Fedora Linux 8569 Published by

An imapfilter security update is available for Fedora 31



--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-a6c5d70bde
2019-11-27 00:22:45.363482
--------------------------------------------------------------------------------

Name : imapfilter
Product : Fedora 31
Version : 2.6.15
Release : 1.fc31
URL : https://github.com/lefcha/imapfilter/
Summary : A flexible client side mail filtering utility for IMAP servers
Description :
IMAPFilter is a mail filtering utility. It connects to remote mail servers
using the Internet Message Access Protocol (IMAP), sends searching queries
to the server and processes mailboxes based on the results. It can be used
to delete, copy, move, flag, etc. messages residing in mailboxes at the
same or different mail servers. The 4rev1 and 4 versions of the IMAP
protocol are supported.

--------------------------------------------------------------------------------
Update Information:

New upstream release: fixes CVE-2016-10937
--------------------------------------------------------------------------------
ChangeLog:

* Thu Nov 14 2019 Andrea Veri - 2.6.15-1
- New upstream release. (Fixes CVE-2016-10937)
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #1765135 - CVE-2016-10937 imapfilter: Missing validation for hostname in an SSL certificate [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1765135
[ 2 ] Bug #1765136 - CVE-2016-10937 imapfilter: Missing validation for hostname in an SSL certificate [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1765136
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-a6c5d70bde' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys