dovecot20 security update
In proxy mode dovecot did not verify that the SSL
certificate of the remote actually matched the server name.
Dovecot was updated to version 2.0.16 which fixes the
problem.
-
Submitted by
Adrian Schröter (adrianSuSE)
- Version 5546
Fixed bugs
bnc#732050
VUL-0: Dovecot: Validate certificates CN against requested remote server hostname when proxying
CVE#CVE-2011-4318
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
