<div dir="ltr"><div>Hi Ellie,</div><div>is there any link for details about 
CVE-2019-11356?</div><div>Tried googling it but couldn't find anything related or in cyrus mailing lists or in reported issues, other than this:</div><div><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11356">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11356</a></div><div><br></div><div>Regards,</div><div>Savvas Karagiannidis<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, May 27, 2019 at 5:28 AM ellie timoney <<a href="mailto:ellie@fastmail.com">ellie@fastmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">The Cyrus team is proud to announce the immediate availability of a new version of Cyrus IMAP: 3.0.10<br>
<br>
This release contains a fix for CVE-2019-11356, a buffer overrun vulnerability in the httpd daemon.  If you compile cyrus with HTTP support enabled and your cyrus.conf contains SERVICES entries that run the httpd daemon, you will need this upgrade.<br>
<br>
I'm trialling hosting the release files using Github's releases feature.  Please use the Github download links if possible, and advise if you have any problems!  (It may even download faster due to Github's content delivery network.)<br>
<br>
Download URLs:<br>
<br>
    <a href="https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.0.10/cyrus-imapd-3.0.10.tar.gz" rel="noreferrer" target="_blank">https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.0.10/cyrus-imapd-3.0.10.tar.gz</a><br>
    <a href="https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.0.10/cyrus-imapd-3.0.10.tar.gz.sig" rel="noreferrer" target="_blank">https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.0.10/cyrus-imapd-3.0.10.tar.gz.sig</a><br>
<br>
    <a href="https://www.cyrusimap.org/releases/cyrus-imapd-3.0.10.tar.gz" rel="noreferrer" target="_blank">https://www.cyrusimap.org/releases/cyrus-imapd-3.0.10.tar.gz</a><br>
    <a href="https://www.cyrusimap.org/releases/cyrus-imapd-3.0.10.tar.gz.sig" rel="noreferrer" target="_blank">https://www.cyrusimap.org/releases/cyrus-imapd-3.0.10.tar.gz.sig</a><br>
<br>
Please consult the release notes and upgrade documentation before upgrading to 3.0.10:<br>
<br>
    <a href="https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.10.html" rel="noreferrer" target="_blank">https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.10.html</a><br>
    <a href="https://www.cyrusimap.org/imap/download/upgrade.html" rel="noreferrer" target="_blank">https://www.cyrusimap.org/imap/download/upgrade.html</a><br>
<br>
And join us on Github at <a href="https://github.com/cyrusimap/cyrus-imapd" rel="noreferrer" target="_blank">https://github.com/cyrusimap/cyrus-imapd</a> to report issues, join in the deliberations of new features for the next Cyrus IMAP release, and to contribute to the documentation.<br>
<br>
On behalf of the Cyrus team,<br>
<br>
Kind regards,<br>
<br>
ellie timoney<br>
----<br>
Cyrus Home Page: <a href="http://www.cyrusimap.org/" rel="noreferrer" target="_blank">http://www.cyrusimap.org/</a><br>
List Archives/Info: <a href="http://lists.andrew.cmu.edu/pipermail/info-cyrus/" rel="noreferrer" target="_blank">http://lists.andrew.cmu.edu/pipermail/info-cyrus/</a><br>
To Unsubscribe:<br>
<a href="https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus" rel="noreferrer" target="_blank">https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus</a><br>
</blockquote></div>