Marcus Rueckert
2cb5006e53
* CVE-2019-11500: IMAP protocol parser does not properly handle
NUL byte when scanning data in quoted strings, leading to out
of bounds heap memory writes. Found by Nick Roessler and Rafi
Rubin.
- update pigeonhole to 0.5.7.2
* CVE-2019-11500: ManageSieve protocol parser does not properly
handle NUL byte when scanning data in quoted strings, leading
to out of bounds heap memory writes. Found by Nick Roessler and
Rafi Rubin.
- refreshed patches to apply cleanly again:
dovecot-2.3.0-better_ssl_defaults.patch
dovecot-2.3.0-dont_use_etc_ssl_certs.patch
OBS-URL: https://build.opensuse.org/package/show/server:mail/dovecot23?expand=0&rev=52
18 lines
866 B
Standard ML
18 lines
866 B
Standard ML
-----BEGIN PGP SIGNATURE-----
|
|
|
|
iQJLBAABCAA1FiEEK+dKqz7nVN+5yA0zGKNIru1AnaEFAl1mKPUXHGRvdmVjb3Qt
|
|
Y2VAZG92ZWNvdC5vcmcACgkQGKNIru1AnaH5jA//ScAL3ofL2pxgt0NyS9Vuya8K
|
|
Y4Eof+UpeILJ/v/npfIlJjKsxg1L9WbReTmo5t2GgXtin0fbVor1LguCWuhmKR9U
|
|
HATQtIMNJxU3YIMGI80+0poHJW4rCfHQTQmBqChE535XGIWKT/XrGbqRgI02HrdB
|
|
SXGAXajqoWZG5qEcwr/wcsJ+HXLYsCE3ywvEqPQK1AUrKEo5sdGLOvbZ8sSUda4f
|
|
VUCPG7KJ5+KQX9/nf0mfXHUq2l8xwvlSyay8eiZ4SU+QUydi33GUTHYrhJwD/FOs
|
|
iiqUpu0iH+JDLl1VZd4pD3ruoraVeMsyvbPmuPXtxIzns5MrrmVYGptjBkB39V4E
|
|
pPCkmrCJUqTRga1V3+T2+xcZd8cz6alFAaIM7eYLQWz+8iJ2cxGGMPUFWY2CjvL/
|
|
errF9wJzm6YqpU087/JGBm+UiTnvgp1rvzV9QPEnUNkn9Q5ikLeCMy3sZ047pg1q
|
|
hOLYizeRt9fpEhF19nkDC4O4NA3g5hY489uRhDEueQpA2Ro3V1C2+cZo4pjhM7pf
|
|
L+DAenWTsup1c/TrA+hGXNJld7GGYcmDoXBmRmqs/whUKBa+js2irZtAzdkos+g9
|
|
yH2cm+ji91D6R+H1ZJxTgl31DBwt8QgQwJLMJ3JERKqKuiFD9Q73jia+2l7j4h3o
|
|
JPiM+UCudeqS8miBNQI=
|
|
=Zqi8
|
|
-----END PGP SIGNATURE-----
|