Dovecot v2.3.9.3 released

Aki Tuomi aki.tuomi at dovecot.fi
Wed Feb 12 14:17:19 EET 2020


> On 12/02/2020 14:10 Martynas Bendorius <martynas at martynas.it> wrote:
> 
>  
> # wget https://dovecot.org/releases/2.3/dovecot-2.3.9.3.tar.gz
> --2020-02-12 05:09:26--  https://dovecot.org/releases/2.3/dovecot-2.3.9.3.tar.gz
> Resolving dovecot.org (dovecot.org)... 94.237.12.234, 2a04:3545:1000:720:acc1:5bff:fe5e:4e9
> Connecting to dovecot.org (dovecot.org)|94.237.12.234|:443... connected.
> HTTP request sent, awaiting response... 403 Forbidden
> 2020-02-12 05:09:26 ERROR 403: Forbidden.
> 
> --
> Best regards,
> Martynas Bendorius
> 
> 
> > On 2020-02-12, at 14:04, Aki Tuomi <aki.tuomi at dovecot.fi> wrote:
> > 
> > We are pleased to release v2.3.9.3 of Dovecot. Please find it from
> > locations below
> > 
> > https://dovecot.org/releases/2.3/dovecot-2.3.9.3.tar.gz
> > https://dovecot.org/releases/2.3/dovecot-2.3.9.3.tar.gz.sig
> > Binary packages in https://repo.dovecot.org/
> > Docker images in https://hub.docker.com/r/dovecot/dovecot
> > 
> > ---
> > 
> > v2.3.9.3 2019-02-12  Aki Tuomi <aki.tuomi at open-xchange.com>
> > 
> >     * CVE-2020-7046: Truncated UTF-8 can be used to DoS
> >       submission-login and lmtp processes.
> >     * CVE-2020-7957: Specially crafted mail can crash snippet generation.
> > 
> > 
> >

Thanks for reporting this, it has been fixed! Sorry!

Aki


More information about the dovecot mailing list