Bug 24739 - Dovecot security issue CVE-2019-11494 and CVE-2019-11499
Summary: Dovecot security issue CVE-2019-11494 and CVE-2019-11499
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: Cauldron
Hardware: All Linux
Priority: Normal critical
Target Milestone: ---
Assignee: Stig-Ørjan Smelror
QA Contact: Sec team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-04-30 20:06 CEST by Stig-Ørjan Smelror
Modified: 2019-08-11 20:45 CEST (History)
0 users

See Also:
Source RPM: dovecot-2.3.5.2-1.mga7.src.rpm
CVE: CVE-2019-11494 CVE-2019-11499
Status comment: Fixed upstream in 2.3.6

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Stig-Ørjan Smelror 2019-04-30 20:06:25 CEST 
The Dovecot team has issued warnings of two security issues.

https://dovecot.org/list/dovecot-news/2019-April/000409.html
https://dovecot.org/list/dovecot-news/2019-April/000410.html
Stig-Ørjan Smelror 2019-04-30 20:08:26 CEST

CVE: (none) => CVE-2019-11494 CVE-2019-11499
Status comment: (none) => Fixed upstream in 2.3.6

Comment 1 Stig-Ørjan Smelror 2019-04-30 21:23:33 CEST 
Version 2.3.6 has been pushed to SVN awaiting a push to the build system by the release managers.
Comment 2 Stig-Ørjan Smelror 2019-05-01 16:32:49 CEST 
Update pushed to Cauldron.

Resolution: (none) => FIXED
Status: NEW => RESOLVED

Comment 3 David Walser 2019-08-11 20:45:39 CEST 
Ubuntu advisory for this from April 30, for reference:
https://usn.ubuntu.com/3961-1/
Note You need to log in before you can comment on or make changes to this bug.