CentOS 8: 2019-b1c3dacabc Critical: Kernel Memory Leak Vulnerability

MIMEDefang is an e-mail filter program which works with Sendmail 8.12

and later. It filters all e-mail messages sent via SMTP. MIMEDefang

splits multi-part MIME messages into their components and potentially

deletes or modifies the various parts. It then reassembles the parts

back into an e-mail message and sends it on its way.

There are some caveats you should be aware of before using MIMEDefang.

MIMEDefang potentially alters e-mail messages. This breaks a "gentleman's

agreement" that mail transfer agents do not modify message bodies. This

could cause problems, for example, with encrypted or signed messages.

MIMEDefang 2.81 =============== * Don't barf if the installed version of

Sys::Syslog has a developer tag added (like 0.33_01 on Debian Stretch). * Make

mimedefang and mimedefang-multiplexor write their PID files as root to avoid an

unprivileged user tampering with the pidfiles. Thanks to Michael Orlitzky for

pointing this issue out.

[ 1 ] Bug #1487543 - CVE-2017-14102 mimedefang: Privilege escalation via PID file manipulation

https://bugzilla.redhat.com/show_bug.cgi?id=1487543

su -c 'dnf upgrade mimedefang' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org