Debian Security Update DSA-4590 cyrus-imapd - security update

[LinuxBot]

It was discovered that the lmtpd component of the Cyrus IMAP server created mailboxes with administrator privileges if the fileinto was used, bypassing ACL checks.

Continue reading...