Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Oracle Linux 8 ELSA-2024-6973: Moderate Dovecot Updates for DoS Issues

oracle
Calendar Grey September 27, 2024
Oracle Linux Logo Esm H88
Oracle Linux Security Advisory ELSA-2024-7134 encompasses Postfix enhancements aimed at addressing vulnerabilities related to unauthorized access and performance degradation.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

[1:2.3.16-6] - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55219) - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55206)

SRPMs

http://oss.oracle.com/ol8/SRPMS-updates//dovecot-2.3.16-6.el8_10.src.rpm

x86_64

dovecot-2.3.16-6.el8_10.x86_64.rpm dovecot-mysql-2.3.16-6.el8_10.x86_64.rpm dovecot-pgsql-2.3.16-6.el8_10.x86_64.rpm dovecot-pigeonhole-2.3.16-6.el8_10.x86_64.rpm dovecot-2.3.16-6.el8_10.i686.rpm dovecot-devel-2.3.16-6.el8_10.i686.rpm dovecot-devel-2.3.16-6.el8_10.x86_64.rpm

aarch64

dovecot-2.3.16-6.el8_10.aarch64.rpm dovecot-mysql-2.3.16-6.el8_10.aarch64.rpm dovecot-pgsql-2.3.16-6.el8_10.aarch64.rpm dovecot-pigeonhole-2.3.16-6.el8_10.aarch64.rpm dovecot-devel-2.3.16-6.el8_10.aarch64.rpm

Related CVEs: CVE-2024-23184 CVE-2024-23185

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here