Уведомление безопасности DSA-1629

Высокая (6.2)

(AV:L/AC:H/Au:N/C:C/I:C/A:C)

Debian

postfix (any) postfix-cdb (any) postfix-dev (any) postfix-doc (any) postfix-ldap (any) postfix-mysql (any) postfix-pcre (any) postfix-pgsql (any)

Уведомление безопасности об уязвимостях postfix-doc, postfix-dev, postfix-pcre, postfix-cdb, postfix, postfix-pgsql, postfix-ldap, postfix-mysql

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
postfix-cdb - 2.3.8-2+etch1
postfix-ldap - 2.3.8-2+etch1
postfix-pcre - 2.3.8-2+etch1
postfix-mysql - 2.3.8-2+etch1
postfix - 2.3.8-2+etch1
postfix-pgsql - 2.3.8-2+etch1
s390x:
postfix-mysql - 2.3.8-2+etch1
postfix - 2.3.8-2+etch1
postfix-cdb - 2.3.8-2+etch1
postfix-pcre - 2.3.8-2+etch1
postfix-ldap - 2.3.8-2+etch1
postfix-pgsql - 2.3.8-2+etch1
i686:
postfix-cdb - 2.3.8-2+etch1
postfix-mysql - 2.3.8-2+etch1
postfix-pcre - 2.3.8-2+etch1
postfix-ldap - 2.3.8-2+etch1
postfix-pgsql - 2.3.8-2+etch1
postfix - 2.3.8-2+etch1
hppa:
postfix-cdb - 2.3.8-2+etch1
postfix-ldap - 2.3.8-2+etch1
postfix-pgsql - 2.3.8-2+etch1
postfix - 2.3.8-2+etch1
postfix-mysql - 2.3.8-2+etch1
postfix-pcre - 2.3.8-2+etch1
sparc:
postfix-pgsql - 2.3.8-2+etch1
postfix-pcre - 2.3.8-2+etch1
postfix-mysql - 2.3.8-2+etch1
postfix-cdb - 2.3.8-2+etch1
postfix - 2.3.8-2+etch1
postfix-ldap - 2.3.8-2+etch1
x86-64:
postfix-pcre - 2.3.8-2+etch1
postfix-mysql - 2.3.8-2+etch1
postfix-ldap - 2.3.8-2+etch1
postfix - 2.3.8-2+etch1
postfix-pgsql - 2.3.8-2+etch1
postfix-cdb - 2.3.8-2+etch1
alpha:
postfix - 2.3.8-2+etch1
postfix-cdb - 2.3.8-2+etch1
postfix-mysql - 2.3.8-2+etch1
postfix-ldap - 2.3.8-2+etch1
postfix-pcre - 2.3.8-2+etch1
postfix-pgsql - 2.3.8-2+etch1
ia64:
postfix-cdb - 2.3.8-2+etch1
postfix-pcre - 2.3.8-2+etch1
postfix-ldap - 2.3.8-2+etch1
postfix - 2.3.8-2+etch1
postfix-mysql - 2.3.8-2+etch1
postfix-pgsql - 2.3.8-2+etch1
mips:
postfix-mysql - 2.3.8-2+etch1
postfix-cdb - 2.3.8-2+etch1
postfix-pcre - 2.3.8-2+etch1
postfix-pgsql - 2.3.8-2+etch1
postfix - 2.3.8-2+etch1
postfix-ldap - 2.3.8-2+etch1
noarch:
postfix-dev - 2.3.8-2+etch1
postfix-doc - 2.3.8-2+etch1
arm:
postfix-ldap - 2.3.8-2+etch1
postfix-pcre - 2.3.8-2+etch1
postfix-mysql - 2.3.8-2+etch1
postfix-pgsql - 2.3.8-2+etch1
postfix - 2.3.8-2+etch1
postfix-cdb - 2.3.8-2+etch1

http://www.debian.org/security/dsa-1629/

Источник: CVE
Наименование: CVE-2008-2936
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2936