ELBA-2020-3921

ELBA-2020-3921 - dovecot bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2020-10-06

Description

[1:2.2.36-8]
- update release number

[1:2.2.36-7.1]
- fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866752)
- fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866757)
- fix CVE-2020-12674 crash due to assert in RPA implementation (#1866764)

[1:2.2.36-7]
- generated key was too small (#1086365)

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	dovecot-2.2.36-8.el7.src.rpm	c47424706cc897ac39069356728b3e0eb895d7ef03f7fc8348fe8c5ab5fadf85	-	ol7_aarch64_latest
	dovecot-2.2.36-8.el7.src.rpm	c47424706cc897ac39069356728b3e0eb895d7ef03f7fc8348fe8c5ab5fadf85	-	ol7_aarch64_optional_latest
	dovecot-2.2.36-8.el7.src.rpm	c47424706cc897ac39069356728b3e0eb895d7ef03f7fc8348fe8c5ab5fadf85	-	ol7_aarch64_u9_base
	dovecot-2.2.36-8.el7.aarch64.rpm	6b6e5fb4251b63c10f7f5d96a37400ba9cdf71c9fae0cc6822449139dec4526e	-	ol7_aarch64_latest
	dovecot-2.2.36-8.el7.aarch64.rpm	6b6e5fb4251b63c10f7f5d96a37400ba9cdf71c9fae0cc6822449139dec4526e	-	ol7_aarch64_u9_base
	dovecot-devel-2.2.36-8.el7.aarch64.rpm	bb709f5f4a0eef77e177a4b12dfe15bf3844b9886a9629758a87f62e3167cb58	-	ol7_aarch64_optional_latest
	dovecot-mysql-2.2.36-8.el7.aarch64.rpm	a1a9e366ba86cb8ad9f71df1a8863790887bee23b8e98c49a0a774674be32ff8	-	ol7_aarch64_latest
	dovecot-mysql-2.2.36-8.el7.aarch64.rpm	a1a9e366ba86cb8ad9f71df1a8863790887bee23b8e98c49a0a774674be32ff8	-	ol7_aarch64_u9_base
	dovecot-pgsql-2.2.36-8.el7.aarch64.rpm	184b86e06c2b87cd45e88f690e4a0c59e6ae711fb7dc01e4a611a1cd425792be	-	ol7_aarch64_latest
	dovecot-pgsql-2.2.36-8.el7.aarch64.rpm	184b86e06c2b87cd45e88f690e4a0c59e6ae711fb7dc01e4a611a1cd425792be	-	ol7_aarch64_u9_base
	dovecot-pigeonhole-2.2.36-8.el7.aarch64.rpm	39d1d24e1fdbbfe3c0fd10e4106af39b75d14a3d63f9afba41be01577f6bf415	-	ol7_aarch64_latest
	dovecot-pigeonhole-2.2.36-8.el7.aarch64.rpm	39d1d24e1fdbbfe3c0fd10e4106af39b75d14a3d63f9afba41be01577f6bf415	-	ol7_aarch64_u9_base
Oracle Linux 7 (x86_64)	dovecot-2.2.36-8.el7.src.rpm	c47424706cc897ac39069356728b3e0eb895d7ef03f7fc8348fe8c5ab5fadf85	-	ol7_x86_64_latest
	dovecot-2.2.36-8.el7.src.rpm	c47424706cc897ac39069356728b3e0eb895d7ef03f7fc8348fe8c5ab5fadf85	-	ol7_x86_64_optional_latest
	dovecot-2.2.36-8.el7.src.rpm	c47424706cc897ac39069356728b3e0eb895d7ef03f7fc8348fe8c5ab5fadf85	-	ol7_x86_64_u9_base
	dovecot-2.2.36-8.el7.i686.rpm	0c05476e8d2337d3c81f19de1575c9f7a274a344eddbc25c0f3cf7a974309eda	-	ol7_x86_64_latest
	dovecot-2.2.36-8.el7.i686.rpm	0c05476e8d2337d3c81f19de1575c9f7a274a344eddbc25c0f3cf7a974309eda	-	ol7_x86_64_u9_base
	dovecot-2.2.36-8.el7.x86_64.rpm	7f5822184fbfe49b1aafa5d35f7277c955abbc4be518bf7cd02f2d01868c7a23	-	ol7_x86_64_latest
	dovecot-2.2.36-8.el7.x86_64.rpm	7f5822184fbfe49b1aafa5d35f7277c955abbc4be518bf7cd02f2d01868c7a23	-	ol7_x86_64_u9_base
	dovecot-devel-2.2.36-8.el7.x86_64.rpm	9c41582f4048bbf3b86990c086976ce4a51921d1b4b00e99fcbc054051a0e3ec	-	ol7_x86_64_optional_latest
	dovecot-mysql-2.2.36-8.el7.x86_64.rpm	295c9704f775d788a1dfdacd9addba563e04bdf5c9202a03ce8909377b331790	-	ol7_x86_64_latest
	dovecot-mysql-2.2.36-8.el7.x86_64.rpm	295c9704f775d788a1dfdacd9addba563e04bdf5c9202a03ce8909377b331790	-	ol7_x86_64_u9_base
	dovecot-pgsql-2.2.36-8.el7.x86_64.rpm	1aa942b64a26b4ae8ab2f36420b6adb7f158dacb6801b4be4dc3ec5dc402873d	-	ol7_x86_64_latest
	dovecot-pgsql-2.2.36-8.el7.x86_64.rpm	1aa942b64a26b4ae8ab2f36420b6adb7f158dacb6801b4be4dc3ec5dc402873d	-	ol7_x86_64_u9_base
	dovecot-pigeonhole-2.2.36-8.el7.x86_64.rpm	62a0e9eb14bde7af72883f86fe25480b89b61c0f80bac090a52f9b37fbea0bec	-	ol7_x86_64_latest
	dovecot-pigeonhole-2.2.36-8.el7.x86_64.rpm	62a0e9eb14bde7af72883f86fe25480b89b61c0f80bac090a52f9b37fbea0bec	-	ol7_x86_64_u9_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team