MGASA-2020-0010
- Source
- https://advisories.mageia.org/MGASA-2020-0010.html
- Import Source
- https://advisories.mageia.org/MGASA-2020-0010.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2020-0010
- Related
- Published
- 2020-01-05T15:37:51Z
- Modified
- 2020-01-05T15:11:01Z
- Summary
- Updated cyrus-imapd packages fix security vulnerability
- Details
-
Updated cyrus-imapd packages fix security vulnerability:
It was discovered that the lmtpd component of the Cyrus IMAP server created mailboxes with administrator privileges if the "fileinto" was used, bypassing ACL checks (CVE-2019-19783).
- References
-
- https://advisories.mageia.org/MGASA-2020-0010.html
- https://bugs.mageia.org/show_bug.cgi?id=25913
- https://www.cyrusimap.org/imap/download/release-notes/2.5/x/2.5.12.html
- https://www.cyrusimap.org/imap/download/release-notes/2.5/x/2.5.13.html
- https://www.cyrusimap.org/imap/download/release-notes/2.5/x/2.5.14.html
- https://www.cyrusimap.org/imap/download/release-notes/2.5/x/2.5.15.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/PHV3TUU53WCKJ3BBRK2EHAF44MSZEFK6/
- https://www.debian.org/security/2019/dsa-4590
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:7 / cyrus-imapd
Package
- Name
- cyrus-imapd
- Purl
- pkg:rpm/mageia/cyrus-imapd?distro=mageia-7