Alerts This Week
Warning Icon 1 1,153
Alerts This Week
Warning Icon 1 1,153

Gentoo GLSA 202401-22: libspf2 Normal Severity Multiple Issues

gentoo
Calendar Grey January 15, 2024
Dist Gentoo Esm H88
Explore multiple libspf2 weaknesses that can potentially enable remote code execution, all while staying updated on Gentoo's security notifications.
Multiple vulnerabilities have been discovered in libspf2, the worst of which can lead to remote code execution.

Summary

Multiple vulnerabilities have been discovered in libspf2. Please review the CVE identifiers referenced below for details.

Topics%20covered

Topics Covered

security advisory gentoo buffer overflow remote code execution advisory libspf2

Resolution

All libspf2 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-filter/libspf2-1.2.11"

References

[ 1 ] CVE-2021-20314 https://nvd.nist.gov/vuln/detail/CVE-2021-20314 [ 2 ] CVE-2021-33912 https://nvd.nist.gov/vuln/detail/CVE-2021-33912 [ 3 ] CVE-2021-33913 https://nvd.nist.gov/vuln/detail/CVE-2021-33913

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
https://security.gentoo.org/glsa/202401-22
style>.gentoo_availability{display:block;}

Concerns

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.

Severity: Normal
Title: libspf2: Multiple vulnerabilities
Date: January 15, 2024
Bugs: #807739
ID: 202401-22

Topics%20covered

Topics Covered

security advisory gentoo buffer overflow remote code execution advisory libspf2

Synopsis

Multiple vulnerabilities have been discovered in libspf2, the worst of which can lead to remote code execution.

Background

libspf2 is a library that implements the Sender Policy Framework, allowing mail transfer agents to make sure that an email is authorized by the domain name that it is coming from.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Package Vulnerable Unaffected ------------------- ------------ ------------ mail-filter/libspf2 < 1.2.11 >= 1.2.11

Impact

Various buffer overflows have been identified that can lead to denial of service and possibly arbitrary code execution.

Workaround

There is no known workaround at this time.

Your message here