Ubuntu
perdition package

perdition 1.17-7ubuntu0.7.04.1 source package in Ubuntu

Changelog

perdition (1.17-7ubuntu0.7.04.1) feisty-security; urgency=low

  * SECURITY UPDATE: The format string protection
    mechanism in IMAPD for Perdition Mail Retrieval
    Proxy 1.17 and earlier allows remote attackers to
    execute arbitrary code via an IMAP tag with a null
    byte followed by a format string specifier,
    which is not counted by the mechanism.
  * perdition/imap4_in.c: Added patch according to upstream (LP: #162543)
    (See: http://perdition.cvs.sourceforge.net/perdition/perdition/perdition/imap4_in.c?r1=1.45&r2=1.46)
  * References:
    CVE-2007-5740
    https://bugs.edge.launchpad.net/ubuntu/dapper/+source/perdition/+bug/162543
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448853
    http://perdition.cvs.sourceforge.net/perdition/perdition/perdition/imap4_in.c?r1=1.45&r2=1.46

 -- Stephan Hermann <email address hidden>   Wed, 14 Nov 2007 14:08:08 +0100

Upload details

Uploaded by:
Stephan Rügamer
Uploaded to:
Feisty
Original maintainer:
MOTU
Architectures:
any
Section:
mail
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
perdition_1.17.orig.tar.gz 539.2 KiB 38f1bfe1cb7db8b16fc6a3febc293460b6a5ae49312c6a08b757c89b1ae73879
perdition_1.17-7ubuntu0.7.04.1.diff.gz 113.3 KiB ca8260c188086bbde4185ec194480999e5c7d114594fdfb573252243d522e7a6
perdition_1.17-7ubuntu0.7.04.1.dsc 1002 bytes c2da62a5470cbb86c3e484d6534916b0d52ca24955901e0d99aab137dab39df0

View changes file

Binary packages built by this source

perdition: No summary available for perdition in ubuntu feisty.

No description available for perdition in ubuntu feisty.

perdition-dev: No summary available for perdition-dev in ubuntu feisty.

No description available for perdition-dev in ubuntu feisty.

perdition-ldap: No summary available for perdition-ldap in ubuntu feisty.

No description available for perdition-ldap in ubuntu feisty.

perdition-mysql: No summary available for perdition-mysql in ubuntu feisty.

No description available for perdition-mysql in ubuntu feisty.

perdition-odbc: No summary available for perdition-odbc in ubuntu feisty.

No description available for perdition-odbc in ubuntu feisty.

perdition-postgresql: No summary available for perdition-postgresql in ubuntu feisty.

No description available for perdition-postgresql in ubuntu feisty.