In Ubuntu, the php imap plugin is in a separate php-imap source package. Although USN-628-1 says CVE-2008-2829 was fixed, it was a mistake. The actual binary isn't built from the php5 source package.
CVE-2008-2829 needs to be fixed in the php-imap source package that's in universe. ** Package changed: php5 (Ubuntu) => php-imap (Ubuntu) -- php5-cgi: IMAP toolkit crash https://bugs.launchpad.net/bugs/485973 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in ubuntu. -- Ubuntu-server-bugs mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
