ELSA-2013-0520

ELSA-2013-0520 - dovecot security and bug fix update

Type:	SECURITY
Impact:	LOW
Release Date:	2013-02-22

Description

[1:2.0.9-5]
- script-login did not drop privileges correctly (#709095)
- fix directory traversal due to not obeying chroot directive (#709097)
- check proxy destination host against SSL certificate name (#754980)

[1:2.0.9-4]
- dovecot may not set correct premissions for mail folder (#697620)

[1:2.0.9-3]
- fix potential crash when parsing header names that contain NUL characters (#728673)

Related CVEs

CVE-2011-2167

CVE-2011-4318

CVE-2011-2166

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	dovecot-2.0.9-5.el6.src.rpm	999db5c291c725a2f11eaa442461282ca176e3db9604997f884ddfb56b082034	ELSA-2019-2885	ol6_i386_latest_archive
	dovecot-2.0.9-5.el6.src.rpm	999db5c291c725a2f11eaa442461282ca176e3db9604997f884ddfb56b082034	ELSA-2019-2885	ol6_u4_i386_base
	dovecot-2.0.9-5.el6.i686.rpm	2f28b2e5ecdb59c66c563d25ac62f740922598ff1b2d7f467694884d40794ff9	ELSA-2019-2885	ol6_i386_latest_archive
	dovecot-2.0.9-5.el6.i686.rpm	2f28b2e5ecdb59c66c563d25ac62f740922598ff1b2d7f467694884d40794ff9	ELSA-2019-2885	ol6_u4_i386_base
	dovecot-devel-2.0.9-5.el6.i686.rpm	2fa7588e34b129a324cdc508ba1d12a44d444240004b82506c36394d32769adb	ELSA-2019-2885	ol6_i386_latest_archive
	dovecot-devel-2.0.9-5.el6.i686.rpm	2fa7588e34b129a324cdc508ba1d12a44d444240004b82506c36394d32769adb	ELSA-2019-2885	ol6_u4_i386_base
	dovecot-mysql-2.0.9-5.el6.i686.rpm	b9ef078ca455a0f59901a2c5250248f749c0506a09412ca9ee2e725f909cc857	ELSA-2019-2885	ol6_i386_latest_archive
	dovecot-mysql-2.0.9-5.el6.i686.rpm	b9ef078ca455a0f59901a2c5250248f749c0506a09412ca9ee2e725f909cc857	ELSA-2019-2885	ol6_u4_i386_base
	dovecot-pgsql-2.0.9-5.el6.i686.rpm	b2e0436cd00d9db2360e2d7b79b2628765dd4a59f1e5da0b349a61dd5d5bb243	ELSA-2019-2885	ol6_i386_latest_archive
	dovecot-pgsql-2.0.9-5.el6.i686.rpm	b2e0436cd00d9db2360e2d7b79b2628765dd4a59f1e5da0b349a61dd5d5bb243	ELSA-2019-2885	ol6_u4_i386_base
	dovecot-pigeonhole-2.0.9-5.el6.i686.rpm	5e0845dc0688065cf3c8272d4aa2ecfd9f777752a944a34923e3b21f5904fcfc	ELSA-2019-2885	ol6_i386_latest_archive
	dovecot-pigeonhole-2.0.9-5.el6.i686.rpm	5e0845dc0688065cf3c8272d4aa2ecfd9f777752a944a34923e3b21f5904fcfc	ELSA-2019-2885	ol6_u4_i386_base
Oracle Linux 6 (x86_64)	dovecot-2.0.9-5.el6.src.rpm	999db5c291c725a2f11eaa442461282ca176e3db9604997f884ddfb56b082034	ELSA-2019-2885	ol6_u4_x86_64_base
	dovecot-2.0.9-5.el6.src.rpm	999db5c291c725a2f11eaa442461282ca176e3db9604997f884ddfb56b082034	ELSA-2019-2885	ol6_x86_64_latest_archive
	dovecot-2.0.9-5.el6.i686.rpm	2f28b2e5ecdb59c66c563d25ac62f740922598ff1b2d7f467694884d40794ff9	ELSA-2019-2885	ol6_u4_x86_64_base
	dovecot-2.0.9-5.el6.i686.rpm	2f28b2e5ecdb59c66c563d25ac62f740922598ff1b2d7f467694884d40794ff9	ELSA-2019-2885	ol6_x86_64_latest_archive
	dovecot-2.0.9-5.el6.x86_64.rpm	1d64fdfc15ef6329d4cb6ec5cf08e86d22859e22338afee4607e2caa3a1a4436	ELSA-2019-2885	ol6_u4_x86_64_base
	dovecot-2.0.9-5.el6.x86_64.rpm	1d64fdfc15ef6329d4cb6ec5cf08e86d22859e22338afee4607e2caa3a1a4436	ELSA-2019-2885	ol6_x86_64_latest_archive
	dovecot-devel-2.0.9-5.el6.i686.rpm	2fa7588e34b129a324cdc508ba1d12a44d444240004b82506c36394d32769adb	ELSA-2019-2885	ol6_u4_x86_64_base
	dovecot-devel-2.0.9-5.el6.i686.rpm	2fa7588e34b129a324cdc508ba1d12a44d444240004b82506c36394d32769adb	ELSA-2019-2885	ol6_x86_64_latest_archive
	dovecot-devel-2.0.9-5.el6.x86_64.rpm	34560d47c84751a7c8c24ff73280cf6950993746152efa1f2ecf039f98fc27cd	ELSA-2019-2885	ol6_u4_x86_64_base
	dovecot-devel-2.0.9-5.el6.x86_64.rpm	34560d47c84751a7c8c24ff73280cf6950993746152efa1f2ecf039f98fc27cd	ELSA-2019-2885	ol6_x86_64_latest_archive
	dovecot-mysql-2.0.9-5.el6.x86_64.rpm	1d6397019378e273af335a402a819a81dd3736a94c1d0b50efc0d1dced33f9fe	ELSA-2019-2885	ol6_u4_x86_64_base
	dovecot-mysql-2.0.9-5.el6.x86_64.rpm	1d6397019378e273af335a402a819a81dd3736a94c1d0b50efc0d1dced33f9fe	ELSA-2019-2885	ol6_x86_64_latest_archive
	dovecot-pgsql-2.0.9-5.el6.x86_64.rpm	4cb6a20a162863688a0c7c2da94d7900709a99159488b17408c42b4d543d1d73	ELSA-2019-2885	ol6_u4_x86_64_base
	dovecot-pgsql-2.0.9-5.el6.x86_64.rpm	4cb6a20a162863688a0c7c2da94d7900709a99159488b17408c42b4d543d1d73	ELSA-2019-2885	ol6_x86_64_latest_archive
	dovecot-pigeonhole-2.0.9-5.el6.x86_64.rpm	df860522209b91d987f3cc7ce6edd2704bec2320533c877dbf5efcdbde3a0d1b	ELSA-2019-2885	ol6_u4_x86_64_base
	dovecot-pigeonhole-2.0.9-5.el6.x86_64.rpm	df860522209b91d987f3cc7ce6edd2704bec2320533c877dbf5efcdbde3a0d1b	ELSA-2019-2885	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team