| Package | Affected versions | Patched versions |
|---|---|---|
| postfix | ≥ 3.0.0, < 3.0.10≥ 3.1.0, < 3.1.6≥ 3.2.0, < 3.2.2< 2.11.10 | 3.0.103.1.63.2.22.11.10 |
Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free