Updated imapsync packages fix an information disclosure

2014-03-1220:18:38

Gentoo Foundation

advisories.mageia.org

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

60.3%

JSON

Updated imapsync package fixes security vulnerability: Imapsync, by default, runs a “release check” when executed, which causes imapsync to connect to http://imapsync.lamiral.info and send information about the version of imapsync, the operating system and perl (CVE-2013-4279). The imapsync package has been patched to disable this feature.

OSVersionArchitecturePackageVersionFilename
Mageia3noarchimapsync< 1.584-1.1imapsync-1.584-1.1.mga3
Mageia4noarchimapsync< 1.584-1.1imapsync-1.584-1.1.mga4