Hi Ellie, is there any link for details about CVE-2019-11356? Tried googling it but couldn't find anything related or in cyrus mailing lists or in reported issues, other than this: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11356
Regards, Savvas Karagiannidis On Mon, May 27, 2019 at 5:28 AM ellie timoney <el...@fastmail.com> wrote: > The Cyrus team is proud to announce the immediate availability of a new > version of Cyrus IMAP: 3.0.10 > > This release contains a fix for CVE-2019-11356, a buffer overrun > vulnerability in the httpd daemon. If you compile cyrus with HTTP support > enabled and your cyrus.conf contains SERVICES entries that run the httpd > daemon, you will need this upgrade. > > I'm trialling hosting the release files using Github's releases feature. > Please use the Github download links if possible, and advise if you have > any problems! (It may even download faster due to Github's content > delivery network.) > > Download URLs: > > > https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.0.10/cyrus-imapd-3.0.10.tar.gz > > https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.0.10/cyrus-imapd-3.0.10.tar.gz.sig > > https://www.cyrusimap.org/releases/cyrus-imapd-3.0.10.tar.gz > https://www.cyrusimap.org/releases/cyrus-imapd-3.0.10.tar.gz.sig > > Please consult the release notes and upgrade documentation before > upgrading to 3.0.10: > > > https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.10.html > https://www.cyrusimap.org/imap/download/upgrade.html > > And join us on Github at https://github.com/cyrusimap/cyrus-imapd to > report issues, join in the deliberations of new features for the next Cyrus > IMAP release, and to contribute to the documentation. > > On behalf of the Cyrus team, > > Kind regards, > > ellie timoney > ---- > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus >
---- Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus