tocsin

Debian/cyrus-imapd: low 3.1

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in nested MIME comment parsing. An authenticated IMAP user could craft an email message containing an RFC 82

Action: Upgrade cyrus-imapd to 3.6.1-4+deb12u5 or later.

Affected

introducedfixedlast affected
03.6.1-4+deb12u5-

Fixed versions

3.6.1-4+deb12u5

Sources

published · modified · JSON