UbuntuUpdates.org

Package "amavisd-new"

Name: amavisd-new

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • part of Ubuntu mail stack provided by Ubuntu server team
Latest version: 1:2.13.0-3ubuntu1.1
Release: mantic (23.10)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "amavisd-new" in Mantic

Repository Area Version
base universe 1:2.13.0-3ubuntu1
base main 1:2.13.0-3ubuntu1
security main 1:2.13.0-3ubuntu1.1
updates main 1:2.13.0-3ubuntu1.1
updates universe 1:2.13.0-3ubuntu1.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1:2.13.0-3ubuntu1.1 2024-05-28 14:07:18 UTC

  amavisd-new (1:2.13.0-3ubuntu1.1) mantic-security; urgency=medium

  * SECURITY UPDATE: incorrect check via multiple boundary parameters
    - debian/patches/CVE-2024-28054-1.patch: add CC_UNCHECKED,3 content
      category in conf/amavisd.conf, lib/Amavis.pm, lib/Amavis/Conf.pm,
      lib/Amavis/Unpackers.pm, lib/Amavis/Unpackers/MIME.pm,
      lib/Amavis/Unpackers/Part.pm, t/Amavis/Unpackers/MIMETest.pm.
    - debian/patches/CVE-2024-28054-2.patch: use
      MIME::Entity->ambiguous_content if available in .gitlab-ci.yml,
      lib/Amavis/Unpackers/MIME.pm.
    - debian/patches/CVE-2024-28054-3.patch: describe CVE-2024-28054 in
      README_FILES/README.CVE-2024-28054.
    - CVE-2024-28054

 -- Marc Deslauriers <email address hidden> Fri, 12 Apr 2024 11:03:05 -0400
CVE-2024-28054 Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user a


About   -   Send Feedback to @ubuntu_updates