-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 01 Jan 2012 18:10:58 +0000 Source: cyrus-imapd-2.2 Binary: cyrus-common-2.2 cyrus-doc-2.2 cyrus-imapd-2.2 cyrus-pop3d-2.2 cyrus-admin-2.2 cyrus-murder-2.2 cyrus-nntpd-2.2 cyrus-clients-2.2 cyrus-dev-2.2 libcyrus-imap-perl22 Architecture: mipsel Version: 2.2.13-19+squeeze3 Distribution: squeeze-security Urgency: high Maintainer: mipsel Build Daemon (rem) Changed-By: Nico Golde Description: cyrus-admin-2.2 - Cyrus mail system - administration tools cyrus-clients-2.2 - Cyrus mail system (test clients) cyrus-common-2.2 - Cyrus mail system - common files cyrus-dev-2.2 - Cyrus mail system (developer files) cyrus-doc-2.2 - Cyrus mail system - documentation files cyrus-imapd-2.2 - Cyrus mail system - IMAP support cyrus-murder-2.2 - Cyrus mail system (proxies and aggregator) cyrus-nntpd-2.2 - Cyrus mail system (NNTP support) cyrus-pop3d-2.2 - Cyrus mail system - POP3 support libcyrus-imap-perl22 - Interface to Cyrus imap client imclient library Changes: cyrus-imapd-2.2 (2.2.13-19+squeeze3) stable-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix possible NULL pointer dereference via crafted message reference id caused by a missing sanitizing of the mail headers. This can be exploited from a client making use of the IMAP threading feature (CVE-2011-3481). Checksums-Sha1: 0d92d862c04d0091d11e74d238067aaf06c7d12b 5866064 cyrus-common-2.2_2.2.13-19+squeeze3_mipsel.deb 0333f79dad7f5f8aa40a35c0de9d3b79035abd1f 976404 cyrus-imapd-2.2_2.2.13-19+squeeze3_mipsel.deb 9b9b5fecae271350647aaf0d57c5bef0caf3ba5b 287148 cyrus-pop3d-2.2_2.2.13-19+squeeze3_mipsel.deb 3ca62972d6cf1ea361cde834fa76c161db96fdd9 1163704 cyrus-murder-2.2_2.2.13-19+squeeze3_mipsel.deb 6e79e3e444cff1b784c0ba6c39152f7e276524ea 629044 cyrus-nntpd-2.2_2.2.13-19+squeeze3_mipsel.deb 1bc9b54fd1999fe88f484cb6bc5bb398805424b2 138286 cyrus-clients-2.2_2.2.13-19+squeeze3_mipsel.deb 38131f5334d2c26eb6a192ec6960936b0359936b 281334 cyrus-dev-2.2_2.2.13-19+squeeze3_mipsel.deb 87fb2042a9c8f4ffbdaee78562c9558c5f87b1b9 181054 libcyrus-imap-perl22_2.2.13-19+squeeze3_mipsel.deb Checksums-Sha256: 60c636dd66779a52e3eb4fe11461352902a3986f75da4adc2b5fab3a83deedf0 5866064 cyrus-common-2.2_2.2.13-19+squeeze3_mipsel.deb 2e2d69bcda103318d41154941e66be45ffefe647b1fdf97840685a6c4a8b46a5 976404 cyrus-imapd-2.2_2.2.13-19+squeeze3_mipsel.deb 041fb616956524cccf4408810fffadeb41e5deb29c804add8e0f48267f9d193c 287148 cyrus-pop3d-2.2_2.2.13-19+squeeze3_mipsel.deb 2f29188108adab787aae802c46749e4c1ff9513561aa48e7379aeb13ee4356c9 1163704 cyrus-murder-2.2_2.2.13-19+squeeze3_mipsel.deb 6ad4e6934c99b50c5a4225547c689ecf0d489bd1e814caf0c4decb2674ec2594 629044 cyrus-nntpd-2.2_2.2.13-19+squeeze3_mipsel.deb 50a40889a0a9a91729065f4a5eff9d0fc2f1d8b9ad46bd85f5845737b2c033b1 138286 cyrus-clients-2.2_2.2.13-19+squeeze3_mipsel.deb 35c7a47431549cbfeea1d35d05538301b80099d642e6a7612b6c5a93f84f86bf 281334 cyrus-dev-2.2_2.2.13-19+squeeze3_mipsel.deb e1be41d6b3cacfce3aa869d1a41628193f7b5972ec140132704b84c78da79036 181054 libcyrus-imap-perl22_2.2.13-19+squeeze3_mipsel.deb Files: c686ad4faf2299abeb3a620964662111 5866064 mail extra cyrus-common-2.2_2.2.13-19+squeeze3_mipsel.deb a47bd5bbe2a3b5842a56381c6b13da57 976404 mail extra cyrus-imapd-2.2_2.2.13-19+squeeze3_mipsel.deb e4648c9b061dca176cef796baed4b261 287148 mail extra cyrus-pop3d-2.2_2.2.13-19+squeeze3_mipsel.deb d3d0c11ef295e16fa06cd73b5fa0f8f9 1163704 mail extra cyrus-murder-2.2_2.2.13-19+squeeze3_mipsel.deb 8b515e84f47863433a3b8006348f9b72 629044 mail extra cyrus-nntpd-2.2_2.2.13-19+squeeze3_mipsel.deb 63e9f8f01e3f3c1a348296794a3e7897 138286 mail extra cyrus-clients-2.2_2.2.13-19+squeeze3_mipsel.deb b3559c14a4281a9f538f163e882d7e4f 281334 devel extra cyrus-dev-2.2_2.2.13-19+squeeze3_mipsel.deb 9507dd4b6af6acfcfb5de92094295d74 181054 perl extra libcyrus-imap-perl22_2.2.13-19+squeeze3_mipsel.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJPALepAAoJEAzzgj1nKIEub5gP/36pvCEDiOkMt0Y5tZ5OHNzm h9adjRU3iZJFphAqQqv93BmHMSRPE5wq4Ls5NlV4YkqP+8A4/1NxGenaAcyCbp/n E8Z69F2Zs9ecFu93JzvmDuFc5GAI0L/HfjQVyYqRuVnWLHCKUBhHxy91Y5cgstfg nwqVpSHtUHIwOVqdBsvs0TE9bqA0tp+nkXWO2l1CoyH58uMOqtI6FOgB/KEJPHVo o6imKwYZ24U8Sximj6JsaJB/SpszgD8chG9+PS/6G3yK/rxUkGbapY5np3Zc3K97 b2YCuQCwcwqTBf7xEIbIykippl0rwt55mJu2QimxpmpRTecl3QtNx2MDy3TYK3YY RyG8367uAj3URJ/lqz0PwMqZ7AQw7RosTiLlNkFgclsbCtkEKjrq8Ax0bYnilA5S tCMa5Q5nmEqyBwB8hd+wERzVrTVxQIQo4GMOwTlzXXHbjTBAeE9Sjos4OQAdVhiV 2wHDuexfCG3PIr1/SuQNRxlZu9JAQu72pSWp2WWA2zt68I8+UVpj5bYh2dyAQ0zq nh2VT3vHNs4Z4j1/LwxTsU4nH4FoE/0VrAqC6bto+HvksOKheT7lFGCxwlHYx+WM 7BhBmHYkUD6djWcmAr8+YQ6dFve5Q5ETWDLF4aXXzs65F/4+hB3wl+rS8y+6Anxv 5vs/Sxe70yL8KP4ieecb =zkVV -----END PGP SIGNATURE-----