[An on-line version of this announcement will be available at http://www.postfix.org/announcements/postfix-3.5.3.html]
Postfix 3.5.3, 3.4.13:
TLS handshake failure in the Postfix SMTP server during SNI processing, after the server-side TLS engine sent a TLSv1.3 HelloRetryRequest (HRR) to a remote SMTP client. Reported by Ján Máté, fixed by Viktor Dukhovni.
Postfix versions 3.5.3, 3.4.13, 3.3.11, 3.2.16:
The command "postfix tls deploy-server-cert" did not handle a missing optional argument. This bug was introduced in Postfix 3.1.
You can find the updated Postfix source code at the mirrors listed at http://www.postfix.org/.