oss-sec mailing list archives

Re: CVE for recent cyrus-imap issue

From: Tomas Hoger <thoger () redhat com>
Date: Mon, 14 Sep 2009 20:40:06 +0200

On Tue, 8 Sep 2009 18:07:33 +0200 Nico Golde
<oss-security+ml () ngolde de> wrote:

CVE-2009-2632


Looks like few more overflows were spotted and fixed by Dovecot
upstream while fixing this issue in their copy of CMU sieve code:

http://dovecot.org/list/dovecot-news/2009-September/000135.html

These seem to deserve separate CVE.

-- 
Tomas Hoger / Red Hat Security Response Team

Current thread:

CVE for recent cyrus-imap issue Sebastian Krahmer (Sep 08)
- Re: CVE for recent cyrus-imap issue Thomas Biege (Sep 08)
  - Re: CVE for recent cyrus-imap issue Chad Dougherty (Sep 08)
    - Re: CVE for recent cyrus-imap issue Nico Golde (Sep 08)
    - Re: CVE for recent cyrus-imap issue Steven M. Christey (Sep 08)
    - Re: CVE for recent cyrus-imap issue Tomas Hoger (Sep 14)
    - Re: CVE for recent cyrus-imap issue Steven M. Christey (Sep 16)
    - Re: CVE for recent cyrus-imap issue Tomas Hoger (Sep 17)