MIMEDefang 2.81

Don't barf if the installed version of Sys::Syslog has a developer tag added (like 0.33_01 on Debian Stretch).
Make mimedefang and mimedefang-multiplexor write their PID files as root to avoid an unprivileged user tampering with the pidfiles. Thanks to Michael Orlitzky for pointing this issue out.

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-77e8bc720a

This update has been submitted for testing by robert.

This update has been pushed to testing.

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

This update has been submitted for stable by robert.

This update has been pushed to stable.

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

9 years ago

in testing

9 years ago

in stable

8 years ago

Builds

BZ#1487543 CVE-2017-14102 mimedefang: Privilege escalation via PID file manipulation

BZ#1487545 CVE-2017-14102 mimedefang: Privilege escalation via PID file manipulation [fedora-all]

BZ#1487804 mimedefang-2.81 is available

mimedefang-2.81-1.fc26

None