Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) when there are multiple boundary parameters in a MIME email message. Consequently, there can be an incorrect check for banned files or malware.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | amavisd-new | < 1:2.13.0-3+deb12u1 | amavisd-new_1:2.13.0-3+deb12u1_all.deb |
Debian | 11 | all | amavisd-new | < 1:2.11.1-5+deb11u1 | amavisd-new_1:2.11.1-5+deb11u1_all.deb |
Debian | 999 | all | amavisd-new | < 1:2.13.0-5 | amavisd-new_1:2.13.0-5_all.deb |
Debian | 13 | all | amavisd-new | < 1:2.13.0-5 | amavisd-new_1:2.13.0-5_all.deb |