Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:03025-1

Опубликовано: 29 авг. 2025
Источник: suse-cvrf

Описание

Security update for javamail

This update for javamail fixes the following issues:

  • Update to version 1.6.2
  • CVE-2025-7962: Fixed an improper neutralization of \r and \n UTF-8 characters can lead to SMTP injection (bsc#1246873)

Список пакетов

Container suse/manager/5.0/x86_64/server:latest
javamail-1.6.2-150200.3.7.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest
javamail-1.6.2-150200.3.7.1
Image SLES15-SP4-Manager-Server-4-3-BYOS
javamail-1.6.2-150200.3.7.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure
javamail-1.6.2-150200.3.7.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2
javamail-1.6.2-150200.3.7.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE
javamail-1.6.2-150200.3.7.1
Image server-image
javamail-1.6.2-150200.3.7.1
Image server-image-sles15sp7
javamail-1.6.2-150200.3.7.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
javamail-1.6.2-150200.3.7.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
javamail-1.6.2-150200.3.7.1
openSUSE Leap 15.6
javamail-1.6.2-150200.3.7.1
javamail-javadoc-1.6.2-150200.3.7.1

Ссылки

Описание

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.

Затронутые продукты
Container suse/manager/5.0/x86_64/server:latest:javamail-1.6.2-150200.3.7.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest:javamail-1.6.2-150200.3.7.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:javamail-1.6.2-150200.3.7.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:javamail-1.6.2-150200.3.7.1
Ссылки