-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 29 Dec 2021 16:18:19 +0200 Source: uw-imap Binary: libc-client2007e-dev libc-client2007e mlock uw-mailutils Architecture: source Version: 8:2007f~dfsg-5+deb9u1 Distribution: stretch-security Urgency: medium Maintainer: Magnus Holmgren <holmgren@debian.org> Changed-By: Adrian Bunk <bunk@debian.org> Description: libc-client2007e - c-client library for mail protocols - library files libc-client2007e-dev - c-client library for mail protocols - development files mlock - mailbox locking program uw-mailutils - c-client support programs Closes: 914632 Changes: uw-imap (8:2007f~dfsg-5+deb9u1) stretch-security; urgency=medium . * Non-maintainer upload by the LTS team. * [CVE-2018-19518] 2013_disable_rsh.patch (new): Disable access to IMAP mailboxes through running imapd over rsh, and therefore ssh (Closes: #914632). Code using the library can enable it with tcp_parameters() after making sure that the IMAP server name is sanitized. Checksums-Sha1: 45a49a03657d8d8e364e2693a063b80bace60917 2176 uw-imap_2007f~dfsg-5+deb9u1.dsc 2eb8f6c51d2e522723c3aa083da3f7671244f62c 1607992 uw-imap_2007f~dfsg.orig.tar.gz 4b1fb781cda664e89867212b1bcc275746a6fd2d 43756 uw-imap_2007f~dfsg-5+deb9u1.debian.tar.xz Checksums-Sha256: 7419e55428e41978490e954b6c2917589477e25fc67154e0b16e0946cbd53986 2176 uw-imap_2007f~dfsg-5+deb9u1.dsc 4fdec0b5a085a7269db87214276e14ce79afdf7efec2ca8d431ab176b9062a8a 1607992 uw-imap_2007f~dfsg.orig.tar.gz fc2f574c17578ba24f23107c6abcfa591898bfaba05b26287fbb9317343ba4dc 43756 uw-imap_2007f~dfsg-5+deb9u1.debian.tar.xz Files: caf409e9cec7822716692909e35ca006 2176 mail optional uw-imap_2007f~dfsg-5+deb9u1.dsc 3c19869f80f81d56ff25cb80ff23f697 1607992 mail optional uw-imap_2007f~dfsg.orig.tar.gz e5e64995294f2ab3e31eea748c572473 43756 mail optional uw-imap_2007f~dfsg-5+deb9u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmHMfdcACgkQiNJCh6LY mLH/4w/+PW+9Q0qbo9I5TvogZjqZ6QzQxCwbn83Sj0qBBXzD1tYdffyMtVltzT6s Yw/6ttzsKxTLKOtpmAjZF5Dy7PhCiHbfXpFFnIq19jHsEZGc1Y5FhsANjWoTwdgl Nzwiug5/uU3bxXmooEdGFm/7FRCkRaoSWIy6cKh398evBPYA2bB049CnE3d6PqKq qwV+gtMHMvTMVaewgqsY0e2wd+oTFb0lkV+mcttToGTvEkTTW5C87jD0SA1VrXUm QwLDZ2P6Pd7UZ6ZFEU6A97X8cc+A3NDzi4ZxvaW+4s+sZ6C3n4aB2MMpM7kXrbBN 0Fi6MokjrpyVS5y9UrbolNqkOboXUOaE8vzPofI6b3wKby5a+/7k+ehkK6Tw588g VLoNRKjzIA0UCJOxlEulswurONYwCbqRRZEbZJ16ADX2dtzPh1mgvOnaryuKfavw pQCvTliaIyNBc4q/O6JuB/kcfoqWmyrOCvMEZjyiDRPbUHupnGfs3wuI9Rkm3pDO PwTM4qF1HBMZ7u1zkLsFXlIK4BeFRFiMPB0q2/BzrCWYCXw+54SlYJXRjnlU7Vdo G2//tVmEN+wm3FohZNJICoV/YoXbi6500WQk7BsSaG2IkVKfJYVHKQZ6MDd3dxcW kLuO3U5CDTfnrvObc3KUBfj+cTm6OkWdWHe/QkhxUN+t6Gjgv68= =cvH4 -----END PGP SIGNATURE-----
