ELSA-2019-2836

ELSA-2019-2836 - dovecot security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2019-09-20

Description

[1:2.2.36-3.1]
- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
when scanning data in quoted strings, leading to out of bounds heap
memory writes (#1751383)

Related CVEs

CVE-2019-11500

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	dovecot-2.2.36-3.el7_7.1.src.rpm	ff39d01b7c1a9eb688b14cbbb192b670	ELBA-2020-3921
	dovecot-2.2.36-3.el7_7.1.aarch64.rpm	9bc0d4bf81310b941a38aa5fa47d715b	ELBA-2020-3921
	dovecot-devel-2.2.36-3.el7_7.1.aarch64.rpm	d98a41abfe721bbd291e3932eaccfb7a	ELBA-2020-3921
	dovecot-mysql-2.2.36-3.el7_7.1.aarch64.rpm	681abb9c70da1db3937fae57ef7f5670	ELBA-2020-3921
	dovecot-pgsql-2.2.36-3.el7_7.1.aarch64.rpm	0b1985bd3e55f3aa2f1a61e1a98d7837	ELBA-2020-3921
	dovecot-pigeonhole-2.2.36-3.el7_7.1.aarch64.rpm	59acd61c82bd559dc2ae7e4f6a0f3742	ELBA-2020-3921
Oracle Linux 7 (x86_64)	dovecot-2.2.36-3.el7_7.1.src.rpm	ff39d01b7c1a9eb688b14cbbb192b670	ELBA-2020-3921
	dovecot-2.2.36-3.el7_7.1.i686.rpm	ef67c5831982bb3c8f97c3c770d1f0bc	ELBA-2020-3921
	dovecot-2.2.36-3.el7_7.1.x86_64.rpm	3aa0ad26fad0598585eb721c0945b11b	ELBA-2020-3921
	dovecot-devel-2.2.36-3.el7_7.1.x86_64.rpm	6689f2fda2464ccc1e1edb66b604c6d4	ELBA-2020-3921
	dovecot-mysql-2.2.36-3.el7_7.1.x86_64.rpm	40e79e4ca28f0faa2a11ba70c8cca7ae	ELBA-2020-3921
	dovecot-pgsql-2.2.36-3.el7_7.1.x86_64.rpm	bf97fbc0ed03eea9debad4e9e9ab5311	ELBA-2020-3921
	dovecot-pigeonhole-2.2.36-3.el7_7.1.x86_64.rpm	f3e5f15dd3b584eeec3d73b25988989b	ELBA-2020-3921

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team