OpenSMTPD: Multiple vulnerabilities Multiple vulnerabilities have been found in OpenSMTPD, the worst of which could result in a Denial of Service condition. opensmtpd 2021-05-26 2021-05-26 761945 local, remote 6.8.0_p2 6.8.0_p2

OpenSMTPD is a lightweight but featured SMTP daemon from OpenBSD.

Multiple vulnerabilities have been discovered in OpenSMTPD. Please review the CVE identifiers referenced below for details.

A remote attacker, by connecting to the SMTP listener daemon, could possibly cause a Denial of Service condition.

There is no known workaround at this time.

All OpenSMTPD users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=mail-mta/opensmtpd-6.8.0_p2" CVE-2020-35679 CVE-2020-35680 whissi whissi