Quoting ellie timoney <ellie@xxxxxxxxxxxx>:
Hi all,
In my testing, this patch fixes the ctl_mboxlist -m protocol error problem:
https://github.com/cyrusimap/cyrus-imapd/pull/4937/commits/80a92058a41ea22625164df479ba10d8f4e441bb.patch
The patch is against the master branch, but it should apply cleanly
to any release that contains the CVE-2024-34055 fixes (please let me
know if it doesn't). If you're able, can you try it out and confirm
whether it fixes it for you?
It fix it on my test plateform :
mupdate 3.2.12 (self debian package, without the patch)
and 3.2.6-2+deb11u2.1 (production, self package based on
debian's bullseye one)
backend 3.8.3 (self debian package, with the patch)
frontend 3.8.3 (self debian package, with the patch)
I will test it on one production backend at night.
Sincerly,
Jean Charles Delépine
--
Service systèmes et réseaux - DISI
Université de Picardie Jules Verne
5, rue du moulin neuf - 80000 Amiens
------------------------------------------
Cyrus: Info
Permalink: https://cyrus.topicbox.com/groups/info/T5a7b6ffa3591f516-Mb9aeb7c5344b7ec7ddaf60d1
Delivery options: https://cyrus.topicbox.com/groups/info/subscription