Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 39: FEDORA-2023-8e12f879ad High: libxml2 Memory Leak

fedora
Calendar Grey October 9, 2023
Dist Fedora Esm H88
Urgent security notice for Fedora 38 pertaining to libspf2 updates addressing CVE-2023-42118 and ensuring essential corrections.
Patch CVE-2023-42118, plus some other fixes.

Summary

libspf2 is an implementation of the SPF (Sender Policy Framework)

specification as found at:

https://www.ietf.org/archive/id/draft-mengwong-spf-00.txt

SPF allows email systems to check SPF DNS records and make sure that

an email is authorized by the administrator of the domain name that

it is coming from. This prevents email forgery, commonly used by

spammers, scammers, and email viruses/worms.

A lot of effort has been put into making it secure by design, and a

great deal of effort has been put into the regression tests.

Update Information:

Patch CVE-2023-42118, plus some other fixes.

Topics%20covered

Topics Covered

security advisory critical Fedora remote code execution email security integer underflow libspf2

Change Log

* Tue Oct 3 2023 Bojan Smojver - 1.2.11-11.20210922git4915c308 - Add fixes from pull request 47 * Mon Oct 2 2023 Bojan Smojver - 1.2.11-10.20210922git4915c308 - CVE-2023-42118 * Thu Jul 20 2023 Fedora Release Engineering - 1.2.11-8.20210922git4915c308 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jul 11 2023 Jitka Plesnikova - 1.2.11-7.20210922git4915c308 - Perl 5.38 rebuild

References


[ 1 ] Bug #2241536 - CVE-2023-42118 libspf2: Integer Underflow Remote Code Execution Vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2241536 [ 2 ] Bug #2241537 - CVE-2023-42118 libspf2: Integer Underflow Remote Code Execution Vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2241537

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-7f01e967ad' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: libspf2
Product: Fedora 38
Version: 1.2.11
Release: 11.20210922git4915c308.fc38
URL: Summary : An implementation of the SPF specification

Topics%20covered

Topics Covered

security advisory critical Fedora remote code execution email security integer underflow libspf2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here