Stay Secure with the Latest Linux Advisories

security advisorysecurity issuedovecot

Mageia: 2020-0222 Critical Security Update for Dovecot Service Crash

Dovecot has been updated to fix several security issues. Sending malformed NOOP command causes crash in submission, submission-login or lmtp service (CVE-2020-10957). . MGASA-2020-0222 - Updated dovecot packages fix security vulnerabilities Publication date: 24 May 2020 URL: https://advisories.mageia.org/MGASA-2020-0222.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-10957, CVE-2020-10958, CVE-2020-10967 Dovecot has been updated to fix several security issues. Sending malformed NOOP command causes crash in submission, submission-login or lmtp service (CVE-2020-10957). Sending command followed by sufficient number of newlines triggers a use-after-free bug that might crash submission-login, submission or lmtp service (CVE-2020-10958). Sending mail with empty quoted localpart causes submission or lmtp component to crash (CVE-2020-10967). References: - https://bugs.mageia.org/show_bug.cgi?id=26644 - https://www.openwall.com/lists/oss-security/2020/05/18/1 - https://www.cve.org/CVERecord?id=CVE-2020-10957 - https://www.cve.org/CVERecord?id=CVE-2020-10958 - https://www.cve.org/CVERecord?id=CVE-2020-10967 SRPMS: - 7/core/dovecot-2.3.10.1-1.mga7 . Dovecot security enhancement for Mageia resolves several service interruptions caused by incorrectly formatted commands. Significant patches implemented.. dovecot security, Mageia update, security advisory, server crash, service issues. . Severity: Critical. LinuxSecurity.com Team

May 24, 2020 •Critical Mageia