Author: gilbert-guest
Date: 2009-09-21 19:21:19 +0000 (Mon, 21 Sep 2009)
New Revision: 12864

Modified:
   data/CVE/list
   data/embedded-code-copies
Log:
dovecot in etch/lenny also affected by cyrus code copy
- note that cve text says > 1.0.4 fixed, but i've checked lenny's 1.0.15
  and its code is still vulnerable

Modified: data/CVE/list
===================================================================
--- data/CVE/list       2009-09-21 18:51:28 UTC (rev 12863)
+++ data/CVE/list       2009-09-21 19:21:19 UTC (rev 12864)
@@ -2330,6 +2330,7 @@
        {DSA-1881-1}
        - cyrus-imapd-2.2 2.2.13-15 (medium)
        - kolab-cyrus-imapd (medium; bug #547712)
+       - dovecot 1.2.1-1 (medium)
 CVE-2009-2631
        RESERVED
 CVE-2009-2630

Modified: data/embedded-code-copies
===================================================================
--- data/embedded-code-copies   2009-09-21 18:51:28 UTC (rev 12863)
+++ data/embedded-code-copies   2009-09-21 19:21:19 UTC (rev 12864)
@@ -938,5 +938,6 @@
        - texlive-bin <unfixed> (fork)
        NOTE: texlive upstream working with icu upstream to merge their changes
 
-cyrus
+cyrus-imapd-2.2
        - kolab-cyrus-imapd <unfixed> (fork)
+       - dovecot 1:1.2.1-1 (embed) [/dovecot-sieve/src/libsieve/*]


_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits

Reply via email to