User: Password:
Subscribe / Log in / New account

Conectiva alert CLA-2005:937 (cyrus-imapd)

From:  Conectiva Updates <>
Subject:  [CLA-2005:937] Conectiva Security Announcement - cyrus-imapd
Date:  Thu, 17 Mar 2005 11:56:00 -0300

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : cyrus-imapd SUMMARY : Fix for multiple cyrus-imapd vulnerabilities DATE : 2005-03-17 11:54:00 ID : CLA-2005:937 RELEVANT RELEASES : 9, 10 - ------------------------------------------------------------------------- DESCRIPTION cyrus-imapd[1] is an IMAP and POP3 mail server with several advanced features such as SASL authentication, server-side mail filtering, mailbox ACLs and others. Multiple buffer overflows[2] in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via an off-by-one error in the imapd annotate extension, an off-by-one error in cached header handling a stack-based buffer overflow in fetchnews, or a stack-based buffer overflow in imapd. SOLUTION It is recommended that all cyrus-imapd users upgrade their packages. The service will be automatically restarted after the upgrade if needed. REFERENCES 1. 2. UPDATED PACKAGES ADDITIONAL INSTRUCTIONS The apt tool can be used to perform RPM packages upgrades: - run: apt-get update - after that, execute: apt-get upgrade Detailed instructions regarding the use of apt and upgrade examples can be found at - ------------------------------------------------------------------------- All packages are signed with Conectiva's GPG key. The key and instructions on how to import it can be found at Instructions on how to check the signatures of the RPM packages can be found at - ------------------------------------------------------------------------- All our advisories and generic update instructions can be viewed at - ------------------------------------------------------------------------- Copyright (c) 2004 Conectiva Inc. - ------------------------------------------------------------------------- subscribe: unsubscribe: -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see iD8DBQFCOZp/42jd0JmAcZARAvc/AKCsIOmAT8fVmheNLEx7Ui4W1hNMkQCgtPuB fPeOq49c+aHRUUfNdgfHKYs= =6xeL -----END PGP SIGNATURE-----

(Log in to post comments)

Copyright © 2018, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds