<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd"><html><head><meta name="qrichtext" content="1" /><style type="text/css">p, li { white-space: pre-wrap; }</style></head><body style=" font-family:'Sans Serif'; font-size:12pt; font-weight:400; font-style:normal;">Op vrijdag 09 oktober 2009 11:38:27 schreef Thomas Arendsen Hein:<br>
> * Richard Bos <ml@radoeka.nl> [20091008 17:49]:<br>
> > Op donderdag 08 oktober 2009 12:37:19 schreef Thomas Arendsen Hein:<br>
> > > * Richard Bos <ml@radoeka.nl> [20091007 20:36]:<br>
> > > > I solved it by using this patch:<br>
> > > > --- ./cyrus-imapd-2.3.14/ptclient/afskrb.c 2008-03-24<br>
> > > > 19:34:22.000000000 +0100<br>
> > > > +++ ./cyrus-imapd-2.3.14.new/ptclient/afskrb.c 2009-10-07<br>
> > > > 20:00:07.000000000 +0200<br>
> > > > @@ -546,6 +546,7 @@<br>
> > > > int *dsize __attribute__((unused)))<br>
> > > > {<br>
> > > > fatal("PTS module (afskrb) not compiled in", EC_CONFIG);<br>
> > > > + return 0;<br>
> > > > }<br>
> > > ><br>
> > > > #endif /* HAVE_AFSKRB */<br>
> > ><br>
> > > Please report this bug to the OpenLDAP people, unless it is already<br>
> > > fixed in a newer version.<br>
> ><br>
> > Do you really mean openLDAP or do you mean cyrus?<br>
><br>
> Of course, my brain is just playing tricks on me due to a cold.<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>Don't worry, as long as it is a lively discussion mistakes like this are correctly quickly :)<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>> > > And you should use 2.3.15 (or the patch from kolab_2_2_branch)<br>
> > > anyway to close a security issue with sieve scripts.<br>
> ><br>
> > I'll upgrade to 2.3.15 as soon as possible. Do you have a url to the<br>
> > patch from kolab_2_2_branch, or a pointer to the repository / directory<br>
> > that contains the patch?<br>
><br>
> http://kolab.org/cgi-bin/viewcvs-kolab.cgi/server/imapd/Attic/CVE-2009-2632<br>
>.patch?only_with_tag=kolab_2_2_branch<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>Ah! I'm in the comfortable position of using openSUSE's native cyrus spec file (that contains a switch to enable kolab). This native package is already equipped with the patch that you refer to above :) Even without me knowing it, the security patch was already there!<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>-- <br>
Richard</p></body></html>