Lucene search

Gentoo FoundationMGASA-2024-0212

HistoryJun 06, 2024 - 6:48 p.m.

Updated amavisd-new packages fix security vulnerability

2024-06-0618:48:22

Gentoo Foundation

advisories.mageia.org

amavis

update

mime-tools

vulnerability

security fix

cve-2024-28054

unix

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.1%

JSON

Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) when there are multiple boundary parameters in a MIME email message. Consequently, there can be an incorrect check for banned files or malware. (CVE-2024-28054)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchamavisd-new< 2.11.0-9.1amavisd-new-2.11.0-9.1.mga9

OS	Version	Architecture	Package	Version	Filename
Mageia	9	noarch	amavisd-new	< 2.11.0-9.1	amavisd-new-2.11.0-9.1.mga9

References

bugs.mageia.org/show_bug.cgi?id=33250

ubuntu.com/security/notices/USN-6790-1