[ubuntu/mantic-security] postfix 3.8.1-2ubuntu0.1 (Accepted)
Allen Huang
allen.huang at canonical.com
Mon Jan 22 11:01:41 UTC 2024
postfix (3.8.1-2ubuntu0.1) mantic-security; urgency=medium
* SECURITY UPDATE: SMTP smuggling (LP: #2049337)
- debian/patches/CVE-2023-51764.patch: introduced
`smtpd_forbid_bare_newline`. With "smtpd_forbid_bare_newline = yes",
the Postfix SMTP server disconnects a remote SMTP client that
sends a line ending in a 'bare newline'.
- CVE-2023-51764
Date: 2024-01-19 15:07:05.324966+00:00
Changed-By: Allen Huang <allen.huang at canonical.com>
https://launchpad.net/ubuntu/+source/postfix/3.8.1-2ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the mantic-changes
mailing list