It was discovered that the nginx ngx_mail_smtp_module module incorrectly handled certain memory operations when doing SMTP authentication. This could possibly result in sensitive information being sent to the authentication server.
1.18.0-6ubuntu14.71.24.0-2ubuntu7.5