Ubuntu

“postfix” 2.2.10-1ubuntu0.3 source package in Ubuntu

Changelog

postfix (2.2.10-1ubuntu0.3) dapper-security; urgency=low

  * SECURITY UPDATE: man-in-the-middle via plaintext command injection
    - debian/patches/CVE-2011-0411.dpatch: Discard the contents of the
      stream buffer so there is no pending plaintext in
      src/smtp/smtp_proto.c, src/smtpd/smtpd.c. Backport vstream_fpurge()
      in src/util/vstream.*.
    - CVE-2011-0411
  * SECURITY UPDATE: symlink attack via incorrect pid dir permissions
    - debian/postfix.postinst: create pid dir with appropriate permissions.
    - CVE-2009-2939
 -- Marc Deslauriers <email address hidden>   Fri, 15 Apr 2011 10:55:16 -0400

Upload details

Uploaded by:
Marc Deslauriers on 2011-04-15
Uploaded to:
Dapper
Original maintainer:
LaMont Jones
Component:
main
Architectures:
any
Section:
mail
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size MD5 Checksum
postfix_2.2.10.orig.tar.gz 2.3 MiB 440a4702182a79ac2f51e8974fb742c9
postfix_2.2.10-1ubuntu0.3.diff.gz 154.3 KiB e6f700cb0c5641a9812c8da60bf34158
postfix_2.2.10-1ubuntu0.3.dsc 1.5 KiB f214cde47d490fc2c800520e75936b67

Binary packages built by this source

postfix: No summary available for postfix in ubuntu dapper.

No description available for postfix in ubuntu dapper.

postfix-dev: No summary available for postfix-dev in ubuntu dapper.

No description available for postfix-dev in ubuntu dapper.

postfix-doc: No summary available for postfix-doc in ubuntu dapper.

No description available for postfix-doc in ubuntu dapper.

postfix-ldap: No summary available for postfix-ldap in ubuntu dapper.

No description available for postfix-ldap in ubuntu dapper.

postfix-mysql: No summary available for postfix-mysql in ubuntu dapper.

No description available for postfix-mysql in ubuntu dapper.

postfix-pcre: No summary available for postfix-pcre in ubuntu dapper.

No description available for postfix-pcre in ubuntu dapper.

postfix-pgsql: No summary available for postfix-pgsql in ubuntu dapper.

No description available for postfix-pgsql in ubuntu dapper.