Lucene search

K
mageiaGentoo FoundationMGASA-2018-0160
HistoryMar 07, 2018 - 11:37 p.m.

Updated dovecot packages fix security vulnerabilities

2018-03-0723:37:26
Gentoo Foundation
advisories.mageia.org
7

0.317 Low

EPSS

Percentile

97.0%

Dovecot has been updated to version 2.2.34 to fix two security issues. CVE-2017-14461: This vulnerability comes in two flavors. A malicious party can send a specially crafted email to a vulnerable system, causing it to crash dovecot. In some systems, the mail can be stored into the mail system, causing crash every time it is being opened. CVE-2017-15130: If dovecot has been configured with local name or local net configuration blocks, SNI lookups can be used to trash memory with useless config by using random servernames.

OSVersionArchitecturePackageVersionFilename
Mageia6noarchdovecot< 2.2.34-1dovecot-2.2.34-1.mga6