Fedora 8 Update: up-imapproxy-1.2.7.rc1-1.fc8

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-9161
2008-10-24 22:46:10
--------------------------------------------------------------------------------

Name        : up-imapproxy
Product     : Fedora 8
Version     : 1.2.7.rc1
Release     : 1.fc8
URL         : http://www.imapproxy.org
Summary     : University of Pittsburgh IMAP Proxy
Description :
imapproxy was written to compensate for webmail clients that are
unable to maintain persistent connections to an IMAP server. Most
webmail clients need to log in to an IMAP server for nearly every
single transaction. This behaviour can cause tragic performance
problems on the IMAP server. imapproxy tries to deal with this problem
by leaving server connections open for a short time after a webmail
client logs out. When the webmail client connects again, imapproxy
will determine if there's a cached connection available and reuse it
if possible.

--------------------------------------------------------------------------------
Update Information:

If the client sends the AUTHENTICATE LOGIN command, imapproxy overflows the
username and password buffers, triggering a crash.  I think the only possible
result is a crash (it is just writing too many zeros).    Fixed upstream
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #465859 - Buffer overflow with AUTHENTICATE LOGIN
        https://bugzilla.redhat.com/show_bug.cgi?id=465859
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update up-imapproxy' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------