Sync cyrus-imapd-2.2 2.2.13-19 (universe) from Debian testing (main)

Bug #550258 reported by Michael Bienia
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
cyrus-imapd-2.2 (Ubuntu)
Fix Released
Wishlist
Unassigned

Bug Description

Please sync cyrus-imapd-2.2 2.2.13-19 (universe) from Debian testing (main)

Explanation of the Ubuntu delta and why it can be dropped:
The Debian package builds with db4.7 so the patch to build with db4.6 isn't
needed anymore.

Changelog entries since current lucid version 2.2.13-16ubuntu1:

cyrus-imapd-2.2 (2.2.13-19) unstable; urgency=low

  * Switch to BerkeleyDB 4.7, the version OpenLDAP uses.
  * Add patch by Cristian Rigamonti to fix logcheck rules for "defaultbc
    doesn't exist" error message. (Closes: #511030)
  * Update Vietnamese debconf translation, thanks Clytie Siddall.
    (Closes: #548052)
  * Upload to unstable for the libkrb transition.

 -- Christoph Berg <email address hidden> Sat, 23 Jan 2010 23:35:21 +0100

cyrus-imapd-2.2 (2.2.13-18) experimental; urgency=low

  [ Henrique de Moraes Holschuh ]
  * sieve/bc_eval.c (0025-upstream-fix-cve-2009-3235.dpatch):
    update for completeness to match the patch used by the security-team:
    use snprintf for scount, to future-proof against "int" larger than
    64 bits.

  [ Christoph Berg ]
  * Add myself to Uploaders.
  * Upgrade to use BerkeleyDB 4.8. (Closes: #421942)
  * Convert to use quilt, and update the patch headers to use clean paths.
    (Closes: #563303)
  * Add patch by Mathieu Parent to fix conflicting getline definition.
    (Closes: #552865)

 -- Christoph Berg <email address hidden> Fri, 22 Jan 2010 22:16:02 +0100

cyrus-imapd-2.2 (2.2.13-17) unstable; urgency=high

  * Security Update: CVE-2009-3235:
    Multiple stack-based buffer overflows in the Sieve parsing code,
    patches taken from upstream CVS (closes: #547947)

 -- Henrique de Moraes Holschuh <email address hidden> Tue, 22 Sep 2009 17:17:17 -0300

CVE References

Michael Bienia (geser)
Changed in cyrus-imapd-2.2 (Ubuntu):
importance: Undecided → Wishlist
status: New → Confirmed
Revision history for this message
James Westby (james-w) wrote :

2010-03-29 14:52:04 INFO cyrus-imapd-2.2_2.2.13.orig.tar.gz: already in distro - downloading from librarian
2010-03-29 14:52:04 INFO - <cyrus-imapd-2.2_2.2.13-19.diff.gz: downloading from http://ftp.debian.org/debian/>
[Updating] cyrus-imapd-2.2 (2.2.13-16ubuntu1 [Ubuntu] < 2.2.13-19 [Debian])
 * Trying to add cyrus-imapd-2.2...
2010-03-29 14:52:04 INFO - <cyrus-imapd-2.2_2.2.13-19.dsc: downloading from http://ftp.debian.org/debian/>
2010-03-29 14:52:04 INFO - <cyrus-imapd-2.2_2.2.13.orig.tar.gz: cached>
I: cyrus-imapd-2.2 [universe] -> cyrus-common-2.2_2.2.13-16ubuntu1 [universe].
I: cyrus-imapd-2.2 [universe] -> cyrus-doc-2.2_2.2.13-16ubuntu1 [universe].
I: cyrus-imapd-2.2 [universe] -> cyrus-imapd-2.2_2.2.13-16ubuntu1 [universe].
I: cyrus-imapd-2.2 [universe] -> cyrus-pop3d-2.2_2.2.13-16ubuntu1 [universe].
I: cyrus-imapd-2.2 [universe] -> cyrus-admin-2.2_2.2.13-16ubuntu1 [universe].
I: cyrus-imapd-2.2 [universe] -> cyrus-murder-2.2_2.2.13-16ubuntu1 [universe].
I: cyrus-imapd-2.2 [universe] -> cyrus-nntpd-2.2_2.2.13-16ubuntu1 [universe].
I: cyrus-imapd-2.2 [universe] -> cyrus-clients-2.2_2.2.13-16ubuntu1 [universe].
I: cyrus-imapd-2.2 [universe] -> cyrus-dev-2.2_2.2.13-16ubuntu1 [universe].
I: cyrus-imapd-2.2 [universe] -> libcyrus-imap-perl22_2.2.13-16ubuntu1 [universe].

Changed in cyrus-imapd-2.2 (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.