Bug 140617 – cyrus-imapd needs security update

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 140617 - cyrus-imapd needs security update

Summary:	cyrus-imapd needs security update

Status:	CLOSED DUPLICATE of bug 139382

Aliases:	None

Product:	Fedora
Classification:	Fedora
Component:	cyrus-imapd (Show other bugs)
Sub Component:
Version:	3
Hardware:	All Linux

Priority	medium Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	John Dennis
QA Contact:	Brian Brock
Docs Contact:

URL:
Whiteboard:
Keywords:	Security

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2004-11-23 15:53 EST by Troels Arvin
Modified:	2007-11-30 17:10 EST (History)
CC List:	0 users

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2006-02-21 14:07:15 EST
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Troels Arvin 2004-11-23 15:53:45 EST

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5)
Gecko/20041111 Firefox/1.0

Description of problem:
According to two recent postings on the Cyrus Imapd announcement
mailing list, there are security-related bug-fixes in the latest (two)
releases of Cyrus IMAPd:
http://article.gmane.org/gmane.mail.imap.cyrus.announce/44
http://article.gmane.org/gmane.mail.imap.cyrus.announce/42


Version-Release number of selected component (if applicable):
2.2.6-2

How reproducible:
Always

Steps to Reproduce:
See above mentioned links to mailing list announcements.

Additional info:

Comment 1 Troels Arvin 2004-11-23 16:00:58 EST

By the way: If you agree that a cyrus-imapd update is relevant, then
it would be nice to take care of bug #138569 as well.

Comment 2 John Dennis 2004-11-23 17:41:47 EST

Thanks for the report.

Closing as a duplicate of bug #139382. You may not be able to see this
bug since its a security bug, I'm not sure, FWIW we've been on top of
this since the CVE's were opened.

Bug #138569 was closed because it appeared to be a glitch in the build
system that couldn't be reproduced. When the new rpms's are build for
the security updates I'll verify the missing link problem didn't
magically reappear. 

Updates should appear in the next couple of days. FWIW, the day after
tomorrow begins a 4 day holiday weekend here in the states so if you
don't see the update pushed immediately that may be why.

*** This bug has been marked as a duplicate of 139382 ***

Comment 3 Red Hat Bugzilla 2006-02-21 14:07:15 EST

Changed to 'CLOSED' state since 'RESOLVED' has been deprecated.

Note You need to log in before you can comment on or make changes to this bug.