Bug 72194

Summary:	net-mail/cyrus-imapd: Multiple remote vulnerabilities
Product:	Gentoo Security	Reporter:	Sune Kloppenborg Jeppesen (RETIRED) <jaervosz>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	major	CC:	net-mail+disabled
Priority:	High
Version:	unspecified
Hardware:	All
OS:	All
URL:	http://security.e-matters.de/advisories/152004.html
Whiteboard:	B1 [glsa] jaervosz
Package list:		Runtime testing required:	---

Description Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2004-11-22 23:30:35 UTC

Stefan Esser found several remotely exploitable vulnerabilities in cyrus-imap.

CAN-2004-1011
CAN-2004-1012
CAN-2004-1013

Full details in URL

Comment 1 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2004-11-22 23:32:28 UTC

net-mail please bump to 2.2.9

Comment 2 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2004-11-23 09:55:00 UTC

*** Bug 72259 has been marked as a duplicate of this bug. ***

Comment 3 Tuan Van (RETIRED) gentoo-dev

2004-11-23 10:26:13 UTC

2.2.9 in CVS. I'll mark stable on x86 later.

Comment 4 Thierry Carrez (RETIRED) gentoo-dev

2004-11-23 10:38:11 UTC

Thx Tuan,
arches please test and mark stable.

Comment 5 Thierry Carrez (RETIRED) gentoo-dev

2004-11-23 10:50:19 UTC

Unstable-ing... 2.2.10 will be out shortly

Comment 6 Thierry Carrez (RETIRED) gentoo-dev

2004-11-23 11:17:25 UTC

2.2.10 is out, please bump.

Comment 7 Tuan Van (RETIRED) gentoo-dev

2004-11-23 12:14:17 UTC

2.2.9 out, 2.2.10 in.

Comment 8 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2004-11-23 12:41:51 UTC

Thx Tuan,
arches please test and mark stable.

Comment 9 Guy Martin (RETIRED) gentoo-dev

2004-11-24 07:05:50 UTC

Stable on hppa.

Comment 10 Tuan Van (RETIRED) gentoo-dev

2004-11-24 09:18:33 UTC

x86 done.

Comment 11 Luke Macken (RETIRED) gentoo-dev

2004-11-24 09:21:04 UTC

GLSA drafted.

security, please review.

Comment 12 Thierry Carrez (RETIRED) gentoo-dev

2004-11-25 01:44:14 UTC

GLSA 200411-34