UbuntuUpdates.org

Package "uw-mailutils"

Name: uw-mailutils

Description:

c-client support programs
Latest version: 8:2007f~dfsg-5ubuntu0.18.04.2
Release: bionic (18.04)
Level: security
Repository: universe
Head package: uw-imap
Homepage: http://www.washington.edu/imap/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "uw-mailutils"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "uw-mailutils" in Bionic

Repository Area Version
base universe 8:2007f~dfsg-5build1
updates universe 8:2007f~dfsg-5ubuntu0.18.04.2

Changelog

Version: 8:2007f~dfsg-5ubuntu0.18.04.2 2019-10-21 21:07:33 UTC

  uw-imap (8:2007f~dfsg-5ubuntu0.18.04.2) bionic-security; urgency=medium

  * SECURITY UPDATE: Argument injection.
    - debian/patches/2013_disable_rsh.patch: Disable access to IMAP mailboxes
      through running imapd over rsh, and therefore ssh. Code using the library
      can enable it with tcp_parameters() after making sure that the IMAP
      server name is sanitized.
    - CVE-2018-19518

 -- Eduardo Barretto <email address hidden> Thu, 17 Oct 2019 10:52:18 -0300
CVE-2018-19518 University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_


About   -   Send Feedback to @ubuntu_updates