Уведомление безопасности DSA-1688

Высокая (5.1)

(AV:N/AC:H/Au:N/C:P/I:P/A:P)

Debian

courier-authdaemon (any) courier-authlib (any) courier-authlib-dev (any) courier-authlib-ldap (any) courier-authlib-mysql (any) courier-authlib-pipe (any) courier-authlib-postgresql (any) courier-authlib-userdb (any)

Уведомление безопасности об уязвимостях courier-authlib-userdb, courier-authdaemon, courier-authlib-mysql, courier-authlib-pipe, courier-authlib-postgresql, courier-authlib-ldap, courier-authlib, courier-authlib-dev

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
courier-authlib-pipe - 0.58-4+etch2
courier-authlib-userdb - 0.58-4+etch2
courier-authlib - 0.58-4+etch2
courier-authdaemon - 0.58-4+etch2
courier-authlib-ldap - 0.58-4+etch2
courier-authlib-mysql - 0.58-4+etch2
courier-authlib-postgresql - 0.58-4+etch2
courier-authlib-dev - 0.58-4+etch2
s390x:
courier-authlib - 0.58-4+etch2
courier-authlib-ldap - 0.58-4+etch2
courier-authlib-userdb - 0.58-4+etch2
courier-authdaemon - 0.58-4+etch2
courier-authlib-pipe - 0.58-4+etch2
courier-authlib-mysql - 0.58-4+etch2
courier-authlib-dev - 0.58-4+etch2
courier-authlib-postgresql - 0.58-4+etch2
i686:
courier-authlib - 0.58-4+etch2
courier-authlib-dev - 0.58-4+etch2
courier-authlib-pipe - 0.58-4+etch2
courier-authlib-userdb - 0.58-4+etch2
courier-authlib-mysql - 0.58-4+etch2
courier-authlib-postgresql - 0.58-4+etch2
courier-authdaemon - 0.58-4+etch2
courier-authlib-ldap - 0.58-4+etch2
arm:
courier-authdaemon - 0.58-4+etch2
courier-authlib-dev - 0.58-4+etch2
courier-authlib-postgresql - 0.58-4+etch2
courier-authlib-userdb - 0.58-4+etch2
courier-authlib-ldap - 0.58-4+etch2
courier-authlib-pipe - 0.58-4+etch2
courier-authlib - 0.58-4+etch2
courier-authlib-mysql - 0.58-4+etch2
sparc:
courier-authdaemon - 0.58-4+etch2
courier-authlib-mysql - 0.58-4+etch2
courier-authlib-dev - 0.58-4+etch2
courier-authlib-ldap - 0.58-4+etch2
courier-authlib-userdb - 0.58-4+etch2
courier-authlib - 0.58-4+etch2
courier-authlib-postgresql - 0.58-4+etch2
courier-authlib-pipe - 0.58-4+etch2
x86-64:
courier-authdaemon - 0.58-4+etch2
courier-authlib-postgresql - 0.58-4+etch2
courier-authlib-userdb - 0.58-4+etch2
courier-authlib-pipe - 0.58-4+etch2
courier-authlib-dev - 0.58-4+etch2
courier-authlib-ldap - 0.58-4+etch2
courier-authlib-mysql - 0.58-4+etch2
courier-authlib - 0.58-4+etch2
alpha:
courier-authlib-ldap - 0.58-4+etch2
courier-authdaemon - 0.58-4+etch2
courier-authlib-mysql - 0.58-4+etch2
courier-authlib-postgresql - 0.58-4+etch2
courier-authlib-userdb - 0.58-4+etch2
courier-authlib-pipe - 0.58-4+etch2
courier-authlib-dev - 0.58-4+etch2
courier-authlib - 0.58-4+etch2
ia64:
courier-authlib-userdb - 0.58-4+etch2
courier-authlib-dev - 0.58-4+etch2
courier-authdaemon - 0.58-4+etch2
courier-authlib - 0.58-4+etch2
courier-authlib-pipe - 0.58-4+etch2
courier-authlib-mysql - 0.58-4+etch2
courier-authlib-ldap - 0.58-4+etch2
courier-authlib-postgresql - 0.58-4+etch2
mips:
courier-authdaemon - 0.58-4+etch2
courier-authlib - 0.58-4+etch2
courier-authlib-dev - 0.58-4+etch2
courier-authlib-userdb - 0.58-4+etch2
courier-authlib-postgresql - 0.58-4+etch2
courier-authlib-ldap - 0.58-4+etch2
courier-authlib-pipe - 0.58-4+etch2
courier-authlib-mysql - 0.58-4+etch2
mipsel:
courier-authlib - 0.58-4+etch2
courier-authlib-postgresql - 0.58-4+etch2
courier-authlib-ldap - 0.58-4+etch2
courier-authlib-userdb - 0.58-4+etch2
courier-authdaemon - 0.58-4+etch2
courier-authlib-dev - 0.58-4+etch2
courier-authlib-pipe - 0.58-4+etch2
courier-authlib-mysql - 0.58-4+etch2
hppa:
courier-authlib-ldap - 0.58-4+etch2
courier-authlib-dev - 0.58-4+etch2
courier-authlib - 0.58-4+etch2
courier-authlib-mysql - 0.58-4+etch2
courier-authlib-userdb - 0.58-4+etch2
courier-authlib-postgresql - 0.58-4+etch2
courier-authlib-pipe - 0.58-4+etch2
courier-authdaemon - 0.58-4+etch2

http://www.debian.org/security/dsa-1688/

Источник: CVE
Наименование: CVE-2008-2380
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2380

Источник: CVE
Наименование: CVE-2008-2667
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2667