Cyrus IMAP 3.2.7 Release Notes — Cyrus IMAP 3.12.2 documentation

# Cyrus IMAP 3.2.7 Release Notes

Download from GitHub:

> - https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.2.7/cyrus-imapd-3.2.7.tar.gz

> - https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.2.7/cyrus-imapd-3.2.7.tar.gz.sig

## Changes since 3.2.6

### Security fixes:

- Fixed CVE-2021-32056: Remote authenticated users could bypass intended access restrictions on certain server annotations. Additionally, a long-standing bug in replication did not allow server annotations to be replicated. Combining these two bugs, a remote authenticated user could stall replication, requiring administrator intervention.

### Build changes

- Fixed: various symbols were missing explicit symbol visibility

### Bug fixes

- Fixed Issue #3225: xapian get_stopper() did not use the cached stoppers (thanks Дилян Палаузов)

- Fixed Issue #2882: reordered HTTP auth schemes to order expected by browsers

- Fixed Issue #3456: per-server annotations were unable to replicate