Cyrus IMAP 2.5.14 Release Notes

Important

This is a bug-fix release in the stable 2.5 series.

Refer to the Cyrus IMAP 2.5.0 Release Notes for important information about the 2.5 series, including upgrading instructions.

Download via HTTPS:

• https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-2.5.14/cyrus-imapd-2.5.14.tar.gz
• https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-2.5.14/cyrus-imapd-2.5.14.tar.gz.sig

Changes Since 2.5.13

Release changes

We’re trialing using the Github Releases feature. If you have trouble downloading this release, please report this to the mailing lists. Thanks!

Security fixes

• Fixed CVE-2019-18928: unauthenticated HTTP requests no longer inherit authentication from the previous request on the same connection

Build changes

• Can now build against ClamAV >= 0.101 (thanks Christoph Moench-Tegeder)

Bug fixes

• Fixed Issue #2877: quota -f now works correctly with improved_mboxlist_sort: no
• Fixed Issue #2808: UNDUMP no longer crashes when quota needs updating