[Git][security-tracker-team/security-tracker][master] Add references for CVE-2023-51765 and add Debian bug reference

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sun Dec 24 08:59:35 GMT 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6927b2ab by Salvatore Bonaccorso at 2023-12-24T09:59:04+01:00
Add references for CVE-2023-51765 and add Debian bug reference

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10,8 +10,9 @@ CVE-2023-51766 (Exim through 4.97 allows SMTP smuggling in certain configuration
 	NOTE: https://bugs.exim.org/show_bug.cgi?id=3063
 	NOTE: https://exim.org/static/doc/security/CVE-2023-51766.txt
 CVE-2023-51765 (sendmail through at least 8.14.7 allows SMTP smuggling in certain conf ...)
-	- sendmail <unfixed>
-	TODO: check
+	- sendmail <unfixed> (bug #1059386)
+	NOTE: https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/
+	NOTE: https://www.openwall.com/lists/oss-security/2023/12/21/6
 CVE-2023-51764 (Postfix through 3.8.4 allows SMTP smuggling unless configured with smt ...)
 	- postfix 3.8.4-1 (bug #1059230)
 	NOTE: https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6927b2abde05b5f9b2a990db94d7dc2a91b07740

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6927b2abde05b5f9b2a990db94d7dc2a91b07740
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231224/d81717b8/attachment.htm>


More information about the debian-security-tracker-commits mailing list