Cyrus IMAP 2.5.14 Release Notes


This is a bug-fix release in the stable 2.5 series.

Refer to the Cyrus IMAP 2.5.0 Release Notes for important information about the 2.5 series, including upgrading instructions.

Download via HTTPS:

Changes Since 2.5.13

Release changes

We’re trialing using the Github Releases feature. If you have trouble downloading this release, please report this to the mailing lists. Thanks!

Security fixes

  • Fixed CVE-2019-18928: unauthenticated HTTP requests no longer inherit authentication from the previous request on the same connection

Build changes

  • Can now build against ClamAV >= 0.101 (thanks Christoph Moench-Tegeder)

Bug fixes

  • Fixed Issue #2877: quota -f now works correctly with improved_mboxlist_sort: no
  • Fixed Issue #2808: UNDUMP no longer crashes when quota needs updating