Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 561884 - <net-mail/cyrus-imapd-2.5.10: urlfetch range starting outside message range
Summary: <net-mail/cyrus-imapd-2.5.10: urlfetch range starting outside message range
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Assignee: Gentoo Security
URL: http://www.cyrusimap.org/imap/release...
Whiteboard: B4 [noglsa]
Keywords:
Depends on:
Blocks:
 
Reported: 2015-09-30 07:13 UTC by Agostino Sarubbo
Modified: 2017-06-03 06:18 UTC (History)
1 user (show)

See Also:
Package list:
=net-mail/cyrus-imapd-2.5.10
Runtime testing required: ---
stable-bot: sanity-check+


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2015-09-30 07:13:52 UTC
From ${URL} :

Cyrus IMAP 2.4.18 Release Notes:
Security fix: handle urlfetch range starting outside message range


@maintainer(s): since the fixed package is already in the tree, please let us know if it is ready for the stabilization or not.
Comment 1 Thomas Deutschmann (RETIRED) gentoo-dev 2016-11-25 00:25:40 UTC
@ Maintainer(s): It's been a while... is =net-mail/cyrus-imapd-2.5.10 ready to go stable or should we call another version?
Comment 2 Eray Aslan gentoo-dev 2016-11-25 07:32:34 UTC
Arches, please test and mark stable
=net-mail/cyrus-imapd-2.5.10

Target Keywords = amd64 ~arm hppa ~ia64 ppc ppc64 sparc x86

Thank you.
Comment 3 Agostino Sarubbo gentoo-dev 2016-11-25 18:29:29 UTC
amd64 stable
Comment 4 Agostino Sarubbo gentoo-dev 2016-11-25 18:56:17 UTC
x86 stable
Comment 5 Agostino Sarubbo gentoo-dev 2017-01-11 10:38:45 UTC
sparc stable
Comment 6 Agostino Sarubbo gentoo-dev 2017-01-15 15:52:10 UTC
ppc stable
Comment 7 Agostino Sarubbo gentoo-dev 2017-01-18 10:04:38 UTC
ppc64 stable
Comment 8 Jeroen Roovers (RETIRED) gentoo-dev 2017-01-24 21:16:13 UTC
Stable for HPPA.
Comment 9 Thomas Deutschmann (RETIRED) gentoo-dev 2017-01-30 00:42:27 UTC
GLSA Vote: No


@ Maintainer(s): Please cleanup and drop <net-mail/cyrus-imapd-2.4.18 (you possible want to cleanup <2.5.10).
Comment 10 Yury German Gentoo Infrastructure gentoo-dev 2017-05-25 06:15:11 UTC
Maintainer(s), please drop the vulnerable version(s).
Comment 11 Yury German Gentoo Infrastructure gentoo-dev 2017-06-03 06:18:08 UTC
Thank you for the mask.
closing.