Red Hat Security AdvisoryRHSA-2019:2822
dovecot security update
Released 2019-09-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) dovecot-1:2.2.36-5.el8_0.1, dovecot-devel-1:2.2.36-5.el8_0.1
- Red Hat Enterprise Linux AppStream (v. 8) dovecot-1:2.2.36-5.el8_0.1, dovecot-mysql-1:2.2.36-5.el8_0.1, dovecot-pgsql-1:2.2.36-5.el8_0.1
Fixes 1 record
Priority HIGH 77
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.62324 · Published 2019-08-29 · Partial fix CWE-787
