--------------------------------------------------------------------- Fedora Legacy Test Update Notification FEDORALEGACY-2006-156290 Bugzilla https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=156290 2006-03-15 --------------------------------------------------------------------- Name : cyrus-imapd Versions : fc2: cyrus-imapd-2.2.12-1.1.fc2.1.legacy Summary : A high-performance mail server with IMAP, POP3, NNTP and SIEVE support. Description : The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail system designed for use from small to large enterprise environments using standards-based internet mail technologies. --------------------------------------------------------------------- Update Information: Updated cyrus-imapd packages that fix several buffer overflow security issues are now available. The cyrus-imapd package contains the core of the Cyrus IMAP server. Several buffer overflow bugs were found in cyrus-imapd. It is possible that an authenticated malicious user could cause the imap server to crash. Additionally, a peer news admin could potentially execute arbitrary code on the imap server when news is received using the fetchnews command. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-0546 to this issue. Users of cyrus-imapd are advised to upgrade to these updated packages, which contain cyrus-imapd version 2.2.12 to correct these issues. --------------------------------------------------------------------- Changelogs fc2: * Mon Mar 06 2006 Marc Deslauriers <marcdeslauriers@xxxxxxxxxxxx> 2.2.12-1.1.fc2.1.legacy - Update to 2.2.12 to fix CVE-2005-0546. The only difference between 2.2.10 and 2.2.12 was the security fix, so upgrading is the equivalent of backporting the security fix. --------------------------------------------------------------------- This update can be downloaded from: http://download.fedoralegacy.org/ (sha1sums) fc2: 869a5d94e05156e2bdcff36242fd25b2c0e1c6d1 fedora/2/updates-testing/i386/cyrus-imapd-2.2.12-1.1.fc2.1.legacy.i386.rpm b3bfaca68420697544395c17dbf2cefb5eabcf8f fedora/2/updates-testing/i386/cyrus-imapd-devel-2.2.12-1.1.fc2.1.legacy.i386.rpm 0a8652c25f5d608811b64c634191845b6dcd672a fedora/2/updates-testing/i386/cyrus-imapd-murder-2.2.12-1.1.fc2.1.legacy.i386.rpm d7cfe6d91b0aa23b189949bf516e94479eefd8ef fedora/2/updates-testing/i386/cyrus-imapd-nntp-2.2.12-1.1.fc2.1.legacy.i386.rpm 03b23f099fd26fa8421bf90f4542ff4e56226d36 fedora/2/updates-testing/i386/cyrus-imapd-utils-2.2.12-1.1.fc2.1.legacy.i386.rpm 1d1f935c0d88f209321ebb9ae679af9a0ff23e42 fedora/2/updates-testing/i386/perl-Cyrus-2.2.12-1.1.fc2.1.legacy.i386.rpm de27bfdc5d7e2a2c5268d769ef0842aba85bfed5 fedora/2/updates-testing/SRPMS/cyrus-imapd-2.2.12-1.1.fc2.1.legacy.src.rpm --------------------------------------------------------------------- Please test and comment in bugzilla.
Attachment:
signature.asc
Description: OpenPGP digital signature
-- fedora-legacy-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-legacy-list
