[SECURITY] [DLA 3680-1] opendkim security update

Debian LTS Advisory DLA-3680-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost December 03, 2023 https://wiki.debian.org/LTS Package : opendkim Version : 2.11.0alpha-12+deb10u1 CVE ID : CVE-2022-48521 Debian Bug : 1041107 An issue CVE-2022-48521 was discovered in...

CVE-2022-48521

OpenDKIM CVE-2022-48521 affects OpenDKIM up to 2.10.3 and 2.11.x up to 2.11.0-Beta2. The issue: OpenDKIM fails to track ordinal numbers when removing fake Authentication-Results header fields, allowing a remote attacker to craft an email that appears to have a valid DKIM signature when it does no...