Quoting ellie timoney <[email protected]>:

Hi all,

In my testing, this patch fixes the ctl_mboxlist -m protocol error problem:
https://github.com/cyrusimap/cyrus-imapd/pull/4937/commits/80a92058a41ea22625164df479ba10d8f4e441bb.patch

The patch is against the master branch, but it should apply cleanly to any release that contains the CVE-2024-34055 fixes (please let me know if it doesn't). If you're able, can you try it out and confirm whether it fixes it for you?

It fix it on my test plateform :
   mupdate 3.2.12 (self debian package, without the patch)
and 3.2.6-2+deb11u2.1 (production, self package based on debian's bullseye one)
   backend 3.8.3 (self debian package, with the patch)
   frontend 3.8.3 (self debian package, with the patch)

I will test it on one production backend at night.

Sincerly,
    Jean Charles Delépine
--
Service systèmes et réseaux - DISI

Université de Picardie Jules Verne
5, rue du moulin neuf - 80000 Amiens


------------------------------------------
Cyrus: Info
Permalink: 
https://cyrus.topicbox.com/groups/info/T5a7b6ffa3591f516-Mb9aeb7c5344b7ec7ddaf60d1
Delivery options: https://cyrus.topicbox.com/groups/info/subscription

Reply via email to