Cyrus 2.3.18 Released
Bron Gondwana <[email protected]> Tue, 4 Oct 2011 22:27:48 +0200
| Newsgroups | gmane.mail.imap.cyrus.announce |
|---|---|
| Message-ID | <20111004202748.GA31468__20994.3762435161$1317760135$gmane$org@brong.net> |
We are pleased to announce the release of Cyrus IMAPd 2.3.18. This is a security update to the old stable series, containing just a single fix to Secunia SA46093. Stefan Cornelius from Secunia Research discovered that anonymous users can appear to be authenticated as any useri to nttpd - by just failing to send any PASS command. You can download via HTTP or FTP: http://cyrusimap.org/releases/cyrus-imapd-2.3.18.tar.gz ftp://ftp.cyrusimap.org/cyrus-imapd/cyrus-imapd-2.3.18.tar.gz Regards, Bron.