Accepted perdition 2.1-1 (source amd64) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sun, 01 Dec 2013 17:10:57 +0900
Source: perdition
Binary: perdition perdition-ldap perdition-mysql perdition-odbc perdition-postgresql
Architecture: source amd64
Version: 2.1-1
Distribution: unstable
Urgency: low
Maintainer: Simon Horman <horms@debian.org>
Changed-By: Simon Horman <horms@debian.org>
Description:
perdition - POP3 and IMAP4 Proxy server
perdition-ldap - Library to allow perdition to access LDAP based popmaps
perdition-mysql - Library to allow perdition to access MySQL based popmaps
perdition-odbc - Library to allow perdition to access ODBC based popmaps
perdition-postgresql - Library to allow perdition to access PostgreSQL based popmaps
Closes: 680086 726175 729028 737666 751430
Changes:
perdition (2.1-1) unstable; urgency=low
.
* New Upstream Release
(closes: #751430)
* Fix for CVE-2013-4584
.
Perdition fails to apply the administrator's specified ciphersuite
preferences when making outbound connections to IMAP and POP servers
using STARTTLS. For these outbound connections, it applies the
administrator's listening ciphersuite preferences, which in many cases
may be significantly weaker.
.
This is not a critical vulnerability (it can be mitigated, for example,
by enforcing a strict minimalist ciphersuite on the backend server),
but in the absence of any such mitigation, it may cause the connections
between the proxy server and the backend server to negotiate a weaker
ciphersuite than the administrator's stated intent.
.
(closes: #729028)
* Versioned build dependency on dpkg-dev (>=1.16.1)
(closes: #680086)
* Use 1.0 as Managesieve version
(closes: #726175)
* Use autoreconf
(closes: #737666)
* Harden build flags
* Build verbosely
* Update standards version to 3.9.5
Checksums-Sha1:
683abbe3feb1a92b6ed428d479253b49ac19553d 2243 perdition_2.1-1.dsc
81ef59ae0c25533c1ebddb950bc216effc702394 515883 perdition_2.1.orig.tar.bz2
46f2389c4db464ac0ced6796dbcac3575ab76f4c 12520 perdition_2.1-1.debian.tar.xz
3fe63288cc212b412cf69cb885aebbaf38e86254 119552 perdition_2.1-1_amd64.deb
2df3c6392dc2ce5ab5fdc797cb4a1a15ae4502e7 17462 perdition-ldap_2.1-1_amd64.deb
9281ec2eefce33145e4184737ad34dc2b613f448 16012 perdition-mysql_2.1-1_amd64.deb
db149f07ce64d51aba601972bc5fba03eafdc236 15556 perdition-odbc_2.1-1_amd64.deb
2c6e26de8d439ab5e35d97163eef5a8757f9f0a4 15418 perdition-postgresql_2.1-1_amd64.deb
Checksums-Sha256:
c3a33db44222402cf7b7eee3864ca2e11e9f62bed811097fb1602180e0ab7dd7 2243 perdition_2.1-1.dsc
e0675bbaa85d17622682e30349f53f31736c3d3ec2ca157fdc929e5d2567e491 515883 perdition_2.1.orig.tar.bz2
0d47e8af3fcbc37e85d184af494e82da53c5fbe27ba5300ac36b20157be90449 12520 perdition_2.1-1.debian.tar.xz
cfe34c0e21f95bba383f1efe46ba1b3647d83c11cbed5da2bb3d5a4001ad0b63 119552 perdition_2.1-1_amd64.deb
2f951dbcaf46f4dc95588dbaa247083bcc7b29deb6b05b4007c5b5c03b0ca6ae 17462 perdition-ldap_2.1-1_amd64.deb
6213b85d179ee7011875274c348bd3dddf9580021b5d756214e4b8f0664743cc 16012 perdition-mysql_2.1-1_amd64.deb
83f8f0e65c265b59ffdfaff3ef482adc49bb3a45f904f559ab349dfc235c9870 15556 perdition-odbc_2.1-1_amd64.deb
b1cf0be07f52817e9d1f3a059ac218e699c1cdbeb459a6fdea3c138054dbd4b2 15418 perdition-postgresql_2.1-1_amd64.deb
Files:
a010701387a097507fadd849f4cd013e 119552 mail optional perdition_2.1-1_amd64.deb
cbc8e7e6429b2753f9332dd6ffadf6ac 17462 mail optional perdition-ldap_2.1-1_amd64.deb
82a6a9c869af2bcab8e1bb33d762076a 16012 mail optional perdition-mysql_2.1-1_amd64.deb
45768a254aeb16aaf89fcebb5b089e9e 15556 mail optional perdition-odbc_2.1-1_amd64.deb
d2dfb6d0fadcd5ccad2582a6fe7c5f12 15418 mail optional perdition-postgresql_2.1-1_amd64.deb
ab5e982d73dba6138e6cf98d7784c4d1 2243 mail optional perdition_2.1-1.dsc
1e2c5ecfdcca0c02dde831186a077084 515883 mail optional perdition_2.1.orig.tar.bz2
008f44679e77e2943a7f4f12edca85b7 12520 mail optional perdition_2.1-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIcBAEBAgAGBQJUEQwEAAoJENfPZGlqN0++7I8P/32EI4RhNmyFJZJJKEcPBbS8
y1qnKlYWN1mAErI08Crl8UzJjvXOvxURTWEZnKB6234qIqdYA28gk/G09RMvLzUs
Bhre0eNeF1YaLRhCQJKt1S9iF9u/hTFC4caetrwdRLhrwksp1agyDyb9BHN4eKbb
kmVcOqn1iG418Z4lowM5xl6SdIxjeLtYYWfd6UiZpfchgWHDYK41MTTs6xlDelKx
wDwnsCqNy7t1A6lOMFigCYc31Diy5pip2pitrKIj7fiKcKfGRqXpC6w2+CVcd6pu
ww2uYVj4A3knxL6ZrJ2Ws/ceSa+aVh1kkiGvthY88ExwbuhdxW1yE6McU4WyPPYT
UEt7G5JAmV+/giI0n5ucv6qqCKuEVUL7wFNKerxTzesnWU2D9u13OQqhTk3AmMC8
ZFdFmXkagY5H6Ewm32BRsyhYDnmFa8PNjI9TUvIFaVd48uqiwiVjR6zfRz74hh5a
2jRveRSG0TpVBfph0bDXbpxrAqQEQ62f+rq9lQLT9fxd7b2Y7sDNBQOCe/wkkIa7
98MQ1kCx4fKPfyUIHt8faq64ZggA3cWxZIiCjtABMUD5CvBmchpWhzRT7pYg6TsE
GHjI+gPQlx/Ye/VAKb3NM4SjAtv11qd2lqpOV9iQ8We4shTvv4Ir+YDfpJhKoS2O
M2Zu5G+cAS47HUexGJBM
=b/ut
-----END PGP SIGNATURE-----