Accepted uw-imap 7:2007b~dfsg-4+lenny3 (source amd64)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Wed, 24 Dec 2008 12:03:39 +0100
Source: uw-imap
Binary: uw-imapd ipopd libc-client2007b-dev libc-client2007b mlock uw-mailutils
Architecture: source amd64
Version: 7:2007b~dfsg-4+lenny3
Distribution: testing-security
Urgency: high
Maintainer: Jonas Smedegaard <dr@jones.dk>
Changed-By: Nico Golde <nion@debian.org>
Description:
ipopd - POP2 and POP3 mail server
libc-client2007b - c-client library for mail protocols - library files
libc-client2007b-dev - c-client library for mail protocols - development files
mlock - mailbox locking program
uw-imapd - remote mail folder access server using IMAP4rev1
uw-mailutils - c-client support programs
Changes:
uw-imap (7:2007b~dfsg-4+lenny3) testing-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Fix stack-based buffer overflow in tmail/dmail that could allow
local users to execute arbitrary code
(0001_insecure_strcmp.patch; CVE-2008-5005)
* Fix NULL ptr dereference because of a malicious response to the QUIT
command leading to denial of service
(0002_no_close_quit_netstream.patch; CVE-2008-5006)
* Fix denial of service vulnerability because of rfc822_output_char() not
checking for a full buffer and writing one byte ahead the buffer, later
resulting in memcpy getting called with a possible size argument of -1
(0003_CVE-2008-5514.patch; CVE-2008-5514)
Checksums-Sha1:
cf9ab2b00837519a8eae4f58d71e2080a7080494 1424 uw-imap_2007b~dfsg-4+lenny3.dsc
be69b81409b836d67b81f075a4fab4e3a081d24c 1608456 uw-imap_2007b~dfsg.orig.tar.gz
ec4a2892b0b20cba3c8c3013ecda556772aa97a6 104696 uw-imap_2007b~dfsg-4+lenny3.diff.gz
916c7ea55213baa610b6a39fed91b8e0dd0c30c5 93062 uw-imapd_2007b~dfsg-4+lenny3_amd64.deb
c46380065bb575ce55ada63477a98305bcf31ceb 54226 ipopd_2007b~dfsg-4+lenny3_amd64.deb
52c4ecf52d58372de743c0e41da481df0bf1fee4 735302 libc-client2007b-dev_2007b~dfsg-4+lenny3_amd64.deb
5841cd4113f6bd12caa3282add2206e735f7b9d1 771934 libc-client2007b_2007b~dfsg-4+lenny3_amd64.deb
7b17161a18ea74873a0ebff2c0b52b6283fe669d 30846 mlock_2007b~dfsg-4+lenny3_amd64.deb
384364f20e3c46e2ba3d62f325f8991dfb15fe89 59528 uw-mailutils_2007b~dfsg-4+lenny3_amd64.deb
Checksums-Sha256:
908e26e643ac1b71dea1e1783cb73d2c2d33f53afb3d2f32f00cc9f4b57d245b 1424 uw-imap_2007b~dfsg-4+lenny3.dsc
f8566a90cff0bc7a31529842fa070216007e9e8682619b8f5acda87c10a50d4b 1608456 uw-imap_2007b~dfsg.orig.tar.gz
06318b7453029794156ff5a735194c8d025853ba08dd3594634d69a55743ce9f 104696 uw-imap_2007b~dfsg-4+lenny3.diff.gz
cd9afc4365798052922ad7d33c0c213609caaed87825b8d2b2d0bc866e7b775a 93062 uw-imapd_2007b~dfsg-4+lenny3_amd64.deb
d57091f6f6a8fff51d48ccfa358042cfc2a913b915ee0f7fdbaf25b7f37d6b98 54226 ipopd_2007b~dfsg-4+lenny3_amd64.deb
a4553415167849c684dba26dcb74e0597df75ccd8ba597e5c4269df418580ddf 735302 libc-client2007b-dev_2007b~dfsg-4+lenny3_amd64.deb
a076f75693c5b0d7d8a394d34242ad26193547ff9a0d96482f63461ce5462d73 771934 libc-client2007b_2007b~dfsg-4+lenny3_amd64.deb
a2d631e20e1d8b448089168a998cfcd3e78ff9ba78d849185c8d8a96c18d483e 30846 mlock_2007b~dfsg-4+lenny3_amd64.deb
0928226ecef4ded10c383608e72261ba4e721d199438b36543d0f53b4e8fbca6 59528 uw-mailutils_2007b~dfsg-4+lenny3_amd64.deb
Files:
e0298e2cf59a00e539e293cba87eef2a 1424 mail optional uw-imap_2007b~dfsg-4+lenny3.dsc
b52118669abf422f766d14e3e2d69daa 1608456 mail optional uw-imap_2007b~dfsg.orig.tar.gz
1e7fd225c901c39fc19cb1cb5f32ebf7 104696 mail optional uw-imap_2007b~dfsg-4+lenny3.diff.gz
dcc6d5c0c3b4172175e85fa8190c802e 93062 mail optional uw-imapd_2007b~dfsg-4+lenny3_amd64.deb
a562c517980ca42a8efe5bf3376f567a 54226 mail optional ipopd_2007b~dfsg-4+lenny3_amd64.deb
d06aaee94311bf11f933c694d5dc6fa8 735302 libdevel optional libc-client2007b-dev_2007b~dfsg-4+lenny3_amd64.deb
7412a0fdeb9e652e378bf7fd6819e276 771934 libs optional libc-client2007b_2007b~dfsg-4+lenny3_amd64.deb
d5aa5b6351f3bcbe5160e8b8e68d3d9f 30846 mail optional mlock_2007b~dfsg-4+lenny3_amd64.deb
e0691fc2fc980fefc21838e5339ec999 59528 mail optional uw-mailutils_2007b~dfsg-4+lenny3_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAklaKR4ACgkQHYflSXNkfP9ONwCfQnoFfYXyRCeJU6k8EmiMSTqP
dvQAn1ZUW5JktWnhajfh1caRBYqX8qPF
=8vN+
-----END PGP SIGNATURE-----
Accepted:
ipopd_2007b~dfsg-4+lenny3_amd64.deb
to pool/main/u/uw-imap/ipopd_2007b~dfsg-4+lenny3_amd64.deb
libc-client2007b-dev_2007b~dfsg-4+lenny3_amd64.deb
to pool/main/u/uw-imap/libc-client2007b-dev_2007b~dfsg-4+lenny3_amd64.deb
libc-client2007b_2007b~dfsg-4+lenny3_amd64.deb
to pool/main/u/uw-imap/libc-client2007b_2007b~dfsg-4+lenny3_amd64.deb
mlock_2007b~dfsg-4+lenny3_amd64.deb
to pool/main/u/uw-imap/mlock_2007b~dfsg-4+lenny3_amd64.deb
uw-imap_2007b~dfsg-4+lenny3.diff.gz
to pool/main/u/uw-imap/uw-imap_2007b~dfsg-4+lenny3.diff.gz
uw-imap_2007b~dfsg-4+lenny3.dsc
to pool/main/u/uw-imap/uw-imap_2007b~dfsg-4+lenny3.dsc
uw-imapd_2007b~dfsg-4+lenny3_amd64.deb
to pool/main/u/uw-imap/uw-imapd_2007b~dfsg-4+lenny3_amd64.deb
uw-mailutils_2007b~dfsg-4+lenny3_amd64.deb
to pool/main/u/uw-imap/uw-mailutils_2007b~dfsg-4+lenny3_amd64.deb