ALT Linux Team

Branch sisyphus update on 2014-11-05

2014-11-05

ALT-BU-2014-3086-1

Branch sisyphus update bulletin.

ALT-PU-2014-2322-1

Package exim updated to version 4.84-alt1 for branch sisyphus in task 133996.

Closed vulnerabilities

Published: 2014-09-04
Modified: 2025-04-12

CVE-2014-2957

The dmarc_process function in dmarc.c in Exim before 4.82.1, when EXPERIMENTAL_DMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expand_string function.

Severity: MEDIUM (6.8) Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
References:
Published: 2014-09-04
Modified: 2025-04-12

CVE-2014-2972

expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.

Severity: MEDIUM (4.6) Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.2
Back to top