Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 4 articles for you...
203
security advisorycriticalsoftware updateMageia 9 MGASA-2024-0370 critical: opendmarc null pointer dereference
Fix null pointer dereference in opendmarc_policy.c. (CVE-2024-25768) References: - https://bugs.mageia.org/show_bug.cgi?id=33756 . MGASA-2024-0370 - Updated opendmarc packages fix security vulnerability Publication date: 22 Nov 2024 URL: https://advisories.mageia.org/MGASA-2024-0370.html Type: security Affected Mageia releases: 9 CVE: CVE-2024-25768 Fix null pointer dereference in opendmarc_policy.c. (CVE-2024-25768) References: - https://bugs.mageia.org/show_bug.cgi?id=33756 - https://github.com/trusteddomainproject/OpenDMARC/issues/256 - https://www.cve.org/CVERecord?id=CVE-2024-25768 SRPMS: - 9/core/opendmarc-1.4.2-2.1.mga9 . MGASA-2024-0456 involves crucial updates to postfix, correcting significant vulnerabilities linked to an input validation flaw.. opendmarc, security advisory, Mageia updates, null pointer dereference, software security. . Severity: Critical. LinuxSecurity.com Team
Nov 22, 2024
•Critical
Mageia
89
security advisorycriticalFedoraFedora 40: 2024-044dcdff8e critical: opendmarc CVE-2024-25768 fix
Fix for CVE-2024-25768 - Closes rhbz#2266175 rhbz#2266174 Convert to %autorelease and %autochangelog Simplify spec Remove checks on if systemd is present Remove checks on old Fedora releases. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-044dcdff8e 2024-11-11 05:08:19.329099 -------------------------------------------------------------------------------- Name : opendmarc Product : Fedora 40 Version : 1.4.2 Release : 21.fc40 URL : http://www.trusteddomain.org/opendmarc.html Summary : A DMARC milter and library Description : OpenDMARC (Domain-based Message Authentication, Reporting & Conformance) provides an open source library that implements the DMARC verification service plus a milter-based filter application that can plug in to any milter-aware MTA, including sendmail, Postfix, or any other MTA that supports the milter protocol. The DMARC sender authentication system is still a draft standard, working towards RFC status. The database schema required for some functions is provided in /usr/share/opendmarc/db. The rddmarc tools are provided in /usr/share/opendmarc/contrib/rddmarc. -------------------------------------------------------------------------------- Update Information: Fix for CVE-2024-25768 - Closes rhbz#2266175 rhbz#2266174 Convert to %autorelease and %autochangelog Simplify spec Remove checks on if systemd is present Remove checks on old Fedora releases Remove checks on EL7 or older Use %make macros Other misc changes -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2024 Mikel Olasagasti Uranga - 1.4.2-21 - Fix for CVE-2024-25768 - Closes rhbz#2266175 rhbz#2266174 * Tue Oct 29 2024 Mikel Olasagasti Uranga - 1.4.2-15 - Simplify spec - Remove checks on if systemd is present - Remove checks on old Fedora releases - Remove checks on EL7 or older - Use make macros * Thu Jul 18 2024Fedora Release Engineering - 1.4.2-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-044dcdff8e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Nov 11, 2024
•Critical
Fedora
89
security advisoryupdateFedoraFedora 41: opendmarc Security Fix for CVE-2024-25768 - Moderate Threat
Fix for CVE-2024-25768 - Closes rhbz#2266175 rhbz#2266174 Convert to %autorelease and %autochangelog Simplify spec Remove checks on if systemd is present Remove checks on old Fedora releases. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-513cf04db3 2024-11-11 02:18:50.551505 -------------------------------------------------------------------------------- Name : opendmarc Product : Fedora 41 Version : 1.4.2 Release : 21.fc41 URL : http://www.trusteddomain.org/opendmarc.html Summary : A DMARC milter and library Description : OpenDMARC (Domain-based Message Authentication, Reporting & Conformance) provides an open source library that implements the DMARC verification service plus a milter-based filter application that can plug in to any milter-aware MTA, including sendmail, Postfix, or any other MTA that supports the milter protocol. The DMARC sender authentication system is still a draft standard, working towards RFC status. The database schema required for some functions is provided in /usr/share/opendmarc/db. The rddmarc tools are provided in /usr/share/opendmarc/contrib/rddmarc. -------------------------------------------------------------------------------- Update Information: Fix for CVE-2024-25768 - Closes rhbz#2266175 rhbz#2266174 Convert to %autorelease and %autochangelog Simplify spec Remove checks on if systemd is present Remove checks on old Fedora releases Remove checks on EL7 or older Use %make macros Other misc changes -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2024 Mikel Olasagasti Uranga - 1.4.2-21 - Fix for CVE-2024-25768 - Closes rhbz#2266175 rhbz#2266174 * Tue Oct 29 2024 Mikel Olasagasti Uranga - 1.4.2-15 - Simplify spec - Remove checks on if systemd is present - Remove checks on old Fedora releases - Remove checks on EL7 or older - Use makemacros -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-513cf04db3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Nov 11, 2024
Fedora
197
security advisorydebianemail filterDebian 10 Buster DLA-3550-1 Moderate: Opendmarc Script Hang Issue
It was discovered that there was an issue in the opendmarc DMARC email filter system. A call to "db_stop" was missing from the post-installation script which meant that, under some configurations, the script would hang indefinitely. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3550-1
Aug 30, 2023
Debian LTS
197
security advisorycriticaldebianDebian Buster DLA-3546-1 Critical: Opendmarc Email Authentication Issue
It was discovered that there was an issue in the opendmarc DMARC email filter system. A vulnerability allowed attackers to inject authentication results to provide false information about the domain that originated an email message. This was caused by incorrect . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3546-1
Aug 28, 2023
•Critical
Debian LTS
89
security advisorycriticalFedoraFedora 34: FEDORA-2021-433e7d72ce Critical: opendmarc Authentication Update
Upgrade to 1.4.1 bugfix release.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-433e7d72ce 2021-05-31 01:04:19.558515 --------------------------------------------------------------------------------Name : opendmarc Product : Fedora 34 Version : 1.4.1 Release : 1.fc34 URL : http://www.trusteddomain.org/opendmarc.html Summary : A Domain-based Message Authentication, Reporting & Conformance (DMARC) milter and library Description : OpenDMARC (Domain-based Message Authentication, Reporting & Conformance) provides an open source library that implements the DMARC verification service plus a milter-based filter application that can plug in to any milter-aware MTA, including sendmail, Postfix, or any other MTA that supports the milter protocol. The DMARC sender authentication system is still a draft standard, working towards RFC status. The database schema required for some functions is provided in /usr/share/opendmarc/db. The rddmarc tools are provided in /usr/share/opendmarc/contrib/rddmarc. --------------------------------------------------------------------------------Update Information: Upgrade to 1.4.1 bugfix release. --------------------------------------------------------------------------------ChangeLog: * Thu Apr 29 2021 Matt Domsch - 1.4.1-1 - Update to 1.4.1 --------------------------------------------------------------------------------References: [ 1 ] Bug #1786435 - SeLinux problems pclose() exited with status 127 https://bugzilla.redhat.com/show_bug.cgi?id=1786435 [ 2 ] Bug #1828432 - CVE-2019-20790 CVE-2020-12272 opendmarc: Two vulnerabilities in openDMARC 1.3.2 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1828432 [ 3 ] Bug #1861993 - CVE-2020-12460 opendmarc: improper null termination in function opendmarc_xml_parse leads to heap-buffer overflow [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1861993 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-433e7d72ce' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
May 30, 2021
•Critical
Fedora
198
security advisorymedium severityremote attackArch Linux ASA-202105-13 Medium: OpenDMARC Authentication Bypass Threat
The package opendmarc before version 1.4.1.1-1 is vulnerable to multiple issues including content spoofing and authentication bypass. . Arch Linux Security Advisory ASA-202105-13 ========================================= Severity: Medium Date : 2021-05-19 CVE-ID : CVE-2019-20790 CVE-2020-12272 Package : opendmarc Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1375 Summary ====== The package opendmarc before version 1.4.1.1-1 is vulnerable to multiple issues including content spoofing and authentication bypass. Resolution ========= Upgrade to 1.4.1.1-1. # pacman -Syu "opendmarc> =1.4.1.1-1" The problems have been fixed upstream in version 1.4.1.1. Workaround ========= None. Description ========== - CVE-2019-20790 (authentication bypass) OpenDMARC before 1.4.1, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM field. - CVE-2020-12272 (content spoofing) OpenDMARC before 1.4.1 allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsing and interpretation of SPF/DKIM authentication results, as demonstrated by the example.net(. substring. OpenDMARC has added checking to validate that the domain element in both SPF and DKIM header fields being inspected argument contains only valid domain name characters. This has been fixed as of OpenDMARC 1.4.1 (March 2021). Impact ===== A remote attacker could spoof SPF, DMARC and DKIMauthentication results. References ========= https://bugs.launchpad.net/pypolicyd-spf/+bug/1838816 / https://www.usenix.org/system/files/sec20fall_chen-jianjun_prepub_0.pdf https://github.com/trusteddomainproject/OpenDMARC/issues/49 https://github.com/trusteddomainproject/OpenDMARC/issues/158 https://github.com/trusteddomainproject/OpenDMARC/commit/d72e1ec0ae6ed3a9827b31be4f268fc528232371 https://github.com/trusteddomainproject/OpenDMARC/commit/9c0db8c12e4488fbf948afc27d8395d0c6bb53bd https://github.com/trusteddomainproject/OpenDMARC/commit/5f980792546d11bc16dff7f875188ba81989ba33 https://github.com/trusteddomainproject/OpenDMARC/blob/develop/SECURITY/CVE-2020-12272 / https://github.com/trusteddomainproject/OpenDMARC/commit/f3a9a9d4edfaa05102292727d021683f58aa4b6e https://security.archlinux.org/CVE-2019-20790 https://security.archlinux.org/CVE-2020-12272 . Debian Security Announcement DSA-2022-27 highlights critical vulnerabilities in libxml2 that may lead to unauthorized data access.. Arch Linux Advisory, OpenDMARC, Medium Severity Threats, Security Updates. . Severity: Medium. LinuxSecurity.com Team
May 20, 2021
•Medium
ArchLinux
197
security advisorydebianheap overflowDebian 9: DLA-2639-1 Moderate: OpenDMARC Heap Overflow Issue
It was discovered that OpenDMARC, a milter implementation of DMARC, has improper null termination in the function opendmarc_xml_parse that can result in a one-byte heap overflow in opendmarc_xml when parsing a specially crafted DMARC aggregate report. This can cause remote memory . - ----------------------------------------------------------------------- Debian LTS Advisory DLA-2639-1
Apr 25, 2021
•Important
Debian LTS
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!