Debian
cyrus-imapd-2.2 package

Change log for cyrus-imapd-2.2 package in Debian

1 → 25 of 25 results First • Previous • Next • Last
Published in lenny-release 
cyrus-imapd-2.2 (2.2.13-14+lenny6) oldstable-security; urgency=high


  * Non-maintainer upload by the Security Team.
  * Fix possible NULL pointer dereference via crafted message reference
    id caused by a missing sanitizing of the mail headers. This can be
    exploited from a client making use of the IMAP threading feature
    (CVE-2011-3481).

 -- Nico Golde <email address hidden>  Sun, 01 Jan 2012 18:10:57 +0000
Published in squeeze-release 
cyrus-imapd-2.2 (2.2.13-19+squeeze3) stable-security; urgency=high


  * Non-maintainer upload by the Security Team.
  * Fix possible NULL pointer dereference via crafted message reference
    id caused by a missing sanitizing of the mail headers. This can be
    exploited from a client making use of the IMAP threading feature
    (CVE-2011-3481).

 -- Nico Golde <email address hidden>  Sun, 01 Jan 2012 18:10:58 +0000
Superseded in lenny-release 
cyrus-imapd-2.2 (2.2.13-14+lenny4) oldstable-security; urgency=low


  * Fix CVE-2011-1926: STARTTLS plaintext command injection
    vulnerability (VU#555316)
  * Add gbp.conf to easy future updates

 -- Ondřej Surý <email address hidden>  Wed, 18 May 2011 09:45:16 +0200
Superseded in squeeze-release 
cyrus-imapd-2.2 (2.2.13-19+squeeze1) stable-security; urgency=low
  * Fix infinite loop in case of corrupted index files (Closes: #627078)  * Add gbp.conf to easy future updates  * Fix CVE-2011-1926: STARTTLS plaintext command injection    vulnerability (VU#555316) (Closes: #627081) -- Ondřej Surý <email address hidden>  Wed, 18 May 2011 10:15:26 +0200
Deleted in sid-release (Reason: None provided.) 
cyrus-imapd-2.2 (2.2.13p1-15) unstable; urgency=low
  * Always set RET value (thanks to Steven Kurylo for catching that) -- Ondřej Surý <email address hidden>  Thu, 09 Jun 2011 10:06:30 +0200
Superseded in sid-release 
cyrus-imapd-2.2 (2.2.13p1-14) unstable; urgency=low
  * Adapt package to updated cyrus-upgrade-db script -- Ondřej Surý <email address hidden>  Mon, 06 Jun 2011 22:48:52 +0200
Superseded in sid-release 
cyrus-imapd-2.2 (2.2.13p1-13) unstable; urgency=low
  * Cherry-pick b6fd04c4 from upstream git to fix: Corrupt quota files    cause data loss  * Rename Berkeley DB patch to a generic name -- Ondřej Surý <email address hidden>  Mon, 06 Jun 2011 17:59:26 +0200
Superseded in sid-release 
cyrus-imapd-2.2 (2.2.13p1-12) unstable; urgency=low
  * Replace sv_{yes,no,undef} with PL_sv_{yes,no,undef}    (Closes: #628629) -- Ondřej Surý <email address hidden>  Tue, 31 May 2011 12:39:45 +0200
Superseded in sid-release 
cyrus-imapd-2.2 (2.2.13p1-11) unstable; urgency=low
  * Fix CVE-2011-1926: STARTTLS plaintext command injection    vulnerability (VU#555316)  * Fix infinite loop in case of corrupted index files (Closes: #627078) -- Ondřej Surý <email address hidden>  Wed, 18 May 2011 10:43:58 +0200
Superseded in sid-release 
cyrus-imapd-2.2 (2.2.13p1-10) unstable; urgency=low
  * More HURD fixes; #define MAXHOSTNAMELEN  * Even more fixes for Hurd  * Define LDAP_DEPRECATED before including ldap.h to get    ldap_get_values() deprecated function declaration, fixes implicit    pointer declaration as per http://wiki.d.o/ImplicitPointerConversions -- Ondřej Surý <email address hidden>  Mon, 16 May 2011 13:11:24 +0200
Superseded in sid-release 
cyrus-imapd-2.2 (2.2.13p1-9) unstable; urgency=low
  * Define PATH_MAX as 4096 on platforms which doesn't have it defined    (fixes Hurd build)  * Move the upgrade login to cyrus-common-2.2.postinst as it depends on    cyrus-common-2.2 files -- Ondřej Surý <email address hidden>  Sun, 15 May 2011 10:34:21 +0200
Superseded in sid-release 
cyrus-imapd-2.2 (2.2.13p1-8) unstable; urgency=low
  * Add ptclient binaries (Closes: #567015)  * Add dependency on libsasl2-modules to fix timsieved (Closes:    #619226)  * Remove cyrus makedirs from version specific package -- Ondřej Surý <email address hidden>  Sat, 14 May 2011 22:17:08 +0200
Superseded in sid-release 
cyrus-imapd-2.2 (2.2.13p1-7) unstable; urgency=low
  * Build depend just on libdb-dev to allow backports  * Bump standards version to 3.9.2  * Remove some ancient versions from versioned depends  * libcyrus-imap-perl22 is Architecture: any, therefore depending    packages needs (= ${binary:Depends})  * Add some more lintian-overrides, move to the dh_installlintian -- Ondřej Surý <email address hidden>  Thu, 12 May 2011 13:07:44 +0200
Superseded in sid-release 
cyrus-imapd-2.2 (2.2.13p1-6) unstable; urgency=low
  * Don't fail on missing config file  * Remove all triggers and let dpkg handle the order  * Move init.d file handling to debhelper, cyrus-common installs the    file, cyrus-common-2.x invokes it  * Depend on 2.4.8-2 debian version of cyrus-common due changes    in init.d file handling -- Ondřej Surý <email address hidden>  Sat, 07 May 2011 21:31:14 +0200
Deleted in wheezy-release (Reason: None provided.)
Superseded in sid-release 
cyrus-imapd-2.2 (2.2.13p1-5) unstable; urgency=low
  * Add support for automatic database backend upgrades.    + Requires new dpkg-trigger provided by cyrus-common (>= 2.4.7-6)  * Remove implicit triggers, all are called explicitly  * Remove obsolete verifydb and verifydbkey functions from cyrus-    common-2.2.postinst  * Move more upgrade logic to cyrus-common.postinst  * Remove debconf from cyrus-common-2.2.postinst script -- Ondřej Surý <email address hidden>  Mon, 11 Apr 2011 16:21:21 +0200
Superseded in sid-release 
cyrus-imapd-2.2 (2.2.13p1-4) unstable; urgency=low
  * Hardcode Berkeley DB 5.1 to the m4 macros (Closes: #620839) -- Ondřej Surý <email address hidden>  Mon, 04 Apr 2011 23:55:01 +0200
Superseded in sid-release 
cyrus-imapd-2.2 (2.2.13p1-3) unstable; urgency=low
  * Rework postinst files to use dpkg-triggers to run cyrus-makedirs and    restart cyrmaster  * Update cyrus-common-2.2 depends to depend on cyrus-common with    triggers -- Ondřej Surý <email address hidden>  Fri, 01 Apr 2011 11:15:07 +0200
Superseded in sid-release 
cyrus-imapd-2.2 (2.2.13p1-2) unstable; urgency=low
  * Fix cyrmaster -j (janitor) segfault (Closes: #577545)  * Debian packaging:    + Move general version independent logic from cyrus-common-2.2 to      cyrus-common (>= 2.4.7-2~)    + Add dependency on cyrus-common (>= 2.4.7-2~)    + Rename init.d and defaults file to be replaced by generic      cyrus-common package    + Remove debian/po since it's not needed anymore -- Ondřej Surý <email address hidden>  Thu, 31 Mar 2011 15:42:35 +0200
Superseded in sid-release 
cyrus-imapd-2.2 (2.2.13p1-1) unstable; urgency=low
  [ Sven Mueller ]  * Make init script provide its own name   [ Ondřej Surý ]  * Imported Upstream version 2.2.13p1 (cleaned version)  * Debian packaging:    + Switch packaging from SVN to GIT    + Create gbp.conf    + Fix missing initial / when purging the cyrus-common-2.2 package    + Refreshed patches to 2.2.13p1 release    + Update berkeleydb patch to support version 5.1    + Build-depend on Berkeley DB 5.1    + debian/control reformat    + Cherry-pick Perl IMAP.xs croak FTBFS from 2.4    + Build with dynamic version of com_err    + Enable hardening wrapper -- Ondřej Surý <email address hidden>  Wed, 30 Mar 2011 18:34:08 +0200
Superseded in lenny-release 
cyrus-imapd-2.2 (2.2.13-14+lenny3) stable-security; urgency=high


  * Non-maintainer upload by the Security Team.
  * sieve/bc_eval.c: Use snprintf to avoid buffer overruns

 -- Giuseppe Iuculano <email address hidden>  Wed, 23 Sep 2009 11:52:40 +0200
Superseded in wheezy-release
Superseded in squeeze-release
Superseded in sid-release 
cyrus-imapd-2.2 (2.2.13-19) unstable; urgency=low


  * Switch to BerkeleyDB 4.7, the version OpenLDAP uses.
  * Add patch by Cristian Rigamonti to fix logcheck rules for "defaultbc
    doesn't exist" error message. (Closes: #511030)
  * Update Vietnamese debconf translation, thanks Clytie Siddall.
    (Closes: #548052)
  * Upload to unstable for the libkrb transition.

 -- Christoph Berg <email address hidden>  Sat, 23 Jan 2010 23:35:21 +0100
Deleted in experimental-release (Reason: None provided.) 
cyrus-imapd-2.2 (2.2.13-18) experimental; urgency=low


  [ Henrique de Moraes Holschuh ]
  * sieve/bc_eval.c (0025-upstream-fix-cve-2009-3235.dpatch):
    update for completeness to match the patch used by the security-team:
    use snprintf for scount, to future-proof against "int" larger than
    64 bits.

  [ Christoph Berg ]
  * Add myself to Uploaders.
  * Upgrade to use BerkeleyDB 4.8. (Closes: #421942)
  * Convert to use quilt, and update the patch headers to use clean paths.
    (Closes: #563303)
  * Add patch by Mathieu Parent to fix conflicting getline definition.
    (Closes: #552865)

 -- Christoph Berg <email address hidden>  Fri, 22 Jan 2010 22:16:02 +0100
Superseded in squeeze-release
Superseded in sid-release 
cyrus-imapd-2.2 (2.2.13-17) unstable; urgency=high


  * Security Update: CVE-2009-3235:
    Multiple stack-based buffer overflows in the Sieve parsing code,
    patches taken from upstream CVS (closes: #547947)

 -- Henrique de Moraes Holschuh <email address hidden>  Tue, 22 Sep 2009 17:17:17 -0300
Superseded in squeeze-release
Superseded in sid-release 
cyrus-imapd-2.2 (2.2.13-16) unstable; urgency=high


  * Justification for high urgency: Get security update from -15 into
    testing as fast as possible since -15 was removed before it could
    migrate.
  * Fix build dependency on tcl-dev (keeping old tcl8.3-dev to make
    backports easier) (Closes: 545281) 
  * Fix up README.Debian.database (Closes: 543293)
  * Build against newer cyrus-sasl (Closes: 527495,528468)
  * Fix cyrus-common postinst to only run makedirs if a new upstream
    is installed (Closes: 545512), add a README to note that the
    postinst needs to be changed with each new upstream
  * Fix find syntax in cyrus-makedirs (Closes: 545554)

 -- Sven Mueller <email address hidden>  Tue, 08 Sep 2009 10:04:14 +0200
Superseded in squeeze-release
Superseded in sid-release
Superseded in lenny-release 
cyrus-imapd-2.2 (2.2.13-14) unstable; urgency=low


  [ Sven Mueller ]
  * Fix a problem in lib/Makefile.in with multi-word CCs
    (problem found by Uwe Hermann's try at building all Debian packages with
    Open64 - kudos to him for this nice little project)
  * Update portoguese debconf translations (Closes: #439405)
  * Add Homepage field to debian/control
  * Use official VCS fields to document repository

  [ Benjamin Seidenberg ]
  * Fix the finds in cyrus-makedirs (which weren't working properly) to use
    xargs instead of -exec. (Closes #442491)

  [ Sven Mueller ]
  * Fix control file (lintian warning: substvar-source-version-is-deprecated)
  * Check for necessary changes regarding policy version 3.7.3.0, there where
    none, so upgrading debian/control
  * Fix init script LSB header (closes: 470110)
  * Update logcheck rules and the rule filenames (closes: 473526)
  * Add finnish translation (Closes: 473792)
  * Update galician translation (Closes: 473886)
  * Add basque translation (Closes: 473914)
  * add norwegian bokmal translation (Closes: 474360)
  * Add patch to add sasl_{minimum,maximum}_layer details can be found
    in libsasl documentation. (Closes: 402814)

 -- Sven Mueller <email address hidden>  Tue, 15 Apr 2008 12:37:26 +0200
1 → 25 of 25 results First • Previous • Next • Last