Ubuntu
amavisd-new package

amavisd-new 1:2.13.0-3ubuntu1.1 source package in Ubuntu

Changelog

amavisd-new (1:2.13.0-3ubuntu1.1) mantic-security; urgency=medium

  * SECURITY UPDATE: incorrect check via multiple boundary parameters
    - debian/patches/CVE-2024-28054-1.patch: add CC_UNCHECKED,3 content
      category in conf/amavisd.conf, lib/Amavis.pm, lib/Amavis/Conf.pm,
      lib/Amavis/Unpackers.pm, lib/Amavis/Unpackers/MIME.pm,
      lib/Amavis/Unpackers/Part.pm, t/Amavis/Unpackers/MIMETest.pm.
    - debian/patches/CVE-2024-28054-2.patch: use
      MIME::Entity->ambiguous_content if available in .gitlab-ci.yml,
      lib/Amavis/Unpackers/MIME.pm.
    - debian/patches/CVE-2024-28054-3.patch: describe CVE-2024-28054 in
      README_FILES/README.CVE-2024-28054.
    - CVE-2024-28054

 -- Marc Deslauriers <email address hidden>  Fri, 12 Apr 2024 11:03:05 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Mantic
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
mail
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Mantic updates main mail
Mantic security main mail

Builds

Mantic: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
amavisd-new_2.13.0.orig.tar.bz2 869.8 KiB deb6e99182f0ee67c382eab454220106aa5d0fd18a564236710f59f07600069b
amavisd-new_2.13.0-3ubuntu1.1.debian.tar.xz 79.9 KiB 2cf24d6eadcda8761cefb79535c4c8914b85ef8919a3f5dae18ae8754c1a09a9
amavisd-new_2.13.0-3ubuntu1.1.dsc 2.4 KiB fb91480629bab78b6768ae023435695c797eaa3f2b564e5527a0ab2b06a54fdd

View changes file

Binary packages built by this source

amavisd-new: Interface between MTA and virus scanner/content filters

 AMaViSd-new is a script that interfaces a mail transport agent (MTA) with
 zero or more virus scanners, and spamassassin (optional).
 .
 It supports all common virus scanners (more than 20 different AVs), with
 direct talk-to-daemon support for ClamAV, OpenAntiVirus, Trophie, AVG,
 f-prot, and Sophos AVs.
 .
 AMaViSd-new supports all MTAs through its generic SMTP/LMTP filter mode
 (ideal for postfix and exim). It is faster and safer to use the SMTP/LMTP
 filter mode than using the AMaViS pipe client. It supports sendmail milter
 through the amavisd-new-milter package.

amavisd-new-postfix: part of Ubuntu mail stack provided by Ubuntu server team

 AMaViSd-new is a script that interfaces a mail transport agent (MTA) with
 zero or more virus scanners, and spamassassin (optional).
 .
 It supports all common virus scanners (more than 20 different AVs), with
 direct talk-to-daemon support for ClamAV, OpenAntiVirus, Trophie, AVG,
 f-prot, and Sophos AVs.
 .
 AMaViSd-new supports all MTAs through its generic SMTP/LMTP filter mode
 (ideal for postfix and exim). It is faster and safer to use the SMTP/LMTP
 filter mode than using the AMaViS pipe client. It supports sendmail milter
 through this package.
 .
 This package contains configuration files for amavis and alters postfix
 configuration to utilize amavisd-new.