diff --git a/dovecot23.changes b/dovecot23.changes index c67ca45..5c183fa 100644 --- a/dovecot23.changes +++ b/dovecot23.changes @@ -4,12 +4,13 @@ Mon May 18 14:04:52 UTC 2020 - Michael Ströder - update to 2.3.10.1 with security fixes for * CVE-2020-10957: lmtp/submission: A client can crash the server by sending a NOOP command with an invalid string parameter. + (boo#1171457) * CVE-2020-10958: lmtp/submission: Sending many invalid or unknown commands can cause the server to access freed memory, which can lead - to a server crash. + to a server crash. (boo#1171458) * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an address that has the empty quoted string as local-part causes the - lmtp service to crash. + lmtp service to crash. (boo#1171456) ------------------------------------------------------------------- Wed Apr 29 21:25:30 UTC 2020 - Marcus Rueckert