-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 01 Jan 2012 18:10:58 +0000 Source: cyrus-imapd-2.2 Binary: cyrus-common-2.2 cyrus-doc-2.2 cyrus-imapd-2.2 cyrus-pop3d-2.2 cyrus-admin-2.2 cyrus-murder-2.2 cyrus-nntpd-2.2 cyrus-clients-2.2 cyrus-dev-2.2 libcyrus-imap-perl22 Architecture: s390 Version: 2.2.13-19+squeeze3 Distribution: squeeze-security Urgency: high Maintainer: s390/s390x Build Daemon (zandonai) Changed-By: Nico Golde Description: cyrus-admin-2.2 - Cyrus mail system - administration tools cyrus-clients-2.2 - Cyrus mail system (test clients) cyrus-common-2.2 - Cyrus mail system - common files cyrus-dev-2.2 - Cyrus mail system (developer files) cyrus-doc-2.2 - Cyrus mail system - documentation files cyrus-imapd-2.2 - Cyrus mail system - IMAP support cyrus-murder-2.2 - Cyrus mail system (proxies and aggregator) cyrus-nntpd-2.2 - Cyrus mail system (NNTP support) cyrus-pop3d-2.2 - Cyrus mail system - POP3 support libcyrus-imap-perl22 - Interface to Cyrus imap client imclient library Changes: cyrus-imapd-2.2 (2.2.13-19+squeeze3) stable-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix possible NULL pointer dereference via crafted message reference id caused by a missing sanitizing of the mail headers. This can be exploited from a client making use of the IMAP threading feature (CVE-2011-3481). Checksums-Sha1: 9afef3dfd18317a0eabf534021997995595769dd 5904700 cyrus-common-2.2_2.2.13-19+squeeze3_s390.deb 4ba33e7cb0c3a07c9e6637f2a7af42a946763a9a 974860 cyrus-imapd-2.2_2.2.13-19+squeeze3_s390.deb 9a22322324a6ee6407ee7fbcb819e3a2e09dcc0c 291658 cyrus-pop3d-2.2_2.2.13-19+squeeze3_s390.deb b2fdcfa4312bb286555890ad27731439250d6d70 1181634 cyrus-murder-2.2_2.2.13-19+squeeze3_s390.deb 79e0a64d9b6efba7e3d9b28d5e8496afd6470ed5 632120 cyrus-nntpd-2.2_2.2.13-19+squeeze3_s390.deb defe49a4db31deac2fb3a8237d3bfb93258fc1a3 140676 cyrus-clients-2.2_2.2.13-19+squeeze3_s390.deb 2081c3ed8673324ef4a85403b5289675997a7327 275340 cyrus-dev-2.2_2.2.13-19+squeeze3_s390.deb 622554839cb9e75bfba7252ee5e1758c413c9564 191720 libcyrus-imap-perl22_2.2.13-19+squeeze3_s390.deb Checksums-Sha256: 706ccdab49fc4b4b21cdec9add3c0a76f2761247585a59b041cd837fed54e31b 5904700 cyrus-common-2.2_2.2.13-19+squeeze3_s390.deb 92bb12088291ef02832cfdfdcb077d2105c72b69e4670b9ba21d3356f92ef1ac 974860 cyrus-imapd-2.2_2.2.13-19+squeeze3_s390.deb 3b36ffe521c46953ea82e10912271d8d1b6d65b773d44f280c03bbf68de68949 291658 cyrus-pop3d-2.2_2.2.13-19+squeeze3_s390.deb cf8606edaf0b921cd2877874008e7627d681a3dcab700601a096d9fda0f29c16 1181634 cyrus-murder-2.2_2.2.13-19+squeeze3_s390.deb b127e9474e423556ca902796f9669152a653a153d8b758c712b093dc35a02188 632120 cyrus-nntpd-2.2_2.2.13-19+squeeze3_s390.deb 2e7f0b8de33094e147268ff7df4cd1a486dfb6baa0d046ff5c6bdff114401a92 140676 cyrus-clients-2.2_2.2.13-19+squeeze3_s390.deb ea32836f41f0e4c1ce601da9de49c460b870cb1927fe0b2d6e733245f0debac6 275340 cyrus-dev-2.2_2.2.13-19+squeeze3_s390.deb 75f082fcb48a0635859a429d82f2e3c5e09716699176772819ad24fb6a94475e 191720 libcyrus-imap-perl22_2.2.13-19+squeeze3_s390.deb Files: 53fd6f8049cac210bc79ed524277813d 5904700 mail extra cyrus-common-2.2_2.2.13-19+squeeze3_s390.deb a243cd506b0c6106dd70659edd693a62 974860 mail extra cyrus-imapd-2.2_2.2.13-19+squeeze3_s390.deb f9c817f7a2bcbe5a8fde8fb1e9ce6908 291658 mail extra cyrus-pop3d-2.2_2.2.13-19+squeeze3_s390.deb 08fcf82c0a7f6f536925e0d501c78f17 1181634 mail extra cyrus-murder-2.2_2.2.13-19+squeeze3_s390.deb 6f2ee4195cd81b7b6a529a6bc3afbe20 632120 mail extra cyrus-nntpd-2.2_2.2.13-19+squeeze3_s390.deb 3af6b63aab6f55c1b1fd1ad27962f52d 140676 mail extra cyrus-clients-2.2_2.2.13-19+squeeze3_s390.deb ce7f717e50a18cbe89a34b0a4e94098f 275340 devel extra cyrus-dev-2.2_2.2.13-19+squeeze3_s390.deb 8127dfae140b2d3b16418f3f85aa931a 191720 perl extra libcyrus-imap-perl22_2.2.13-19+squeeze3_s390.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJPALbQAAoJELWkVFx3JxH3oe0P/1809GGmMnET++T4BnNEsTCW tr9Q7BCoKbPGnFulIJwgfvor8L3SRMc855GK9JUSparkbHHseWK+2v24bFm1RvZw DR0cnqZNARWFx/x0NVRBXNq195lK7MPqB4cQGAm4mlM2Tzz4Jgm9FV1B+rqOW7zZ LmjySGzqAU/hQeX8FKrz2wdTyyFxQTpV9xZTKhqfcu0SXD4evX6C/ODCYtqDzK3Q 9CL12mMggHB+J66iKx7XiJN0q29kttqxwWiXuczMJ1yb0RewIyXFsLI+/3vVXzeR mVsXeG+PBzMW6ORnvVkSCD7qHlVvNyVeef7vJMub3ybrRLGSFXe58XU20YAkMo8a 2tLEdcqENn0O6UafYOg/S2FSgtwFELw4y+VtHW7+Xm3uyAt9dSS7FYIGzROr6nMW PwXJKcsjUgeT5P5G3xOUpF+fYU3TuH4qqHVO/kN7kXhWE0ZURXv4mzU+6Uo2fy7C yGjwTAiZakRbzdDUll18TbIWITkEhJDM/5Tok/Dhli5Ez0V7Mq1eNYqMK3dp2LnS 7gbEgkSYRY8YshxaM2q7ziX9S6b0Qt13wUvaY5zo8vw24TypSHA+NVzeNt4b+vxv 14AvjNiTW2SXhM2Sv0k3cbB55qAFyI9tZTeEbw3DD3fDUsKypkxRxlrtcvnsqTzJ JDshoRLwrg6qfBV9rCca =nx5q -----END PGP SIGNATURE-----