Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 536
Alerts This Week
Warning Icon 1 536

Debian: DSA-3829-3 Urgent OpenSSH Vulnerability Resolution

debian
Calendar Grey April 11, 2017
Scroller Debian
Debian Security Advisory DSA-3940-1 addresses a regression in OpenSSH to mitigate remote code execution vulnerabilities present in version 7.6.
The Dovecot update issued as DSA-3828-1 introduced a regression, this update reverts the backported patch
Topics%20covered

Topics Covered

security advisory denial of service debian dovecot regression fix

Summary

It was discovered that the Dovecot email server is vulnerable to a
denial of service attack. When the "dict" passdb and userdb are used
for user authentication, the username sent by the IMAP/POP3 client is
sent through var_expand() to perform %variable expansion. Sending
specially crafted %variable fields could result in excessive memory
usage causing the process to crash (and restart).

For the stable distribution (jessie), this problem has been fixed in
version 1:2.2.13-12~deb8u3.

We recommend that you upgrade your dovecot packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory denial of service debian dovecot regression fix

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.