USN-3928-1: Dovecot vulnerability
USN-3928-1: Dovecot vulnerability dovecot vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 18.10 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Dovecot could be made to crash or run programs as an administrator if it opened a specially crafted file. Software Description dovecot – IMAP and POP3 email server Details It was discovered that Dovecot incorrectly handled reading certain headers from the index. A local attacker could possibly use this issue to escalate privileges. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10 dovecot-core – 1:2.3.2.1-1ubuntu3.2 Ubuntu 18.04 LTS dovecot-core – 1:2.2.33.2-1ubuntu4.3 Ubuntu 16.04 LTS dovecot-core – 1:2.2.22-1ubuntu2.10 Ubuntu 14.04 LTS dovecot-core – 1:2.2.9-1ubuntu2.6 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary [ more… ]
