RHSA-2024:6973: Moderate: dovecot security update
Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. <br>Security Fix(es):<br><li> dovecot: using a large number of address headers may trigger a denial of service (CVE-2024-23184)</li> <li> dovecot: very large headers can cause resource exhaustion when parsing message (CVE-2024-23185)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:6973?
The severity of RHSA-2024:6973 is classified as important.
How do I fix RHSA-2024:6973?
To fix RHSA-2024:6973, update to Dovecot version 2.3.16-6.el8_10 or later.
Which systems are affected by RHSA-2024:6973?
RHSA-2024:6973 affects various Red Hat Enterprise Linux and CodeReady Linux Builder systems.
What is the primary purpose of Dovecot in relation to RHSA-2024:6973?
Dovecot is an IMAP server designed for securely handling email communications.
Is there a specific package version I need to address for RHSA-2024:6973?
Yes, you need to ensure Dovecot is updated to version 2.3.16-6.el8_10.