The Cyrus IMAP and POP Mail Server
https://www.cyrusimap.org/3.2/
Cyrus is a highly scalable enterprise mail system designed for use in enterprise environments of various sizes using standards based technologies. Cyrus technologies scale from independent use in email departments to a system centrally managed in a large enterprise.
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout home:buschmann23:cyrus:3.2/cyrus-imapd && cd $_ - Create Badge
Refresh
Refresh
Source Files
| Filename | Size | Changed |
|---|---|---|
| cassandane-568a98e.tar.gz | 0000548887 536 KB | |
| cassandane-fix-annotator.patch | 0000000396 396 Bytes | |
| cassandane-no-syslog.patch | 0000000423 423 Bytes | |
| cassandane-set-libexecdir.patch | 0000001332 1.3 KB | |
| cassandane-testdata-20200727.tar.gz | 0000002648 2.59 KB | |
| cassandane.ini | 0000006737 6.58 KB | |
| cmu.mib | 0000002943 2.87 KB | |
| cyrus-imapd-2.5.13_implicit-definitions.patch | 0000000506 506 Bytes | |
| cyrus-imapd-3.2.2-use-python3.patch | 0000000413 413 Bytes | |
| cyrus-imapd-3.2.3-fix-perl-linking.patch | 0000002721 2.66 KB | |
| cyrus-imapd-3.2.8.tar.gz | 0012347287 11.8 MB | |
| cyrus-imapd-3.2.8.tar.gz.sig | 0000000310 310 Bytes | |
| cyrus-imapd-rc-2.tar.gz | 0000006569 6.42 KB | |
| cyrus-imapd-rpmlintrc | 0000000135 135 Bytes | |
| cyrus-imapd.changes | 0000101765 99.4 KB | |
| cyrus-imapd.spec | 0000029263 28.6 KB |
Revision 18 (latest revision is 31)
Matthias Fehring (buschmann23)
committed
(revision 18)
- update to version 3.2.8
* Security fixes
+ Fixed: Certain user inputs are used as hash table keys during
processing. A poorly chosen string hashing algorithm meant that
the user could control which bucket their data was stored in,
allowing a malicious user to direct many inputs to a single
bucket. Each subsequent insertion to the same bucket requires
a strcmp of every other entry in it. At tens of thousands of
entries, each new insertion could keep the CPU busy in a
strcmp loop for minutes. The string hashing algorithm has been
replaced with a better one, and now also uses a random seed
per hash table, so malicious inputs cannot be precomputed.
(CVE-2021-33582)
* Bug fixes
+ Fixed: missing CY namespace in some DAV responses
Comments 0