slackware-current/patches/packages/postfix-3.6.14-x86_64-1_slack15.0.txt
Patrick J Volkerding 2bde1d73b5 Mon Jan 22 20:57:12 UTC 2024
patches/packages/postfix-3.6.14-x86_64-1_slack15.0.txz:  Upgraded.
  Security (inbound SMTP smuggling): with "smtpd_forbid_bare_newline
  = normalize" (default "no" for Postfix < 3.9), the Postfix
  SMTP server requires the standard End-of-DATA sequence
  <CR><LF>.<CR><LF>, and otherwise allows command or message
  content lines ending in the non-standard <LF>, processing
  them as if the client sent the standard <CR><LF>.
  The alternative setting, "smtpd_forbid_bare_newline = reject"
  will reject any command or message that contains a bare
  <LF>, and is more likely to cause problems with legitimate
  clients.
  For backwards compatibility, local clients are excluded by
  default with "smtpd_forbid_bare_newline_exclusions =
  $mynetworks".
  For more information, see:
    https://www.postfix.org/smtp-smuggling.html
  (* Security fix *)
2024-01-23 13:30:31 +01:00

11 lines
409 B
Text

postfix: postfix (mail transport and submission agent)
postfix:
postfix: Postfix attempts to be fast, easy to administer, and secure, while at
postfix: the same time being sendmail compatible enough to not upset existing
postfix: users. Thus, the outside has a sendmail-ish flavor, but the inside is
postfix: completely different.
postfix:
postfix: Homepage: http://www.postfix.org
postfix:
postfix:
postfix: