Resolve vulnerability: CVE-2017-10140 in db
requested to merge remediate/cve-2017-10140-in-db-D20210212T183744 into 1-create-mr-for-scanning-results
Description:
Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.
- Severity: medium
- Confidence: unknown
Solution:
Upgrade db from 5.1.25-11build1 to 5.1.25-11ubuntu0.1