Package "amavisd-new"

Name: amavisd-new


Interface between MTA and virus scanner/content filters

Latest version: 1:2.13.0-3ubuntu1.1
Release: mantic (23.10)
Level: security
Repository: main
Homepage: https://www.ijs.si/software/amavisd/


Download "amavisd-new"

Other versions of "amavisd-new" in Mantic

Repository Area Version
base universe 1:2.13.0-3ubuntu1
base main 1:2.13.0-3ubuntu1
security universe 1:2.13.0-3ubuntu1.1
updates main 1:2.13.0-3ubuntu1.1
updates universe 1:2.13.0-3ubuntu1.1


Version: 1:2.13.0-3ubuntu1.1 2024-05-28 14:07:16 UTC

  amavisd-new (1:2.13.0-3ubuntu1.1) mantic-security; urgency=medium

  * SECURITY UPDATE: incorrect check via multiple boundary parameters
    - debian/patches/CVE-2024-28054-1.patch: add CC_UNCHECKED,3 content
      category in conf/amavisd.conf, lib/Amavis.pm, lib/Amavis/Conf.pm,
      lib/Amavis/Unpackers.pm, lib/Amavis/Unpackers/MIME.pm,
      lib/Amavis/Unpackers/Part.pm, t/Amavis/Unpackers/MIMETest.pm.
    - debian/patches/CVE-2024-28054-2.patch: use
      MIME::Entity->ambiguous_content if available in .gitlab-ci.yml,
    - debian/patches/CVE-2024-28054-3.patch: describe CVE-2024-28054 in
    - CVE-2024-28054

 -- Marc Deslauriers <email address hidden> Fri, 12 Apr 2024 11:03:05 -0400

CVE-2024-28054 Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user a

About   -   Send Feedback to @ubuntu_updates