Ubuntu
perdition package

perdition 1.17-7ubuntu0.7.10.1 source package in Ubuntu

Changelog

perdition (1.17-7ubuntu0.7.10.1) gutsy-security; urgency=low

  * SECURITY UPDATE: The format string protection
    mechanism in IMAPD for Perdition Mail Retrieval
    Proxy 1.17 and earlier allows remote attackers to
    execute arbitrary code via an IMAP tag with a null
    byte followed by a format string specifier,
    which is not counted by the mechanism.
  * perdition/imap4_in.c: Added patch according to upstream (LP: #162543)
    (See: http://perdition.cvs.sourceforge.net/perdition/perdition/perdition/imap4_in.c?r1=1.45&r2=1.46)
  * References:
    CVE-2007-5740
    https://bugs.edge.launchpad.net/ubuntu/dapper/+source/perdition/+bug/162543
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448853
    http://perdition.cvs.sourceforge.net/perdition/perdition/perdition/imap4_in.c?r1=1.45&r2=1.46

 -- Stephan Hermann <email address hidden>   Wed, 14 Nov 2007 13:44:43 +0100

Upload details

Uploaded by:
Stephan Rügamer
Uploaded to:
Gutsy
Original maintainer:
MOTU
Architectures:
any
Section:
mail
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
perdition_1.17.orig.tar.gz 539.2 KiB 38f1bfe1cb7db8b16fc6a3febc293460b6a5ae49312c6a08b757c89b1ae73879
perdition_1.17-7ubuntu0.7.10.1.diff.gz 113.3 KiB 860269e1d73d015970391118f734215f955e6d68d1f1b6f8d5a910e6036488e0
perdition_1.17-7ubuntu0.7.10.1.dsc 1002 bytes 0ef44346376d5d53b5a0218f18d2280148d44bdb2ac617a63998de1251a35340

View changes file

Binary packages built by this source

perdition: No summary available for perdition in ubuntu gutsy.

No description available for perdition in ubuntu gutsy.

perdition-dev: No summary available for perdition-dev in ubuntu gutsy.

No description available for perdition-dev in ubuntu gutsy.

perdition-ldap: No summary available for perdition-ldap in ubuntu gutsy.

No description available for perdition-ldap in ubuntu gutsy.

perdition-mysql: No summary available for perdition-mysql in ubuntu gutsy.

No description available for perdition-mysql in ubuntu gutsy.

perdition-odbc: No summary available for perdition-odbc in ubuntu gutsy.

No description available for perdition-odbc in ubuntu gutsy.

perdition-postgresql: No summary available for perdition-postgresql in ubuntu gutsy.

No description available for perdition-postgresql in ubuntu gutsy.