Format: 1.8
Date: Fri, 12 Apr 2024 11:03:05 -0400
Source: amavisd-new
Binary: amavisd-new amavisd-new-postfix
Built-For-Profiles: noudeb
Architecture: all
Version: 1:2.13.0-3ubuntu2
Distribution: noble
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy02-amd64-084.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 amavisd-new - Interface between MTA and virus scanner/content filters
 amavisd-new-postfix - part of Ubuntu mail stack provided by Ubuntu server team
Changes:
 amavisd-new (1:2.13.0-3ubuntu2) noble-security; urgency=medium
 .
   * SECURITY UPDATE: incorrect check via multiple boundary parameters
     - debian/patches/CVE-2024-28054-1.patch: add CC_UNCHECKED,3 content
       category in conf/amavisd.conf, lib/Amavis.pm, lib/Amavis/Conf.pm,
       lib/Amavis/Unpackers.pm, lib/Amavis/Unpackers/MIME.pm,
       lib/Amavis/Unpackers/Part.pm, t/Amavis/Unpackers/MIMETest.pm.
     - debian/patches/CVE-2024-28054-2.patch: use
       MIME::Entity->ambiguous_content if available in .gitlab-ci.yml,
       lib/Amavis/Unpackers/MIME.pm.
     - debian/patches/CVE-2024-28054-3.patch: describe CVE-2024-28054 in
       README_FILES/README.CVE-2024-28054.
     - CVE-2024-28054
Checksums-Sha1:
 795e7d3da69aba907a33c9bcbe537513d5144def 3920 amavisd-new-postfix_2.13.0-3ubuntu2_all.deb
 04f7658b2b40915cc1652fc93cc467aadc3fb94b 633170 amavisd-new_2.13.0-3ubuntu2_all.deb
 6e6e85b40449eb47f4ff6f97762262163278596b 13010 amavisd-new_2.13.0-3ubuntu2_amd64.buildinfo
Checksums-Sha256:
 224214bb06c5638df76736f482cc0a9a196f7bde76f025d6833ac47f88c0bdd5 3920 amavisd-new-postfix_2.13.0-3ubuntu2_all.deb
 5f502aa3da391f46018ab04e3482009dd21b5290e23ba7f5ee947ab70fff1e52 633170 amavisd-new_2.13.0-3ubuntu2_all.deb
 c7b155e3f667e47ff4a357dbc8bf12f23c62a9343b56f1c34f483061f1deede8 13010 amavisd-new_2.13.0-3ubuntu2_amd64.buildinfo
Files:
 6e7c49d15defe2f2caad6147a42bfbac 3920 mail optional amavisd-new-postfix_2.13.0-3ubuntu2_all.deb
 3dd7264bbd86ee79c12708f1139caeab 633170 mail optional amavisd-new_2.13.0-3ubuntu2_all.deb
 fe4f69d5d9d72255d0e50671dade6db2 13010 mail optional amavisd-new_2.13.0-3ubuntu2_amd64.buildinfo
Original-Maintainer: Brian May <bam@debian.org>