Re: Veracode reported vulnerabilities

2016-11-16 Thread McSec
atest release at the next opportunity, but I am afraid Veracode will report the same issues since the source hasn't changed. On Wed, Nov 16, 2016 at 8:56 AM, Bill Cole-3 [via Postfix] < ml-node+s1071664n87323...@n5.nabble.com> wrote: > On 16 Nov 2016, at 10:38, McSec wrote: &g

Veracode reported vulnerabilities

2016-11-16 Thread McSec
A Veracode scan reported the following vulnerabilites in postfix 3.0.1: vulnerabilitymodulesource Buffer Over Flow dnsblog home/.../src/dns/dns_rr.c Buffer Over Flow smtpd home/.../src/tls/tls_scache.c Numeric Errorsdnsblog home/.../src/dns/dns