Important: dovecot security update (Amazon Linux 2)

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-12674: In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled. 1866317: CVE-2020-12674 dovecot: Crash due to assert in RPA implementation CVE-2020-12673: In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read. 1866313: CVE-2020-12673 dovecot: Out of bound reads in dovecot NTLM implementation CVE-2020-12100: In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service (resource consumption) via a crafted e-mail message with deeply nested MIME parts. 1866309: CVE-2020-12100 dovecot: Resource exhaustion via deeply nested MIME parts