- Home
- Download
- Contribute
- Support
- Cyrus SASL

# Cyrus IMAP 2.5.14 Release Notes

Important

This is a bug-fix release in the stable 2.5 series.

Refer to the Cyrus IMAP 2.5.0 Release Notes for important information about the 2.5 series, including upgrading instructions.

Download via HTTPS:

> - https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-2.5.14/cyrus-imapd-2.5.14.tar.gz
> - https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-2.5.14/cyrus-imapd-2.5.14.tar.gz.sig

## Changes Since 2.5.13

### Release changes

We’re trialing using the Github Releases feature. If you have trouble downloading this release, please report this to the mailing lists. Thanks!

### Security fixes

- Fixed CVE-2019-18928: unauthenticated HTTP requests no longer inherit authentication from the previous request on the same connection

### Build changes

- Can now build against ClamAV >= 0.101 (thanks Christoph Moench-Tegeder)

### Bug fixes

- Fixed Issue #2877: quota -f now works correctly with improved_mboxlist_sort: no
- Fixed Issue #2808: UNDUMP no longer crashes when quota needs updating