dovecot-1.0.7-7.1.0.1.AXS3

エラータID: AXSA:2011-295:01

Release date: 
Wednesday, September 7, 2011 - 15:52
Subject: 
dovecot-1.0.7-7.1.0.1.AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats.
The SQL drivers and authentication plug-ins are in their subpackages.
Security issues fixed with this release:
CVE-2011-1929
lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.

Solution: 

Update packages.

CVEs: 
CVE-2011-1929
lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.


Additional Info: 

N/A

Download: 

Asianux Server 3 for x86
  1. dovecot-1.0.7-7.1.0.1.AXS3.i386.rpm
    MD5: aef5f1b53053b5f4f9e74302dd3b2b90
    SHA-256: 43625b195f2931062e40b489dee58f5fcb8a52fe53ed0bfd096a81f03b5cb497
    Size: 1.64 MB

Asianux Server 3 for x86_64
  1. dovecot-1.0.7-7.1.0.1.AXS3.x86_64.rpm
    MD5: 6b2d6b2b477b7243f6db0b3c4233836d
    SHA-256: 277abc4948a5808246354d4d835638cb466b2a8dbeb67fe6a666d80eb77f31ca
    Size: 1.66 MB