BLAG

BLAG Forums
It is currently Mon Dec 22, 2014 9:23 pm

All times are UTC




Post new topic Reply to topic  [ 1 post ] 
Author Message
PostPosted: Fri Jan 07, 2005 4:26 am 
Offline

Joined: Mon Mar 15, 2004 8:17 pm
Posts: 415
Location: ny
[SECURITY] Fedora Core 3 Update: exim-4.43-1.FC3.1
— Thomas Chung @ 5:12 pm

———————————————————————
Fedora Update Notification
FEDORA-2005-001
2005-01-06
———————————————————————

Product : Fedora Core 3
Name : exim
Version : 4.43
Release : 1.FC3.1
Summary : The exim mail transfer agent
Description :
Exim is a mail transport agent (MTA) developed at the University of
Cambridge for use on Unix systems connected to the Internet. In style
it is similar to Smail 3, but its facilities are more extensive, and
in particular it has options for verifying incoming sender and
recipient addresses, for refusing mail from specified hosts, networks,
or senders, and for controlling mail relaying. Exim is in production
use at quite a few sites, some of which move hundreds of thousands of
messages per day.

Exiscan is compiled in to allow inbuilt scanning capability. See
http://duncanthrax.net/exiscan-acl/

———————————————————————
Update Information:

This erratum fixes two relatively minor security issues which were discovered
in Exim in the last few weeks. The Common Vulnerabilities and Exposures
project (cve.mitre.org) has assigned the names CAN-2005-0021 and CAN-2005-0022
to these, respectively.

1. The function host_aton() can overflow a buffer if it is presented with an
illegal IPv6 address that has more than 8 components.

2. The second report described a buffer overflow in the function
spa_base64_to_bits(), which is part of the code for SPA authentication. This
code originated in the Samba project. The overflow can be exploited only if
you are using SPA authentication.

———————————————————————
* Tue Jan 04 2005 David Woodhouse 4.43-1.FC3.1

- Fix buffer overflows (CAN-2005-0021, CAN-2005-0022)
- Demonstrate SASL auth configuration in default config file
- Enable TLS and provide certificate if necessary
- Don’t reject all GB2312 charset mail by default

———————————————————————
This update can be downloaded from:
http://download.fedora.redhat.com/pub/f ... updates/3/

f4cafadca104a85ff5f31cbf5ca4c4f1 SRPMS/exim-4.43-1.FC3.1.src.rpm
3412f5b4cf40ad504dbaf2b7e2fffa62 x86_64/exim-4.43-1.FC3.1.x86_64.rpm
1446c41e65cfd6f15ae60b969ab3d20c x86_64/exim-mon-4.43-1.FC3.1.x86_64.rpm
e71be8446d9e4d250ca40a41c2d7b49a x86_64/exim-doc-4.43-1.FC3.1.x86_64.rpm
1d515c5be494e657333549f72f4621e2 x86_64/exim-sa-4.43-1.FC3.1.x86_64.rpm
bcd320d0c2f88911a3ccc02b95cb2843 x86_64/debug/exim-debuginfo-4.43-1.FC3.1.x86_64.rpm
7c2205113fe3285a76b797748845548b i386/exim-4.43-1.FC3.1.i386.rpm
8227e5701319639057b951bc45bbecf8 i386/exim-mon-4.43-1.FC3.1.i386.rpm
3b7e2741f4208757e92ab2d228b1fe8a i386/exim-doc-4.43-1.FC3.1.i386.rpm
4e5cbfea028184d6710443a3c0e79c29 i386/exim-sa-4.43-1.FC3.1.i386.rpm
9c2c6e5d633104ca71bf80b062e9f0a2 i386/debug/exim-debuginfo-4.43-1.FC3.1.i386.rpm


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 1 post ] 

All times are UTC


Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group