Summary: | ~net-mail/dovecot-2.3.9.2: null pointer dereference with push notifications (CVE-2019-19722) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Thomas Deutschmann (RETIRED) <whissi> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | trivial | CC: | eras, hydrapolic, jer |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://dovecot.org/pipermail/dovecot-news/2019-December/000426.html | ||
Whiteboard: | ~3 [noglsa] | ||
Package list: | Runtime testing required: | --- |
Description
Thomas Deutschmann (RETIRED)
![]() Note: This doesn't affect any stable dovecot version in Gentoo. *** Bug 702668 has been marked as a duplicate of this bug. *** Due to bug in the fix, we had to release 2.3.9.2 which completes the fix for this CVE. --- Aki Tuomi Open-Xchange oy The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ab3881879555ecacd65c6c46f0437d4c5a7a66c8 commit ab3881879555ecacd65c6c46f0437d4c5a7a66c8 Author: Eray Aslan <eras@gentoo.org> AuthorDate: 2019-12-15 07:32:30 +0000 Commit: Eray Aslan <eras@gentoo.org> CommitDate: 2019-12-15 07:32:30 +0000 net-mail/dovecot: security bump to 2.3.9.2 Bug: https://bugs.gentoo.org/702628 Package-Manager: Portage-2.3.81, Repoman-2.3.20 Signed-off-by: Eray Aslan <eras@gentoo.org> net-mail/dovecot/Manifest | 1 + net-mail/dovecot/dovecot-2.3.9.2.ebuild | 286 ++++++++++++++++++++++++++++++++ 2 files changed, 287 insertions(+) @maintainer(s), please advise if ready for stabilisation, or call for it yourself. Uhm, no stable build was affected and no vulnerable version remains in the tree. So I was just going to open a regular stabilization bug beg April and not on this bug. Let me know if this is not how it supposed to work. (In reply to Eray Aslan from comment #6) > Uhm, no stable build was affected and no vulnerable version remains in the > tree. So I was just going to open a regular stabilization bug beg April and > not on this bug. > > Let me know if this is not how it supposed to work. You are right, my apologies! Repository is clean, all done! |