Re: Cyrus IMSPd 1.6a4 and 1.7a Released

On Fri, 12 Dec 2003, Ted Cabeen wrote:

> Do you have a patch for the vulnerability?

Yes, however there are a *lot* of places that are likely to contain
unproven vulnerabilities that are also fixed in this release.

https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/cyrusimsp/imsp/abook.c.diff?r1=1.18&r2=1.19

Is the patch for the advisory that n.runs is about to publish.  I strongly
recommend you look at a full upgrade however.

-Rob

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper