Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall.
{ "binaries": [ { "binary_version": "3.4.2-2", "binary_name": "cyrus-admin" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-admin-dbgsym" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-caldav" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-caldav-dbgsym" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-clients" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-clients-dbgsym" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-common" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-common-dbgsym" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-dev" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-doc" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-imapd" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-imapd-dbgsym" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-murder" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-murder-dbgsym" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-nntpd" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-nntpd-dbgsym" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-pop3d" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-pop3d-dbgsym" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-replication" }, { "binary_version": "3.4.2-2", "binary_name": "cyrus-replication-dbgsym" }, { "binary_version": "3.4.2-2", "binary_name": "libcyrus-imap-perl" }, { "binary_version": "3.4.2-2", "binary_name": "libcyrus-imap-perl-dbgsym" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-admin" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-admin-dbgsym" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-caldav" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-caldav-dbgsym" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-clients" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-clients-dbgsym" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-common" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-common-dbgsym" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-dev" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-doc" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-imapd" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-imapd-dbgsym" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-murder" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-murder-dbgsym" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-nntpd" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-nntpd-dbgsym" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-pop3d" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-pop3d-dbgsym" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-replication" }, { "binary_version": "3.8.1-1build2", "binary_name": "cyrus-replication-dbgsym" }, { "binary_version": "3.8.1-1build2", "binary_name": "libcyrus-imap-perl" }, { "binary_version": "3.8.1-1build2", "binary_name": "libcyrus-imap-perl-dbgsym" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }