Bug 24689 - dovecot new security issue CVE-2019-10691
Summary: dovecot new security issue CVE-2019-10691
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: Cauldron
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Stig-Ørjan Smelror
QA Contact: Sec team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-04-18 16:35 CEST by David Walser
Modified: 2019-08-11 20:26 CEST (History)
0 users

See Also:
Source RPM: dovecot-2.3.5.1-1.mga7.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2019-04-18 16:35:18 CEST 
Dovecot 2.5.3.2 has been released today (April 18), fixing a security issue:
https://dovecot.org/pipermail/dovecot-news/2019-April/000407.html
Comment 1 David Walser 2019-04-19 13:28:49 CEST 
Advisory for the issue:
https://www.openwall.com/lists/oss-security/2019/04/18/3
Comment 2 Stig-Ørjan Smelror 2019-04-19 14:33:05 CEST 
Version 2.3.5.2 pushed to Cauldron.

Cheers,
Stig

Status: NEW => RESOLVED
Resolution: (none) => FIXED

Comment 3 David Walser 2019-08-11 20:26:28 CEST 
Ubuntu advisory for this from April 23, for reference:
https://usn.ubuntu.com/3951-1/
Note You need to log in before you can comment on or make changes to this bug.