Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "cyrus-admin", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-admin-dbgsym", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-caldav", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-caldav-dbgsym", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-clients", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-clients-dbgsym", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-common", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-common-dbgsym", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-dev", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-doc", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-imapd", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-imapd-dbgsym", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-murder", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-murder-dbgsym", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-nntpd", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-nntpd-dbgsym", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-pop3d", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-pop3d-dbgsym", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-replication", "binary_version": "3.4.2-2" }, { "binary_name": "cyrus-replication-dbgsym", "binary_version": "3.4.2-2" }, { "binary_name": "libcyrus-imap-perl", "binary_version": "3.4.2-2" }, { "binary_name": "libcyrus-imap-perl-dbgsym", "binary_version": "3.4.2-2" } ], "ubuntu_priority": "medium" }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "cyrus-admin", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-admin-dbgsym", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-caldav", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-caldav-dbgsym", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-clients", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-clients-dbgsym", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-common", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-common-dbgsym", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-dev", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-doc", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-imapd", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-imapd-dbgsym", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-murder", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-murder-dbgsym", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-nntpd", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-nntpd-dbgsym", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-pop3d", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-pop3d-dbgsym", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-replication", "binary_version": "3.8.1-1build2" }, { "binary_name": "cyrus-replication-dbgsym", "binary_version": "3.8.1-1build2" }, { "binary_name": "libcyrus-imap-perl", "binary_version": "3.8.1-1build2" }, { "binary_name": "libcyrus-imap-perl-dbgsym", "binary_version": "3.8.1-1build2" } ], "ubuntu_priority": "medium" }