cyrus-imapd-3.4.8-1.el9

エラータID: AXSA:2024-9200:03

Release date: 
Thursday, December 12, 2024 - 10:58
Subject: 
cyrus-imapd-3.4.8-1.el9
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and SIEVE support.

Security Fix(es):

* cyrus-imapd: unbounded memory allocation by sending many LITERALs in a single command (CVE-2024-34055)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the MIRACLE LINUX 9.5 Release Notes linked from the References section.

CVE-2024-34055
Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.

Solution: 

Update packages.

CVEs: 
CVE-2024-34055
Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.
Additional Info: 

N/A

Download: 

SRPMS
  1. cyrus-imapd-3.4.8-1.el9.src.rpm
    MD5: 6f08b42c52d0e410770cd9e962d71b75
    SHA-256: 81ae62df67840870d9826d899693c35deb8f6216706f9e69a750fc4b1c465c2e
    Size: 12.39 MB

Asianux Server 9 for x86_64
  1. cyrus-imapd-3.4.8-1.el9.x86_64.rpm
    MD5: 94081f98ff2fafe5554f390fa532d84a
    SHA-256: 26866242f76754a071c02cac2650713b143903135aeeca88d9eb494f8092c4d3
    Size: 1.62 MB
  2. cyrus-imapd-libs-3.4.8-1.el9.i686.rpm
    MD5: f8fdfc7bf1fdbdcbd700fb502dad68a7
    SHA-256: 986633ff6bbf4bba011a7deece91983b64e22e3ad16358a3d0e1b93ff6490f0e
    Size: 868.25 kB
  3. cyrus-imapd-libs-3.4.8-1.el9.x86_64.rpm
    MD5: 9fbd531e7169099e79dfaedf9b5ad82b
    SHA-256: f81b14775bf31f95839ae6e79250c233345b2d2e6856ed34b4a5605e764af29a
    Size: 811.94 kB
  4. cyrus-imapd-utils-3.4.8-1.el9.x86_64.rpm
    MD5: 40efe3de9919735f4318e3db1deb8c8e
    SHA-256: 5b2cef5e213a5bcce39784df6653ee2816a1bc26324199b34f19a3c85db65bdb
    Size: 76.39 kB
  5. perl-Cyrus-3.4.8-1.el9.x86_64.rpm
    MD5: c498ba462d93a63f244e07fcf34c3a21
    SHA-256: de60049dd80ccdbb2b225fd83321c0e819c29b1684bc1430bddafe1ff18fb5ed
    Size: 271.58 kB