Cyrus IMAP 3.0.10 released

[Savvas Karagiannidis]

Hi Ellie,
is there any link for details about CVE-2019-11356?
Tried googling it but couldn't find anything related or in cyrus mailing
lists or in reported issues, other than this:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11356

Regards,
Savvas Karagiannidis

On Mon, May 27, 2019 at 5:28 AM ellie timoney <ellie at fastmail.com> wrote:

> The Cyrus team is proud to announce the immediate availability of a new
> version of Cyrus IMAP: 3.0.10
>
> This release contains a fix for CVE-2019-11356, a buffer overrun
> vulnerability in the httpd daemon.  If you compile cyrus with HTTP support
> enabled and your cyrus.conf contains SERVICES entries that run the httpd
> daemon, you will need this upgrade.
>
> I'm trialling hosting the release files using Github's releases feature.
> Please use the Github download links if possible, and advise if you have
> any problems!  (It may even download faster due to Github's content
> delivery network.)
>
> Download URLs:
>
>
> https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.0.10/cyrus-imapd-3.0.10.tar.gz
>
> https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.0.10/cyrus-imapd-3.0.10.tar.gz.sig
>
>     https://www.cyrusimap.org/releases/cyrus-imapd-3.0.10.tar.gz
>     https://www.cyrusimap.org/releases/cyrus-imapd-3.0.10.tar.gz.sig
>
> Please consult the release notes and upgrade documentation before
> upgrading to 3.0.10:
>
>
> https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.10.html
>     https://www.cyrusimap.org/imap/download/upgrade.html
>
> And join us on Github at https://github.com/cyrusimap/cyrus-imapd to
> report issues, join in the deliberations of new features for the next Cyrus
> IMAP release, and to contribute to the documentation.
>
> On behalf of the Cyrus team,
>
> Kind regards,
>
> ellie timoney
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20190527/b68a19f8/attachment.html>