TEMP-0950121-6A81FC

NameTEMP-0950121-6A81FC
Descriptionopensmtpd DoS via opportunistic TLS downgrade
SourceAutomatically generated temporary name. Not for external reference.
Debian Bugs950121

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
opensmtpd (PTS)stretch6.0.2p1-2+deb9u2fixed
stretch (security)6.0.2p1-2+deb9u3fixed
buster6.0.3p1-5+deb10u3fixed
buster (security)6.0.3p1-5+deb10u4fixed
bullseye, sid6.6.4p1-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
opensmtpdsource(unstable)6.6.2p1-1950121
opensmtpdsourcebuster6.0.3p1-5+deb10u3
opensmtpdsourcestretch6.0.2p1-2+deb9u2

Notes

https://ftp.openbsd.org/pub/OpenBSD/patches/6.6/common/018_smtpd_tls.patch.sig

Search for package or bug name: Reporting problems