Vulnerability STARTTLS in Courier - CVE-2011-0411

[IgorG]

Yes we have. It is mentioned RSS feed.

 

[HostaHost]

I strongly recommend you subscribe to our RSS feed here http://www.parallels.com/products/plesk/
We have already published corresponding MU and KB articles:

http://kb.parallels.com/en/113563 - Parallels Plesk Panel 8.6.0 MU#13
http://kb.parallels.com/en/113565 - Parallels Plesk Panel 9.5.4 MU#19

8.6 autoinstaller doesn't appear to know about it...

Retrieving information about the installed packages... 
File downloading PSA_8.6.0/dist-rpm-CentOS-4.2-i386/build-8.6.0-cos4.2-i386.hdr.gz: 10%..20%..30%..40%..50%..60%..70%..80%..90%..100% was finished.
File downloading PSA_8.6.0/update-rpm-CentOS-4.2-i386/update-8.6.0-cos4.2-i386.hdr.gz: 10%..20%..30%..40%..50%..60%..70%..80%..90%..100% was finished.
File downloading PSA_8.6.0/thirdparty-rpm-CentOS-4.2-i386/thirdparty-8.6.0-cos4.2-i386.hdr.gz: 10%..20%..30%..40%..50%..60%..70%..80%..90%..100% was finished.
Determining the packages that need to be installed.
Installing patches...
File downloading PSA_8.6.0/microupdates/MU1/common/common_func.php3: was skipped because of md5 checksum match.
File downloading PSA_8.6.0/microupdates/MU1/common/main.inc: was skipped because of md5 checksum match.
File downloading PSA_8.6.0/microupdates/MU2/common/Agent.php: was skipped because of md5 checksum match.
File downloading PSA_8.6.0/microupdates/MU5/common/class.ComponentsChecker.php: was skipped because of md5 checksum match.
File downloading PSA_8.6.0/microupdates/MU5/common/class.ComponentsShow.php: was skipped because of md5 checksum match.
File downloading PSA_8.6.0/microupdates/MU5/common/class.RestartServForm.php: was skipped because of md5 checksum match.
File downloading PSA_8.6.0/microupdates/MU5/common/class.ServiceControl.php: was skipped because of md5 checksum match.
File downloading PSA_8.6.0/microupdates/MU5/dist-rpm-CentOS-4.2-i386/packagemng: was skipped because of md5 checksum match.
File downloading PSA_8.6.0/microupdates/MU5/dist-rpm-CentOS-4.2-i386/mchk: was skipped because of md5 checksum match.
File downloading PSA_8.6.0/microupdates/MU6/common/class.Session.php: was skipped because of md5 checksum match.
File downloading PSA_8.6.0/microupdates/MU6/common/help.php: was skipped because of md5 checksum match.
File downloading PSA_8.6.0/microupdates/MU9/dist-rpm-CentOS-4.2-i386/psa.init: was skipped because of md5 checksum match.
File downloading PSA_8.6.0/microupdates/MU10/common/Image.php: was skipped because of md5 checksum match.
File downloading PSA_8.6.0/microupdates/MU11/common/compose.php: was skipped because of md5 checksum match.
File downloading PSA_8.6.0/microupdates/MU11/common/contacts.php: was skipped because of md5 checksum match.
File downloading PSA_8.6.0/microupdates/MU12/common/icon_browser.php: 38%..100% was finished.
The packages were installed successfully.

No mention of MU13, running it again...

Enter number to toggle the component or to view the group;
Type a number or a character of desired action [N]: 


To continue, you must select at least one component.
(press Enter to continue)

 

[IgorG]

According to http://64.131.90.31/PSA_8.6.0/microupdates/ MU#13 exists.

 

[HostaHost]

According to http://64.131.90.31/PSA_8.6.0/microupdates/ MU#13 exists.

Well that makes more sense; the supported platforms for 8.6 evidently are not all supported for the micro updates, I guess only select operating system versions are worthy of the update.

 

[IgorG]

There are patches only for supported OSes according to http://www.parallels.com/products/plesk/lifecycle

 

[HostaHost]

There are patches only for supported OSes according to http://www.parallels.com/products/plesk/lifecycle

Thank you for clarifying. Since Courier is released under the GNU General Public License, please provide me with the link so I can download the source code of the modified version of courier being distributed by Plesk in version 8.6 MU13 so that I can build my own for an 'unsupported' platform.

 

[IgorG]

You can find all our patches for courier-imap 8.6 version in attach.