Name: | dovecot |
---|---|
Epoch: | 1 |
Version: | 2.3.8 |
Release: | 2.el8_2.1 |
Architecture: | aarch64 |
Group: | System Environment/Daemons |
Size: | 20519919 |
License: | MIT and LGPLv2 |
RPM: | dovecot-2.3.8-2.el8_2.1.aarch64.rpm |
Source RPM: | dovecot-2.3.8-2.el8_2.1.src.rpm |
Build Date: | Mon Jul 13 2020 |
Build Host: | ca-buildarm06.us.oracle.com |
Vendor: | Oracle America |
URL: | http://www.dovecot.org/ |
Summary: | Secure imap and pop3 server |
Description: | Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages. |
- fix CVE-2020-10957: malformed NOOP commands leads to DoS (#1840353)
- fix default attributes for ghost files
- dovecot updated to 2.3.8 with pigeonhole updated to 0.5.8 (#1653117)
- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes (#1741788)
- reset errno before iterating through users (#1630410)
- fix CVE-2019-3814: improper certificate validation (#1674370)
- do not print error message when restorecon is not present during install (#1626395) - change default config to use minimal UID = 1000 (#1630410)
- use OpenSSl implementation of HMAC, disable CRAM-MD5 when FIPS is enabled (#1618749)
- make key not that bigger (#1618714)
- generated key was too small (#1618714)