ALT-PU-2025-6164-3
Package cyrus-imapd updated to version 3.4.6-alt3 for branch c9f2 in task 382910.
Closed vulnerabilities
BDU:2021-04683
Уязвимость аннотации сервера почтового сервера Cyrus IMAP, связанная с неправильным присвоением разрешений для критичного ресурса, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2022-01804
Уязвимость почтового сервера Cyrus IMAP, связанная с использованием криптографических алгоритмов, содержащих дефекты, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2021-32056
Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall.
- https://cyrus.topicbox.com/groups/announce/T056901c106ecfce3/cyrus-imap-3-4-1-released
- https://cyrus.topicbox.com/groups/announce/T056901c106ecfce3/cyrus-imap-3-4-1-released
- https://cyrus.topicbox.com/groups/announce/T126392718bc29d6b/cyrus-imap-3-2-7-released
- https://cyrus.topicbox.com/groups/announce/T126392718bc29d6b/cyrus-imap-3-2-7-released
- FEDORA-2022-d45bcc5447
- FEDORA-2022-d45bcc5447
- FEDORA-2022-c30b1a8aa3
- FEDORA-2022-c30b1a8aa3
- https://www.cyrusimap.org/imap/download/release-notes/3.2/x/3.2.7.html
- https://www.cyrusimap.org/imap/download/release-notes/3.2/x/3.2.7.html
- https://www.cyrusimap.org/imap/download/release-notes/3.4/x/3.4.1.html
- https://www.cyrusimap.org/imap/download/release-notes/3.4/x/3.4.1.html
Modified: 2024-11-21
CVE-2021-33582
Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16.
- https://cyrus.topicbox.com/groups/announce/T3dde0a2352462975-M1386fc44adf967e072f8df13/cyrus-imap-3-4-2-3-2-8-and-3-0-16-released
- https://cyrus.topicbox.com/groups/announce/T3dde0a2352462975-M1386fc44adf967e072f8df13/cyrus-imap-3-4-2-3-2-8-and-3-0-16-released
- https://github.com/cyrusimap/cyrus-imapd/commits/master
- https://github.com/cyrusimap/cyrus-imapd/commits/master
- https://github.com/cyrusimap/cyrus-imapd/security/advisories
- https://github.com/cyrusimap/cyrus-imapd/security/advisories
- [debian-lts-announce] 20220619 [SECURITY] [DLA 3052-1] cyrus-imapd security update
- [debian-lts-announce] 20220619 [SECURITY] [DLA 3052-1] cyrus-imapd security update
- FEDORA-2022-d45bcc5447
- FEDORA-2022-d45bcc5447
- FEDORA-2022-c30b1a8aa3
- FEDORA-2022-c30b1a8aa3
- https://www.cyrusimap.org/imap/download/release-notes/index.html
- https://www.cyrusimap.org/imap/download/release-notes/index.html