Bug#804182: cyrus-imapd-2.4: CVE-2015-8077 CVE-2015-8078

2015-11-16 Thread Ondřej Surý
Hi Salvatore, just letting you know I will take care of the security update this week. I just need to sort out the rest of the bugreports whether they are related to the +nocaldav bump or not. Cheers, Ondrej On Thu, Nov 5, 2015, at 21:10, Salvatore Bonaccorso wrote: > Source: cyrus-imapd-2.4 >

Bug#804182: cyrus-imapd-2.4: CVE-2015-8077 CVE-2015-8078

2015-11-05 Thread Salvatore Bonaccorso
Source: cyrus-imapd-2.4 Version: 2.4.17+nocaldav-2 Severity: important Tags: security upstream patch fixed-upstream Hi, the following vulnerabilities were published for cyrus-imapd-2.4. CVE-2015-8077[0]: | integer overflow in the start_octet addition after the |