ELSA-2013-0520

ELSA-2013-0520 - dovecot security and bug fix update

Type:	SECURITY
Severity:	LOW
Release Date:	2013-02-22

Description

[1:2.0.9-5]
- script-login did not drop privileges correctly (#709095)
- fix directory traversal due to not obeying chroot directive (#709097)
- check proxy destination host against SSL certificate name (#754980)

[1:2.0.9-4]
- dovecot may not set correct premissions for mail folder (#697620)

[1:2.0.9-3]
- fix potential crash when parsing header names that contain NUL characters (#728673)

Related CVEs

CVE-2011-2166

CVE-2011-2167

CVE-2011-4318

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	dovecot-2.0.9-5.el6.src.rpm	257146c31a796f77958060e4eb03c427	ELSA-2019-2885
	dovecot-2.0.9-5.el6.i686.rpm	4c8c13fdd05a71f1557a8fde9abd6a0e	ELSA-2019-2885
	dovecot-devel-2.0.9-5.el6.i686.rpm	1ea52e4ad0971fbb3544542f5e2378ca	ELSA-2019-2885
	dovecot-mysql-2.0.9-5.el6.i686.rpm	15664d94546bb741ee12144c8a4230c2	ELSA-2019-2885
	dovecot-pgsql-2.0.9-5.el6.i686.rpm	3f4bb401e0bdccdd2f61065051209cbd	ELSA-2019-2885
	dovecot-pigeonhole-2.0.9-5.el6.i686.rpm	0a22ccc919397c5816fbc474b67b0b97	ELSA-2019-2885
Oracle Linux 6 (x86_64)	dovecot-2.0.9-5.el6.src.rpm	257146c31a796f77958060e4eb03c427	ELSA-2019-2885
	dovecot-2.0.9-5.el6.i686.rpm	4c8c13fdd05a71f1557a8fde9abd6a0e	ELSA-2019-2885
	dovecot-2.0.9-5.el6.x86_64.rpm	8f34781f09f0aa87a8135e1994d57847	ELSA-2019-2885
	dovecot-devel-2.0.9-5.el6.i686.rpm	1ea52e4ad0971fbb3544542f5e2378ca	ELSA-2019-2885
	dovecot-devel-2.0.9-5.el6.x86_64.rpm	38a4cad5478c2abb5a1c19d76f2237b0	ELSA-2019-2885
	dovecot-mysql-2.0.9-5.el6.x86_64.rpm	60721d108f161f8a0c9772323d607828	ELSA-2019-2885
	dovecot-pgsql-2.0.9-5.el6.x86_64.rpm	bce3a6dea84266d7a5f50f06b242520a	ELSA-2019-2885
	dovecot-pigeonhole-2.0.9-5.el6.x86_64.rpm	f9e1fc78dd7844ade3721ce53c8bc341	ELSA-2019-2885

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team