-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 01 Jan 2012 18:10:58 +0000 Source: cyrus-imapd-2.2 Binary: cyrus-common-2.2 cyrus-doc-2.2 cyrus-imapd-2.2 cyrus-pop3d-2.2 cyrus-admin-2.2 cyrus-murder-2.2 cyrus-nntpd-2.2 cyrus-clients-2.2 cyrus-dev-2.2 libcyrus-imap-perl22 Architecture: mips Version: 2.2.13-19+squeeze3 Distribution: squeeze-security Urgency: high Maintainer: Debian Build Daemon Changed-By: Nico Golde Description: cyrus-admin-2.2 - Cyrus mail system - administration tools cyrus-clients-2.2 - Cyrus mail system (test clients) cyrus-common-2.2 - Cyrus mail system - common files cyrus-dev-2.2 - Cyrus mail system (developer files) cyrus-doc-2.2 - Cyrus mail system - documentation files cyrus-imapd-2.2 - Cyrus mail system - IMAP support cyrus-murder-2.2 - Cyrus mail system (proxies and aggregator) cyrus-nntpd-2.2 - Cyrus mail system (NNTP support) cyrus-pop3d-2.2 - Cyrus mail system - POP3 support libcyrus-imap-perl22 - Interface to Cyrus imap client imclient library Changes: cyrus-imapd-2.2 (2.2.13-19+squeeze3) stable-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix possible NULL pointer dereference via crafted message reference id caused by a missing sanitizing of the mail headers. This can be exploited from a client making use of the IMAP threading feature (CVE-2011-3481). Checksums-Sha1: a590fbcb2147340a89ec44b928485e36161b3856 5757454 cyrus-common-2.2_2.2.13-19+squeeze3_mips.deb 34116755b66221c39c7b8f77ab7d70d9ac830a6c 954360 cyrus-imapd-2.2_2.2.13-19+squeeze3_mips.deb 2b8167204c971208e2656699e4a9e557639876eb 282162 cyrus-pop3d-2.2_2.2.13-19+squeeze3_mips.deb 7c5794cdf0f296b8c49c7af0dac5fd84b66654c0 1144308 cyrus-murder-2.2_2.2.13-19+squeeze3_mips.deb ca0939ac48d87b618abf55e07dfdf8edb37aa018 614090 cyrus-nntpd-2.2_2.2.13-19+squeeze3_mips.deb 0fa3f7dd3a555197cae418df6b310919b623a878 135862 cyrus-clients-2.2_2.2.13-19+squeeze3_mips.deb a88c28acc6d91dd31e490faa79ec31f1eedae514 279328 cyrus-dev-2.2_2.2.13-19+squeeze3_mips.deb 58be2366e98cd18e769ee3c9f3557e54016eb0ad 177464 libcyrus-imap-perl22_2.2.13-19+squeeze3_mips.deb Checksums-Sha256: df3be2454d0d81f00457c5295fea2b0a961479bfac759ef23d652f2cd566d9cb 5757454 cyrus-common-2.2_2.2.13-19+squeeze3_mips.deb e64e830df85c600d1a5ea29ec79b5bce61ff412dba572e7660afc0c2b0537f79 954360 cyrus-imapd-2.2_2.2.13-19+squeeze3_mips.deb 76bdb7c7f1eba045fb7a3b49781ddbbfc88a034df250a35a41579c06198c4088 282162 cyrus-pop3d-2.2_2.2.13-19+squeeze3_mips.deb fa818176bfcd966a3162599100855bcde4a2d5e4407cdd3d9c20a38bbabfe678 1144308 cyrus-murder-2.2_2.2.13-19+squeeze3_mips.deb 6a248ede07e7dd94d54be19d99e8032d7129f0fe6be88488bfc5313c6e449a8b 614090 cyrus-nntpd-2.2_2.2.13-19+squeeze3_mips.deb 55fc9be315601143a8c5a075052000759cb51bd89c869deb350b0ded1f8e9f13 135862 cyrus-clients-2.2_2.2.13-19+squeeze3_mips.deb 252c0efbe91b06d3a605ba15d787a582919fd8150d94c8d261557cfd6716b9e9 279328 cyrus-dev-2.2_2.2.13-19+squeeze3_mips.deb a6df0621d30360191a28ab859f78e5d90c254ae5d138cfec1bfa440095955fd8 177464 libcyrus-imap-perl22_2.2.13-19+squeeze3_mips.deb Files: ef0ea8d69c7001b6e70b73656155fc41 5757454 mail extra cyrus-common-2.2_2.2.13-19+squeeze3_mips.deb 0cbe41684f48d88a6e9011f19a4740ef 954360 mail extra cyrus-imapd-2.2_2.2.13-19+squeeze3_mips.deb 06f6b36eedce1c4fd6b2eb35565a1840 282162 mail extra cyrus-pop3d-2.2_2.2.13-19+squeeze3_mips.deb d88b29c8b45a9b0629a13ac8d98be651 1144308 mail extra cyrus-murder-2.2_2.2.13-19+squeeze3_mips.deb ed88612d6147045abd312dec85a5f580 614090 mail extra cyrus-nntpd-2.2_2.2.13-19+squeeze3_mips.deb ff9978fb83ba24a8ee59f5d5f1100b7a 135862 mail extra cyrus-clients-2.2_2.2.13-19+squeeze3_mips.deb 1b62e29068d20b75dce14e5eb13ad04b 279328 devel extra cyrus-dev-2.2_2.2.13-19+squeeze3_mips.deb 0ff252f8510a8c5557739c4898374a78 177464 perl extra libcyrus-imap-perl22_2.2.13-19+squeeze3_mips.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJPAL6/AAoJEKAUSqXS1Z2apfwQAMacXWSk9APlG+k271OMxcNT V7YTiZwSCKozuxtpIvBTQVm9q+C3Dc4VlvnKQK5/EAp4FLvRFA9hUtqtym4ArZ+n DTUluCs/L0ya98SUSTe2EbjY7PRsOHfDgN2mJk80NsGFooYXUY+1ic6YuRFqUOjY g3i1EvhI2ZKAH87D9+PEIshiwePVoCxr2ogH4C9KYpjbAu9RYm6F4ndb2ombKh9f kdqTIDyqwDVzgS+lg3Jlu1ZQyGlykxtjet7r/Kj9lnKGr0Q0MvN8S680++DZaesh iCZhbsET/CM5IZtt3VQNNZFo7bzItV5mm1JyFD8YVvcZEK24ue1LIJ4xfLN1wbMo SqlsyoDg0XqC5rgYLk3iw6ImzXwOKM8T2qYGwthTNJt8jmM+fmKSYJfX7YyKLtSa jKmqGWCmKU8NfNbtx0XXgVoC+MrMMbbYuar7p8eGETUDBFOgFROK3HvijOLOlYji vrEBG+ogW0KPYVHn/vov613NOQozhrfCqJ4Ovw7Fi3cL8VS7da0EnmbGkOeyLoKG IVxZMiKSwR5YLM9uRLRYUdhgzQ1ZdKiUWoOpFpuBVzsgqghA4RCnJRc7hHu7vjzO qSpBlkMc0SNf7+Io0L5gCzGIwDdtg5A8IL3INA+/J6WHAlV2qQcb/Pdq/KN1hUUW ydHXihntXd54lLpy35JA =MC88 -----END PGP SIGNATURE-----