintainer with more cycles to
> proactively keep it up to date?

That would be an idea.

        Wietse

Reply via email to