UbuntuUpdates.org

Package "uw-imap"

Name: uw-imap

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • c-client library for mail protocols - library files
  • c-client library for mail protocols - development files
  • mailbox locking program
  • c-client support programs
Latest version: 8:2007f~dfsg-5ubuntu0.18.04.2
Release: bionic (18.04)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "uw-imap" in Bionic

Repository Area Version
base universe 8:2007f~dfsg-5build1
updates universe 8:2007f~dfsg-5ubuntu0.18.04.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 8:2007f~dfsg-5ubuntu0.18.04.2 2019-10-21 21:07:33 UTC

  uw-imap (8:2007f~dfsg-5ubuntu0.18.04.2) bionic-security; urgency=medium

  * SECURITY UPDATE: Argument injection.
    - debian/patches/2013_disable_rsh.patch: Disable access to IMAP mailboxes
      through running imapd over rsh, and therefore ssh. Code using the library
      can enable it with tcp_parameters() after making sure that the IMAP
      server name is sanitized.
    - CVE-2018-19518

 -- Eduardo Barretto <email address hidden> Thu, 17 Oct 2019 10:52:18 -0300
CVE-2018-19518 University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_


About   -   Send Feedback to @ubuntu_updates