SUSE-SU-2025:03025-1

Опубликовано: 29 авг. 2025

Источник: suse-cvrf

Описание

Security update for javamail

This update for javamail fixes the following issues:

Update to version 1.6.2
CVE-2025-7962: Fixed an improper neutralization of \r and \n UTF-8 characters can lead to SMTP injection (bsc#1246873)

javamail-1.6.2-150200.3.7.1

javamail-1.6.2-150200.3.7.1

javamail-1.6.2-150200.3.7.1

javamail-javadoc-1.6.2-150200.3.7.1

In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.

SUSE Linux Enterprise Module for Basesystem 15 SP6:javamail-1.6.2-150200.3.7.1

SUSE Linux Enterprise Module for Basesystem 15 SP7:javamail-1.6.2-150200.3.7.1

openSUSE Leap 15.6:javamail-1.6.2-150200.3.7.1

openSUSE Leap 15.6:javamail-javadoc-1.6.2-150200.3.7.1