Cyrus 2.3.18 Released

Bron Gondwana brong at fastmail.fm
Tue Oct 4 16:27:48 EDT 2011


We are pleased to announce the release of Cyrus IMAPd 2.3.18.

This is a security update to the old stable series, containing
just a single fix to Secunia SA46093.  Stefan Cornelius from
Secunia Research discovered that anonymous users can appear to
be authenticated as any useri to nttpd - by just failing to send
any PASS command.

You can download via HTTP or FTP:

http://cyrusimap.org/releases/cyrus-imapd-2.3.18.tar.gz
ftp://ftp.cyrusimap.org/cyrus-imapd/cyrus-imapd-2.3.18.tar.gz

Regards,

Bron.


More information about the Cyrus-announce mailing list