Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Fedora 21 Dovecot Security Update: Buffer Overflow Critical Fix

fedora
Calendar Grey November 15, 2015
Scroller Fedora
Postfix enhanced to address severe vulnerabilities such as stack overflow and memory leak scenarios. Vital for email security.
* dovecot updated to 2.2.19 * mdbox: Rebuilding could have caused message's reference count to overflow the 16bit number in some situations, causing problems when trying to expun...

Summary

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security

primarily in mind. It also contains a small POP3 server. It supports mail

in either of maildir or mbox formats.

The SQL drivers and authentication plug-ins are in their subpackages.

Update Information:

* dovecot updated to 2.2.19 * mdbox: Rebuilding could have caused message's reference count to overflow the 16bit number in some situations, causing problems when trying to expunge the duplicates. * Various search fixes (fts, solr, tika, lib-charset, indexer) * Various virtual plugin fixes * Various fixes and optimizations to dsync, imapc and pop3-migration * imap: Various RFC compliancy and crash fixes to NOTIFY * pigeonhole updated to 0.4.9 * ManageSieve: Fixed an assert failure occurring when a client disconnects during the GETSCRIPT command. - doveadm sieve plugin: Fixed incorrect initialization (mem leaks) of mail user. - sieve-filter command line tool: Fixed handling of failure-related implicit keep when there is an explicit default destination folder. - lib-sieve: Fixed bug in RFC5322 header folding.

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical update software fix mail server dovecot

Change Log

References


[ 1 ] Bug #1276607 - dovecot: Buffer overflow when handling pop3_deleted_flag setting https://bugzilla.redhat.com/show_bug.cgi?id=1276607

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update dovecot' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: dovecot
Product: Fedora 21
Version: 2.2.19
Release: 1.fc21
URL: Summary : Secure imap and pop3 server

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical update software fix mail server dovecot

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.