portage-ng / portage / mail-client / mailx / 8.1.2.20220412
portage-ng glsa
1 advisory reference mail-client/mailx · none place version 8.1.2.20220412 in a vulnerable range
▸ GLSA 201804-06 mailx: Multiple vulnerabilities this version unaffected normal remote 2018-04-08

Multiple vulnerabilities were discovered in mailx, the worst of which may allow a remote attacker to execute arbitrary commands.

Announced
2018-04-08
Revised
2018-04-08
Access
remote
Bugs
#533208
Advisory
https://security.gentoo.org/glsa/201804-06

Affected packages

PackageArchVulnerableUnaffected
mail-client/mailx*< 8.1.2.20160123>= 8.1.2.20160123

Background

A utility program for sending and receiving mail, also known as a Mail User Agent program.

Description

Multiple vulnerabilities have been discovered in mailx. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could execute arbitrary commands.

Workaround

There is no known workaround at this time.

Resolution

All mailx users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=mail-client/mailx-8.1.2.20160123"

References