Pegasus Mail & Mercury

This patch corrects a vulnerability in the MercuryS SMTP server where a maliciously constructed AUTH command could cause buffer overflows and potentially compromise your machine. All sites using MercuryS exposed to the open Internet should regard this patch as mandatory.

This patch corrects a vulnerability in the MercuryS SMTP server where a maliciously constructed AUTH command could cause buffer overflows and potentially compromise your machine. You must be running Mercury/32 patched to v4.01b before installing this patch. All sites using MercuryS exposed to the open Internet should regard this patch as ...

A patch for MercuryP v4.51 is now available at http://community.pmail.com/files/folders/patches/entry2517.aspx. The patch addresses the UIDL response to issue a NUL list instead of issuing an error when a maildrop is empty. The RFC regarding this response is vague, however the previous error response from Mercury when the maildrop is empty causes ...

This is a patch for MercuryP v4.51 that responds to the POP3 UIDL command slightly differently when the mailbox is empty. It now defaults to sending a NUL list instead of issuing an error. The default behaviour is now to use NUL lists instead of issuing the error, but this can be changed using an INIfile setting if necessary. Note that ...

This patch corrects a vulnerability and addresses some memory leaks in the MercuryI IMAP server. You must be running Mercury/32 patched to v4.01b before installing this patch. All sites using IMAP servers exposed to the open Internet should regard this patch as mandatory.

This patch corrects vulnerabilities in the MercuryH PH Server and MercuryW PopPass server that could result in affected systems being compromised. All sites running Mercury v4.01a, v4.01b or a v4.10 beta and using these modules should regard this upgrade as mandatory.

This patch will upgrade an existing Mercury/32 v4.01a installation to v4.01b; it can only be used to ugprade from v4.01a, not from earlier versions. See the file called README.TXT in the archive for installation instructions.

A v4.01b patch is now available for Mercury/32. This patch fixes some buffer overflow vulnerabilities and memory leaks in the MercuryI IMAP server, and extends the transaction level filtering capabilities of the MercuryS SMTP server. All sites running v4.01a should consider this a mandatory upgrade.