Cyrus IMAP 3.2.7 Release Notes
******************************

Download from GitHub:

   * https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-
     imapd-3.2.7/cyrus-imapd-3.2.7.tar.gz

   * https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-
     imapd-3.2.7/cyrus-imapd-3.2.7.tar.gz.sig


Changes since 3.2.6
===================


Security fixes:
---------------

* Fixed CVE-2021-32056: Remote authenticated users could bypass
  intended access restrictions on certain server annotations.
  Additionally, a long-standing bug in replication did not allow
  server annotations to be replicated.  Combining these two bugs, a
  remote authenticated user could stall replication, requiring
  administrator intervention.


Build changes
-------------

* Fixed: various symbols were missing explicit symbol visibility


Bug fixes
---------

* Fixed Issue #3225: xapian get_stopper() did not use the cached
  stoppers (thanks Дилян Палаузов)

* Fixed Issue #2882: reordered HTTP auth schemes to order expected by
  browsers

* Fixed Issue #3456: per-server annotations were unable to replicate