File _patchinfo of Package patchinfo.10738

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.10738

<patchinfo incident="10738">
  <issue tracker="bnc" id="1123022">VUL-0: CVE-2019-3814: dovecot: Vulnerability in Dovecot related to SSL client certificate authentication</issue>
  <issue tracker="bnc" id="1111789">Dovecot managesieve(pigeonhole)-issue with Sogo-Groupware</issue>
  <issue tracker="bnc" id="1130116">VUL-0: CVE-2019-7524: dovecot,dovecot23,dovecot22: FTS or POP3-UIDL header from dovecot index overflow</issue>
  <issue tracker="cve" id="2019-7524"/>
  <issue tracker="cve" id="2019-3814"/>
  <category>security</category>
  <rating>important</rating>
  <packager>varkoly</packager>
  <description>This update for dovecot22 fixes the following issues:

Security issues fixed:

- CVE-2019-7524: Fixed an improper file handling which could result in stack overflow allowing 
  local root escalation (bsc#1130116).
- CVE-2019-3814: Fixed a vulnerability related to SSL client certificate authentication (bsc#1123022).

Other issue fixed: 
- Fixed handling of command continuation(bsc#1111789)
</description>
  <summary>Security update for dovecot22</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.10738

Places