File _patchinfo of Package patchinfo.15100

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.15100

<patchinfo incident="15100">
  <issue tracker="cve" id="2020-10958"/>
  <issue tracker="cve" id="2020-10957"/>
  <issue tracker="cve" id="2020-10967"/>
  <issue tracker="bnc" id="1171457">VUL-0: EMBARGOED: CVE-2020-10957: dovecot,dovecot23:  Sending malformed NOOP command causes crash in submission, submission-login orlmtp service.</issue>
  <issue tracker="bnc" id="1171458">VUL-0: EMBARGOED: CVE-2020-10958: dovecot,dovecot23: use-after-free with too many newlines</issue>
  <issue tracker="bnc" id="1171456">VUL-0: EMBARGOED: CVE-2020-10967: dovecot,dovecot23: Sending mail with empty quoted localpart causes submission or lmtp componentto crash.</issue>
  <packager>varkoly</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for dovecot23</summary>
  <description>This update for dovecot23 to 2.3.10 fixes the following issues:

Security issues fixed:

- CVE-2020-10957: Fixed a crash caused by malformed NOOP commands (bsc#1171457).
- CVE-2020-10958: Fixed a use-after-free when receiving too many newlines (bsc#1171458).
- CVE-2020-10967: Fixed a crash in the lmtp and submission components caused by mails with empty quoted localparts (bsc#1171456).

Non-security issues fixed:

- The update to 2.3.10 fixes several bugs. Please refer to 
  https://dovecot.org/doc/NEWS for a complete list of changes.
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.15100

Places