Fedora: 2009-0382 Critical: uw-imap Buffer Overflow Fix

The uw-imap package provides UW server daemons for both the IMAP (Internet

Message Access Protocol) and POP (Post Office Protocol) mail access

protocols. The POP protocol uses a "post office" machine to collect

mail for users and allows users to download their mail to their local

machine for reading. The IMAP protocol allows a user to read mail on a

remote machine without downloading it to their local machine.

Update to new upstream version - 2007e. Contains fix for a security issue -buffer overflow in rfc822_output_char / rfc822_output_data (CVE-2008-5514).

* Fri Dec 19 2008 Rex Dieter 2007e-1

- imap-2007e

* Fri Oct 31 2008 Rex Dieter 2007d-1

- imap-2007d

* Wed Oct 1 2008 Rex Dieter 2007b-2

- fix build (patch fuzz) (#464985)

* Fri Jun 13 2008 Rex Dieter 2007b-1

- imap-2007b

* Sun May 18 2008 Rex Dieter 2007a1-3

- libc-client: incomplete list of obsoletes (#446240)

[ 1 ] Bug #477227 - CVE-2008-5514 libc-client: buffer overflow in rfc822_output_char / rfc822_output_data

https://bugzilla.redhat.com/show_bug.cgi?id=477227

su -c 'yum update uw-imap' at the command line.

For more information, refer to "Managing Software with yum",

available at .

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/