Your message dated Tue, 05 May 2026 10:20:13 +0000
with message-id <[email protected]>
and subject line Bug#1135691: fixed in postfix 3.11.2-1
has caused the Debian Bug report #1135691,
regarding postfix-cdb: postrm can fail with
/var/lib/dpkg/info/postfix-cdb.prerm: 3: .: cannot open
/usr/share/postfix/postinst.functions: No such file
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1135691: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1135691
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
package: postfix-cdb
version: 3.11.0-4
severity: serious
justification: i think this imust be some kind of policy violation,
and it makes other mta break
Hi,
postfix-cdb's postrm can fail if postfix has been removed first. This
is because postfix-cdb's prerm tries to run
/usr/share/postfix/postinst.functions from postfix, but postfix can
already have been removed in some circumtances: For example, when
postfix is to be replaced by another mta, apt can decide to remove
postfix before postfix-cdb
A minimal reproducer is:
# in a container - will break your system!
apt install -y logcheck postfix # choose no configuration
apt install -y dma # or any other mta
(logcheck can be, i think, any package that depends on
mail-transport-agent: i dont know exactly why, but when such a package
is installed, apt(?) will choose to do the postfix removal before the
postfix-cdb removal - this happens quite reliably in my tests. i ran
into this testing all mtas for logcheck:
https://salsa.debian.org/rpil2/logcheck/-/jobs/9480217 &
https://salsa.debian.org/rpil2/logcheck/-/tree/test-systemd-mail ---
but I imagine anyone changing mta might hit this).
The errors follow - you can see that postfix is removed before
postfix-cdb is removed, despite the dependencies
I tihnk you could fix this by making postfix-cdb's prerm check for the
postfix.functions file before trying to use it: seems sensible anyway
Removing postfix-lmdb (3.11.0-4) ...
Removing lmdb map entry from /etc/postfix/dynamicmaps.cf
dpkg: postfix: dependency problems, but removing anyway as you requested:
postfix-cdb depends on postfix (= 3.11.0-4).
mime-construct depends on default-mta | mail-transport-agent; however:
Package default-mta is not installed.
Package mail-transport-agent is not installed.
Package postfix which provides mail-transport-agent is to be removed.
logcheck depends on default-mta | mail-transport-agent; however:
Package default-mta is not installed.
Package mail-transport-agent is not installed.
Package postfix which provides mail-transport-agent is to be removed.
Removing postfix (3.11.0-4) ...
Selecting previously unselected package dma.
(Reading database ... 17354 files and directories currently installed.)
Preparing to unpack .../archives/dma_0.14-1_amd64.deb ...
Unpacking dma (0.14-1) ...
(Reading database ... 17376 files and directories currently installed.)
Removing postfix-cdb (3.11.0-4) ...
/var/lib/dpkg/info/postfix-cdb.prerm: 3: .: cannot open
/usr/share/postfix/postinst.functions: No such file
dpkg: error processing package postfix-cdb (--remove):
old postfix-cdb package prerm maintainer script subprocess failed
with exit status 2
dpkg: too many errors, stopping
/var/lib/dpkg/info/postfix-cdb.postinst: 3: .: cannot open
/usr/share/postfix/postinst.functions: No such file
dpkg: error while cleaning up:
old postfix-cdb package postinst maintainer script subprocess failed
with exit status 2
Errors were encountered while processing:
postfix-cdb
Processing was halted because there were too many errors.
--- End Message ---
--- Begin Message ---
Source: postfix
Source-Version: 3.11.2-1
Done: Michael Tokarev <[email protected]>
We believe that the bug you reported is fixed in the latest version of
postfix, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Tokarev <[email protected]> (supplier of updated postfix package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 05 May 2026 13:05:26 +0300
Source: postfix
Architecture: source
Version: 3.11.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Postfix Team <[email protected]>
Changed-By: Michael Tokarev <[email protected]>
Closes: 1135691 1135718
Changes:
postfix (3.11.2-1) unstable; urgency=medium
.
[ Michael Tokarev ]
* New upstream version 3.11.2
(Closes: #1135718, CVE-2026-43964)
* missing-vars-init.patch: remove
* include cdb and lmdb maps in postfix package,
and make postfix-cdb and postfix-lmdb empty
Closes: #1135691
* d/main.cf.in: default_database_type=cdb, default_cache_db_type=lmdb
* d/postfix.postinst: stop adding alias_maps and alias_database parameters
to main.cf, use defaults (from main.cf.default) instead
* d/changelog: fix typo
* d/rules, d/functions: small cleanups for 3.9.1* versions
.
[ Luca Boccassi ]
* Install and use sysusers.d/tmpfiles.d config files
Checksums-Sha1:
28f9f531076f3a7532fbd3dac50d8deac19f8518 3294 postfix_3.11.2-1.dsc
b4939bca34a3e59d4ae282e09b0d5045cdd43140 5282053 postfix_3.11.2.orig.tar.gz
515bd87dce7775bbc8f04c89c8cc073e5e010fd3 220 postfix_3.11.2.orig.tar.gz.asc
072ce03a5c5c183f59f390904bba64c59efb9d28 201512 postfix_3.11.2-1.debian.tar.xz
d4c787c4b14e5a49b6304de32569c7f004429390 6663 postfix_3.11.2-1_source.buildinfo
Checksums-Sha256:
d4cfa0729a295fde59f3bc14c55faca37b692417e6b5520a180802a22c1419df 3294
postfix_3.11.2-1.dsc
daed65b08c9288cdb386a914f3e52cdddd44935407b5ce5aee8bcc3aa4207778 5282053
postfix_3.11.2.orig.tar.gz
7deed0e6f2a77eade9656e7087ef3765b4460301408f794806f470c857ccbc86 220
postfix_3.11.2.orig.tar.gz.asc
212c6208017865aec66a83b72072c2c0e58737dd0973d6fc22d9dc522f518361 201512
postfix_3.11.2-1.debian.tar.xz
cf76558b0f1706a3fdeb36ca56e0294521de1268760b548bf49d1e13024d4238 6663
postfix_3.11.2-1_source.buildinfo
Files:
dc85e0825505038c1aa6420a061fefe7 3294 mail optional postfix_3.11.2-1.dsc
89b03d2e6c2c6278e3bbf2d07947d79a 5282053 mail optional
postfix_3.11.2.orig.tar.gz
97229f24b15f12b6d48679282838ad16 220 mail optional
postfix_3.11.2.orig.tar.gz.asc
660f15408172be5f542de470fd0b3255 201512 mail optional
postfix_3.11.2-1.debian.tar.xz
2f53c8dfd5babd2b055bd695162c65bd 6663 mail optional
postfix_3.11.2-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=gi08
-----END PGP SIGNATURE-----
pgpSSWZDJhNNQ.pgp
Description: PGP signature
--- End Message ---
