Medium ELSA-2020-4655 2 CVEs

Moderate: cyrus-imapd security update (Oracle Linux 8)

Published Nov 10, 2020 · Updated Nov 10, 2020

Ecosystem: Oracle Linux

Summary

[3.0.7-19]
- change ownership of pki files (#1710722)

[3.0.7-18]
- Move old changelog into separate file (#1671239)

[3.0.7-17]
- Add fix for CVE-2019-19783
- Add fix for CVE-2019-18928

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	cyrus-imapd	0:3.0.7-19.el8
Oracle Linux · 8	cyrus-imapd-utils	0:3.0.7-19.el8
Oracle Linux · 8	cyrus-imapd-vzic	0:3.0.7-19.el8

Vulnerabilities 2

Unscored —

CVE-2019-18928

Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows privilege escalation because an HTTP request may be interpr…

cyrus-imapd cyrus-imapd Debian Ubuntu

Nov 15, 2019
Unscored —

CVE-2019-19783

An issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8. If sieve script uplo…

cyrus-imapd cyrus-imapd Debian Ubuntu

Dec 16, 2019