shield Security update for cyrus-imapd
openSUSE-2026-317


This update for cyrus-imapd fixes the following issues: - Update to 3.8.7 (bugfix release) * boo#1271617 CVE-2026-47081 XAPPLEPUSHSERVICE folder existence oracle and push hijack * boo#1271619 CVE-2026-47083 ESEARCH cross-user content oracle * boo#1271618 CVE-2026-47082 Vacation "fcc" skips destination-mailbox ACL * boo#1271620 CVE-2026-47084 LOCALDELETE bypassed ACL checks * boo#1271621 CVE-2026-47085 URLAUTH token forgery via missing mboxkey * boo#1271622 CVE-2026-47086 GENURLAUTH issued tokens bypassing ACLs * boo#1271623 CVE-2026-47087 URLAUTH does not honor revoked authorizer access * boo#1271624 CVE-2026-47088 Heap exposure in nested MIME comment parsing * boo#1271625 CVE-2026-47089 LISTRIGHTS not limited to users with admin access


cloud_download Downloads

SUSE Package Hub 15.7 ppc64le
SUSE Package Hub 15.7 s390x
SUSE Package Hub 15.7 x86_64
SUSE Package Hub 15.7 aarch64