it-securitynotifies AT lists.piratenpartei.de
Betreff: Sicherheitsankündigungen
Listenarchiv
- From: Salvatore Bonaccorso <carnil AT debian.org>
- To: debian-security-announce AT lists.debian.org
- Subject: [IT-SecNots] [SECURITY] [DSA 4955-1] libspf2 security update
- Date: Wed, 11 Aug 2021 15:12:00 +0000
- Authentication-results: mail02.piratenpartei.de; dkim=none; spf=none (mail02.piratenpartei.de: domain of "bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org" has no SPF policy when checking 82.195.75.100) smtp.mailfrom="bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org"; dmarc=none
- List-archive: https://lists.debian.org/msgid-search/E1mDptg-0001gH-Ia AT seger.debian.org
- List-id: <debian-security-announce.lists.debian.org>
- List-url: <http://lists.debian.org/debian-security-announce/>
- Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Date:Message-Id:Subject:To:From:Reply-To:Cc:MIME-Version :Content-Type:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=hDLiZkCmqsS9Slc+EsLjGcJKcaRnOCU5wN1LQX29fb4=; b=kB geIeUPE3PbkQrQiP7JYJbbvxjhIhplEQHiRu71LDnsHFRGsOWek3jrRSbPY6khO1Y0gj2Y5ubHrYx ajPG3BNbAdXiFjXbmzHNAD6y2AjynH+SlNTr749QndVxgTxJKdZOeBMrI3UChy0g4Ew3ByNZfLLNj lGiXFf2Us6XOZU8y+JVk3AGYslL2f4bQ09pjUEBFzT8YrOtmysUSUR9npEpu8NnNKHjiCZjZn6BHC twMCeAxxg3I5QmReEUAhgvviWHk6Ax+wKyFwq9hVg8tmlhPHAo5CGrpJOBbrk1CEI9QObCfyKWHdV TZrutHFlinKCGe6l+yiTDvXk+MHtFWIg==;
- Old-return-path: <carnil AT seger.debian.org>
- Priority: urgent
- Resent-date: Wed, 11 Aug 2021 15:12:17 +0000 (UTC)
- Resent-from: debian-security-announce AT lists.debian.org
- Resent-message-id: <wTCrVJbQDpD.A.tPC.Rj-EhB@bendel>
- Resent-sender: debian-security-announce-request AT lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-4955-1 security AT debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
August 11, 2021 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : libspf2
CVE ID : CVE-2021-20314
Philipp Jeitner and Haya Shulman discovered a stack-based buffer
overflow in libspf2, a library for validating mail senders with SPF,
which could result in denial of service, or potentially execution of
arbitrary code when processing a specially crafted SPF record.
For the stable distribution (buster), this problem has been fixed in
version 1.2.10-7.1~deb10u1.
We recommend that you upgrade your libspf2 packages.
For the detailed security status of libspf2 please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/libspf2
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----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=NlkE
-----END PGP SIGNATURE-----
- [IT-SecNots] [SECURITY] [DSA 4955-1] libspf2 security update, Salvatore Bonaccorso, 11.08.2021
Archiv bereitgestellt durch MHonArc 2.6.24.