| Release | Version |
|---|---|
| jessie | 2.3.7-1 |
| stretch | 3.0.2-2 |
| buster | 3.2.1-2 |
| bookworm | 3.3.13-1 |
| trixie | 3.3.13-1 |
| sid | 3.3.13-1 |
| Bug | jessie | stretch | buster | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|---|---|
| TEMP-0825151-E80EFA | vulnerable (no DSA) | fixed | fixed | fixed | fixed | fixed | CSRF protection for POST requests |
| Bug | Description |
|---|---|
| CVE-2017-5930 | The AliasHandler component in PostfixAdmin before 3.0.2 allows remote ... |
| CVE-2014-2655 | SQL injection vulnerability in the gen_show_status function in functio ... |
| CVE-2012-0812 | PostfixAdmin 2.3.4 has multiple XSS vulnerabilities |
| CVE-2012-0811 | Multiple SQL injection vulnerabilities in Postfix Admin (aka postfixad ... |
| DSA / DLA | Description |
|---|---|
| DSA-2889-1 | postfixadmin - security update |