tocsin

Alpine/maddy: high 8.2

maddy is a composable, all-in-one mail server. Versions prior to 0.9.3 contain an LDAP injection vulnerability in the auth.ldap module where user-supplied usernames are interpolated into LDAP search f

Action: Upgrade maddy to 0.9.3-r0 or later.

Affected

introducedfixedlast affected
00.9.3-r0-

Fixed versions

0.9.3-r0

Sources

published · modified · JSON