Accepted postfix 3.4.23-0+deb10u2 (source) into oldoldstable
- To: debian-lts-changes@lists.debian.org, dispatch@tracker.debian.org
- Subject: Accepted postfix 3.4.23-0+deb10u2 (source) into oldoldstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Tue, 30 Jan 2024 09:00:20 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: postfix_3.4.23-0+deb10u2_source.changes
- Debian-source: postfix
- Debian-suite: oldoldstable
- Debian-version: 3.4.23-0+deb10u2
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.seger; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=M8B9z3s65GCD/NejND34TNRDev3bdYCRG8QOb1QgfGk=; b=YIcA0cGYtqg/sqMhNLU8SnOH6p krruwbmvqon7bhIBa6f8T3ijJ2XHECUJ/s/MIzBpAKlAdifRM2B0r+YFp0sTY95CJj/QNyzvSL+NL 1LfUiCWM77oHqqyzM1dNDq/jLRawHLHL8qUXVO6XfxYE/1DBZekAhQbbiDegzV4Sa8M6XeQOJtWqW eiQ5GbJsMi9u33GlD+YqECdmQ9omNVhjoMb7ePbJSAmoVe1sfW2y4UP7cbfb7Pk0eqSuSkC5XTKiA frcjQjOYmSygqJcYLN79YLYprURhiD66A4w1A1X1KTXFZV44TnHjQtZo/FLBsdcIKRt9huNGeYVzh RbrcwxAQ==;
- Mail-followup-to: debian-lts@lists.debian.org
- Message-id: <E1rUjye-00DbYo-AD@seger.debian.org>
- Reply-to: debian-lts@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 28 Jan 2024 13:40:18 +0000
Source: postfix
Architecture: source
Version: 3.4.23-0+deb10u2
Distribution: buster-security
Urgency: medium
Maintainer: LaMont Jones <lamont@debian.org>
Changed-By: Bastien Roucariès <rouca@debian.org>
Changes:
postfix (3.4.23-0+deb10u2) buster-security; urgency=medium
.
[Bastien Roucariès]
.
* Non-maintainer upload by the LTS Security Team.
* Allow to build with kernel from backport
.
[Wietse Venema]
.
* Fix CVE-2023-51764: Postfix allowed SMTP smuggling
unless configured with
smtpd_data_restrictions=reject_unauth_pipelining and
smtpd_discard_ehlo_keywords=chunking.
Remote attackers can use a published exploitation technique
to inject e-mail messages with a spoofed MAIL FROM address,
allowing bypass of an SPF protection mechanism.
Checksums-Sha1:
27a9b93cb4ca908a42ec889c38f3fdf2b517c20b 3066 postfix_3.4.23-0+deb10u2.dsc
8aea6a870705c87ffc57738c3feb70869961298e 4586103 postfix_3.4.23.orig.tar.gz
38424cd34d40d71b79d5221c0ed9c4b3977355e2 220 postfix_3.4.23.orig.tar.gz.asc
106ad0db88642ce3a2116ebff01cab02d3e7a6bb 220724 postfix_3.4.23-0+deb10u2.debian.tar.xz
fa6b62afa3e932559690a0d4b1d37588fd1f28ef 12817 postfix_3.4.23-0+deb10u2_amd64.buildinfo
Checksums-Sha256:
3716d814705831d4f3081c68bdd18ee6c199a1f79646bfcc92d275d71ac0359f 3066 postfix_3.4.23-0+deb10u2.dsc
1759e953bf7baccb533899845c17753bf57a99ebac9c21717626262966a122f9 4586103 postfix_3.4.23.orig.tar.gz
05ea60983d569ea342a00ca7dafa4f5406ce5540a8053080a85c6ba7774e1eb2 220 postfix_3.4.23.orig.tar.gz.asc
044adb97bfcbeca0d06bd960fc5460ec5211412f03e0d5df6a8363cda9830ebf 220724 postfix_3.4.23-0+deb10u2.debian.tar.xz
f83c62e8adfa21f08df00dd2f0226ffec8e56743dd198a0dc86488c08da752c1 12817 postfix_3.4.23-0+deb10u2_amd64.buildinfo
Files:
f1859bafba02057308dcf50246b10baa 3066 mail optional postfix_3.4.23-0+deb10u2.dsc
99c3b5c6d7c8639bc76f216950fc5266 4586103 mail optional postfix_3.4.23.orig.tar.gz
fa2a629a3d8f0b8e1ee00c8af40d11d9 220 mail optional postfix_3.4.23.orig.tar.gz.asc
c886f19fcb52cc323c3054efbb4cacb4 220724 mail optional postfix_3.4.23-0+deb10u2.debian.tar.xz
b02bf422c45029d578a6a79cd719a3d9 12817 mail optional postfix_3.4.23-0+deb10u2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJFBAEBCgAvFiEEXQGHuUCiRbrXsPVqADoaLapBCF8FAmW4t60RHHJvdWNhQGRl
Ymlhbi5vcmcACgkQADoaLapBCF+xRQ//ZDAU0m+jOL4T0kNaYiP1Dfs1xH1blgvo
hkqABd/eduYony6Q3SPswMc1FjkDTnJJHhXaoM0KLQyaZCnGN67a/nDHFCZOvMc0
hxuxC9lQShGSnXoDqXwa4BG+K8gZ7Kl2zpThOEMk9E4hfNOM7f/Daq6a7DiNwPsT
ZnNKafG5xhzOw++Ka/+X7TXpC85lMHNGUtGc+4jE9Cs8xaqk2Xv8Ygg6YjNCgSE6
h71IdQL4uUD0P0CvinewLYraPvFkg+tu5ZTtmMkZSPZOJz9Kl5HWs/EldHW//kyw
4kiMlt2iy6C4SzTsZvNJ+gWyj+Z6GzU0X9sJ3CwjEufP0esKK7aTV8MjeDDYHAtF
z9BA7lfrHd1ukWWA3+1ZB1aroJYPhVH4+jNgSnnIBIe7dMuPivjnJR6LzrfE5nd2
A715+nUGXWPkiLeIlKQMuxOdB5vsDDOyee+YIEnUAAC26Voo6Z2QJA6zOn7AC7Lz
21xsT9kKGz/QhfW13HdBSr0y6IBvkYKXAmq6u6WTB62w9QeT0oW1nxRBBJeeTHJm
f6t+91udeqVHqnTuJri2FlFBlm8G+1ub0mqJTdJEvbNM64KsTZVIGDUM0u3anuWs
a+QK3u5mwV8tdM6pMg9/gI2IsngkQu0XYy5mxrttLRYN40brK4Om7cKgDEAWC6BM
ZZcKg5tXLOI=
=Ahak
-----END PGP SIGNATURE-----