Debian/sup-mail: unknown
lib/sup/message_chunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the content_type of an email attachment.
Action: Upgrade sup-mail to 0.12.1+git20120407.aaa852f-1+deb7u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.12.1+git20120407.aaa852f-1+deb7u1 | - |
Fixed versions
| 0.12.1+git20120407.aaa852f-1+deb7u1 |
Sources
published · modified · JSON