Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 556
Alerts This Week
Warning Icon 1 556

Ubuntu 20.04 LTS USN-6584-1 Critical: Libspf2 RCE & DoS Threat

ubuntu
Calendar Grey January 15, 2024
Dist Ubuntu Esm H88
To fortify Ubuntu 20.04 against libspf2 vulnerabilities, keep your system updated, configure security protocols, audit packages, utilize IDS, replace libspf2, and backup data regularly
Several security issues were fixed in Libspf2.

Summary

Several security issues were fixed in Libspf2.

Software Description:

- libspf2: Sender Policy Framework for SMTP authorization

Details:

Philipp Jeitner and Haya Shulman discovered that Libspf2 incorrectly handled

certain inputs. If a user or an automated system were tricked into opening a

specially crafted input file, a remote attacker could possibly use this issue

to cause a denial of service or execute arbitrary code. (CVE-2021-20314)

It was discovered that Libspf2 incorrectly handled certain inputs. If a user or

an automated system were tricked into opening a specially crafted input file, a

remote attacker could possibly use this issue to cause a denial of service or

execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and

Ubuntu 20.04 LTS. (CVE-2021-33912, CVE-2021-33913)

Topics%20covered

Topics Covered

security advisory denial of service update remote code execution Ubuntu libspf2

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
   libmail-spf-xs-perl             1.2.10-7+deb9u2build0.20.04.1
   libspf2-2                       1.2.10-7+deb9u2build0.20.04.1
   libspf2-dev                     1.2.10-7+deb9u2build0.20.04.1
   spfquery                        1.2.10-7+deb9u2build0.20.04.1

Ubuntu 18.04 LTS (Available with Ubuntu Pro):
   libmail-spf-xs-perl             1.2.10-7ubuntu0.18.04.1~esm1
   libspf2-2                       1.2.10-7ubuntu0.18.04.1~esm1
   libspf2-dev                     1.2.10-7ubuntu0.18.04.1~esm1
   spfquery                        1.2.10-7ubuntu0.18.04.1~esm1

Ubuntu 16.04 LTS (Available with Ubuntu Pro):
   libmail-spf-xs-perl             1.2.10-6ubuntu0.1~esm1
   libspf2-2                       1.2.10-6ubuntu0.1~esm1
   libspf2-dev                     1.2.10-6ubuntu0.1~esm1
   spfquery                        1.2.10-6ubuntu0.1~esm1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6584-1

CVE-2021-20314, CVE-2021-33912, CVE-2021-33913

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6584-1

Topics%20covered

Topics Covered

security advisory denial of service update remote code execution Ubuntu libspf2

Package Information

https://launchpad.net/ubuntu/+source/libspf2/1.2.10-7+deb9u2build0.20.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.