CVE-2017-4961

CVE-2017-4961 affects Cloud Foundry Foundation’s BOSH Director (BOSH Release 261.x before 261.3 and all 260.x). An authenticated Director user can supply a malicious checksum, enabling privilege escalation on the Director VM ("BOSH Director Shell Injection Vulnerabilities"). Practical impact is e...

Fedora 25 : 1:dovecot (2016-daf90926d4)

Fixed crash in auth process when auth-policy was configured and authentication was aborted/failed without a username set. - director: If two users had different tags but the same hash, the users may have been redirected to the wrong tag's hosts. - Index files may have been thought incorrectly...