FEDORA-EPEL-2017-dadbc43983

Status: stable 2 years ago

MIMEDefang 2.81

Don't barf if the installed version of Sys::Syslog has a developer tag added (like 0.33_01 on Debian Stretch).
Make mimedefang and mimedefang-multiplexor write their PID files as root to avoid an unprivileged user tampering with the pidfiles. Thanks to Michael Orlitzky for pointing this issue out.

This update has been submitted for testing by robert.

This update has been pushed to testing.

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

This update has been submitted for stable by robert.

This update has been pushed to stable.

Please login to add feedback.

Content Type

RPM

Status

stable

Test Gating

Submitted by

robert

Update Type

security

Update Severity

medium

Karma

0
stable threshold: 1
unstable threshold: -3

Autopush (karma)

Enabled

Autopush (time)

Disabled

Dates


0	0	#1487543 CVE-2017-14102 mimedefang: Privilege escalation via PID file manipulation
0	0	#1487544 CVE-2017-14102 mimedefang: Privilege escalation via PID file manipulation [epel-all]
0	0	#1487804 mimedefang-2.81 is available