tocsin

Debian/mimedefang: high 7.8

MIMEDefang 2.80 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account

Action: Upgrade mimedefang to 2.83-1 or later.

Affected

introducedfixedlast affected
02.83-1-

Fixed versions

2.83-1

Sources

published · modified · JSON