Mageia alert MGASA-2012-0363 (bogofilter)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2012-0363: bogofilter-1.2.2-2.2.mga2
 (2/core) 
Date:
    	     
 
Thu, 20 Dec 2012 23:19:59 +0100
Message-ID:
    	     
 
<20121220221959.GA12319@valstar.mageia.org>
Archive-link:
    	     
 
Article, Thread
              
MGASA-2012-0363
Date: 	December 20th, 2012
Affected releases: 	2


Description:
Updated bogofilter package fixes security vulnerability:

In bogofilter before 1.2.3, bogofilter's/bogolexer's base64 could
overwrite heap memory in the character set conversion in certain
pathological cases of invalid base64 code that decodes to incomplete
multibyte characters (CVE-2012-5468).


Updated Packages:
bogofilter-1.2.2-2.2.mga2


References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5468

http://bogofilter.sourceforge.net/security/bogofilter-SA-...
http://www.debian.org/security/2012/dsa-2585

https://bugs.mageia.org/show_bug.cgi?id=8376

https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-...