The Cyrus team is proud to announce the immediate availability of a new version
of Cyrus IMAP: 3.0.12
I'm trialling hosting the release files using Github's releases feature.
Please use the Github download links if possible, and advise if you have any
problems! (It may even download faster due to Github's content delivery
network.)
This release contains a fix for CVE-2019-18928, a session hijacking
vulnerability in the httpd daemon. If you compile cyrus with HTTP support
enabled, your cyrus.conf contains SERVICES entries that run the httpd daemon,
and you provide a proxy frontend service that reuses connections to the
backend, you will need this upgrade.
Download URLs:
https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.0.12/cyrus-imapd-3.0.12.tar.gz
https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.0.12/cyrus-imapd-3.0.12.tar.gz.sig
https://www.cyrusimap.org/releases/cyrus-imapd-3.0.12.tar.gz
https://www.cyrusimap.org/releases/cyrus-imapd-3.0.12.tar.gz.sig
Please consult the release notes and upgrade documentation before upgrading to
3.0.12:
https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.12.html
https://www.cyrusimap.org/imap/download/upgrade.html
And join us on Github at https://github.com/cyrusimap/cyrus-imapd to report
issues, join in the deliberations of new features for the next Cyrus IMAP
release, and to contribute to the documentation.
On behalf of the Cyrus team,
Kind regards,
ellie timoney
----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
