oss-sec mailing list archives

Re: Dovecot releases


From: Henri Salo <henri () nerv fi>
Date: Thu, 19 May 2011 21:52:32 +0300

On Thu, May 19, 2011 at 02:43:51PM -0400, Josh Bressers wrote:


----- Original Message -----
Henri Salo wrote:
Should these two get CVE-identifier(s)?

http://dovecot.org/pipermail/dovecot/2011-May/059085.html
http://dovecot.org/pipermail/dovecot/2011-May/059086.html

http://hg.dovecot.org/dovecot-1.1/rev/3698dfe0f21c


As best as I can tell, just the header NULL issue deserves a CVE id.
CVE-2011-1929

Thanks.

-- 
    JB

Thank you for your response. I wonder why Dovecot-project does not request these by themselves. I notified the 
mailing-list about new CVE-identifier.

Best regards,
Henri Salo


Current thread: