[ubuntu/precise-updates] fail2ban 0.8.6-3wheezy3build0.12.04.1 (Accepted)

[Ubuntu Archive Robot]

fail2ban (0.8.6-3wheezy3build0.12.04.1) precise-security; urgency=medium

  * fake sync from Debian

fail2ban (0.8.6-3wheezy3) wheezy-security; urgency=high

  * Use anchored failregex for filters to avoid possible DoS.  Manually
    picked up from the current status of 0.8 branch (as of
    0.8.13-29-g09b2016):
    - CVE-2013-7176: postfix.conf - anchored on the front, expects
      "postfix/smtpd" prefix in the log line
    - CVE-2013-7177: cyrus-imap.conf - anchored on the front, and
      refactored to have a single failregex
    - couriersmtp.conf - anchored on both sides
    - exim.conf - front-anchored versions picked up from exim.conf
      and exim-spam.conf
    - lighttpd-fastcgi.conf - front-anchored picked up from suhosin.conf

Date: 2014-08-08 18:08:14.981986+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Maintainer: Yaroslav Halchenko <debian at onerussian.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/precise/+source/fail2ban/0.8.6-3wheezy3build0.12.04.1
-------------- next part --------------
Sorry, changesfile not available.