ELSA-2019-2885

ELSA-2019-2885 - dovecot security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2019-09-23

Description


[1:2.0.9-22.1]
- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
when scanning data in quoted strings, leading to out of bounds heap
memory writes (#1752708)


Related CVEs


CVE-2019-11500

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 6 (i386) dovecot-2.0.9-22.el6_10.1.src.rpm116652aac6ef4b2af5bac978244feb2432d2879c14a4c89c603f42b40984064e-ol6_i386_latest
dovecot-2.0.9-22.el6_10.1.src.rpm116652aac6ef4b2af5bac978244feb2432d2879c14a4c89c603f42b40984064e-ol6_u10_i386_patch
dovecot-2.0.9-22.el6_10.1.i686.rpm1d1568189fa1aadf836f74571738bdacc3224fa567c5e3fa09efa9635c1dcf6a-ol6_i386_latest
dovecot-2.0.9-22.el6_10.1.i686.rpm1d1568189fa1aadf836f74571738bdacc3224fa567c5e3fa09efa9635c1dcf6a-ol6_u10_i386_patch
dovecot-devel-2.0.9-22.el6_10.1.i686.rpm29dcf41fc2482b704b7bfdaa312800115337ac46638c3cec97c39d97c94e8bc4-ol6_i386_latest
dovecot-devel-2.0.9-22.el6_10.1.i686.rpm29dcf41fc2482b704b7bfdaa312800115337ac46638c3cec97c39d97c94e8bc4-ol6_u10_i386_patch
dovecot-mysql-2.0.9-22.el6_10.1.i686.rpm8b0c58c3ef455be72c5c474f7dc319aa4e789d1a32cb7a5e3eca7a356c504f95-ol6_i386_latest
dovecot-mysql-2.0.9-22.el6_10.1.i686.rpm8b0c58c3ef455be72c5c474f7dc319aa4e789d1a32cb7a5e3eca7a356c504f95-ol6_u10_i386_patch
dovecot-pgsql-2.0.9-22.el6_10.1.i686.rpmd6ce5b1544c298380cb09e7f456edb99d17352e54263202a7ade4be123e6851b-ol6_i386_latest
dovecot-pgsql-2.0.9-22.el6_10.1.i686.rpmd6ce5b1544c298380cb09e7f456edb99d17352e54263202a7ade4be123e6851b-ol6_u10_i386_patch
dovecot-pigeonhole-2.0.9-22.el6_10.1.i686.rpmb60d277dc84c0442149f06c38cc12566f9397ac5de29b1ffc6407f1da37359b6-ol6_i386_latest
dovecot-pigeonhole-2.0.9-22.el6_10.1.i686.rpmb60d277dc84c0442149f06c38cc12566f9397ac5de29b1ffc6407f1da37359b6-ol6_u10_i386_patch
Oracle Linux 6 (x86_64) dovecot-2.0.9-22.el6_10.1.src.rpm116652aac6ef4b2af5bac978244feb2432d2879c14a4c89c603f42b40984064e-ol6_u10_x86_64_patch
dovecot-2.0.9-22.el6_10.1.src.rpm116652aac6ef4b2af5bac978244feb2432d2879c14a4c89c603f42b40984064e-ol6_x86_64_latest
dovecot-2.0.9-22.el6_10.1.i686.rpm1d1568189fa1aadf836f74571738bdacc3224fa567c5e3fa09efa9635c1dcf6a-ol6_u10_x86_64_patch
dovecot-2.0.9-22.el6_10.1.i686.rpm1d1568189fa1aadf836f74571738bdacc3224fa567c5e3fa09efa9635c1dcf6a-ol6_x86_64_latest
dovecot-2.0.9-22.el6_10.1.x86_64.rpmd5fa4c7ca130bbe26421846430fbb6f9fe96b0a9e52008ca219b4cf16d3fbd30-ol6_u10_x86_64_patch
dovecot-2.0.9-22.el6_10.1.x86_64.rpmd5fa4c7ca130bbe26421846430fbb6f9fe96b0a9e52008ca219b4cf16d3fbd30-ol6_x86_64_latest
dovecot-devel-2.0.9-22.el6_10.1.x86_64.rpm3cd45ce249f6761f48fe26b276e3557b2140c5b2caca5be967a978cc4de048c9-ol6_u10_x86_64_patch
dovecot-devel-2.0.9-22.el6_10.1.x86_64.rpm3cd45ce249f6761f48fe26b276e3557b2140c5b2caca5be967a978cc4de048c9-ol6_x86_64_latest
dovecot-mysql-2.0.9-22.el6_10.1.x86_64.rpmebfb280ad1fe40b5a586cc6d4ff52fb4f30a5a300a66acf8851d2c0e933a92af-ol6_u10_x86_64_patch
dovecot-mysql-2.0.9-22.el6_10.1.x86_64.rpmebfb280ad1fe40b5a586cc6d4ff52fb4f30a5a300a66acf8851d2c0e933a92af-ol6_x86_64_latest
dovecot-pgsql-2.0.9-22.el6_10.1.x86_64.rpm7a7ced834e73ae7628bffe19795033c00386ce4fb9bb4787123cf99a47f70250-ol6_u10_x86_64_patch
dovecot-pgsql-2.0.9-22.el6_10.1.x86_64.rpm7a7ced834e73ae7628bffe19795033c00386ce4fb9bb4787123cf99a47f70250-ol6_x86_64_latest
dovecot-pigeonhole-2.0.9-22.el6_10.1.x86_64.rpmca79e553f7e5a3adc54a0065f6c5c36d1bb5cf9d9684ce81f823b272c0600be6-ol6_u10_x86_64_patch
dovecot-pigeonhole-2.0.9-22.el6_10.1.x86_64.rpmca79e553f7e5a3adc54a0065f6c5c36d1bb5cf9d9684ce81f823b272c0600be6-ol6_x86_64_latest



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete