I'm pleased to announce the release of Cyrus IMAPd 2.2.9. This release implements several bugfixes, notably one where lmtpproxyd could reuse a freed connection, another involving a pre-authentication buffer overrun in "imap magic plus" support (CAN-2004-1011) and lack of bounds checking in PARTIAL and FETCH. (CAN-2004-1012, CAN-2004-1013)

It contains no new features.

A full list of changes is available in doc/changes.html in the distribution.

Download the release at:
ftp://ftp.andrew.cmu.edu/pub/cyrus/cyrus-imapd-2.2.9.tar.gz
or
http://ftp.andrew.cmu.edu/pub/cyrus/cyrus-imapd-2.2.9.tar.gz

Thanks to Stefan Esser for the reports on the buffer overrun and bounds checking problems.

Derrick Brashear

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Reply via email to