Red Hat Security AdvisoryRHSA-2021:1887
dovecot security and bug fix update
Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) dovecot-1:2.3.8-9.el8, dovecot-devel-1:2.3.8-9.el8
- Red Hat Enterprise Linux AppStream (v. 8) dovecot-1:2.3.8-9.el8, dovecot-mysql-1:2.3.8-9.el8, dovecot-pgsql-1:2.3.8-9.el8 +1
Fixes 2 records
Priority MEDIUM 40
Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04717 · Published 2021-01-04 · Partial fix CWE-20
Priority LOW 35
An issue was discovered in Dovecot before 2.3.13.
CVSS 3.1MEDIUM 6.8· Network · Low privileges · No interaction · EPSS 0.02784 · Published 2021-01-04 · Partial fix
