[ubuntu/karmic-security] postfix_2.6.5-3ubuntu0.1_lpia_translations.tar.gz, postfix_2.6.5-3ubuntu0.1_sparc_translations.tar.gz (delayed), postfix, postfix_2.6.5-3ubuntu0.1_armel_translations.tar.gz, postfix_2.6.5-3ubuntu0.1_ia64_translations.tar.gz, postfix_2.6.5-3ubuntu0.1_powerpc_translations.tar.gz, postfix_2.6.5-3ubuntu0.1_i386_translations.tar.gz, postfix_2.6.5-3ubuntu0.1_amd64_translations.tar.gz 2.6.5-3ubuntu0.1 (Accepted)

[Ubuntu Installer]

postfix (2.6.5-3ubuntu0.1) karmic-security; urgency=low

  * SECURITY UPDATE: man-in-the-middle via plaintext command injection
    - src/smtp/smtp_proto.c, src/smtpd/smtpd.c: discard the contents of the
      stream buffer so there is no pending plaintext.
    - Origin: backported from postfix-2.6-patch09.gz
    - CVE-2011-0411

Date: Fri, 15 Apr 2011 10:27:41 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/karmic/+source/postfix/2.6.5-3ubuntu0.1
-------------- next part --------------
Format: 1.8
Date: Fri, 15 Apr 2011 10:27:41 -0400
Source: postfix
Binary: postfix postfix-ldap postfix-cdb postfix-pcre postfix-mysql postfix-pgsql postfix-dev postfix-doc
Architecture: source
Version: 2.6.5-3ubuntu0.1
Distribution: karmic-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 postfix    - High-performance mail transport agent
 postfix-cdb - CDB map support for Postfix
 postfix-dev - Loadable modules development environment for Postfix
 postfix-doc - Documentation for Postfix
 postfix-ldap - LDAP map support for Postfix
 postfix-mysql - MySQL map support for Postfix
 postfix-pcre - PCRE map support for Postfix
 postfix-pgsql - PostgreSQL map support for Postfix
Changes: 
 postfix (2.6.5-3ubuntu0.1) karmic-security; urgency=low
 .
   * SECURITY UPDATE: man-in-the-middle via plaintext command injection
     - src/smtp/smtp_proto.c, src/smtpd/smtpd.c: discard the contents of the
       stream buffer so there is no pending plaintext.
     - Origin: backported from postfix-2.6-patch09.gz
     - CVE-2011-0411
Checksums-Sha1: 
 20089df34e18c9f4f0120db81fa7ff939e09aadc 2192 postfix_2.6.5-3ubuntu0.1.dsc
 df9c614edb7f9c2b0bbf8bba22b68d98a149e177 218787 postfix_2.6.5-3ubuntu0.1.diff.gz
Checksums-Sha256: 
 e2adb513b67f94b08683ae06eb18bf8515c8a07b71d8be0669c179f725949051 2192 postfix_2.6.5-3ubuntu0.1.dsc
 44a86991f3139d8082bb5be9d34b8ba5015a29225c44bcc731133d6b5c1dda7b 218787 postfix_2.6.5-3ubuntu0.1.diff.gz
Files: 
 0f99a14ea5dc8895b2cd7f0dd926a686 2192 mail extra postfix_2.6.5-3ubuntu0.1.dsc
 a4cf89525bdc4824a9e3706f70d31401 218787 mail extra postfix_2.6.5-3ubuntu0.1.diff.gz
Original-Maintainer: LaMont Jones <lamont at debian.org>