Ubuntu
postfix-policyd package

[Sync request] Sync postfix-policyd (1.80-2.2) from Debian unstable (main)

Bug #132088 reported by Michael Bienia
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
postfix-policyd (Ubuntu)
Fix Released
Wishlist
Unassigned
Declined for Feisty by William Grant

Bug Description

Binary package hint: postfix-policyd

Please sync postfix-policyd (1.80-2.2) from Debian unstable (main).

The current package has no Ubuntu changes.

Thanks.

Changelog:

postfix-policyd (1.80-2.2) unstable; urgency=high

  * Non-maintainer upload
  * Fix buffer overflow in the w_read function in sockets.c to avoid
    possible DoS and execution of arbitary code via long SMTP commands
    (apply directly, because no patch system is used so far)
    (Closes: #435735) Fixes: CVE-2007-3791

 -- Steffen Joeris <email address hidden> Sun, 12 Aug 2007 10:46:25 +0000

CVE References

Michael Bienia (geser)
Changed in postfix-policyd:
importance: Undecided → Wishlist
status: New → Confirmed
Revision history for this message
Sebastien Bacher (seb128) wrote :

[Updating] postfix-policyd (1.80-2.1 [Ubuntu] < 1.80-2.2 [Debian])
 * Trying to add postfix-policyd...
  - <postfix-policyd_1.80-2.2.diff.gz: downloading from http://ftp.us.debian.org/debian/>
  - <postfix-policyd_1.80-2.2.dsc: downloading from http://ftp.us.debian.org/debian/>
  - <postfix-policyd_1.80.orig.tar.gz: already in distro - downloading from librarian>
I: postfix-policyd [universe] -> postfix-policyd_1.80-2.1 [universe].

Changed in postfix-policyd:
status: Confirmed → Fix Released
Revision history for this message
Daniel Hahler (blueyed) wrote :

The package is not released, is it?
See https://launchpad.net/ubuntu/feisty/+source/postfix-policyd/

Changed in postfix-policyd:
status: Fix Released → Fix Committed
Revision history for this message
Daniel Hahler (blueyed) wrote :

Sorry, I thought this bug was filed against feisty. I will do so.

Changed in postfix-policyd:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.