Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 6 enterprise_linux:6::server | dovecot | 1:2.0.9-5.el6 |
| Red Hat · RHEL 6 enterprise_linux:6::server | dovecot-debuginfo | 1:2.0.9-5.el6 |
| Red Hat · RHEL 6 enterprise_linux:6::server | dovecot-devel | 1:2.0.9-5.el6 |
| Red Hat · RHEL 6 enterprise_linux:6::server | dovecot-mysql | 1:2.0.9-5.el6 |
| Red Hat · RHEL 6 enterprise_linux:6::server | dovecot-pgsql | 1:2.0.9-5.el6 |
| Red Hat · RHEL 6 enterprise_linux:6::server | dovecot-pigeonhole | 1:2.0.9-5.el6 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | dovecot | 1:2.0.9-5.el6 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | dovecot-debuginfo | 1:2.0.9-5.el6 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | dovecot-devel | 1:2.0.9-5.el6 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | dovecot-mysql | 1:2.0.9-5.el6 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | dovecot-pgsql | 1:2.0.9-5.el6 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | dovecot-pigeonhole | 1:2.0.9-5.el6 |
Vulnerabilities 3
-
Unscored —
script-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration settings, which might allo…
-
Unscored —
script-login in Dovecot 2.0.x before 2.0.13 does not follow the chroot configuration setting, which might allow remote …
-
Unscored —
Dovecot 2.0.x before 2.0.16, when ssl or starttls is enabled and hostname is used to define the proxy destination, does…
References
-
article
https://access.redhat.com/security/updates/classification/#low
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=709095
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=709097
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=754980
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0520.json
-
report
https://access.redhat.com/security/cve/CVE-2011-2166
-
advisory
https://www.cve.org/CVERecord?id=CVE-2011-2166
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2011-2166
-
report
https://access.redhat.com/security/cve/CVE-2011-2167
-
advisory
https://www.cve.org/CVERecord?id=CVE-2011-2167
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2011-2167
-
report
https://access.redhat.com/security/cve/CVE-2011-4318
-
advisory
https://www.cve.org/CVERecord?id=CVE-2011-4318
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2011-4318