Bugzilla Bug 132674

original advisory :
http://sourceforge.net/project/shownotes.php?release_id=415350

SA19987 :
Description:
A security issue has been reported in vpopmail, which can be exploited by
malicious people to bypass certain security restrictions.

The security issue is caused due to an error within the handling of SMTP AUTH
and APOP password authentication. This can be exploited to authenticate to the
mail server using a blank password.

Successful exploitation requires that cleartext password authentication is
enabled and that the account does not have a cleartext password set.

The security issue has been reported in versions 5.4.14 and 5.4.15. Prior
versions may also be affected.

Solution:
The security issue has been fixed in development version 5.4.16.

5.4.16 is available correcting the issue, please provide a new ebuild :)

Commited to tree, Go ahead and mark stable.

stable on x86

da sparc stable.

stable on hppa

amd64 done.

ppc stable

ready for glsa-vote. tend to say no.

I tend to vote NO too.

same, i tend to vote no

Voting no and closing.