Debian alert DLA-2890-1 (libspf2)

From:
             
 
Thorsten Alteholz <debian@alteholz.de>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 2890-1] libspf2 security update
Date:
             
 
Thu, 20 Jan 2022 23:35:22 +0000
Message-ID:
             
 
<alpine.DEB.2.21.2201202334240.22589@postfach.intern.alteholz.me>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-2890-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                    Thorsten Alteholz
January 21, 2022                              https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : libspf2
Version        : 1.2.10-7+deb9u2
CVE ID         : CVE-2021-33912 CVE-2021-33913


Two issues have been found in libspf2, a library for validating mail 
senders with SPF.
Both issues are related to heap-based buffer overflows.


For Debian 9 stretch, these problems have been fixed in version
1.2.10-7+deb9u2.

We recommend that you upgrade your libspf2 packages.

For the detailed security status of libspf2 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libspf2

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

-----BEGIN PGP SIGNATURE-----
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=zUqx
-----END PGP SIGNATURE-----