Format: 1.7 Date: Wed, 14 Nov 2007 13:44:43 +0100 Source: perdition Binary: perdition perdition-dev perdition-ldap perdition-mysql perdition-odbc perdition-postgresql Architecture: amd64 i386 ia64 powerpc source sparc Version: 1.17-7ubuntu0.7.10.1 Distribution: gutsy-security Urgency: low Maintainer: Ubuntu MOTU Developers Changed-By: Stephan Hermann Description: perdition - POP3 and IMAP4 Proxy server perdition-dev - Development libraries and headers for perdition perdition-ldap - Library to allow perdition to access LDAP based popmaps perdition-mysql - Library to allow perdition to access MySQL based popmaps perdition-odbc - Library to allow perdition to access ODBC based popmaps perdition-postgresql - Library to allow perdition to access PostgreSQL based popmaps Changes: perdition (1.17-7ubuntu0.7.10.1) gutsy-security; urgency=low . * SECURITY UPDATE: The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism. * perdition/imap4_in.c: Added patch according to upstream (LP: #162543) (See: http://perdition.cvs.sourceforge.net/perdition/perdition/perdition/imap4_in.c?r1=1.45&r2=1.46) * References: CVE-2007-5740 https://bugs.edge.launchpad.net/ubuntu/dapper/+source/perdition/+bug/162543 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448853 http://perdition.cvs.sourceforge.net/perdition/perdition/perdition/imap4_in.c?r1=1.45&r2=1.46 Files: 0d12665b35f046364d7c09c41ebba54f 132094 mail optional perdition_1.17-7ubuntu0.7.10.1_amd64.deb fd0304428a581f4f10d3a87e73fc3770 7430 mail optional perdition-dev_1.17-7ubuntu0.7.10.1_amd64.deb 63d36a9fe7ae32150e9c88d8b6e1cb5e 16758 mail optional perdition-ldap_1.17-7ubuntu0.7.10.1_amd64.deb dd0175b04fef70812e49407ba33defa5 16246 mail optional perdition-mysql_1.17-7ubuntu0.7.10.1_amd64.deb 16e393d1f0ff196783625c995b8a7038 15828 mail optional perdition-odbc_1.17-7ubuntu0.7.10.1_amd64.deb daccfbd95619d73a791121f446d0c19b 16088 mail optional perdition-postgresql_1.17-7ubuntu0.7.10.1_amd64.deb d30f7548cec7f90a6f178484be05ea64 123026 mail optional perdition_1.17-7ubuntu0.7.10.1_i386.deb 7acd151e6c61c932e1c0ef26fc41f639 7358 mail optional perdition-dev_1.17-7ubuntu0.7.10.1_i386.deb a170f006cd050668d72fa282c49b7b47 16216 mail optional perdition-ldap_1.17-7ubuntu0.7.10.1_i386.deb bd0a30379d1ccf8d942434976d405866 15378 mail optional perdition-mysql_1.17-7ubuntu0.7.10.1_i386.deb 5c50c646276d21b48306ae669ebe261c 15334 mail optional perdition-odbc_1.17-7ubuntu0.7.10.1_i386.deb 617967082e7b6690debe92b3ace5bfab 15248 mail optional perdition-postgresql_1.17-7ubuntu0.7.10.1_i386.deb 534ebc8419416b0b33a8c5c0cea2114f 166698 mail optional perdition_1.17-7ubuntu0.7.10.1_ia64.deb fbf6b55671b5e3b21aa1af439b393b3a 7604 mail optional perdition-dev_1.17-7ubuntu0.7.10.1_ia64.deb 82b5bda442d852b8ffe9efb45baf3563 19196 mail optional perdition-ldap_1.17-7ubuntu0.7.10.1_ia64.deb fc188fa0e1dcd331f8b85606b9a346dc 17566 mail optional perdition-mysql_1.17-7ubuntu0.7.10.1_ia64.deb d960b6b774c8e88938e3000127fb6535 17248 mail optional perdition-odbc_1.17-7ubuntu0.7.10.1_ia64.deb 0e91dcd43a3fdbfe30d4aa0ab9a8acbf 17206 mail optional perdition-postgresql_1.17-7ubuntu0.7.10.1_ia64.deb 02b016decc12c58b584b21309a8e72ae 148402 mail optional perdition_1.17-7ubuntu0.7.10.1_powerpc.deb 05e2ba3cb35ead70afd53167e56e0442 7394 mail optional perdition-dev_1.17-7ubuntu0.7.10.1_powerpc.deb f12bf2098ca3b50e019e5ec306aa9081 19684 mail optional perdition-ldap_1.17-7ubuntu0.7.10.1_powerpc.deb 430aea2debc0534b1b3593d803b921f6 18724 mail optional perdition-mysql_1.17-7ubuntu0.7.10.1_powerpc.deb 90db3e666bc55734716c0e5912b6c35b 18192 mail optional perdition-odbc_1.17-7ubuntu0.7.10.1_powerpc.deb baa1cd6bc68b6297396cf14dd4b40c59 18522 mail optional perdition-postgresql_1.17-7ubuntu0.7.10.1_powerpc.deb ac0b7ee4634101aae39230fe21be5338 1002 mail optional perdition_1.17-7ubuntu0.7.10.1.dsc 983c8405d38dff0c85027f96791bec72 116048 mail optional perdition_1.17-7ubuntu0.7.10.1.diff.gz 4a6943783b1e04a91a4844079e79d983 128156 mail optional perdition_1.17-7ubuntu0.7.10.1_sparc.deb bc1c0e3cc013526e03e4e34cfd671e27 7370 mail optional perdition-dev_1.17-7ubuntu0.7.10.1_sparc.deb dae0ba7fc10828d1381cf40aeafd3edb 16468 mail optional perdition-ldap_1.17-7ubuntu0.7.10.1_sparc.deb 06cf62a190890691f21b0364a848d804 15774 mail optional perdition-mysql_1.17-7ubuntu0.7.10.1_sparc.deb a0413e5d3a0f92d776b6d8e3d2d529f7 15586 mail optional perdition-odbc_1.17-7ubuntu0.7.10.1_sparc.deb 99cbada6376066027a94045f4319698d 15498 mail optional perdition-postgresql_1.17-7ubuntu0.7.10.1_sparc.deb Launchpad-Bugs-Fixed: 162543 Original-Maintainer: Simon Horman