Ubuntu
postfix package

postfix 2.2.10-1ubuntu0.3 source package in Ubuntu

Changelog

postfix (2.2.10-1ubuntu0.3) dapper-security; urgency=low

  * SECURITY UPDATE: man-in-the-middle via plaintext command injection
    - debian/patches/CVE-2011-0411.dpatch: Discard the contents of the
      stream buffer so there is no pending plaintext in
      src/smtp/smtp_proto.c, src/smtpd/smtpd.c. Backport vstream_fpurge()
      in src/util/vstream.*.
    - CVE-2011-0411
  * SECURITY UPDATE: symlink attack via incorrect pid dir permissions
    - debian/postfix.postinst: create pid dir with appropriate permissions.
    - CVE-2009-2939
 -- Marc Deslauriers <email address hidden>   Fri, 15 Apr 2011 10:55:16 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Dapper
Original maintainer:
LaMont Jones
Architectures:
any
Section:
mail
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
postfix_2.2.10.orig.tar.gz 2.3 MiB 7c3f4cabd9f5bbba0c8987b0dcbafdce45a4f13b7f917bcfc6d7b3caf8ce34f1
postfix_2.2.10-1ubuntu0.3.diff.gz 154.3 KiB 5c0cee8fb554fd27d8c9cab44742d1f71d2f00dc45d0b172522ae95a58d9d616
postfix_2.2.10-1ubuntu0.3.dsc 1.5 KiB 6dfa5e36d230b65d3138968d019431ce858068fc53abd51a3d5e4e131c92127d

View changes file

Binary packages built by this source

postfix: No summary available for postfix in ubuntu dapper.

No description available for postfix in ubuntu dapper.

postfix-dev: No summary available for postfix-dev in ubuntu dapper.

No description available for postfix-dev in ubuntu dapper.

postfix-doc: No summary available for postfix-doc in ubuntu dapper.

No description available for postfix-doc in ubuntu dapper.

postfix-ldap: No summary available for postfix-ldap in ubuntu dapper.

No description available for postfix-ldap in ubuntu dapper.

postfix-mysql: No summary available for postfix-mysql in ubuntu dapper.

No description available for postfix-mysql in ubuntu dapper.

postfix-pcre: No summary available for postfix-pcre in ubuntu dapper.

No description available for postfix-pcre in ubuntu dapper.

postfix-pgsql: No summary available for postfix-pgsql in ubuntu dapper.

No description available for postfix-pgsql in ubuntu dapper.