MGASA-2024-0029 Updated postfix packages fix a security vulnerability

Postfix has been updated to fix smtp smuggling, an email spoofing attack that involves a composition of email services with specific differences in the way they handle line endings other than...

Important: postfix

Issue Overview: Postfix through 3.8.4 allows SMTP smuggling unless configured with smtpddatarestrictions=rejectunauthpipelining and smtpddiscardehlokeywords=chunking or certain other options that exist in recent versions. Remote attackers can use a published exploitation technique to inject e-mai...

SUSE-SU-2023:4981-1 Security update for postfix

This update for postfix fixes the following issues: - CVE-2023-51764: Fixed new SMTP smuggling attack bsc1218304...

SUSE-SU-2023:3945-1 Security update for postfix

This update for postfix fixes the following issues: Security fixes: - CVE-2023-32182: Fixed configpostfix SUSE specific script using potentially bad /tmp file bsc1211196. Other fixes: - postfix: config.postfix causes too tight permission on main.cf bsc1215372...

SUSE-SU-2023:3394-1 Security update for postfix

This update for postfix fixes the following issues: - CVE-2023-32182: Fixed configpostfix SUSE specific script potentially bad /tmp file usage bsc1211196. - Update to from 3.7.2 to 3.7.3: - Fixes a bug where some messages were not delivered after 'warning: Unexpected record type 'X'. bsc1213515...

postfix security update

2:2.6.6-2.1 - fix CVE-2011-0411 682978...

Debian DSA-093-1 : postfix - remote DoS

Wietse Venema reported he found a denial of service vulnerability in postfix. The SMTP session log that postfix keeps for debugging purposes could grow to an unreasonable size. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

SUSE-SA:2003:033: postfix

The remote host is missing the patch for the advisory SUSE-SA:2003:033 postfix. Postfix is a flexible MTA replacement for sendmail. Michal Zalewski has reported problems in postfix which can lead to a remote DoS attack or allow attackers to bounce-scan private networks. These problems have been...