lp:ubuntu/hoary-security/courier

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

5. By Martin Pitt on 2006-06-07

* SECURITY UPDATE: Remote DoS.
* courier/libs/comverp.c, verp_encode(): Fix endless loop with strings that
  contain '=' in the username part (before '@').
* Patch provided by upstream at
  http://www.courier-mta.org/beta/patches/verp-fix/.
* CVE-2006-2659

4. By Martin Pitt on 2005-12-09

* SECURITY UPDATE: Unauthorized access.
* authlib/authpam.c: Restore call to pam_acct_mgmt() to prevent granting
  access to disabled accounts.
* Patch by David Härdeman.
* References:
  - CVE-2005-3532
  - http://bugs.debian.org/211920

3. By Thom May on 2004-11-29

* Nathaniel McCallum
 - debian/*.init: pretty initscripts
 - debian/control: version depends on lsb-base

2. By Stefan Hornburg (Racke) on 2004-07-12

* new upstream release (/etc/courier/authmodulelist has been deprecated)
* backed out patch to quell FAM error messages, we just suppress them
  now as suggested by upstream (Closes: #253304)
* install authdaemon.passwd for changing passwords with courierauthtest
  (Closes: #256565, thanks to Mohammed Sameer <email address hidden> for the
  report)
* changed sample path for MySQL socket in /etc/courier/authmysqlrc to
  default location in Debian (Closes: #258619, thanks to Mike O'Connor
  <email address hidden> for the report)
* removed old ChangeLog from courier-base
* use environment variable LDFLAGS to pass -lcyrpt to ./configure
  instead of CFLAGS

1. By Stefan Hornburg (Racke) on 2004-07-12

Import upstream version 0.45.6