SciLinux: SLSA-2019-2836-1 Important: Dovecot Buffer Overflow Issue

dovecot: improper NULL byte handling in IMAP and ManageSieve protocol parsers leads to out of bounds writes (CVE-2019-11500) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. SL7 x86_64 dovecot-2.2.36-3.el7_7.1.i686.rpm [More...]

Synopsis:          Important: dovecot security update
Advisory ID:       SLSA-2019:2836-1
Issue Date:        2019-09-20
CVE Numbers:       None
--

Security Fix(es):
    
    * dovecot: improper NULL byte handling in IMAP and ManageSieve protocol
    parsers leads to out of bounds writes (CVE-2019-11500)
    
    For more details about the security issue(s), including the impact, a CVSS
    score, acknowledgments, and other related information, refer to the CVE
    page(s) listed in the References section.
--

SL7
  x86_64
    dovecot-2.2.36-3.el7_7.1.i686.rpm
    dovecot-2.2.36-3.el7_7.1.x86_64.rpm
    dovecot-debuginfo-2.2.36-3.el7_7.1.i686.rpm
    dovecot-debuginfo-2.2.36-3.el7_7.1.x86_64.rpm
    dovecot-mysql-2.2.36-3.el7_7.1.x86_64.rpm
    dovecot-pgsql-2.2.36-3.el7_7.1.x86_64.rpm
    dovecot-pigeonhole-2.2.36-3.el7_7.1.x86_64.rpm
    dovecot-devel-2.2.36-3.el7_7.1.x86_64.rpm

- Scientific Linux Development Team