fail2ban (0.8.6-3wheezy3build0.12.04.1) precise-security; urgency=medium
* fake sync from Debian
fail2ban (0.8.6-3wheezy3) wheezy-security; urgency=high
* Use anchored failregex for filters to avoid possible DoS. Manually
picked up from the current status of 0.8 branch (as of
0.8.13-29-g09b2016):
- CVE-2013-7176: postfix.conf - anchored on the front, expects
"postfix/smtpd" prefix in the log line
- CVE-2013-7177: cyrus-imap.conf - anchored on the front, and
refactored to have a single failregex
- couriersmtp.conf - anchored on both sides
- exim.conf - front-anchored versions picked up from exim.conf
and exim-spam.conf
- lighttpd-fastcgi.conf - front-anchored picked up from suhosin.conf
Date: 2014-08-08 18:08:14.981986+00:00
Changed-By: Marc Deslauriers <[email protected]>
Maintainer: Yaroslav Halchenko <[email protected]>
https://launchpad.net/ubuntu/precise/+source/fail2ban/0.8.6-3wheezy3build0.12.04.1
Sorry, changesfile not available.
--
Precise-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/precise-changes
