Medium ELSA-2022-7623 1 CVE

Moderate: dovecot security update (Oracle Linux 8)

Published Nov 15, 2022 · Updated Nov 15, 2022

Ecosystem: Oracle Linux

Summary

[1:2.3.16-3]
- fix possible privilege escalation when similar master and non-master passdbs are used (#2106231)

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 8	dovecot	1:2.3.16-3.el8
Oracle Linux · 8	dovecot-devel	1:2.3.16-3.el8
Oracle Linux · 8	dovecot-mysql	1:2.3.16-3.el8
Oracle Linux · 8	dovecot-pgsql	1:2.3.16-3.el8
Oracle Linux · 8	dovecot-pigeonhole	1:2.3.16-3.el8

Vulnerabilities 1

High 8.8

CVE-2022-30550

An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entri…

dovecot dovecot dovecot dovecot Debian Ubuntu Azure Linux Alpine

Jul 17, 2022