[linux-security] Re: IMAPD fix for RH

["Richard Stevenson" <richard al pmail gen nz>]

On 20 Jul 98, at 23:26, djb redhat com said this about [linux-security] Re: IMAPD fix for RH:

> > It appears that uninstalling the imap rpm uninstalls the pop mail service as
> > well, or at least disables it.  Is this uncool?  Is it safe to leave it
> > installed (but removed from inetd.conf) for the sake of keeping pop service in
> > place?
> 
> I'm not sure, actually.  The POP code comes from the imap package, so
> presumably you need to updated it *all* if you use any of it to make
> sure you are safe from attack.  

The overflow in this case appears to be in an IMAP-specific 
authentication mechanism, and so shouldn't affect the POP 
daemons.  I upgraded the lot anyway :-))

Cheers

Richard

--
Richard Stevenson
richard al pmail gen nz
PGP Key ID 0x0E5A2DD5
fingerprint = 7B DD 1C 51 76 05 A1 42  44 2E DD 61 78 DB 2D 07