Red Hat Security Advisory

RHSA-2019:2836

dovecot security update

Released 2019-09-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7) dovecot-1:2.2.36-3.el7_7.1, dovecot-1:2.2.36-3.el7_7.1.ppc, dovecot-mysql-1:2.2.36-3.el7_7.1 +2
Red Hat Enterprise Linux Server Optional (v. 7) dovecot-devel-1:2.2.36-3.el7_7.1
Red Hat Enterprise Linux Workstation (v. 7) dovecot-1:2.2.36-3.el7_7.1, dovecot-mysql-1:2.2.36-3.el7_7.1, dovecot-pgsql-1:2.2.36-3.el7_7.1 +1
Red Hat Enterprise Linux Workstation Optional (v. 7) dovecot-devel-1:2.2.36-3.el7_7.1

TI-2019-08591 CVE-2019-11500 · GHSA-mqm8-r3v6-8mmv

HIGH 77

In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.62324 Published 2019-08-29 Partial fix CWE-787