044
Wed Jul 6 13:54:47 UTC 2022
CVE-2022-30550: Privilege escalation possible in dovecot when similar master and non-master passdbs are used....
2022-07-06
Dovecot is an excellent choice for both small and large installations; however, for larger installations we recommend our commercial solution OX Dovecot Pro.
035
Mon Jun 21 14:20:13 EEST 2021
Released Dovecot v2.3.15 and Pigeonhole v0.5.15. Also released a fixes-only v2.3.14.1....
2021-06-21
036
Mon Jun 4 14:03:16 EET 2021
We have disclosed three new vulnerabilities in dovecot, please see CVE-2020-28200, CVE-2021-29157 and CVE-2021-33515....
2021-06-04
027
Mon Jan 4 14:03:16 EET 2021
We have disclosed two new vulnerabilities in dovecot, please see CVE-2020-25275 and CVE-2020-24386....
2021-01-04
026
Wed Aug 12 16:25:42 EEST 2020
We are happy to announce that we have CentOS 8 packages available starting from v2.3.11.3. You can find these packages at https://repo.dovecot.org/....
2020-08-12
025
Wed Aug 12 16:14:49 EEST 2020
We have disclosed three new vulnerabilities in dovecot, please see CVE-2020-12100, CVE-2020-12673 and CVE-2020-12674....
2020-08-12
News
Features
Flexible authentication
Dovecot’s user authentication is extremely flexible and feature-rich, supporting many different authentication databases and mechanisms.
Standards compliant
Dovecot is standards compliant. Dovecot passes all IMAP server standard compliancy tests while most other servers fail many of them.
Self-optimizing
Dovecot’s indexes are self-optimizing. They contain exactly what the user’s client commonly needs, no more and no less.
Easy migration
Dovecot supports easy migration from many existing IMAP and POP3 servers, allowing the change to be transparent to existing users.
Self-healing
Dovecot is self-healing. It tries to fix most of the problems it notices by itself, such as broken index files. The problems are however logged so the administrator can later try to figure out what caused them.
Workarounds support
Dovecot supports workarounds for several bugs in IMAP and POP3 clients. Since the workarounds may cause the protocol exchange to be sub-optimal, you can enable only the workarounds you need.
Admin-friendly
Dovecot tries to be admin-friendly. Common error messages are made as easily understandable as possible. Any crash, no matter how it happened, is considered a bug that will be fixed.
Security
Dovecot’s design and implementation is highly focused on security. You can report any security vulnerabilities via our HackerOne program or via email to security@dovecot.org.
Clustered filesystems compatibility
Dovecot allows mailboxes and their indexes to be modified by multiple computers at the same time, while still performing well. This means that Dovecot works well with clustered filesystems. NFS has caching problems, but you can work around them with director proxies.
Easily Extensible
Dovecot is easily extensible. Plugins can add new commands, modify existing behavior, add their own data into index files or even add support for new mailbox formats. For example quota and ACL support are completely implemented as plugins.