portage-ng / portage / mail-mta / opensmtpd / 7.5.0_p0
portage-ng glsa
2 advisories reference mail-mta/opensmtpd · none place version 7.5.0_p0 in a vulnerable range
▸ GLSA 202105-12 OpenSMTPD: Multiple vulnerabilities this version unaffected low local, remote 2021-05-26

Multiple vulnerabilities have been found in OpenSMTPD, the worst of which could result in a Denial of Service condition.

Announced
2021-05-26
Revised
2021-05-26
Access
local, remote
Bugs
#761945
Advisory
https://security.gentoo.org/glsa/202105-12

Affected packages

PackageArchVulnerableUnaffected
mail-mta/opensmtpd*< 6.8.0_p2>= 6.8.0_p2

Background

OpenSMTPD is a lightweight but featured SMTP daemon from OpenBSD.

Description

Multiple vulnerabilities have been discovered in OpenSMTPD. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker, by connecting to the SMTP listener daemon, could possibly cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All OpenSMTPD users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-mta/opensmtpd-6.8.0_p2"

References

▸ GLSA 201601-04 OpenSMTPD: Multiple vulnerabilities this version unaffected normal remote 2016-01-27

Multiple vulnerabilities have been found in OpenSMTPD, the worst allowing remote attackers to execute arbitrary code.

Announced
2016-01-27
Revised
2016-01-27
Access
remote
Bugs
#562034 #562290
Advisory
https://security.gentoo.org/glsa/201601-04

Affected packages

PackageArchVulnerableUnaffected
mail-mta/opensmtpd*< 5.7.3_p1>= 5.7.3_p1

Background

OpenSMTPD is a lightweight but featured SMTP daemon from OpenBSD.

Description

Multiple vulnerabilities have been discovered in OpenSMTPD. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All OpenSMTPD users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-mta/opensmtpd-5.7.3_p1"