Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 415
Alerts This Week
Warning Icon 1 415

Fedora: 2016-BB22A24D3D moderate: dovecot authentication crash

fedora
Calendar Grey December 22, 2016
Dist Fedora Esm H88
Postfix security patch for Ubuntu resolves mailbox access errors, rectifies permission anomalies, and introduces measures to bolster overall system integrity.
- Fixed crash in auth process when auth-policy was configured and authentication was aborted/failed without a username set

Summary

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security

primarily in mind. It also contains a small POP3 server. It supports mail

in either of maildir or mbox formats.

The SQL drivers and authentication plug-ins are in their subpackages.

Update Information:

- Fixed crash in auth process when auth-policy was configured and authentication was aborted/failed without a username set. - director: If two users had different tags but the same hash, the users may have been redirected to the wrong tag's hosts. - Index files may have been thought incorrectly lost, causing "Missing middle file seq=.." to be logged and index rebuild. This happened more easily with IMAP hibernation enabled. - Various fixes to restoring state correctly in un-hibernation. - dovecot.index files were commonly 4 bytes per email too large. This is because 3 bytes per email were being wasted that could have been used for IMAP keywords. - Various fixes to handle dovecot.list.index corruption better. - lib-fts: Fixed assert-crash in address tokenizer with specific input. - Fixed assert-crash in HTML to text parsing with specific input (e.g. for FTS indexing or snippet generation) - doveadm sync -1: Fixed handling mailbox GUID conflicts. - sdbox, mdbox: Perform full index reb...

Change Log

References


[ 1 ] Bug #1401025 - CVE-2016-8652 dovecot: Remote crash when auth-policy component is activated [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1401025

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade dovecot' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: dovecot
Product: Fedora 24
Version: 2.2.27
Release: 1.fc24
URL: Summary : Secure imap and pop3 server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.