Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Fedora 22: 2015-48003c2343 Critical: Dovecot Message Overflow Fix

fedora
Calendar Grey November 15, 2015
Scroller Fedora
The recent upgrade to Dovecot 2.2.19 in Fedora 22 resolves the message reference count overflow problems and improves the functionality of IMAP.
* dovecot updated to 2.2.19 * mdbox: Rebuilding could have caused message's reference count to overflow the 16bit number in some situations, causing problems when trying to expun...

Summary

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security

primarily in mind. It also contains a small POP3 server. It supports mail

in either of maildir or mbox formats.

The SQL drivers and authentication plug-ins are in their subpackages.

Update Information:

* dovecot updated to 2.2.19 * mdbox: Rebuilding could have caused message's reference count to overflow the 16bit number in some situations, causing problems when trying to expunge the duplicates. * Various search fixes (fts, solr, tika, lib-charset, indexer) * Various virtual plugin fixes * Various fixes and optimizations to dsync, imapc and pop3-migration * imap: Various RFC compliancy and crash fixes to NOTIFY * pigeonhole updated to 0.4.9 * ManageSieve: Fixed an assert failure occurring when a client disconnects during the GETSCRIPT command. - doveadm sieve plugin: Fixed incorrect initialization (mem leaks) of mail user. - sieve-filter command line tool: Fixed handling of failure-related implicit keep when there is an explicit default destination folder. - lib-sieve: Fixed bug in RFC5322 header folding.

Topics%20covered

Topics Covered

security advisory buffer overflow Fedora security fix Dovecot IMAP message count issue

Change Log

References


[ 1 ] Bug #1276607 - dovecot: Buffer overflow when handling pop3_deleted_flag setting https://bugzilla.redhat.com/show_bug.cgi?id=1276607

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update dovecot' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: dovecot
Product: Fedora 22
Version: 2.2.19
Release: 1.fc22
URL: Summary : Secure imap and pop3 server

Topics%20covered

Topics Covered

security advisory buffer overflow Fedora security fix Dovecot IMAP message count issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.