Cyrus 2.3.18 Released
Bron Gondwana
brong at fastmail.fm
Tue Oct 4 16:27:48 EDT 2011
We are pleased to announce the release of Cyrus IMAPd 2.3.18.
This is a security update to the old stable series, containing
just a single fix to Secunia SA46093. Stefan Cornelius from
Secunia Research discovered that anonymous users can appear to
be authenticated as any useri to nttpd - by just failing to send
any PASS command.
You can download via HTTP or FTP:
http://cyrusimap.org/releases/cyrus-imapd-2.3.18.tar.gz
ftp://ftp.cyrusimap.org/cyrus-imapd/cyrus-imapd-2.3.18.tar.gz
Regards,
Bron.
More information about the Cyrus-announce
mailing list