Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 39 FEDORA-2023-b317dd9220 Critical Remote Code Execution for libspf2

fedora
Calendar Grey November 3, 2023
Dist Fedora Esm H88
Update for Fedora 39 tackling CVE-2023-42118 along with supplementary corrections for the libspf2 library.
Patch CVE-2023-42118, plus some other fixes.

Summary

libspf2 is an implementation of the SPF (Sender Policy Framework)

specification as found at:

https://www.ietf.org/archive/id/draft-mengwong-spf-00.txt

SPF allows email systems to check SPF DNS records and make sure that

an email is authorized by the administrator of the domain name that

it is coming from. This prevents email forgery, commonly used by

spammers, scammers, and email viruses/worms.

A lot of effort has been put into making it secure by design, and a

great deal of effort has been put into the regression tests.

Update Information:

Patch CVE-2023-42118, plus some other fixes.

Topics%20covered

Topics Covered

security advisory update critical Fedora remote code execution libspf2 CVE-2023-42118

Change Log

* Tue Oct 3 2023 Bojan Smojver - 1.2.11-11.20210922git4915c308 - Add fixes from pull request 47 * Mon Oct 2 2023 Bojan Smojver - 1.2.11-10.20210922git4915c308 - CVE-2023-42118

References


[ 1 ] Bug #2241536 - CVE-2023-42118 libspf2: Integer Underflow Remote Code Execution Vulnerability [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2241536 [ 2 ] Bug #2241537 - CVE-2023-42118 libspf2: Integer Underflow Remote Code Execution Vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2241537

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-b317dd9220' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libspf2
Product: Fedora 39
Version: 1.2.11
Release: 11.20210922git4915c308.fc39
URL: Summary : An implementation of the SPF specification

Topics%20covered

Topics Covered

security advisory update critical Fedora remote code execution libspf2 CVE-2023-42118

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here