Dovecot: Multiple vulnerabilities Multiple vulnerabilities have been found in Dovecot, the worst of which could allow remote attackers to cause a Denial of Service condition. dovecot 2020-09-06 2020-09-06 736617 remote 2.3.11.3 2.3.11.3

Dovecot is an open source IMAP and POP3 email server.

It was discovered that Dovecot incorrectly handled deeply nested MIME parts, incorrectly handled memory when using NTLM, and incorrectly handled zero-length messages.

A remote attacker could send a specially crafted mail or send specially crafted authentication requests possibly resulting in a Denial of Service condition.

There is no known workaround at this time.

All Dovecot users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=net-mail/dovecot-2.3.11.3" CVE-2020-12100 CVE-2020-12673 CVE-2020-12674 whissi whissi