Proxmox Mail Gateway: unexpected handling of single-part attachments
Betroffene Pakete
pmg-api
Details
The Remove Attachments and Attachment Quarantine actions in the rule system ignored the Content-Disposition: attachment header for the first MIME part of the mail, which is usually the part containing the mail-text. As e-mails with malicious content do use unexpected header combinations to confuse mail-filters, removing more parts, in case of doubt, is the proper behavior. Additionally, this behavior is more in line with many mail user agents, which treat such mail parts as attachment.
The issue was responsibly reported by Philipp Hutterer <[email protected]> with a sample mail that contained a single-part attachment, which was not removed.
Behoben in
- pmg-api version 8.1.5
Diese Seite ist eine inoffizielle Kopie des offiziellen Beitrags im Proxmox-Forum (öffnet in neuem Tab). Prüfe vor jeder Maßnahme das Original. Der Text des Advisories wird so auf Englisch angezeigt, wie Proxmox ihn veröffentlicht hat.