Alpine/maddy: critical 9.8
maddy is a composable, all-in-one mail server. Starting with version 0.2.0 and prior to version 0.6.3, maddy allows a full authentication bypass if SASL authorization username is specified when using
Action: Upgrade maddy to 0.6.3-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.2.0 | 0.6.3-r0 | - |
Fixed versions
| 0.6.3-r0 |
Sources
published · modified · JSON