Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 72194 - net-mail/cyrus-imapd: Multiple remote vulnerabilities
Summary: net-mail/cyrus-imapd: Multiple remote vulnerabilities
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All All
: High major (vote)
Assignee: Gentoo Security
URL: http://security.e-matters.de/advisori...
Whiteboard: B1 [glsa] jaervosz
Keywords:
: 72259 (view as bug list)
Depends on:
Blocks:
 
Reported: 2004-11-22 23:30 UTC by Sune Kloppenborg Jeppesen (RETIRED)
Modified: 2004-11-25 01:44 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2004-11-22 23:30:35 UTC 
Stefan Esser found several remotely exploitable vulnerabilities in cyrus-imap.

CAN-2004-1011
CAN-2004-1012
CAN-2004-1013

Full details in URL
Comment 1 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2004-11-22 23:32:28 UTC 
net-mail please bump to 2.2.9
Comment 2 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2004-11-23 09:55:00 UTC 
*** Bug 72259 has been marked as a duplicate of this bug. ***
Comment 3 Tuan Van (RETIRED) gentoo-dev 2004-11-23 10:26:13 UTC 
2.2.9 in CVS. I'll mark stable on x86 later.
Comment 4 Thierry Carrez (RETIRED) gentoo-dev 2004-11-23 10:38:11 UTC 
Thx Tuan,
arches please test and mark stable.
Comment 5 Thierry Carrez (RETIRED) gentoo-dev 2004-11-23 10:50:19 UTC 
Unstable-ing... 2.2.10 will be out shortly
Comment 6 Thierry Carrez (RETIRED) gentoo-dev 2004-11-23 11:17:25 UTC 
2.2.10 is out, please bump.
Comment 7 Tuan Van (RETIRED) gentoo-dev 2004-11-23 12:14:17 UTC 
2.2.9 out, 2.2.10 in.
Comment 8 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2004-11-23 12:41:51 UTC 
Thx Tuan,
arches please test and mark stable.
Comment 9 Guy Martin (RETIRED) gentoo-dev 2004-11-24 07:05:50 UTC 
Stable on hppa.
Comment 10 Tuan Van (RETIRED) gentoo-dev 2004-11-24 09:18:33 UTC 
x86 done.
Comment 11 Luke Macken (RETIRED) gentoo-dev 2004-11-24 09:21:04 UTC 
GLSA drafted.

security, please review.
Comment 12 Thierry Carrez (RETIRED) gentoo-dev 2004-11-25 01:44:14 UTC 
GLSA 200411-34