Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Fedora 21: 2015-a275fd68f2 Moderate Zarafa Local Escalation Threat

fedora
Calendar Grey November 23, 2015
Scroller Fedora
Latest Zarafa Collaboration Suite release for Fedora 21 fixes various security flaws and enhances overall system reliability.
Zarafa Collaboration Platform 7.1.14 final [51822] editor (for webaccess) to solve CVE-2012-4000 - ZCP-13572: CVE-2015-6566 - zarafa-autorespond suffers from a potential local priv...

Summary

The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The

Open Source Collaboration provides an integration with your existing Linux

mail server, native mobile phone support by ActiveSync compatibility and a

webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an

IMAP and a POP3 gateway as well as an iCal/CalDAV gateway, the Zarafa Open

Source Collaboration can combine the usability with the stability and the

flexibility of a Linux server.

The proven Zarafa groupware solution is using MAPI objects, provides a MAPI

client library as well as programming interfaces for C++, PHP and Python.

The other Zarafa related packages need to be installed to gain all features

and benefits of the Zarafa Collaboration Platform (ZCP).

Update Information:

Zarafa Collaboration Platform 7.1.14 final [51822] ================================================== - ZCP-13581: update fck- editor (for webaccess) to solve CVE-2012-4000 - ZCP-13572: CVE-2015-6566 - zarafa-autorespond suffers from a potential local privilege escalation - ZCP-13087: Meeting requests are not being sent with Thunderbird Lightning due to new functionality - ZCP-13608: Attachments are missing in the Sent items folder when using a cache profile - ZCP-13243: ser_safe_mode falsely reports that it

Topics%20covered

Topics Covered

security advisory security issue fedora software update threat local escalation zarafa

Change Log

References


[ 1 ] Bug #1263006 - CVE-2015-6566 zarafa: Potential local privilege escalation in zarafa-autorespond https://bugzilla.redhat.com/show_bug.cgi?id=1263006

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update zarafa' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: zarafa
Product: Fedora 21
Version: 7.1.14
Release: 1.fc21
URL: https://www.kopano.cloud/
Summary: Open Source Edition of the Zarafa Collaboration Platform

Topics%20covered

Topics Covered

security advisory security issue fedora software update threat local escalation zarafa

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.