==========================================================================
Ubuntu Security Notice USN-6591-1
January 22, 2024

postfix vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 23.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS (Available with Ubuntu Pro)
- Ubuntu 16.04 LTS (Available with Ubuntu Pro)
- Ubuntu 14.04 LTS (Available with Ubuntu Pro)

Summary:

Postfix could allow bypass of email authentication if it received
specially crafted network traffic.

Software Description:
- postfix: High-performance mail transport agent

Details:

Timo Longin discovered that Postfix incorrectly handled certain email line
endings. A remote attacker could possibly use this issue to bypass an email
authentication mechanism, allowing domain spoofing and potential spamming.

Please note that certain configuration changes are required to address
this issue. They are not enabled by default for backward compatibility.
Information can be found athttps://www.postfix.org/smtp-smuggling.html.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.10:
   postfix                         3.8.1-2ubuntu0.1

Ubuntu 22.04 LTS:
   postfix                         3.6.4-1ubuntu1.2

Ubuntu 20.04 LTS:
   postfix                         3.4.13-0ubuntu1.3

Ubuntu 18.04 LTS (Available with Ubuntu Pro):
   postfix                         3.3.0-1ubuntu0.4+esm2

Ubuntu 16.04 LTS (Available with Ubuntu Pro):
   postfix                         3.1.0-3ubuntu0.4+esm2

Ubuntu 14.04 LTS (Available with Ubuntu Pro):
   postfix                         2.11.0-1ubuntu1.2+esm2

After a standard system update you need to enable
smtpd_forbid_bare_newline in your configuration and reload it to make
all the necessary changes.

References:
   https://ubuntu.com/security/notices/USN-6591-1
   CVE-2023-51764,https://bugs.launchpad.net/ubuntu/+source/postfix/+bug/2049337

Package Information:
   https://launchpad.net/ubuntu/+source/postfix/3.8.1-2ubuntu0.1
   https://launchpad.net/ubuntu/+source/postfix/3.6.4-1ubuntu1.2
   https://launchpad.net/ubuntu/+source/postfix/3.4.13-0ubuntu1.3

Ubuntu 6591-1: Postfix vulnerability

January 22, 2024
Postfix could allow bypass of email authentication if it received specially crafted network traffic.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS (Available with Ubuntu Pro) - Ubuntu 16.04 LTS (Available with Ubuntu Pro) - Ubuntu 14.04 LTS (Available with Ubuntu Pro) Summary: Postfix could allow bypass of email authentication if it received specially crafted network traffic. Software Description: - postfix: High-performance mail transport agent Details: Timo Longin discovered that Postfix incorrectly handled certain email line endings. A remote attacker could possibly use this issue to bypass an email authentication mechanism, allowing domain spoofing and potential spamming. Please note that certain configuration changes are required to address this issue. They are not enabled by default for backward compatibility. Information can be found athttps://www.postfix.org/smtp-smuggling.html.

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 23.10: postfix 3.8.1-2ubuntu0.1 Ubuntu 22.04 LTS: postfix 3.6.4-1ubuntu1.2 Ubuntu 20.04 LTS: postfix 3.4.13-0ubuntu1.3 Ubuntu 18.04 LTS (Available with Ubuntu Pro): postfix 3.3.0-1ubuntu0.4+esm2 Ubuntu 16.04 LTS (Available with Ubuntu Pro): postfix 3.1.0-3ubuntu0.4+esm2 Ubuntu 14.04 LTS (Available with Ubuntu Pro): postfix 2.11.0-1ubuntu1.2+esm2 After a standard system update you need to enable smtpd_forbid_bare_newline in your configuration and reload it to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6591-1

CVE-2023-51764,https://bugs.launchpad.net/ubuntu/+source/postfix/+bug/2049337

Severity
Ubuntu Security Notice USN-6591-1

Package Information

https://launchpad.net/ubuntu/+source/postfix/3.8.1-2ubuntu0.1 https://launchpad.net/ubuntu/+source/postfix/3.6.4-1ubuntu1.2 https://launchpad.net/ubuntu/+source/postfix/3.4.13-0ubuntu1.3

Related News

11.Locks IsometricPattern Esm H320
2 - 3 min read
The upcoming release of Linux Mint 22 will introduce significant changes, particularly in handling XApp , GNOME applications, and the Software
2.Motherboard Esm H320
2 - 3 min read
German software engineer Lennart Poettering recently presented run0 , a new tool in systemd v256 that aims to address the security concerns
22.Lock ScreenEffect Esm H320
2 - 3 min read
Red Hat recently released its newest enterprise Linux distro, Red Hat Enterprise Linux (RHEL) 9.4 , which introduces several features designed to
8.Locks HexConnections CodeGlobe Esm H320
1 - 2 min read
The latest release of Debian , one of the oldest and most trusted distributions within the Linux ecosystem, redefines security, stability, and
20.Lock AbstractDigital Circular Esm H320
1 - 2 min read
The Ubuntu security team has recently discovered and addressed multiple vulnerabilities in the Apache HTTP Server. The vulnerabilities affected
1.Penguin Landscape Esm H320
1 - 2 min read
A critical vulnerability was discovered in the Linux kernel's netfilter subsystem, specifically within the nf_tables component, posing potential
19.Laptop Bed Esm H320
2 - 3 min read
The release of Google Chrome 124 addresses four vulnerabilities, including a critical security flaw that can enable attackers to execute arbitrary
23.Tablet Connections Esm H320
2 - 3 min read
The release of Ubuntu 24.04 LTS , also known as Noble Numbat, brings various security enhancements and exciting new features . These improvements
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved