—

PYSEC-2020-174

Quick fix

PYSEC-2020-174 — postfix-mta-sts-resolver: upgrade to the fixed version with the command below.

pip install --upgrade 'postfix-mta-sts-resolver>=0.5.1'

Details

In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/postfix-mta-sts-resolver

Introduced in: 0Fixed in: 0.5.1

Fixpip install --upgrade 'postfix-mta-sts-resolver>=0.5.1'

References

https://github.com/Snawoot/postfix-mta-sts-resolver/security/advisories/GHSA-h92m-42h4-82f6[ADVISORY]
https://gist.github.com/Snawoot/b9da85d6b26dea5460673b29df1adc6b[WEB]