Bug 170220

Summary: up-imapproxy: CAN-2005-2661 (format string vulnerability)
Product: [Fedora] Fedora Reporter: Ville Skyttä <scop>
Component: up-imapproxyAssignee: Jeff Carlson <jeff>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: 4CC: extras-qa
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
URL: http://seclists.org/lists/fulldisclosure/2005/Oct/0218.html
Whiteboard:
Fixed In Version: 1.2.4-4 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2005-10-11 21:19:55 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Fix extracted from Debian's Sarge update none

Comment 1 Jeff Carlson 2005-10-11 18:10:00 UTC
This listing is against the version in Debian stable, which is 1.2.3.  Currently
I have packaged 1.2.4.  I'm not even sure this bug affects the version currently
in FE.  The cve.mitre.org listing says it's under review and currently displays
no usefull information.

I'll accept any suggestions.  :)


Comment 2 Ville Skyttä 2005-10-11 18:28:36 UTC
Created attachment 119815 [details]
Fix extracted from Debian's Sarge update

Seems to be an issue in 1.2.4, too.

Comment 3 Ville Skyttä 2005-10-11 21:19:55 UTC
Fixed in 1.2.4-4.*