LWN.net Logo

Fedora alert FEDORA-2012-3312 (notmuch)

From:  updates@fedoraproject.org
To:  package-announce@lists.fedoraproject.org
Subject:  [SECURITY] Fedora 16 Update: notmuch-0.6.1-2.fc16
Date:  Sat, 17 Mar 2012 23:35:01 +0000
Message-ID:  <20120317233501.2386720CEB@bastion01.phx2.fedoraproject.org>
Archive-link:  Article, Thread

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2012-3312 2012-03-08 03:34:59 -------------------------------------------------------------------------------- Name : notmuch Product : Fedora 16 Version : 0.6.1 Release : 2.fc16 URL : http://notmuchmail.org/ Summary : System for indexing, searching, and tagging email Description : Fast system for indexing, searching, and tagging email. Even if you receive 12000 messages per month or have on the order of millions of messages that you've been saving for decades, Notmuch will be able to quickly search all of it. Notmuch is not much of an email program. It doesn't receive messages (no POP or IMAP support). It doesn't send messages (no mail composer, no network code at all). And for what it does do (email search) that work is provided by an external library, Xapian. So if Notmuch provides no user interface and Xapian does all the heavy lifting, then what's left here? Not much. -------------------------------------------------------------------------------- Update Information: CVE-2011-1103: tag information disclosure flaw -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 7 2012 Karel Klíč <kklic@redhat.com> - 0.6.1-2 - Added patch for CVE-2011-1103: tag information disclosure flaw * Thu Jul 28 2011 Karel Klíč <kklic@redhat.com> - 0.6.1-1 - Latest upstream release - Added -gmime patch to compile with GMime 2.5.x (upstream uses GMime 2.4.x) -------------------------------------------------------------------------------- References: [ 1 ] Bug #800036 - CVE-2011-1103 notmuch: tag information disclosure flaw https://bugzilla.redhat.com/show_bug.cgi?id=800036 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update notmuch' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds