| Description: | Description:
The remote host is missing an update to libc-client
announced via advisory FEDORA-2005-1115.
The c-client library provides an API which allows
applications to access and manipulate remote mail boxes.
The library contains a bug in its mail_valid_net_parse()
function. If an application allows untrusted input to be
supplied to this function, its stack may become corrupted.
This update backports the fix from imap-2004g which resolves
this issue.
* Thu Dec 1 2005 Nalin Dahyabhai 2002e-17
- account for the /usr/share/ssl -> /etc/pki/tls move in the patch which
sets the locations at compile-time (more of #165967)
* Wed Nov 23 2005 Nalin Dahyabhai 2002e-16
- rebuild
* Wed Nov 23 2005 Nalin Dahyabhai 2002e-15
- rebuild
* Wed Nov 23 2005 Nalin Dahyabhai 2002e-14
- rebuild
* Wed Nov 23 2005 Nalin Dahyabhai 2002e-13
- apply fix for CVE-2005-2933: buffer overflow (#171345)
* Wed Nov 9 2005 Tomas Mraz 2002e-12
- rebuilt against new openssl
* Sat Oct 15 2005 Florian La Roche
- fix to rebuild at least, seems the way to specify the
include dir is a bit broken
Solution: Apply the appropriate updates.
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
This update can also be installed with the Update Agent
you can
launch the Update Agent with the 'up2date' command.
http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2005-1115
Risk factor : High
CVSS Score:
7.5
|
