Most recent entries from all

ALSA-2021:1887 — Moderate: dovecot security and bug fix update

Affected: AlmaLinux:8: dovecot, AlmaLinux:8: dovecot-devel, AlmaLinux:8: dovecot-mysql, AlmaLinux:8: dovecot-pgsql, AlmaLinux:8: dovecot-pigeonhole

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages.

Security Fix(es):

* dovecot: IMAP hibernation function allows mail access (CVE-2020-24386)

* dovecot: Denial of service via mail MIME parsing (CVE-2020-25275)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2021-01901

cnvd-2021-01531

EUVD-2026-45516

fkie_cve-2020-25275

Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.

GHSA-jv8c-8hrc-9f7m

Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.

gsd-2020-25275

OESA-2021-1042 — dovecot security update

Affected: openEuler:20.03-LTS: dovecot, openEuler:20.03-LTS-SP1: dovecot

Security Fix(es): Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.(CVE-2020-25275) An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernation via attacker-controlled parameters, leading to access to other users' email messages (and path disclosure).(CVE-2020-24386)

openSUSE-SU-2021:0026-1 — Security update for dovecot23

Security update for dovecot23

SUSE-SU-2021:0027-1 — Security update for dovecot23

Security update for dovecot23

UBUNTU-CVE-2020-25275

Affected: Ubuntu:Pro:14.04:LTS: dovecot, Ubuntu:16.04:LTS: dovecot, Ubuntu:18.04:LTS: dovecot, Ubuntu:20.04:LTS: dovecot

Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.

WID-SEC-W-2025-0234 — Dovecot: Mehrere Schwachstellen

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Dovecot ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um einen Denial of Service Zustand herbeizuführen.