Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | cyrus-imapd | 0:3.0.7-19.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | cyrus-imapd-debuginfo | 0:3.0.7-19.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | cyrus-imapd-debugsource | 0:3.0.7-19.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | cyrus-imapd-utils | 0:3.0.7-19.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | cyrus-imapd-utils-debuginfo | 0:3.0.7-19.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | cyrus-imapd-vzic | 0:3.0.7-19.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | cyrus-imapd-vzic-debuginfo | 0:3.0.7-19.el8 |
Vulnerabilities 2
-
Unscored —
Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows privilege escalation because an HTTP request may be interpr…
-
Unscored —
An issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8. If sieve script uplo…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1671239
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1710722
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1775177
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1786756
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4655.json
-
report
https://access.redhat.com/security/cve/CVE-2019-18928
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-18928
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-18928
-
article
https://github.com/cyrusimap/cyrus-imapd/issues/2904
-
report
https://access.redhat.com/security/cve/CVE-2019-19783
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-19783
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-19783