Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE libkrun Important Patch 2026-0255-1 for 8 Issues

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2

Calendar White Jul 21, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 0 articles for you...
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorycriticaldebian

Debian 9 DLA-2472-1 Critical: Mutt Authentication Exposure Advisory

In Mutt, a text-based Mail User Agent, invalid IMAP server responses were not properly handled, potentially resulting in authentication credentials being exposed or man-in-the-middle attacks. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2472-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Adrian Bunk November 30, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : mutt Version : 1.7.2-1+deb9u4 CVE ID : CVE-2020-28896 Debian Bug : In Mutt, a text-based Mail User Agent, invalid IMAP server responses were not properly handled, potentially resulting in authentication credentials being exposed or man-in-the-middle attacks. For Debian 9 stretch, this problem has been fixed in version 1.7.2-1+deb9u4. We recommend that you upgrade your mutt packages. For the detailed security status of mutt please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/mutt Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Ubuntu Security Notice USN-5078-1 for Mutt fixes IMAP response vulnerabilities that risk exposing user credentials.. Mutt Security Update, Debian LTS Advisory, IMAP Attack Mitigation, Authentication Exposure. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Nov 30, 2020 •Critical Debian LTS
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisoryimportantimap

Red Hat Enterprise Linux 6: RHSA-2019-2885-01 Important Dovecot Update

An update for dovecot is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: dovecot security update Advisory ID: RHSA-2019:2885-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:2885 Issue date: 2019-09-23 CVE Names: CVE-2019-11500 ==================================================================== 1. Summary: An update for dovecot is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64 3. Description: Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: improper NULL byte handling in IMAP and ManageSieve protocol parsers leads to out of bounds writes (CVE-2019-11500) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to theCVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1741141 - CVE-2019-11500 dovecot: improper NULL byte handling in IMAP and ManageSieve protocol parsers leads to out of bounds writes 6. Package List: Red Hat Enterprise Linux Server (v. 6): Source: dovecot-2.0.9-22.el6_10.1.src.rpm i386: dovecot-2.0.9-22.el6_10.1.i686.rpm dovecot-debuginfo-2.0.9-22.el6_10.1.i686.rpm dovecot-mysql-2.0.9-22.el6_10.1.i686.rpm dovecot-pgsql-2.0.9-22.el6_10.1.i686.rpm dovecot-pigeonhole-2.0.9-22.el6_10.1.i686.rpm ppc64: dovecot-2.0.9-22.el6_10.1.ppc.rpm dovecot-2.0.9-22.el6_10.1.ppc64.rpm dovecot-debuginfo-2.0.9-22.el6_10.1.ppc.rpm dovecot-debuginfo-2.0.9-22.el6_10.1.ppc64.rpm dovecot-mysql-2.0.9-22.el6_10.1.ppc64.rpm dovecot-pgsql-2.0.9-22.el6_10.1.ppc64.rpm dovecot-pigeonhole-2.0.9-22.el6_10.1.ppc64.rpm s390x: dovecot-2.0.9-22.el6_10.1.s390.rpm dovecot-2.0.9-22.el6_10.1.s390x.rpm dovecot-debuginfo-2.0.9-22.el6_10.1.s390.rpm dovecot-debuginfo-2.0.9-22.el6_10.1.s390x.rpm dovecot-mysql-2.0.9-22.el6_10.1.s390x.rpm dovecot-pgsql-2.0.9-22.el6_10.1.s390x.rpm dovecot-pigeonhole-2.0.9-22.el6_10.1.s390x.rpm x86_64: dovecot-2.0.9-22.el6_10.1.i686.rpm dovecot-2.0.9-22.el6_10.1.x86_64.rpm dovecot-debuginfo-2.0.9-22.el6_10.1.i686.rpm dovecot-debuginfo-2.0.9-22.el6_10.1.x86_64.rpm dovecot-mysql-2.0.9-22.el6_10.1.x86_64.rpm dovecot-pgsql-2.0.9-22.el6_10.1.x86_64.rpm dovecot-pigeonhole-2.0.9-22.el6_10.1.x86_64.rpm Red Hat Enterprise Linux Server Optional (v.6): i386: dovecot-debuginfo-2.0.9-22.el6_10.1.i686.rpm dovecot-devel-2.0.9-22.el6_10.1.i686.rpm ppc64: dovecot-debuginfo-2.0.9-22.el6_10.1.ppc64.rpm dovecot-devel-2.0.9-22.el6_10.1.ppc64.rpm s390x: dovecot-debuginfo-2.0.9-22.el6_10.1.s390x.rpm dovecot-devel-2.0.9-22.el6_10.1.s390x.rpm x86_64: dovecot-debuginfo-2.0.9-22.el6_10.1.x86_64.rpm dovecot-devel-2.0.9-22.el6_10.1.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: dovecot-2.0.9-22.el6_10.1.src.rpm i386: dovecot-2.0.9-22.el6_10.1.i686.rpm dovecot-debuginfo-2.0.9-22.el6_10.1.i686.rpm dovecot-mysql-2.0.9-22.el6_10.1.i686.rpm dovecot-pgsql-2.0.9-22.el6_10.1.i686.rpm dovecot-pigeonhole-2.0.9-22.el6_10.1.i686.rpm x86_64: dovecot-2.0.9-22.el6_10.1.i686.rpm dovecot-2.0.9-22.el6_10.1.x86_64.rpm dovecot-debuginfo-2.0.9-22.el6_10.1.i686.rpm dovecot-debuginfo-2.0.9-22.el6_10.1.x86_64.rpm dovecot-mysql-2.0.9-22.el6_10.1.x86_64.rpm dovecot-pgsql-2.0.9-22.el6_10.1.x86_64.rpm dovecot-pigeonhole-2.0.9-22.el6_10.1.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 6): i386: dovecot-debuginfo-2.0.9-22.el6_10.1.i686.rpm dovecot-devel-2.0.9-22.el6_10.1.i686.rpm x86_64: dovecot-debuginfo-2.0.9-22.el6_10.1.x86_64.rpm dovecot-devel-2.0.9-22.el6_10.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2019-11500 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBXYkou9zjgjWX9erEAQjthQ/+LaM1fn0wXmx8OE1fVKZCmpBWXOE+VRTN 2TxEhCjemYP+cdau2CQ6+aUK0dcaBFP1p8Nerlv5qVmlJLPrCXBYZ7ExcieJx8tU x8AfnZuM5+6vfeX7D6NXInZtDwCM9ei7X1YfLnXKtN8X/xtkT7jdHMFn20YWhrqo XdO6eNmH6271DjUGeH3dnm8e51uBSAFOOxGiexX4zZnLh1bOW9ImiR4GYrEpYiws csh0X05eaTNA767xPhN/BWU5U9PKje1NKgJXFiFtizHCZ3LEAPapYvvwUy1V/xuV 3B0HVg+XoMEuoihkeWypzchtjfEKLFpmjsKjylJvqTWnOdRd7v307y9aR+Ng9Hcd i3ZPlVQ3VJ2gQ78NotgUCPyrjIj6Zbq+8b9ihJS2JdNgbrd9F0FHsAtzuR4supxU hM47yaYW+njbjMgp0vL0x16eWcW+2Sjzr9SZKETdH8sE5OyDJkc6DXSnGwH8Mxhq P0PZT4GNr1gNsAU55ZJyE54FD4pJQnogUNCw2dPgC7UmRrQjVIV1zmpHMaRnfb9J v2YuMtJuO75g4ynnwU3prcdqGiwUvXJ18snJxlMA72djoobit28He4eHJd+Xrgi5 JCnGaWNmk6p4X5Bbnt42qsv232FnBHN+aNbfea3un4s14+16AywgW9U1y1ZnF0O2 SAzgPCOIJRc=CqWd -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ====================================================. update, dovecot, enterprise, linux, product, security. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Sep 23, 2019 •Important Red Hat
Banner 4 1028x280 1708121825 1771600306
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoracritical

Fedora 31: FEDORA-2019-ea638fb605 Critical IMAP Threat Overview

* CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-ea638fb605 2019-09-14 16:29:06.037941 --------------------------------------------------------------------------------Name : dovecot Product : Fedora 31 Version : 2.3.7.2 Release : 1.fc31 URL : https://dovecot.org/ Summary : Secure imap and pop3 server Description : Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages. --------------------------------------------------------------------------------Update Information: * CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes --------------------------------------------------------------------------------References: [ 1 ] Bug #1742010 - dovecot-2.3.7.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1742010 [ 2 ] Bug #1746666 - CVE-2019-11500 dovecot: improper NULL byte handling in IMAP and ManageSieve protocol parsers leads to out of bounds writes [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1746666 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-ea638fb605' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Fedora 32 Dovecot security notice FEDORA-2020-ecb84567af reveals a significant zero byte vulnerability triggering heap memory issues.. Dovecot, IMAP Parser, Fedora Update, Heap Memory Issue. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Sep 14, 2019 •Critical Fedora
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticaldebian

Debian Icedove Severe IMAP Directory Visualization Problem DSA-2464-2

The latest security update, DSA-2464-1, for Icedove, Debian's version of the Mozilla Thunderbird mail client, contained a regression: the removal of UTF-7 support resulted in incorrect display of IMAP folder names. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2464-2 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Florian Weimer May 08, 2012 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : icedove Debian Bug : 671408 671410 The latest security update, DSA-2464-1, for Icedove, Debian's version of the Mozilla Thunderbird mail client, contained a regression: the removal of UTF-7 support resulted in incorrect display of IMAP folder names. For the stable distribution (squeeze), this problem has been fixed in version 3.0.11-1+squeeze10. We recommend that you upgrade your icedove packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Enhance your Icedove email application on Debian as there are resolved vulnerabilities in the most recent security notice DSA-2464-2.. Icedove Mail Client, Debian Security Update, DSA-2464-2. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 08, 2012 •Critical Debian
Banner 4 1028x280 1708121825 1771600306
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorybuffer overflowRed Hat Enterprise Linux

Red Hat Enterprise Linux 3 RHSA-2009:0275-02 Critical: Imap Memory Issue

Updated imap packages to fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: imap security update Advisory ID: RHSA-2009:0275-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2009:0275.html Issue date: 2009-02-19 CVE Names: CVE-2008-5005 ==================================================================== 1. Summary: Updated imap packages to fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Desktop version 3 - i386, x86_64 Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64 3. Description: The imap package provides server daemons for both the IMAP (Internet Message Access Protocol) and POP (Post Office Protocol) mail access protocols. A buffer overflow flaw was discovered in the dmail and tmail mail delivery utilities shipped with imap. If either of these utilities were used as a mail delivery agent, a remote attacker could potentially use this flaw to run arbitrary code as the targeted user by sending a specially-crafted mail message to the victim. (CVE-2008-5005) Users of imap should upgrade to these updated packages, which contain a backported patch to resolve this issue. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update areavailable at 5. Bugs fixed (http://bugzilla.redhat.com/): 469667 - CVE-2008-5005 uw-imap: buffer overflow in dmail and tmail 6. Package List: Red Hat Enterprise Linux AS version 3: Source: i386: imap-2002d-15.i386.rpm imap-debuginfo-2002d-15.i386.rpm imap-devel-2002d-15.i386.rpm imap-utils-2002d-15.i386.rpm ia64: imap-2002d-15.ia64.rpm imap-debuginfo-2002d-15.ia64.rpm imap-devel-2002d-15.ia64.rpm imap-utils-2002d-15.ia64.rpm ppc: imap-2002d-15.ppc.rpm imap-debuginfo-2002d-15.ppc.rpm imap-devel-2002d-15.ppc.rpm imap-utils-2002d-15.ppc.rpm s390: imap-2002d-15.s390.rpm imap-debuginfo-2002d-15.s390.rpm imap-devel-2002d-15.s390.rpm imap-utils-2002d-15.s390.rpm s390x: imap-2002d-15.s390x.rpm imap-debuginfo-2002d-15.s390x.rpm imap-devel-2002d-15.s390x.rpm imap-utils-2002d-15.s390x.rpm x86_64: imap-2002d-15.x86_64.rpm imap-debuginfo-2002d-15.x86_64.rpm imap-devel-2002d-15.x86_64.rpm imap-utils-2002d-15.x86_64.rpm Red Hat Desktop version 3: Source: i386: imap-2002d-15.i386.rpm imap-debuginfo-2002d-15.i386.rpm imap-devel-2002d-15.i386.rpm imap-utils-2002d-15.i386.rpm x86_64: imap-2002d-15.x86_64.rpm imap-debuginfo-2002d-15.x86_64.rpm imap-devel-2002d-15.x86_64.rpm imap-utils-2002d-15.x86_64.rpm Red Hat Enterprise Linux ES version 3: Source: i386: imap-2002d-15.i386.rpm imap-debuginfo-2002d-15.i386.rpm imap-devel-2002d-15.i386.rpm imap-utils-2002d-15.i386.rpm ia64: imap-2002d-15.ia64.rpm imap-debuginfo-2002d-15.ia64.rpm imap-devel-2002d-15.ia64.rpm imap-utils-2002d-15.ia64.rpm x86_64: imap-2002d-15.x86_64.rpm imap-debuginfo-2002d-15.x86_64.rpm imap-devel-2002d-15.x86_64.rpm imap-utils-2002d-15.x86_64.rpm Red Hat Enterprise Linux WS version3: Source: i386: imap-2002d-15.i386.rpm imap-debuginfo-2002d-15.i386.rpm imap-devel-2002d-15.i386.rpm imap-utils-2002d-15.i386.rpm ia64: imap-2002d-15.ia64.rpm imap-debuginfo-2002d-15.ia64.rpm imap-devel-2002d-15.ia64.rpm imap-utils-2002d-15.ia64.rpm x86_64: imap-2002d-15.x86_64.rpm imap-debuginfo-2002d-15.x86_64.rpm imap-devel-2002d-15.x86_64.rpm imap-utils-2002d-15.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CVE-2008-5005 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2009 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFJnZxEXlSAg2UNWIIRArmNAJ9VgMSzjUNp0L//cI9Qpr5VfGv97wCfWwp9 ItdbEFnU6DHnpZPwHHymnjM=yZD1 -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Ubuntu patch release for smtp addresses a critical memory leak vulnerability affecting service stability. Update now to enhance your security.. Red Hat Enterprise Linux security, imap update, buffer overflow fix, mail access protocols. . LinuxSecurity.com Team

Calendar%202 Feb 19, 2009 Red Hat
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisorybuffer overflowmoderate severity

Scientific Linux SL3.x: CVE-2008-5005 Moderate: imap Buffer Overflow

Moderate: imap security update. Date: Wed, 18 Feb 2009 14:23:56 -0600 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: FASTBUGS for SL 4.x i386/x86_64 Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it." The following FASTBUGS have been uploaded to i386: isdn4k-utils-3.2-19.i386.rpm isdn4k-utils-devel-3.2-19.i386.rpm isdn4k-utils-vboxgetty-3.2-19.i386.rpm sudo-1.6.7p5-30.1.5.i386.rpm xisdnload-3.2-19.i386.rpm x86_64: isdn4k-utils-3.2-19.el4.x86_64.rpm isdn4k-utils-devel-3.2-19.el4.x86_64.rpm isdn4k-utils-vboxgetty-3.2-19.el4.x86_64.rpm sudo-1.6.7p5-30.1.5.x86_64.rpm xisdnload-3.2-19.el4.x86_64.rpm -Connie Sieh -Troy Dawson Date: Thu, 19 Feb 2009 15:53:03 -0600 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA Moderate: imap on SL3.x i386/x86_64 Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it." Synopsis: Moderate: imap security update Issue date: 2009-02-19 CVE Names: CVE-2008-5005 A buffer overflow flaw was discovered in the dmail and tmail mail delivery utilities shipped with imap. If either of these utilities were used as a mail delivery agent, a remote attacker could potentially use this flaw to run arbitrary code as the targeted user by sending a specially-crafted mail message to the victim. (CVE-2008-5005) SL 3.0.x SRPMS: imap-2002d-15.src.rpm i386: imap-2002d-15.i386.rpm imap-devel-2002d-15.i386.rpm imap-utils-2002d-15.i386.rpm x86_64: imap-2002d-15.x86_64.rpm imap-devel-2002d-15.x86_64.rpm imap-utils-2002d-15.x86_64.rpm -Connie Sieh -Troy Dawson . Recent moderate security patch for IMAP in Scientific Linux SL3.x addresses a buffer overflow vulnerability that could allow remote attackers to execute arbitrary code.. Moderate Update, Scientific Linux, imap Security Fix, Buffer Overflow Risk, SL3.x Patch. . LinuxSecurity.com Team

Calendar%202 Feb 19, 2009 Scientific Linux
Banner 4 1028x280 1708121825 1771600306
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorybuffer overflowRed Hat Enterprise Linux

Red Hat Enterprise Linux 3 RHSA-2009:0275-01 Moderate: imap Buffer Overflow

Updated imap packages to fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team.. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: imap security update Advisory ID: RHSA-2009:0275-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2009:0275.html Issue date: 2009-02-19 CVE Names: CVE-2008-5005 ==================================================================== 1. Summary: Updated imap packages to fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Desktop version 3 - i386, x86_64 Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64 3. Description: The imap package provides server daemons for both the IMAP (Internet Message Access Protocol) and POP (Post Office Protocol) mail access protocols. A buffer overflow flaw was discovered in the dmail and tmail mail delivery utilities shipped with imap. If either of these utilities were used as a mail delivery agent, a remote attacker could potentially use this flaw to run arbitrary code as the targeted user by sending a specially-crafted mail message to the victim. (CVE-2008-5005) Users of imap should upgrade to these updated packages, which contain a backported patch to resolve this issue. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update areavailable at 5. Bugs fixed (http://bugzilla.redhat.com/): 469667 - CVE-2008-5005 uw-imap: buffer overflow in dmail and tmail 6. Package List: Red Hat Enterprise Linux AS version 3: Source: i386: imap-2002d-15.i386.rpm imap-debuginfo-2002d-15.i386.rpm imap-devel-2002d-15.i386.rpm imap-utils-2002d-15.i386.rpm ia64: imap-2002d-15.ia64.rpm imap-debuginfo-2002d-15.ia64.rpm imap-devel-2002d-15.ia64.rpm imap-utils-2002d-15.ia64.rpm ppc: imap-2002d-15.ppc.rpm imap-debuginfo-2002d-15.ppc.rpm imap-devel-2002d-15.ppc.rpm imap-utils-2002d-15.ppc.rpm s390: imap-2002d-15.s390.rpm imap-debuginfo-2002d-15.s390.rpm imap-devel-2002d-15.s390.rpm imap-utils-2002d-15.s390.rpm s390x: imap-2002d-15.s390x.rpm imap-debuginfo-2002d-15.s390x.rpm imap-devel-2002d-15.s390x.rpm imap-utils-2002d-15.s390x.rpm x86_64: imap-2002d-15.x86_64.rpm imap-debuginfo-2002d-15.x86_64.rpm imap-devel-2002d-15.x86_64.rpm imap-utils-2002d-15.x86_64.rpm Red Hat Desktop version 3: Source: i386: imap-2002d-15.i386.rpm imap-debuginfo-2002d-15.i386.rpm imap-devel-2002d-15.i386.rpm imap-utils-2002d-15.i386.rpm x86_64: imap-2002d-15.x86_64.rpm imap-debuginfo-2002d-15.x86_64.rpm imap-devel-2002d-15.x86_64.rpm imap-utils-2002d-15.x86_64.rpm Red Hat Enterprise Linux ES version 3: Source: i386: imap-2002d-15.i386.rpm imap-debuginfo-2002d-15.i386.rpm imap-devel-2002d-15.i386.rpm imap-utils-2002d-15.i386.rpm ia64: imap-2002d-15.ia64.rpm imap-debuginfo-2002d-15.ia64.rpm imap-devel-2002d-15.ia64.rpm imap-utils-2002d-15.ia64.rpm x86_64: imap-2002d-15.x86_64.rpm imap-debuginfo-2002d-15.x86_64.rpm imap-devel-2002d-15.x86_64.rpm imap-utils-2002d-15.x86_64.rpm Red Hat Enterprise Linux WS version3: Source: i386: imap-2002d-15.i386.rpm imap-debuginfo-2002d-15.i386.rpm imap-devel-2002d-15.i386.rpm imap-utils-2002d-15.i386.rpm ia64: imap-2002d-15.ia64.rpm imap-debuginfo-2002d-15.ia64.rpm imap-devel-2002d-15.ia64.rpm imap-utils-2002d-15.ia64.rpm x86_64: imap-2002d-15.x86_64.rpm imap-debuginfo-2002d-15.x86_64.rpm imap-devel-2002d-15.x86_64.rpm imap-utils-2002d-15.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CVE-2008-5005 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2009 Red Hat, Inc. . Newly released imap updates address a significant security vulnerability in Red Hat Enterprise Linux 3, impacting email communication protocols.. imap Security Fix, Red Hat Updates, Enterprise Linux 3. . LinuxSecurity.com Team

Calendar%202 Feb 19, 2009 Red Hat
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisoryRed Hatbuffer overflow

Red Hat: RHSA-2005:850-01 Moderate: imap Buffer Overflow Issue

An updated imap package that fixes a buffer overflow issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team.. - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Moderate: imap security update Advisory ID: RHSA-2005:850-01 Advisory URL: https://access.redhat.com/errata/RHSA-2005:850.html Issue date: 2005-12-06 Updated on: 2005-12-06 Product: Red Hat Enterprise Linux CVE Names: CVE-2005-2933 - ---------------------------------------------------------------------1. Summary: An updated imap package that fixes a buffer overflow issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64 Red Hat Linux Advanced Workstation 2.1 - ia64 Red Hat Enterprise Linux ES version 2.1 - i386 Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Desktop version 3 - i386, x86_64 Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64 3. Problem description: The imap package provides server daemons for both the IMAP (Internet Message Access Protocol) and POP (Post Office Protocol) mail access protocols. A buffer overflow flaw was discovered in the way the c-client library parses user supplied mailboxes. If an authenticated user requests a specially crafted mailbox name, it may be possible to execute arbitrary code on a server that uses the library. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-2933 to this issue. All users of imap should upgrade to these updated packages, which contain a backported patch and are not vulnerable to this issue. 4. Solution: Before applying this update, make sureall previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. 5. Bug IDs fixed (http://bugzilla.redhat.com/): 169953 - CVE-2005-2933 imap buffer overflow 6. RPMs required: Red Hat Enterprise Linux AS (Advanced Server) version 2.1: SRPMS: 368ed3b9cf30c88c562daf57b6dc314f imap-2001a-19.src.rpm i386: b04aa8f1b0aa703871346700d28fc64e imap-2001a-19.i386.rpm 1fdbd1eb8cf467af263ed9972df9409d imap-devel-2001a-19.i386.rpm ia64: fb5d1b22b2df69c1f468f16df9ebfdce imap-2001a-19.ia64.rpm 5599797731d68a60df45c689a8ceb509 imap-devel-2001a-19.ia64.rpm Red Hat Linux Advanced Workstation 2.1: SRPMS: 368ed3b9cf30c88c562daf57b6dc314f imap-2001a-19.src.rpm ia64: fb5d1b22b2df69c1f468f16df9ebfdce imap-2001a-19.ia64.rpm 5599797731d68a60df45c689a8ceb509 imap-devel-2001a-19.ia64.rpm Red Hat Enterprise Linux ES version 2.1: SRPMS: 368ed3b9cf30c88c562daf57b6dc314f imap-2001a-19.src.rpm i386: b04aa8f1b0aa703871346700d28fc64e imap-2001a-19.i386.rpm 1fdbd1eb8cf467af263ed9972df9409d imap-devel-2001a-19.i386.rpm Red Hat Enterprise Linux AS version 3: SRPMS: 8685e5bf17d4768f5254d8bd69debdf1 imap-2002d-12.src.rpm i386: 7eef6e0ecc4147cc73a60be3e0d76647 imap-2002d-12.i386.rpm 820c2d446fd800cec6ce64ec2c42f494 imap-devel-2002d-12.i386.rpm 88d23ffc188f1d196d60ae43f7aa1939 imap-utils-2002d-12.i386.rpm ia64: 070f9e193a84fe7d67dd022eb98e4889 imap-2002d-12.ia64.rpm 6b5594df0491c151995d36ec5e88fd63 imap-devel-2002d-12.ia64.rpm 39b5b378efec1b4242c5b5a1ae188846 imap-utils-2002d-12.ia64.rpm ppc: f23db230f9b7ecde5cad18cf1a6dd000 imap-2002d-12.ppc.rpm ac380108e2da663c4feeedd010c65954 imap-devel-2002d-12.ppc.rpm d034338b4712651ab02d7ae40d4fd538 imap-utils-2002d-12.ppc.rpm s390: 8e7c079ca5ec95e9767fbceb88403232 imap-2002d-12.s390.rpm 56dab9d88d5a7cf231da1b9321c62852 imap-devel-2002d-12.s390.rpm 10e343ab7ba2f7ba41b37309e8bd026e imap-utils-2002d-12.s390.rpm s390x: 72f38762833f5f615b812b78bf5c0529 imap-2002d-12.s390x.rpm c10832b30b30c614069e8be2bf062060 imap-devel-2002d-12.s390x.rpm f23cdbc5a4a1c50375a36474dddabdd0 imap-utils-2002d-12.s390x.rpm x86_64: f90db06f0e5c48b220d071a698cec537 imap-2002d-12.x86_64.rpm 075645d561e9e7bac634d3f42855f6b4 imap-devel-2002d-12.x86_64.rpm a4d5f9aad62c46de9d5b8fa4800402f2 imap-utils-2002d-12.x86_64.rpm Red Hat Desktop version 3: SRPMS: 8685e5bf17d4768f5254d8bd69debdf1 imap-2002d-12.src.rpm i386: 7eef6e0ecc4147cc73a60be3e0d76647 imap-2002d-12.i386.rpm 820c2d446fd800cec6ce64ec2c42f494 imap-devel-2002d-12.i386.rpm 88d23ffc188f1d196d60ae43f7aa1939 imap-utils-2002d-12.i386.rpm x86_64: f90db06f0e5c48b220d071a698cec537 imap-2002d-12.x86_64.rpm 075645d561e9e7bac634d3f42855f6b4 imap-devel-2002d-12.x86_64.rpm a4d5f9aad62c46de9d5b8fa4800402f2 imap-utils-2002d-12.x86_64.rpm Red Hat Enterprise Linux ES version 3: SRPMS: 8685e5bf17d4768f5254d8bd69debdf1 imap-2002d-12.src.rpm i386: 7eef6e0ecc4147cc73a60be3e0d76647 imap-2002d-12.i386.rpm 820c2d446fd800cec6ce64ec2c42f494 imap-devel-2002d-12.i386.rpm 88d23ffc188f1d196d60ae43f7aa1939 imap-utils-2002d-12.i386.rpm ia64: 070f9e193a84fe7d67dd022eb98e4889 imap-2002d-12.ia64.rpm 6b5594df0491c151995d36ec5e88fd63 imap-devel-2002d-12.ia64.rpm 39b5b378efec1b4242c5b5a1ae188846 imap-utils-2002d-12.ia64.rpm x86_64: f90db06f0e5c48b220d071a698cec537 imap-2002d-12.x86_64.rpm 075645d561e9e7bac634d3f42855f6b4 imap-devel-2002d-12.x86_64.rpm a4d5f9aad62c46de9d5b8fa4800402f2 imap-utils-2002d-12.x86_64.rpm Red Hat Enterprise Linux WS version 3: SRPMS: 8685e5bf17d4768f5254d8bd69debdf1 imap-2002d-12.src.rpm i386: 7eef6e0ecc4147cc73a60be3e0d76647 imap-2002d-12.i386.rpm 820c2d446fd800cec6ce64ec2c42f494 imap-devel-2002d-12.i386.rpm 88d23ffc188f1d196d60ae43f7aa1939 imap-utils-2002d-12.i386.rpm ia64: 070f9e193a84fe7d67dd022eb98e4889 imap-2002d-12.ia64.rpm 6b5594df0491c151995d36ec5e88fd63 imap-devel-2002d-12.ia64.rpm 39b5b378efec1b4242c5b5a1ae188846 imap-utils-2002d-12.ia64.rpm x86_64: f90db06f0e5c48b220d071a698cec537 imap-2002d-12.x86_64.rpm 075645d561e9e7bac634d3f42855f6b4 imap-devel-2002d-12.x86_64.rpm a4d5f9aad62c46de9d5b8fa4800402f2 imap-utils-2002d-12.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CVE-2005-2933 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2005 Red Hat, Inc. . Fedora reveals a minor patch for the smtp service addressing a critical memory leak vulnerability impacting clients.. Red Hat Security, IMAP Package Update, Buffer Overflow Fix. . LinuxSecurity.com Team

Calendar%202 Dec 06, 2005 Red Hat
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics