Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpddatarestrictions=rejectunauthpipelining and smtpddiscardehlokeywords=chunking (or certain other options that exist in recent versions). Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Postfix supports <LF>.<CR><LF> but some other popular e-mail servers do not. To prevent attack variants (by always disallowing <LF> without <CR>), a different solution is required, such as the smtpdforbidbarenewline=yes option with a Postfix minimum version of 3.5.23, 3.6.13, 3.7.9, 3.8.4, or 3.9.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.11.0-1ubuntu1.2+esm3", "binary_name": "postfix" }, { "binary_version": "2.11.0-1ubuntu1.2+esm3", "binary_name": "postfix-cdb" }, { "binary_version": "2.11.0-1ubuntu1.2+esm3", "binary_name": "postfix-dev" }, { "binary_version": "2.11.0-1ubuntu1.2+esm3", "binary_name": "postfix-doc" }, { "binary_version": "2.11.0-1ubuntu1.2+esm3", "binary_name": "postfix-ldap" }, { "binary_version": "2.11.0-1ubuntu1.2+esm3", "binary_name": "postfix-mysql" }, { "binary_version": "2.11.0-1ubuntu1.2+esm3", "binary_name": "postfix-pcre" }, { "binary_version": "2.11.0-1ubuntu1.2+esm3", "binary_name": "postfix-pgsql" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.1.0-3ubuntu0.4+esm3", "binary_name": "postfix" }, { "binary_version": "3.1.0-3ubuntu0.4+esm3", "binary_name": "postfix-cdb" }, { "binary_version": "3.1.0-3ubuntu0.4+esm3", "binary_name": "postfix-dev" }, { "binary_version": "3.1.0-3ubuntu0.4+esm3", "binary_name": "postfix-doc" }, { "binary_version": "3.1.0-3ubuntu0.4+esm3", "binary_name": "postfix-ldap" }, { "binary_version": "3.1.0-3ubuntu0.4+esm3", "binary_name": "postfix-mysql" }, { "binary_version": "3.1.0-3ubuntu0.4+esm3", "binary_name": "postfix-pcre" }, { "binary_version": "3.1.0-3ubuntu0.4+esm3", "binary_name": "postfix-pgsql" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.3.0-1ubuntu0.4+esm3", "binary_name": "postfix" }, { "binary_version": "3.3.0-1ubuntu0.4+esm3", "binary_name": "postfix-cdb" }, { "binary_version": "3.3.0-1ubuntu0.4+esm3", "binary_name": "postfix-cdb-dbgsym" }, { "binary_version": "3.3.0-1ubuntu0.4+esm3", "binary_name": "postfix-dbgsym" }, { "binary_version": "3.3.0-1ubuntu0.4+esm3", "binary_name": "postfix-doc" }, { "binary_version": "3.3.0-1ubuntu0.4+esm3", "binary_name": "postfix-ldap" }, { "binary_version": "3.3.0-1ubuntu0.4+esm3", "binary_name": "postfix-ldap-dbgsym" }, { "binary_version": "3.3.0-1ubuntu0.4+esm3", "binary_name": "postfix-lmdb" }, { "binary_version": "3.3.0-1ubuntu0.4+esm3", "binary_name": "postfix-lmdb-dbgsym" }, { "binary_version": "3.3.0-1ubuntu0.4+esm3", "binary_name": "postfix-mysql" }, { "binary_version": "3.3.0-1ubuntu0.4+esm3", "binary_name": "postfix-mysql-dbgsym" }, { "binary_version": "3.3.0-1ubuntu0.4+esm3", "binary_name": "postfix-pcre" }, { "binary_version": "3.3.0-1ubuntu0.4+esm3", "binary_name": "postfix-pcre-dbgsym" }, { "binary_version": "3.3.0-1ubuntu0.4+esm3", "binary_name": "postfix-pgsql" }, { "binary_version": "3.3.0-1ubuntu0.4+esm3", "binary_name": "postfix-pgsql-dbgsym" }, { "binary_version": "3.3.0-1ubuntu0.4+esm3", "binary_name": "postfix-sqlite" }, { "binary_version": "3.3.0-1ubuntu0.4+esm3", "binary_name": "postfix-sqlite-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.4.13-0ubuntu1.4", "binary_name": "postfix" }, { "binary_version": "3.4.13-0ubuntu1.4", "binary_name": "postfix-cdb" }, { "binary_version": "3.4.13-0ubuntu1.4", "binary_name": "postfix-cdb-dbgsym" }, { "binary_version": "3.4.13-0ubuntu1.4", "binary_name": "postfix-dbgsym" }, { "binary_version": "3.4.13-0ubuntu1.4", "binary_name": "postfix-doc" }, { "binary_version": "3.4.13-0ubuntu1.4", "binary_name": "postfix-ldap" }, { "binary_version": "3.4.13-0ubuntu1.4", "binary_name": "postfix-ldap-dbgsym" }, { "binary_version": "3.4.13-0ubuntu1.4", "binary_name": "postfix-lmdb" }, { "binary_version": "3.4.13-0ubuntu1.4", "binary_name": "postfix-lmdb-dbgsym" }, { "binary_version": "3.4.13-0ubuntu1.4", "binary_name": "postfix-mysql" }, { "binary_version": "3.4.13-0ubuntu1.4", "binary_name": "postfix-mysql-dbgsym" }, { "binary_version": "3.4.13-0ubuntu1.4", "binary_name": "postfix-pcre" }, { "binary_version": "3.4.13-0ubuntu1.4", "binary_name": "postfix-pcre-dbgsym" }, { "binary_version": "3.4.13-0ubuntu1.4", "binary_name": "postfix-pgsql" }, { "binary_version": "3.4.13-0ubuntu1.4", "binary_name": "postfix-pgsql-dbgsym" }, { "binary_version": "3.4.13-0ubuntu1.4", "binary_name": "postfix-sqlite" }, { "binary_version": "3.4.13-0ubuntu1.4", "binary_name": "postfix-sqlite-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.6.4-1ubuntu1.3", "binary_name": "postfix" }, { "binary_version": "3.6.4-1ubuntu1.3", "binary_name": "postfix-cdb" }, { "binary_version": "3.6.4-1ubuntu1.3", "binary_name": "postfix-cdb-dbgsym" }, { "binary_version": "3.6.4-1ubuntu1.3", "binary_name": "postfix-dbgsym" }, { "binary_version": "3.6.4-1ubuntu1.3", "binary_name": "postfix-doc" }, { "binary_version": "3.6.4-1ubuntu1.3", "binary_name": "postfix-ldap" }, { "binary_version": "3.6.4-1ubuntu1.3", "binary_name": "postfix-ldap-dbgsym" }, { "binary_version": "3.6.4-1ubuntu1.3", "binary_name": "postfix-lmdb" }, { "binary_version": "3.6.4-1ubuntu1.3", "binary_name": "postfix-lmdb-dbgsym" }, { "binary_version": "3.6.4-1ubuntu1.3", "binary_name": "postfix-mysql" }, { "binary_version": "3.6.4-1ubuntu1.3", "binary_name": "postfix-mysql-dbgsym" }, { "binary_version": "3.6.4-1ubuntu1.3", "binary_name": "postfix-pcre" }, { "binary_version": "3.6.4-1ubuntu1.3", "binary_name": "postfix-pcre-dbgsym" }, { "binary_version": "3.6.4-1ubuntu1.3", "binary_name": "postfix-pgsql" }, { "binary_version": "3.6.4-1ubuntu1.3", "binary_name": "postfix-pgsql-dbgsym" }, { "binary_version": "3.6.4-1ubuntu1.3", "binary_name": "postfix-sqlite" }, { "binary_version": "3.6.4-1ubuntu1.3", "binary_name": "postfix-sqlite-dbgsym" } ] }