Re: Security advisory: uw-imap - 3 attachments

2005-10-14 Thread Eric Blake
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 According to Christian Weinberger on 10/14/2005 12:26 AM: > I could not post to the cygwin applications list via gmane, so I reply > to the main list. Apologies if this not the way it should be done. I don't know why cygwin-apps is registered as a on

Re: Security advisory: uw-imap - 3 attachments

2005-10-13 Thread Christian Weinberger
> uw-imap (whose maintainer, AFAICS, has yet to respond to reply to > Corinna's message) is vulnerable to remote overflow of a buffer in the > IMAP server leading to execution of arbitrary code. > > The only solution is to upgrade to 2004g (current Cygwin release is > 2002e!). I built 2004g and