HomeFreeBSD

MFH: r527012

Description

MFH: r527012

mail/opensmtpd: update to 6.6.4p1 security releaase

SECURITY RELEASE

An out of bounds read in smtpd allows an attacker to inject arbitrary commands into the envelope file which are then executed as root. Separately, missing privilege revocation in smtpctl allows arbitrary commands to be run with the _smtpq group.

Approved by: ports-secteam (joneum)
Security: CVE-2020-8793, CVE-2020-8794

Details

Provenance
fluffyAuthored on
Parents
rP527061: MFH: r526973
Branches
Unknown
Tags
Unknown