ELSA-2019-2822

ELSA-2019-2822 - dovecot security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2019-09-23

Description

[1:2.2.36-5.1]
- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
when scanning data in quoted strings, leading to out of bounds heap
memory writes (#1741788)

Related CVEs

CVE-2019-11500

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	dovecot-2.2.36-5.el8_0.1.src.rpm	8bbf2c625f3f4bfaddc8b8a9e7ed3412082341c6bb003fc7a2b85ece104c1c3a	-	ol8_aarch64_appstream
	dovecot-2.2.36-5.el8_0.1.src.rpm	8bbf2c625f3f4bfaddc8b8a9e7ed3412082341c6bb003fc7a2b85ece104c1c3a	-	ol8_aarch64_codeready_builder
	dovecot-2.2.36-5.el8_0.1.aarch64.rpm	13e3dd8686b929d0f05f196e83f79e303b8f810563b67a78001bc5ddb791a035	-	ol8_aarch64_appstream
	dovecot-devel-2.2.36-5.el8_0.1.aarch64.rpm	6c007cd94a1e814ff89eba2726bca89bb0bfea00a43e6572c11bac7e0c85a93e	-	ol8_aarch64_codeready_builder
	dovecot-mysql-2.2.36-5.el8_0.1.aarch64.rpm	f82a23fb6f9bf361ac8fe24ee8c217332c1d6b2826afd58ebf31fa05c64b296b	-	ol8_aarch64_appstream
	dovecot-pgsql-2.2.36-5.el8_0.1.aarch64.rpm	7058903e34b58f585aa6bee2bfe4c5fcdd70894fdaf871f4338cd072609e3da3	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	dovecot-2.2.36-5.el8_0.1.src.rpm	8bbf2c625f3f4bfaddc8b8a9e7ed3412082341c6bb003fc7a2b85ece104c1c3a	-	ol8_x86_64_appstream
	dovecot-2.2.36-5.el8_0.1.src.rpm	8bbf2c625f3f4bfaddc8b8a9e7ed3412082341c6bb003fc7a2b85ece104c1c3a	-	ol8_x86_64_codeready_builder
	dovecot-2.2.36-5.el8_0.1.i686.rpm	e39d445369646c99003d404e9cf92df57419adadc7cab2f557ae1b2e3c7280f9	-	ol8_x86_64_codeready_builder
	dovecot-2.2.36-5.el8_0.1.x86_64.rpm	7bccefb984becb12d95224a2ac00abd36ab4a129f6e94968b9d2e1085fd1d76e	-	ol8_x86_64_appstream
	dovecot-devel-2.2.36-5.el8_0.1.i686.rpm	0336b5a65aaa288d2ef68bb9b887848fff1bfaaed223d68e855e15777483cc37	-	ol8_x86_64_codeready_builder
	dovecot-devel-2.2.36-5.el8_0.1.x86_64.rpm	fd0903ed94228e58a1bc9f05b976046a103d45e0ed48e179d9e2d0af4b016e67	-	ol8_x86_64_codeready_builder
	dovecot-mysql-2.2.36-5.el8_0.1.x86_64.rpm	9246c2ea71918f7f20c6263e6d1f4761a9336ebf5aaa57499eceea781ebcd7ed	-	ol8_x86_64_appstream
	dovecot-pgsql-2.2.36-5.el8_0.1.x86_64.rpm	381cc38f6ce35c0698aeb56222a47abb032c990f9ed11bb3b93703ada060a4fa	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team