1. Forum
  2. Usenet
  3. LINUX.DEBIAN.ANNOUNCE.SEC

  • [SECURITY] [DSA 5752-1] dovecot security update

    From Moritz Muehlenhoff@21:1/5 to All on Wed Aug 21 10:10:01 2024
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-5752-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff August 21, 2024 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : dovecot
    CVE ID : CVE-2024-23184 CVE-2024-23185

    Two vulnerabilities have been discovered in the IMAP implementation of
    the Dovecot mail server: Excessive numbers of address headers or very
    large headers can result in high CPU usage, leading to denial of
    service.

    For the stable distribution (bookworm), these problems have been fixed in version 1:2.3.19.1+dfsg1-2.1+deb12u1.

    We recommend that you upgrade your dovecot packages.

    For the detailed security status of dovecot please refer to
    its security tracker page at: https://security-tracker.debian.org/tracker/dovecot

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmbFncMACgkQEMKTtsN8 TjZ0xxAAveHhF56P5MPxuYoZcbzB9MyDOQrfwFs8hSc7vOtEZ0KGWmegw7elEhBx 4x03JuhTXDZK2xrSq2VcoXZuM3Bh+p+I5OPQBvP+SFgfDyvKfoJZWedJpLFOzLyk X9cD56A+YyBeEE+iMaSwHp3GkR/La3xKDCobH+sbFHMlyLZrGLybLrWg5sN0By/y sxRGK54sVepldk7emFNdztoAG2kkl3LEZtJAQyk8gx6P2fOtjlprNFc//xoDCmzO K/KsDg2Nyba0Q3NwWvkre1md8bLSbxlvcxoMWOy1hP8g+1xIjejOFMet0wsBwu6S dAJCYy/qFKkRgOVy/IOLjWeAA3YCRJoCTNy8NNMzrjYd3J1ePH7dSAZLMW18eD4j lSlfjXMSe1BHoYiXGI25fBR6aNpdtJIDzgIMSDozmLFVZXwpzaRVlz3CfSQulLZn /u+eBrplj4cboR9YLXXYEdotrkfeIFbM8sgvzGHl3d8x8gO8+/2mqSbWGRynzJV+ DWXVPboiury7zV5FE9IyvyCAuWfnFZZQmVzLCJ7AD4QibQl2xbU0n0lWduyc+X9y lHc0tn2ndrpV9oUQlOLzJJkqIQch+/rEwEOIgzrR+sPUuLFQUE8vWIDxD+cnpCSZ s/ClFKWH/0oDFCPwnlGbHq1a905daOK7i7Xpsn7DMaTFHwtZB08=
    =qPW3
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)