Vulnerability Bulletins

DSA-2979 fail2ban - security update

   
Affected software Debian
 
Two vulnerabilities were discovered in Fail2ban, a solution to ban hoststhat cause multiple authentication errors. When using Fail2ban to monitorPostfix or Cyrus IMAP logs, improper input validation in log parsingcould enable a remote attacker to trigger an IP ban on arbitraryaddresses, resulting in denial of service.

More info:

https://www.debian.org/security/2014/dsa-2979