[ubuntu/mantic-security] amavisd-new 1:2.13.0-3ubuntu1.1 (Accepted)

[Marc Deslauriers]

amavisd-new (1:2.13.0-3ubuntu1.1) mantic-security; urgency=medium

  * SECURITY UPDATE: incorrect check via multiple boundary parameters
    - debian/patches/CVE-2024-28054-1.patch: add CC_UNCHECKED,3 content
      category in conf/amavisd.conf, lib/Amavis.pm, lib/Amavis/Conf.pm,
      lib/Amavis/Unpackers.pm, lib/Amavis/Unpackers/MIME.pm,
      lib/Amavis/Unpackers/Part.pm, t/Amavis/Unpackers/MIMETest.pm.
    - debian/patches/CVE-2024-28054-2.patch: use
      MIME::Entity->ambiguous_content if available in .gitlab-ci.yml,
      lib/Amavis/Unpackers/MIME.pm.
    - debian/patches/CVE-2024-28054-3.patch: describe CVE-2024-28054 in
      README_FILES/README.CVE-2024-28054.
    - CVE-2024-28054

Date: 2024-04-12 15:46:11.009746+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/amavisd-new/1:2.13.0-3ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.