lp:ubuntu/dapper-security/postfix

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

17. By Marc Deslauriers on 2011-05-10

* SECURITY UPDATE: SASL memory corruption
  - debian/patches/CVE-2011-1720.dpatch: don't reuse the SASL handle
    after auth failure in src/smtpd/smtpd_sasl_proto.c.
  - CVE-2011-1720

16. By Marc Deslauriers on 2011-04-15

* SECURITY UPDATE: man-in-the-middle via plaintext command injection
  - debian/patches/CVE-2011-0411.dpatch: Discard the contents of the
    stream buffer so there is no pending plaintext in
    src/smtp/smtp_proto.c, src/smtpd/smtpd.c. Backport vstream_fpurge()
    in src/util/vstream.*.
  - CVE-2011-0411
* SECURITY UPDATE: symlink attack via incorrect pid dir permissions
  - debian/postfix.postinst: create pid dir with appropriate permissions.
  - CVE-2009-2939

15. By LaMont Jones on 2008-08-13

[Wietse Venema]

* SECURITY UPDATE: processes running as group mail could escalate
  privileges to the root user
* modify src/util/safe_open.c
* CVE-2008-2936

[LaMont Jones]

* Backport sane_basename from 2.3 as part of the patch for CVE-2008-2936
* Added: src/util/sane_basename.{c,in,ref}

14. By Martin Pitt on 2006-06-02

* SECURITY UPDATE: Potential SQL injection in some client encodings.
* Add debian/patches/10pgsql-escape.dpatch:
  - src/global/dict_pgsql.c, dict_pgsql_quote(): Use '' instead of \' for
    escaping '.
* CVE-2006-2314

13. By LaMont Jones on 2006-04-07

* New upstream version
* Add Galician debconf translations. Closes: #361255

12. By Scott James Remnant (Canonical) on 2006-04-06

Don't start postfix with the loopback interface.

11. By LaMont Jones on 2006-03-24

Upload to dapper

10. By LaMont Jones on 2006-02-24

Upload to dapper

9. By LaMont Jones on 2006-01-28

ifup/down need to deal with /var not being writable (by exiting).
Closes: launchpad.net/29925

8. By LaMont Jones on 2006-01-19

* postfix startup issues. Closes: #348645
* copy /dev/random and /dev/urandom into the chroot for ldaps.
  Closes: #348835.