Groups > linux.debian.bugs.dist > #1201017

Bug#1073206: bullseye-pu: package python-aiosmtpd/1.2.2-1+deb11u1

From	Jonathan Wiltshire <jmw@debian.org>
Newsgroups	linux.debian.bugs.dist, linux.debian.devel.release
Subject	Bug#1073206: bullseye-pu: package python-aiosmtpd/1.2.2-1+deb11u1
Date	2024-06-15 20:50 +0200
Message-ID	<IPGDn-3aI4-11@gated-at.bofh.it> (permalink)
References	<IPfMS-2TSu-3@gated-at.bofh.it> <IPfMS-2TSu-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw

Control: tag -1 confirmed

On Fri, Jun 14, 2024 at 03:00:46PM +0100, Dale Richards wrote:
> [ Reason ]
> This update resolves two security vulnerabilities present in
> the version of python-aiosmtpd in Bullseye (1.2.2-1):
> 
>   * CVE-2024-27305 - SMTP smuggling due to poor handling of
>     non-standard line endings (Bug: #1066820)
>   * CVE-2024-34083 - STARTTLS unencrypted command injection
>     (Bug: #1072119)

Please go ahead.

Thanks,

-- 
Jonathan Wiltshire                                      jmw@debian.org
Debian Developer                         http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1

Back to linux.debian.bugs.dist | Previous | Next | Find similar | Unroll thread

Thread

Bug#1073206: bullseye-pu: package python-aiosmtpd/1.2.2-1+deb11u1 Jonathan Wiltshire <jmw@debian.org> - 2024-06-15 20:50 +0200

csiph-web