Your message dated Thu, 23 Dec 2021 06:03:28 +0000
with message-id <[email protected]>
and subject line Bug#995129: fixed in postfix 3.6.3-2
has caused the Debian Bug report #995129,
regarding upgrade of libc or something resulted in postfix/smtp[3114]: fatal:
unknown service: smtp/tcp
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
995129: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=995129
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: postfix
Version: 3.5.6-1+b1
Severity: normal
This server is following testing, and has automatic upgrades enabled. On
Sep 22, all outgoing mail ceased flowing.
I have been able to work around the problem by disabling chrooting for
smtp in master.cf.
/var/spool/postfix/etc/services seems ok, it was last modified in 2020
and has:
smtp 25/tcp mail
It does seem like it's out of date compared to /etc/services.
Looking at the logs, the error first occurred at 6:32.
At very close to the same time, there was this automatic upgrade:
2021-09-22 06:30:46 upgrade libc6:amd64 2.31-17 2.32-4
Other packages were upgraded too, but a libc upgrade folowed by a
nsswitch problem 2 minutes later seems probably related.
Looking at /var/spool/postfix/lib/x86_64-linux-gnu/ I
notice it's kind of a mess:
-rw-r--r-- 1 root root 99K May 7 2020 libgcc_s.so.1
-rw-r--r-- 1 root root 31K Sep 21 2015 libnss_compat-2.19.so
-rw-r--r-- 1 root root 31K Feb 17 2016 libnss_compat-2.21.so
-rw-r--r-- 1 root root 31K Jun 26 2016 libnss_compat-2.22.so
-rw-r--r-- 1 root root 31K Aug 23 2016 libnss_compat-2.23.so
-rw-r--r-- 1 root root 31K Aug 26 2017 libnss_compat-2.24.so
-rw-r--r-- 1 root root 31K Dec 16 2017 libnss_compat-2.25.so
-rw-r--r-- 1 root root 31K Jan 26 2018 libnss_compat-2.26.so
-rw-r--r-- 1 root root 39K Oct 29 2018 libnss_compat-2.27.so
-rw-r--r-- 1 root root 39K May 1 2019 libnss_compat-2.28.so
-rw-r--r-- 1 root root 39K Feb 4 2020 libnss_compat-2.29.so
-rw-r--r-- 1 root root 39K Mar 25 2020 libnss_compat-2.30.so
lrwxrwxrwx 1 root root 21 Mar 25 2020 libnss_compat.so.2 ->
libnss_compat-2.30.so
-rw-r--r-- 1 root root 23K Sep 21 2015 libnss_dns-2.19.so
-rw-r--r-- 1 root root 23K Feb 17 2016 libnss_dns-2.21.so
-rw-r--r-- 1 root root 23K Jun 26 2016 libnss_dns-2.22.so
-rw-r--r-- 1 root root 23K Aug 23 2016 libnss_dns-2.23.so
-rw-r--r-- 1 root root 23K Aug 26 2017 libnss_dns-2.24.so
-rw-r--r-- 1 root root 23K Dec 16 2017 libnss_dns-2.25.so
-rw-r--r-- 1 root root 23K Jan 26 2018 libnss_dns-2.26.so
-rw-r--r-- 1 root root 27K Oct 29 2018 libnss_dns-2.27.so
-rw-r--r-- 1 root root 27K May 1 2019 libnss_dns-2.28.so
-rw-r--r-- 1 root root 27K Feb 4 2020 libnss_dns-2.29.so
-rw-r--r-- 1 root root 27K Mar 25 2020 libnss_dns-2.30.so
lrwxrwxrwx 1 root root 18 Mar 25 2020 libnss_dns.so.2 -> libnss_dns-2.30.so
-rw-r--r-- 1 root root 47K Sep 21 2015 libnss_files-2.19.so
-rw-r--r-- 1 root root 47K Feb 17 2016 libnss_files-2.21.so
-rw-r--r-- 1 root root 47K Jun 26 2016 libnss_files-2.22.so
-rw-r--r-- 1 root root 47K Aug 23 2016 libnss_files-2.23.so
-rw-r--r-- 1 root root 47K Aug 26 2017 libnss_files-2.24.so
-rw-r--r-- 1 root root 47K Dec 16 2017 libnss_files-2.25.so
-rw-r--r-- 1 root root 47K Jan 26 2018 libnss_files-2.26.so
-rw-r--r-- 1 root root 55K Oct 29 2018 libnss_files-2.27.so
-rw-r--r-- 1 root root 55K May 1 2019 libnss_files-2.28.so
-rw-r--r-- 1 root root 51K Feb 4 2020 libnss_files-2.29.so
-rw-r--r-- 1 root root 51K Mar 25 2020 libnss_files-2.30.so
lrwxrwxrwx 1 root root 18 Mar 25 2020 libnss_files.so.2 ->
libnss_files-2.30.so
Same for the ooutside the chroot.
of these libs in /lib/x86_64-linux-gnu/
lrwxrwxrwx 1 root root 20 Sep 19 14:46 /lib/x86_64-linux-gnu/libnss_files.so.2
-> libnss_files-2.32.so
This makes me wonder a) why are the old ones not getting cleaned out
b) why are the new ones not copied in yet, and c) might there be
libnss version skew with libc?
-- System Information:
Debian Release: bookworm/sid
APT prefers testing
APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 5.10.0-8-amd64 (SMP w/2 CPU threads)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages postfix depends on:
ii adduser 3.118
ii cpio 2.13+dfsg-7
ii debconf [debconf-2.0] 1.5.77
ii dpkg 1.20.9
ii e2fsprogs 1.46.4-1
ii libc6 2.32-4
ii libdb5.3 5.3.28+dfsg1-0.8
ii libicu67 67.1-7
ii libnsl2 1.3.0-2
ii libsasl2-2 2.1.27+dfsg-2.1
ii libssl1.1 1.1.1l-1
ii lsb-base 11.1.0
ii netbase 6.3
ii ssl-cert 1.1.0+nmu1
Versions of packages postfix recommends:
ii ca-certificates 20210119
ii python3 3.9.2-3
Versions of packages postfix suggests:
ii bsd-mailx [mail-reader] 8.1.2-0.20180807cvs-2
ii dovecot-core [dovecot-common] 1:2.3.16+dfsg1-3
ii libsasl2-modules 2.1.27+dfsg-2.1
ii mutt [mail-reader] 2.0.5-4.1
pn postfix-cdb <none>
pn postfix-doc <none>
pn postfix-ldap <none>
pn postfix-lmdb <none>
pn postfix-mysql <none>
ii postfix-pcre 3.5.6-1+b1
pn postfix-pgsql <none>
ii postfix-sqlite 3.5.6-1+b1
ii procmail 3.22-26
pn resolvconf <none>
ii sasl2-bin 2.1.27+dfsg-2.1
pn ufw <none>
-- debconf information excluded
--
see shy jo
--- End Message ---
--- Begin Message ---
Source: postfix
Source-Version: 3.6.3-2
Done: Scott Kitterman <[email protected]>
We believe that the bug you reported is fixed in the latest version of
postfix, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Scott Kitterman <[email protected]> (supplier of updated postfix package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 23 Dec 2021 00:18:30 -0500
Source: postfix
Architecture: source
Version: 3.6.3-2
Distribution: unstable
Urgency: medium
Maintainer: LaMont Jones <[email protected]>
Changed-By: Scott Kitterman <[email protected]>
Closes: 905653 968516 991513 991950 995031 995129 999867
Changes:
postfix (3.6.3-2) unstable; urgency=medium
.
[Scott Kitterman]
.
* Add postfix-mta-sts-resolver to suggests. Closes: #968516
* Include compatibility_level in addition to postifx version when
determining default value for chroot in master.cf. Closes: #995129
* Fixup errors in postifx-add-* man pages. Closes: #995031
* Set compatibility level to 3.6 for fresh installs
* Update main/master.cf.proto on upgrade if not modified. Closes: #991513
* Decruft debconf template:
- Remove ancient (postfix 2.3) mydomain_warning
- Delete old (Postfix 2.10) relay_restrictions_warning
- Delete unused lmtp_retired_warning template
- Delete unused kernel_version_warning template
- Delete unused retry_upgrade_warning template
- Delete unused tlsmgr_upgrade_warning template
* Debconf template cleanup, thanks to Markus Hiereth for the suggestions.
Closes: #905653
.
[Miriam España Acebal]
.
* Removed LDFLAG -Bsymbolic-functions to fix issue where TLS is disabled
when private/tlmsgr socket is not found. lp: #1885403
.
[Christian Göttsche]
.
* Update debian/patches/07_sasl_config.diff:
- Fix conversion warnings by adding explicit cast
- Drop unused function xsasl_getpath
* Fix lintian detected typos in Debian packaging.
* Do not require postfix to be build by root.
* Set -e shell option explicitly.
* Bump watch file standard to version 4.
* Add misc:Pre-Depends to postfix.
* Remove trailing spaces in changelog.
* Add Documentation key to postfix service.
* Drop alternative dependency on obsolete libmysqlclient-dev.
* Add standard salsa ci configuration.
* Drop unused debconf template sqlite_warning.
.
[Paride Legovini]
.
* d/postfix.postinst: tolerate search domain with a leading dot.
Closes: #991950
.
[Sergio Durigan Junior]
.
* Support networkd-dispatcher. Closes: #999867 lp: #1718227
Checksums-Sha1:
cb0c1825156bf4ad6a9393bba41439fc78b3ca97 2976 postfix_3.6.3-2.dsc
b15e6c88ecb7dce46b99fde4a3491d4902185c19 204868 postfix_3.6.3-2.debian.tar.xz
ba0a3a28e47f2038e7335e870804ddbfe78b365d 7705 postfix_3.6.3-2_source.buildinfo
Checksums-Sha256:
ecf0388b0b1914d760bbb05a28b5c3138c664822c964f1a24db2d29cf306ab80 2976
postfix_3.6.3-2.dsc
153c662756738a5d6ba0909de072cc142ec7690e5ee00226888e313af1ba5429 204868
postfix_3.6.3-2.debian.tar.xz
595d89880c07e7d12cd0bb05100578f848c1c70331880f3e97cfb435076eac93 7705
postfix_3.6.3-2_source.buildinfo
Files:
884ca34014a452fa32ba0269f3a8f4ef 2976 mail optional postfix_3.6.3-2.dsc
048957a30bdac24f625688a54bdfb271 204868 mail optional
postfix_3.6.3-2.debian.tar.xz
efb1d62b23ed40951982fa2d8010682d 7705 mail optional
postfix_3.6.3-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=Dsyj
-----END PGP SIGNATURE-----
--- End Message ---