+++ This bug was initially created as a clone of Bug #149869 +++ Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a stack-based buffer overflow in fetchnews, or (4) a stack-based buffer overflow in imapd. * Fix possible single byte overflow in mailbox handling code. * Fix possible single byte overflows in the imapd annotate extension. * Fix stack buffer overflows in fetchnews (exploitable by peer news server), backend (exploitable by admin), and in imapd (exploitable by users though only on platforms where a filename may be larger than a mailbox name).
This issue should also affect FC2.
O.K. version 2.2.12 is in CVS and built. Please note version 2.2.11 referenced in above annoucement was superceded in hours by 2.2.12 without any statement I could find as to why, I can only assume because 2.2.11 needed a minor fix, thus I've upgraded to 2.2.12. Also note, cyrus-imapd has been deprecated in FC4, however that CVS branch was updated, but it could not be built because its deprecated. The same upgrade fix was applied to FC3 and FC2. Tomorrow I will sanity test the new builds and start the fedora push process.
testing completed. package sign and push requested submitted, announcement to list will follow when packages are signed and pushed. Closing this out...