-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 01 Mar 2019 00:01:06 -0500 Source: uw-imap Binary: libc-client2007e-dev libc-client2007e mlock uw-mailutils Architecture: source amd64 Version: 8:2007f~dfsg-4+deb8u1 Distribution: jessie-security Urgency: high Maintainer: Magnus Holmgren <holmgren@debian.org> Changed-By: Roberto C. Sanchez <roberto@debian.org> Description: libc-client2007e - c-client library for mail protocols - library files libc-client2007e-dev - c-client library for mail protocols - development files mlock - mailbox locking program uw-mailutils - c-client support programs Closes: 914632 Changes: uw-imap (8:2007f~dfsg-4+deb8u1) jessie-security; urgency=high . * Non-maintainer upload by the LTS Team. * [CVE-2018-19518] 2013_disable_rsh.patch (new): Disable access to IMAP mailboxes through running imapd over rsh, and therefore ssh (Closes: #914632). Code using the library can enable it with tcp_parameters() after making sure that the IMAP server name is sanitized. Checksums-Sha1: a6757bb10b2085157af26eb5b26c034c5d3636bb 2206 uw-imap_2007f~dfsg-4+deb8u1.dsc 2eb8f6c51d2e522723c3aa083da3f7671244f62c 1607992 uw-imap_2007f~dfsg.orig.tar.gz d0847227f62eb489f99d9792fefad0364734d05d 43052 uw-imap_2007f~dfsg-4+deb8u1.debian.tar.xz e34419f0813e2b92d8154526d1ce6ebfbc257e6a 528594 libc-client2007e-dev_2007f~dfsg-4+deb8u1_amd64.deb 0d93e95dfea238570b6025f124c425fd84bb46bc 606188 libc-client2007e_2007f~dfsg-4+deb8u1_amd64.deb 6f525ecb6c0a55b75c40221ea2a0b845828c0ab6 34380 mlock_2007f~dfsg-4+deb8u1_amd64.deb 5a2da883245c78cf90495a665becccb51f8ec571 57302 uw-mailutils_2007f~dfsg-4+deb8u1_amd64.deb Checksums-Sha256: dc663bcd8e39daa85ceccd5b854de447db0b67a57c80ca62195abe36b0be02e9 2206 uw-imap_2007f~dfsg-4+deb8u1.dsc 4fdec0b5a085a7269db87214276e14ce79afdf7efec2ca8d431ab176b9062a8a 1607992 uw-imap_2007f~dfsg.orig.tar.gz a716aae1243b553512bc08c5f6f87811aad4f5d29a49b9b03662637c7c3f7f05 43052 uw-imap_2007f~dfsg-4+deb8u1.debian.tar.xz 4096f9530108f3554733f95206d50412268a5b17d5454b68a4c0eb48e2ea5e75 528594 libc-client2007e-dev_2007f~dfsg-4+deb8u1_amd64.deb ecf8e99422c6a412a0bc8385b1394c11e9b40fd012a1ae80000ee9bd8f64230a 606188 libc-client2007e_2007f~dfsg-4+deb8u1_amd64.deb bac4da829c3b91c2e151644be2e0bad13b936c2e1110d35f2abc2cf4a1d5b1fb 34380 mlock_2007f~dfsg-4+deb8u1_amd64.deb b6777ff18cb0599b84ab372dc3c372c80569ea5928ec79d637edb23310cc3ef3 57302 uw-mailutils_2007f~dfsg-4+deb8u1_amd64.deb Files: ba321139fa6af5932623434f94e6a189 2206 mail optional uw-imap_2007f~dfsg-4+deb8u1.dsc 3c19869f80f81d56ff25cb80ff23f697 1607992 mail optional uw-imap_2007f~dfsg.orig.tar.gz 1cd0bd4384367aa7358c6c50ab389121 43052 mail optional uw-imap_2007f~dfsg-4+deb8u1.debian.tar.xz d8ccd6945a5cfe5259f40b68b99a8c79 528594 libdevel extra libc-client2007e-dev_2007f~dfsg-4+deb8u1_amd64.deb 8c74f3a3c1dbd64cbfb127e78d1d83ce 606188 libs optional libc-client2007e_2007f~dfsg-4+deb8u1_amd64.deb 32226200407e091af76d765fdec77acc 34380 mail optional mlock_2007f~dfsg-4+deb8u1_amd64.deb e045d9c2c13460197f8fd43f2ec57730 57302 mail optional uw-mailutils_2007f~dfsg-4+deb8u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEz9ERzDttUsU/BH8iLNd4Xt2nsg8FAlx5LhsACgkQLNd4Xt2n sg8+zA/8ClwcnKwXA4evEvoYuyxk25BpnpAD9XdLKY6HHL32Sn30appLLj5/Kaz3 8bBcA9pfxEqfWzUsixyD2hV/R1+3deta6yue8GNMyYNSrc3dct/eVWrLMGR5yawZ K30/7qqXv7z3lkhGg2W2BdIiAz67xqAUgmNIasiqKKgmVkneI92QSr3rsHRz2/Ja 5boYYwacddHDaabu/3SeoFkr5pU1P6KEjQwOer69jGPlNdVVqfkXIrdz4U4QFPIG W4EXbAKN8km6y5lkq/pnAWN07tIdnirHp8OogV8rmfseZN3llQHcTGto4y09PgXi zpkXHai2cWSDJkyBdmHvdcpBsdunFdqGq+CJac+DMmHuDaj7Gdgrj7mREgB2cbSE goMzCFUjzL3K4hwXZWfxbBtCmfz1lGUHB4FrA58fFsGJ/aHO/osYq2qDU2AyZB1T uXk27v/iRHtgNxCyTO10RioBkOmtRQFI1m7PH4xyZgvgZSetGpCQMFwEcSSADZul tCGplkx4BzYGsFzhqt9fSf11T7Iz5rijK4+7WtYOEuw/c5zPnNhhSAnA3h2jZ0BE 5zX8nwCM/NcTpLzMkx8ePeUN02M2kX3PQ3UR7pMwUKpj6FEZda5EpRI5nr34LOOE kIYi/32WspouR0XrNVPbImVNoahhdIKfFwUtMGvD3d//v2P/93g= =WcIE -----END PGP SIGNATURE-----