-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Thu, 3 Mar 2005 12:11:39 -0300 Source: cyrus21-imapd Binary: cyrus21-doc cyrus21-admin cyrus21-murder cyrus21-common cyrus21-imapd cyrus21-clients cyrus21-dev cyrus21-pop3d libcyrus-imap-perl21 Architecture: source i386 all Version: 2.1.18-1 Distribution: unstable Urgency: high Maintainer: Henrique de Moraes Holschuh <hmh@debian.org> Changed-By: Henrique de Moraes Holschuh <hmh@debian.org> Description: cyrus21-admin - Cyrus mail system (administration tool) cyrus21-clients - Cyrus mail system (test clients) cyrus21-common - Cyrus mail system (common files) cyrus21-dev - Cyrus mail system (developer files) cyrus21-doc - Cyrus mail system (documentation files) cyrus21-imapd - Cyrus mail system (IMAP support) cyrus21-murder - Cyrus mail system (proxies and aggregator) cyrus21-pop3d - Cyrus mail system (POP3 support) libcyrus-imap-perl21 - Interface to Cyrus imap client imclient library Closes: 289038 289205 290591 296681 Changes: cyrus21-imapd (2.1.18-1) unstable; urgency=high . * New upstream source: * SECURITY FIX: Fix single byte overflow in imapd annotate extension * SECURITY FIX: * Add some extra bounds checking in annotate.c * Bounds check all strcpy/strcat to sunsock.sun_path in various files * Make sure all arrays are declared MAX_MAILBOX_NAME+1 instead of MAX_MAILBOX_NAME in various files . The above fixes should close all issues in SA14383/CVE:CAN-2005-0546 since it fixes all patterns touched by upstream 2.2.11. ACAP functionality was *not* fixed, because that is permanently disabled in Debian builds and should never be enabled in 2.1 anyway (closes: #296681) . * Disable LISTEXT, since Cyrus 2.1 is not compatible with the latest drafts, and nobody will use that extension (thanks to Dave Cridland <dave@cridland.net> for the heads'up). ANNOTATEMORE has the same problem, but since I am almost sure Cyrus itself uses it in cyradm, it stays enabled * Use CFLAGS properly in configure call * Fix FTBFS with gcc 4.0 (closes: #289038). To that end, remove from imapd.h: imapd_clienthost, imapd_userisadmin and imapd_mailbox which are indeed private to imapd.c * Add DIGEST-MD5 logcheck ignore rules (closes : #291337) * s/master/cyrmaster/ on all See Also sections in manpages (closes: #289205) * Add some notes to example mboxtocyrus script (closes: #290591) Files: c61195f3c9efb4bb292149d0704c37b3 1314 mail extra cyrus21-imapd_2.1.18-1.dsc 01dd051861729364b84b27fcd7badb93 1694660 mail extra cyrus21-imapd_2.1.18.orig.tar.gz a74f2b05a153fe26cae53cf8f5101883 251933 mail extra cyrus21-imapd_2.1.18-1.diff.gz 67918e12a00324507550e260263612d7 210068 mail extra cyrus21-doc_2.1.18-1_all.deb 5cd300ff5f8386df9b5bca82c5d78a78 90114 mail extra cyrus21-admin_2.1.18-1_all.deb 1cb62cc460f003881ec206cd316b195d 1995554 mail extra cyrus21-common_2.1.18-1_i386.deb 3756d7073b7186a51516932792ed1606 570690 mail extra cyrus21-imapd_2.1.18-1_i386.deb 680ef4abc1208be0e90faa847e881b46 87902 mail extra cyrus21-pop3d_2.1.18-1_i386.deb 0e6cdc1c708061a1ff9ecae81a61793d 503942 mail extra cyrus21-murder_2.1.18-1_i386.deb c1e18f5838aa3e679762723ba962fc22 107166 mail extra cyrus21-clients_2.1.18-1_i386.deb f6face3411e391fa486c23a40a96a13f 244258 devel extra cyrus21-dev_2.1.18-1_i386.deb a4eb511b1415269b1a36428c49846f00 137714 perl extra libcyrus-imap-perl21_2.1.18-1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iQEVAwUBQieU14jztdzjjnrPAQLq5gf/V9goC0GMqsy3LCpNJYw4JLcsKsSr24NE LXEy+WcbbdSebYDxKqqViERhggV6XmDjA08IKtXVNUOKdKUaQeX9hDcjuGnsIZos YYTnBdZ2wWGCkpASGER4/nl2e1YB9RWXcpWYMglA90rI3t1LlS83d/O5OccDnTrF 2zMtdBgNtKj5B5TxJdby90jQ8aNlq99whTbw2jNTjMTzdsTNJ+NDVymi1KStcelA zeDP+r5tvrKVd2JQ+H8IOC4vcZIDvMFc7bKpKjUzS2fVFClTdR1ZyrnhGR5bO4wb A7fX/JCSO9N1s51gdIvA6tOvXkD6JY678UQVlyHeIIrtQ+qZvaXAIA== =bAPT -----END PGP SIGNATURE----- Accepted: cyrus21-admin_2.1.18-1_all.deb to pool/main/c/cyrus21-imapd/cyrus21-admin_2.1.18-1_all.deb cyrus21-clients_2.1.18-1_i386.deb to pool/main/c/cyrus21-imapd/cyrus21-clients_2.1.18-1_i386.deb cyrus21-common_2.1.18-1_i386.deb to pool/main/c/cyrus21-imapd/cyrus21-common_2.1.18-1_i386.deb cyrus21-dev_2.1.18-1_i386.deb to pool/main/c/cyrus21-imapd/cyrus21-dev_2.1.18-1_i386.deb cyrus21-doc_2.1.18-1_all.deb to pool/main/c/cyrus21-imapd/cyrus21-doc_2.1.18-1_all.deb cyrus21-imapd_2.1.18-1.diff.gz to pool/main/c/cyrus21-imapd/cyrus21-imapd_2.1.18-1.diff.gz cyrus21-imapd_2.1.18-1.dsc to pool/main/c/cyrus21-imapd/cyrus21-imapd_2.1.18-1.dsc cyrus21-imapd_2.1.18-1_i386.deb to pool/main/c/cyrus21-imapd/cyrus21-imapd_2.1.18-1_i386.deb cyrus21-imapd_2.1.18.orig.tar.gz to pool/main/c/cyrus21-imapd/cyrus21-imapd_2.1.18.orig.tar.gz cyrus21-murder_2.1.18-1_i386.deb to pool/main/c/cyrus21-imapd/cyrus21-murder_2.1.18-1_i386.deb cyrus21-pop3d_2.1.18-1_i386.deb to pool/main/c/cyrus21-imapd/cyrus21-pop3d_2.1.18-1_i386.deb libcyrus-imap-perl21_2.1.18-1_i386.deb to pool/main/c/cyrus21-imapd/libcyrus-imap-perl21_2.1.18-1_i386.deb -- To UNSUBSCRIBE, email to debian-devel-changes-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org