tocsin

Debian/cyrus-imapd: medium 4.3

Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall.

Action: Upgrade cyrus-imapd to 3.2.6-2 or later.

Affected

introducedfixedlast affected
03.2.6-2-

Fixed versions

3.2.6-2

Sources

published · modified · JSON