tocsin

Debian/cyrus-imapd: low 3.5

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH does not honor revoked authorizer access. A URLAUTH URL minted while the authorizer had access continued to work after that

Action: Upgrade cyrus-imapd to 3.6.1-4+deb12u5 or later.

Affected

introducedfixedlast affected
03.6.1-4+deb12u5-

Fixed versions

3.6.1-4+deb12u5

Sources

published · modified · JSON