Yep, that's the correct link, we're waiting on the CVE folks to update the listing out of reserved status
On Mon, May 27, 2019, at 11:10 PM, Savvas Karagiannidis wrote: > Hi Ellie, > is there any link for details about CVE-2019-11356? > Tried googling it but couldn't find anything related or in cyrus mailing > lists or in reported issues, other than this: > https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11356 > > Regards, > Savvas Karagiannidis > > On Mon, May 27, 2019 at 5:28 AM ellie timoney <el...@fastmail.com> wrote: >> The Cyrus team is proud to announce the immediate availability of a new >> version of Cyrus IMAP: 3.0.10 >> >> This release contains a fix for CVE-2019-11356, a buffer overrun >> vulnerability in the httpd daemon. If you compile cyrus with HTTP support >> enabled and your cyrus.conf contains SERVICES entries that run the httpd >> daemon, you will need this upgrade. >> >> I'm trialling hosting the release files using Github's releases feature. >> Please use the Github download links if possible, and advise if you have any >> problems! (It may even download faster due to Github's content delivery >> network.) >> >> Download URLs: >> >> https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.0.10/cyrus-imapd-3.0.10.tar.gz >> https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.0.10/cyrus-imapd-3.0.10.tar.gz.sig >> >> https://www.cyrusimap.org/releases/cyrus-imapd-3.0.10.tar.gz >> https://www.cyrusimap.org/releases/cyrus-imapd-3.0.10.tar.gz.sig >> >> Please consult the release notes and upgrade documentation before upgrading >> to 3.0.10: >> >> https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.10.html >> https://www.cyrusimap.org/imap/download/upgrade.html >> >> And join us on Github at https://github.com/cyrusimap/cyrus-imapd to report >> issues, join in the deliberations of new features for the next Cyrus IMAP >> release, and to contribute to the documentation. >> >> On behalf of the Cyrus team, >> >> Kind regards, >> >> ellie timoney >> ---- >> Cyrus Home Page: http://www.cyrusimap.org/ >> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ >> To Unsubscribe: >> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
---- Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
