Advisories » MGASA-2014-0106

Updated imapsync package fixes CVE-2014-2014

Publication date: 27 Feb 2014
Modification date: 27 Feb 2014
Type: security
Affected Mageia releases : 3 , 4
CVE: CVE-2014-2014

Description

Updated imapsync package fixes security vulnerability:

In imapsync before 1.584, a certificate verification failure when using the
--tls option results in imapsync attempting a cleartext login (CVE-2014-2014).
                

References

• http://openwall.com/lists/oss-security/2014/02/18/5
• https://lists.fedoraproject.org/pipermail/package-announce/2014-February/128293.html
• https://bugs.mageia.org/show_bug.cgi?id=12770
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2014

SRPMS

4/core

• imapsync-1.584-1.mga4

3/core

• imapsync-1.584-1.mga3