Yep, that's the correct link, we're waiting on the CVE folks to update the
listing out of reserved status
On Mon, May 27, 2019, at 11:10 PM, Savvas Karagiannidis wrote:
> Hi Ellie,
> is there any link for details about CVE-2019-11356?
> Tried googling it but couldn't find anything related or in cyrus mailing
> lists or in reported issues, other than this:
> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11356
>
> Regards,
> Savvas Karagiannidis
>
> On Mon, May 27, 2019 at 5:28 AM ellie timoney wrote:
>> The Cyrus team is proud to announce the immediate availability of a new
>> version of Cyrus IMAP: 3.0.10
>>
>> This release contains a fix for CVE-2019-11356, a buffer overrun
>> vulnerability in the httpd daemon. If you compile cyrus with HTTP support
>> enabled and your cyrus.conf contains SERVICES entries that run the httpd
>> daemon, you will need this upgrade.
>>
>> I'm trialling hosting the release files using Github's releases feature.
>> Please use the Github download links if possible, and advise if you have any
>> problems! (It may even download faster due to Github's content delivery
>> network.)
>>
>> Download URLs:
>>
>> https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.0.10/cyrus-imapd-3.0.10.tar.gz
>> https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.0.10/cyrus-imapd-3.0.10.tar.gz.sig
>>
>> https://www.cyrusimap.org/releases/cyrus-imapd-3.0.10.tar.gz
>> https://www.cyrusimap.org/releases/cyrus-imapd-3.0.10.tar.gz.sig
>>
>> Please consult the release notes and upgrade documentation before upgrading
>> to 3.0.10:
>>
>> https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.10.html
>> https://www.cyrusimap.org/imap/download/upgrade.html
>>
>> And join us on Github at https://github.com/cyrusimap/cyrus-imapd to report
>> issues, join in the deliberations of new features for the next Cyrus IMAP
>> release, and to contribute to the documentation.
>>
>> On behalf of the Cyrus team,
>>
>> Kind regards,
>>
>> ellie timoney
>>
>> Cyrus Home Page: http://www.cyrusimap.org/
>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>> To Unsubscribe:
>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
