Skip to content
OpenAdvisories
Unscored RHSA-2011:0859 1 CVE

Red Hat Security Advisory: cyrus-imapd security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 37

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as cyrus-imapd 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::as cyrus-imapd-debuginfo 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::as cyrus-imapd-devel 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::as cyrus-imapd-murder 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::as cyrus-imapd-nntp 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::as cyrus-imapd-utils 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::as perl-Cyrus 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop cyrus-imapd 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop cyrus-imapd-debuginfo 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop cyrus-imapd-devel 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop cyrus-imapd-murder 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop cyrus-imapd-nntp 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop cyrus-imapd-utils 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop perl-Cyrus 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::es cyrus-imapd 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::es cyrus-imapd-debuginfo 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::es cyrus-imapd-devel 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::es cyrus-imapd-murder 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::es cyrus-imapd-nntp 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::es cyrus-imapd-utils 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::es perl-Cyrus 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::ws cyrus-imapd 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::ws cyrus-imapd-debuginfo 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::ws cyrus-imapd-devel 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::ws cyrus-imapd-murder 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::ws cyrus-imapd-nntp 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::ws cyrus-imapd-utils 0:2.2.12-15.el4
Red Hat · RHEL 4 enterprise_linux:4::ws perl-Cyrus 0:2.2.12-15.el4
Red Hat · RHEL 5 enterprise_linux:5::server cyrus-imapd 0:2.3.7-7.el5_6.4
Red Hat · RHEL 5 enterprise_linux:5::server cyrus-imapd-debuginfo 0:2.3.7-7.el5_6.4
Red Hat · RHEL 5 enterprise_linux:5::server cyrus-imapd-devel 0:2.3.7-7.el5_6.4
Red Hat · RHEL 5 enterprise_linux:5::server cyrus-imapd-perl 0:2.3.7-7.el5_6.4
Red Hat · RHEL 5 enterprise_linux:5::server cyrus-imapd-utils 0:2.3.7-7.el5_6.4
Red Hat · RHEL 6 enterprise_linux:6::server cyrus-imapd 0:2.3.16-6.el6_1.2
Red Hat · RHEL 6 enterprise_linux:6::server cyrus-imapd-debuginfo 0:2.3.16-6.el6_1.2
Red Hat · RHEL 6 enterprise_linux:6::server cyrus-imapd-devel 0:2.3.16-6.el6_1.2
Red Hat · RHEL 6 enterprise_linux:6::server cyrus-imapd-utils 0:2.3.16-6.el6_1.2

Vulnerabilities 1

  • Unscored —
    CVE-2011-1926

    The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O buffering, which allows ma…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=705288
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0859.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-1926
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1926
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1926