Subject: BSA-007 Security Update for mailscanner

Jan Wagner uploaded new packages for mailscanner which fixed the following security problems: CVE-2010-3095 incomplete fix for CVE-2008-5313 https://vulners.com/cve/CVE-2010-3095 The original text of CVE-2008-5313: mailscanner 4.68.8 and other versions before 4.74.16-1 might allow local users to...

CVE-2008-5313

CVE-2008-5313 affects MailScanner: versions 4.68.8 and other builds before 4.74.16-1 are exploitable via a local symlink attack that can overwrite arbitrary files in several autoupdate and MailScanner script paths (e.g., /etc/MailScanner/autoupdate/, /etc/MailScanner/wrapper/, /usr/share/MailScan...