-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 01 Jan 2012 18:10:58 +0000 Source: cyrus-imapd-2.2 Binary: cyrus-common-2.2 cyrus-doc-2.2 cyrus-imapd-2.2 cyrus-pop3d-2.2 cyrus-admin-2.2 cyrus-murder-2.2 cyrus-nntpd-2.2 cyrus-clients-2.2 cyrus-dev-2.2 libcyrus-imap-perl22 Architecture: sparc Version: 2.2.13-19+squeeze3 Distribution: squeeze-security Urgency: high Maintainer: sparc Build Daemon (schroeder) Changed-By: Nico Golde Description: cyrus-admin-2.2 - Cyrus mail system - administration tools cyrus-clients-2.2 - Cyrus mail system (test clients) cyrus-common-2.2 - Cyrus mail system - common files cyrus-dev-2.2 - Cyrus mail system (developer files) cyrus-doc-2.2 - Cyrus mail system - documentation files cyrus-imapd-2.2 - Cyrus mail system - IMAP support cyrus-murder-2.2 - Cyrus mail system (proxies and aggregator) cyrus-nntpd-2.2 - Cyrus mail system (NNTP support) cyrus-pop3d-2.2 - Cyrus mail system - POP3 support libcyrus-imap-perl22 - Interface to Cyrus imap client imclient library Changes: cyrus-imapd-2.2 (2.2.13-19+squeeze3) stable-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix possible NULL pointer dereference via crafted message reference id caused by a missing sanitizing of the mail headers. This can be exploited from a client making use of the IMAP threading feature (CVE-2011-3481). Checksums-Sha1: 612b148712e5067ddbc4f3466527c270220274ba 5587388 cyrus-common-2.2_2.2.13-19+squeeze3_sparc.deb 1cb78c3d423e3ee63470f20cf55b5c649daa66f8 922386 cyrus-imapd-2.2_2.2.13-19+squeeze3_sparc.deb c4fbf4f5c4c2f093ae4b9c31f2a6cdfadee18367 274788 cyrus-pop3d-2.2_2.2.13-19+squeeze3_sparc.deb 0385ada06409a4c96fc250624dc1a49b8856c59e 1113520 cyrus-murder-2.2_2.2.13-19+squeeze3_sparc.deb 6c59b59478d3984b30767f0d4344f50fcd848cc6 597152 cyrus-nntpd-2.2_2.2.13-19+squeeze3_sparc.deb b1349709aee431ea93aea09e1942629757d82a88 133700 cyrus-clients-2.2_2.2.13-19+squeeze3_sparc.deb b42f23bb1781fe433a7ea48bf40b115361a9cf80 266902 cyrus-dev-2.2_2.2.13-19+squeeze3_sparc.deb 8875845121bf95d5728d2daf94c2c8dd13cec3c0 181554 libcyrus-imap-perl22_2.2.13-19+squeeze3_sparc.deb Checksums-Sha256: 50b3aa0db4fa05a59620e2ff154f9b356faeea13d93d6795b0ad97f574451be1 5587388 cyrus-common-2.2_2.2.13-19+squeeze3_sparc.deb 8254bc17ee21d62234195bf1198ebd479168bbc48e8be10f0dde98f30f49d5d9 922386 cyrus-imapd-2.2_2.2.13-19+squeeze3_sparc.deb 77ff69542c137ff5c211ded309b9c53bf8b1a7a5c6a19002c5e15e58ee414b77 274788 cyrus-pop3d-2.2_2.2.13-19+squeeze3_sparc.deb 2e3515ab8bbf1a401ae26070ae6e99448b48a2d5339260f95978c3dab901af17 1113520 cyrus-murder-2.2_2.2.13-19+squeeze3_sparc.deb b95fe12e71390f3e1d5decf310a23ace4757ac6f66712a69e9659a0f3b8dbede 597152 cyrus-nntpd-2.2_2.2.13-19+squeeze3_sparc.deb a1fc1051040899ce3f09ce9a026060de2ba7a164012707f6f66ad765ea066a01 133700 cyrus-clients-2.2_2.2.13-19+squeeze3_sparc.deb c39defad6ac154099733d930bde9a0b1c91e3db0aaf7f35569151c8c21496586 266902 cyrus-dev-2.2_2.2.13-19+squeeze3_sparc.deb b1e8d4fcd3ecfb09f76188bd8412b99c2fb5799b52940392e60e846532fe7aad 181554 libcyrus-imap-perl22_2.2.13-19+squeeze3_sparc.deb Files: f1a79326c6b1502c01db8c295a634470 5587388 mail extra cyrus-common-2.2_2.2.13-19+squeeze3_sparc.deb 2787f8dd22f47fa4cdc8f279e8a71a92 922386 mail extra cyrus-imapd-2.2_2.2.13-19+squeeze3_sparc.deb 1cbd97be10b901c64b5f6928e303fbbd 274788 mail extra cyrus-pop3d-2.2_2.2.13-19+squeeze3_sparc.deb bce38b6e9fb6351c8985802cc86253ca 1113520 mail extra cyrus-murder-2.2_2.2.13-19+squeeze3_sparc.deb 337219c023630a12f285a4f825e5374d 597152 mail extra cyrus-nntpd-2.2_2.2.13-19+squeeze3_sparc.deb 46499d7f7acff19109ddc268aa121cfa 133700 mail extra cyrus-clients-2.2_2.2.13-19+squeeze3_sparc.deb 04ac99780e54e073fc95fff1e88db10f 266902 devel extra cyrus-dev-2.2_2.2.13-19+squeeze3_sparc.deb 8eea40d74620064c2a0336fc5b46fac8 181554 perl extra libcyrus-imap-perl22_2.2.13-19+squeeze3_sparc.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJPAK2uAAoJEFJVSUQr9QGrKnoP/R+K/fibzD1jHCKVCaU2GyvJ novUuB6aGxBuJ3tUdpeQEPjYEZf9+QjM8L2kc1334UMJNlFowS5ma4e2EMoN8vWY Jn7RVGIwyFE2SdU6GYKgdBP+wnwrQMlCiWHafm+aTqKy+oo0vLBqvlU3nMsXbtBZ cdfc5pB2g8Vg3hBBsH3CvCfzNAiWudxk78NDjvXabUtvyde2XbUX0DQG8xI9fg6B lKBDPxdFo5wHQqp9qcNRZYismu7PboZf2A04d81hiVLbky0fS/oXX1ZdP9yUhct4 nCTlvYqDFtRj0tmU+doPRE51ZruimXpuD08wY2C3BwZiCrdIOinG011sKK1kbU65 WDkca74+ZNBBuUGCcxI1eFVBsiqrFM9tAqUF+o+fJa7vJVJW4SYAqINasQGziTzH 0Z9ejcF8v1sWOBqevb6z2iKJrhKWypSmVTb0ImPPNGGpXnO6SDWH2MYIbfxT0yEq G/LKF5alWbL5NafMBL+39XGj9sdH9jbIfGaZmNg4+Z8Eig0kmM0J+FAiL7ktdADv Pwjpnq75+R4fHFzyc/QzUpcldr7atA24IYO7lBH9wAvfimv2173pA9237QVtcvME XbnfZ4SZvNBi8kNMWR5pRbxvR1IoaZk1DltJ/mx8aFW9SInyPY8PfGXCi3vbuihn 0bGY9Fwhi8ZsEZt2KlWW =b+jY -----END PGP SIGNATURE-----