Amazon Linux 2023 Security Advisory: ALAS2023-2024-785
Advisory Released Date: 2024-12-12
Advisory Updated Date: 2024-12-16
Severity:
Medium
Issue Overview:
Dovecot reports: A DoS is possible with a large number of address headers or abnormally large email headers. (CVE-2024-23184)
Dovecot reports: A DoS is possible with a large number of address headers or abnormally large email headers. (CVE-2024-23185)
Affected Packages:
dovecot
Issue Correction:
Run dnf update dovecot --releasever 2023.6.20241212 to update your system.
New Packages:
aarch64:
dovecot-pgsql-debuginfo-2.3.20-1.amzn2023.0.2.aarch64
dovecot-mysql-2.3.20-1.amzn2023.0.2.aarch64
dovecot-pigeonhole-debuginfo-2.3.20-1.amzn2023.0.2.aarch64
dovecot-pgsql-2.3.20-1.amzn2023.0.2.aarch64
dovecot-mysql-debuginfo-2.3.20-1.amzn2023.0.2.aarch64
dovecot-pigeonhole-2.3.20-1.amzn2023.0.2.aarch64
dovecot-devel-2.3.20-1.amzn2023.0.2.aarch64
dovecot-debuginfo-2.3.20-1.amzn2023.0.2.aarch64
dovecot-2.3.20-1.amzn2023.0.2.aarch64
dovecot-debugsource-2.3.20-1.amzn2023.0.2.aarch64
src:
dovecot-2.3.20-1.amzn2023.0.2.src
x86_64:
dovecot-mysql-debuginfo-2.3.20-1.amzn2023.0.2.x86_64
dovecot-pgsql-debuginfo-2.3.20-1.amzn2023.0.2.x86_64
dovecot-pigeonhole-debuginfo-2.3.20-1.amzn2023.0.2.x86_64
dovecot-mysql-2.3.20-1.amzn2023.0.2.x86_64
dovecot-pigeonhole-2.3.20-1.amzn2023.0.2.x86_64
dovecot-pgsql-2.3.20-1.amzn2023.0.2.x86_64
dovecot-devel-2.3.20-1.amzn2023.0.2.x86_64
dovecot-debuginfo-2.3.20-1.amzn2023.0.2.x86_64
dovecot-2.3.20-1.amzn2023.0.2.x86_64
dovecot-debugsource-2.3.20-1.amzn2023.0.2.x86_64