UbuntuUpdates.org

Package "amavisd-new-postfix"

Name: amavisd-new-postfix

Description:

part of Ubuntu mail stack provided by Ubuntu server team
Latest version: 1:2.13.0-3ubuntu2
Release: noble (24.04)
Level: security
Repository: universe
Head package: amavisd-new
Homepage: https://www.ijs.si/software/amavisd/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "amavisd-new-postfix"

All arch deb package
APT INSTALL

Other versions of "amavisd-new-postfix" in Noble

Repository Area Version
base universe 1:2.13.0-3ubuntu1
updates universe 1:2.13.0-3ubuntu2

Changelog

Version: 1:2.13.0-3ubuntu2 2024-05-28 14:07:19 UTC

  amavisd-new (1:2.13.0-3ubuntu2) noble-security; urgency=medium

  * SECURITY UPDATE: incorrect check via multiple boundary parameters
    - debian/patches/CVE-2024-28054-1.patch: add CC_UNCHECKED,3 content
      category in conf/amavisd.conf, lib/Amavis.pm, lib/Amavis/Conf.pm,
      lib/Amavis/Unpackers.pm, lib/Amavis/Unpackers/MIME.pm,
      lib/Amavis/Unpackers/Part.pm, t/Amavis/Unpackers/MIMETest.pm.
    - debian/patches/CVE-2024-28054-2.patch: use
      MIME::Entity->ambiguous_content if available in .gitlab-ci.yml,
      lib/Amavis/Unpackers/MIME.pm.
    - debian/patches/CVE-2024-28054-3.patch: describe CVE-2024-28054 in
      README_FILES/README.CVE-2024-28054.
    - CVE-2024-28054

 -- Marc Deslauriers <email address hidden> Fri, 12 Apr 2024 11:03:05 -0400
CVE-2024-28054 Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user a


About   -   Send Feedback to @ubuntu_updates