Re: Cyrus IMAP 3.0.10 released

2019-05-28 Thread ellie timoney
Yep, that's the correct link, we're waiting on the CVE folks to update the listing out of reserved status On Mon, May 27, 2019, at 11:10 PM, Savvas Karagiannidis wrote: > Hi Ellie, > is there any link for details about CVE-2019-11356? > Tried googling it but couldn't find anything related or in c

Re: Cyrus IMAP 3.0.10 released

2019-05-27 Thread Savvas Karagiannidis
Hi Ellie, is there any link for details about CVE-2019-11356? Tried googling it but couldn't find anything related or in cyrus mailing lists or in reported issues, other than this: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11356 Regards, Savvas Karagiannidis On Mon, May 27, 2019 at

Cyrus IMAP 3.0.10 released

2019-05-26 Thread ellie timoney
The Cyrus team is proud to announce the immediate availability of a new version of Cyrus IMAP: 3.0.10 This release contains a fix for CVE-2019-11356, a buffer overrun vulnerability in the httpd daemon. If you compile cyrus with HTTP support enabled and your cyrus.conf contains SERVICES entries