Branches for Wheezy

Name Status Last Modified Last Commit
lp:debian/wheezy/fail2ban bug 1 Development 2014-06-22 11:56:54 UTC
25. * Use anchored failregex for filters ...

Author: Yaroslav Halchenko
Revision Date: 2014-06-22 11:56:54 UTC

* Use anchored failregex for filters to avoid possible DoS. Manually
  picked up from the current status of 0.8 branch (as of
  0.8.13-29-g09b2016):
  - CVE-2013-7176: postfix.conf - anchored on the front, expects
    "postfix/smtpd" prefix in the log line
  - CVE-2013-7177: cyrus-imap.conf - anchored on the front, and
    refactored to have a single failregex
  - couriersmtp.conf - anchored on both sides
  - exim.conf - front-anchored versions picked up from exim.conf
    and exim-spam.conf
  - lighttpd-fastcgi.conf - front-anchored picked up from suhosin.conf

11 of 1 result