RFC: proposed fix for CVE-2018-19518 in uw-imap

2018-12-22 Thread Roberto C . Sánchez
[note: I am not subscribed to debian-security; please keep me or debian-lts addressed on replies] Hello all, I have been working on trying to reproduce CVE-2018-19518 in uw-imap. I had already prepared PHP updates for jessie and wheezy to address that aspect of the vulnerability, though neither

Re: pdns/pdns-recursor

2018-12-22 Thread Moritz Mühlenhoff
On Sat, Dec 22, 2018 at 01:02:06PM +0530, Abhijith PA wrote: > Hello. > > > I am currently working on pdns[1] and pdns-recursor's[2] security issues > and which are marked as no-DSA, postponed. Last month I picked it up as > I had some time remaining. Upstream patch is available for the remaining