-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 01 Jan 2012 18:10:58 +0000 Source: cyrus-imapd-2.2 Binary: cyrus-common-2.2 cyrus-doc-2.2 cyrus-imapd-2.2 cyrus-pop3d-2.2 cyrus-admin-2.2 cyrus-murder-2.2 cyrus-nntpd-2.2 cyrus-clients-2.2 cyrus-dev-2.2 libcyrus-imap-perl22 Architecture: armel Version: 2.2.13-19+squeeze3 Distribution: squeeze-security Urgency: high Maintainer: armel Build Daemon (alain) Changed-By: Nico Golde Description: cyrus-admin-2.2 - Cyrus mail system - administration tools cyrus-clients-2.2 - Cyrus mail system (test clients) cyrus-common-2.2 - Cyrus mail system - common files cyrus-dev-2.2 - Cyrus mail system (developer files) cyrus-doc-2.2 - Cyrus mail system - documentation files cyrus-imapd-2.2 - Cyrus mail system - IMAP support cyrus-murder-2.2 - Cyrus mail system (proxies and aggregator) cyrus-nntpd-2.2 - Cyrus mail system (NNTP support) cyrus-pop3d-2.2 - Cyrus mail system - POP3 support libcyrus-imap-perl22 - Interface to Cyrus imap client imclient library Changes: cyrus-imapd-2.2 (2.2.13-19+squeeze3) stable-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix possible NULL pointer dereference via crafted message reference id caused by a missing sanitizing of the mail headers. This can be exploited from a client making use of the IMAP threading feature (CVE-2011-3481). Checksums-Sha1: 15701e35b2684199909bb4430f0cab0da7cf7dce 5685718 cyrus-common-2.2_2.2.13-19+squeeze3_armel.deb bba870d5961ce789a6719ce8d24dc750164e538f 938536 cyrus-imapd-2.2_2.2.13-19+squeeze3_armel.deb dda5614f204b05ec829c15bdf8ca5f60ad91910f 280338 cyrus-pop3d-2.2_2.2.13-19+squeeze3_armel.deb a017c71570c3c60e0e1f58e7b6af265d3862b6b2 1133994 cyrus-murder-2.2_2.2.13-19+squeeze3_armel.deb 9f02f78b95397f5a4da8d0fa784754b9c3df861e 608594 cyrus-nntpd-2.2_2.2.13-19+squeeze3_armel.deb 53e634a71295bb64df77a6ec26fb41911a389334 135204 cyrus-clients-2.2_2.2.13-19+squeeze3_armel.deb a7739b3d30cbc2ab5e681fa2f699b5406d8cbfa5 265990 cyrus-dev-2.2_2.2.13-19+squeeze3_armel.deb 476c9b381fc74cd4b422dc1cc7ed5f97995d6d49 182050 libcyrus-imap-perl22_2.2.13-19+squeeze3_armel.deb Checksums-Sha256: 0527ac3ea4323e7c41ebb5b783263fee401771d98705fd95a52de1f21a6e2ea2 5685718 cyrus-common-2.2_2.2.13-19+squeeze3_armel.deb 640e180843d4d8fb06720e5574bf6fb3d93c785cb65143f39f4b7b8ee8818492 938536 cyrus-imapd-2.2_2.2.13-19+squeeze3_armel.deb dfe37f52399751dc5a82e894d9bc14e2a7a3b1c02633cc2cf232e35265988018 280338 cyrus-pop3d-2.2_2.2.13-19+squeeze3_armel.deb 248f3777494c17fa92ff2cff9c0c595986010bf79eafc9df467984b46e4da98d 1133994 cyrus-murder-2.2_2.2.13-19+squeeze3_armel.deb 106b84d965f2071b6f09aaa529d41f0cd2fc878e58d0ce548cdeb5ea6ada1a09 608594 cyrus-nntpd-2.2_2.2.13-19+squeeze3_armel.deb a6c62eb54ad9d91c436adac0c7698f320775bae93533e5480c24916c5975b005 135204 cyrus-clients-2.2_2.2.13-19+squeeze3_armel.deb 1af5dbee8a46e181745c1cebd1341008ee7a3b58c164a2c9aa4bb15049c36147 265990 cyrus-dev-2.2_2.2.13-19+squeeze3_armel.deb 82d042ccef9cc9e475fc1ffb41611db2b9f95f1e65177ffd5ba9f4437ad8585c 182050 libcyrus-imap-perl22_2.2.13-19+squeeze3_armel.deb Files: 3ad20bd96b30496511f989dc67e3be26 5685718 mail extra cyrus-common-2.2_2.2.13-19+squeeze3_armel.deb f99e11813e737e3b476f31fac5d87bed 938536 mail extra cyrus-imapd-2.2_2.2.13-19+squeeze3_armel.deb 1c74ae6c1e42c048c43de1c4da118cee 280338 mail extra cyrus-pop3d-2.2_2.2.13-19+squeeze3_armel.deb 22c5c79834f5ab5d2e291eea6be6d997 1133994 mail extra cyrus-murder-2.2_2.2.13-19+squeeze3_armel.deb 5cfeb3ce90231736571b460e8ccad294 608594 mail extra cyrus-nntpd-2.2_2.2.13-19+squeeze3_armel.deb fa26f5310efd7ac80f9e874e1428b525 135204 mail extra cyrus-clients-2.2_2.2.13-19+squeeze3_armel.deb db37aea7754580121a368566d9a06fb6 265990 devel extra cyrus-dev-2.2_2.2.13-19+squeeze3_armel.deb 588f4db1c8deffcac4d22c07dae80589 182050 perl extra libcyrus-imap-perl22_2.2.13-19+squeeze3_armel.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJPALntAAoJEINxgZ9CVg+2rncP/3CvPNj6g5SeyQEzB7CkJxzb LRQGk89M1isVHHKRYKjgS8KwiAathQYQJkb2vfFCp23W2b+fH2D3Qzi0Jk/5TSMO a4GoYH2W3Li3/V8wlACSjsZMwbyyA6mjFqLB03n5ULUFpU8oQmvQYYjRng7NfVvA cRgCZoGmX/nx54ghgutvDFIf9MjgrkzcU8xbHJx7wTk/4wW/BmoPKMDqv0LKSovo lrYBzRQEClBxs9A2Ex6UOhany8Gr1bNTEk7i1E/HrrMHUNclXuqdpk/Qj3mV2tDx YHzWI4H7G1wiS9imf4WeU4Pb6NTd3u+5KswehA8QkYJp87SsdVgVx1ObGAyGyvuH lWbP4CAYBLRNs6/3Fs/Ficwp25XMwn7L2XiSepRAwwtQBy34zil+YpNyPZXJQaQz VuGYgefH/4NXSqW/6dtlSjgeQTaVrqn140o/s9qRV2xHMB13kjm0gAW56DDN8Tlo DNNgvH/8PCYM3v6GCb/oXtc1z3o6A61cK4iEq+X65aXwL+V0C+yHBWb8uRMCVDXL IDUltUYDlY99kvwSy/Azy/bbqEQ2RMHlG5nTo0qv61vuVQkEPPZIIbTvAXeRG8fb zao5Hz2AoL+QuuGzGOD9xKPKoxdu7zW21BB9z65L+Bpn4WbtqXs4CTNR5DhQ4ph7 idCVAvFtrRTSZHb3UcIJ =YNTh -----END PGP SIGNATURE-----