[Dovecot-news] v2.3.5.2 released

Aki Tuomi aki.tuomi at open-xchange.com
Thu Apr 18 12:35:53 EEST 2019

Lets try again, put wrong changelog to the mail. Sorry about this.

Binary packages in https://repo.dovecot.org/

    * CVE-2019-10691: Trying to login with 8bit username containing
      invalid UTF8 input causes auth process to crash if auth policy is
      enabled. This could be used rather easily to cause a DoS. Similar
      crash also happens during mail delivery when using invalid UTF8 in
      From or Subject header when OX push notification driver is used.

Aki Tuomi
Open-Xchange oy

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <https://dovecot.org/pipermail/dovecot-news/attachments/20190418/80cb9a6b/attachment.sig>

More information about the Dovecot-news mailing list