Amazon Linux 2023 Security Advisory: ALAS-2024-785
Advisory Release Date: 2024-12-05 20:34 Pacific
Advisory Updated Date: 2024-12-16 13:30 Pacific
Severity:
Medium
Issue Overview:
Dovecot reports: A DoS is possible with a large number of address headers or abnormally large email headers. (CVE-2024-23184)
Dovecot reports: A DoS is possible with a large number of address headers or abnormally large email headers. (CVE-2024-23185)
Affected Packages:
dovecot
Issue Correction:
Run dnf update dovecot --releasever 2023.6.20241212 to update your system.
New Packages:
aarch64:
dovecot-pgsql-debuginfo-2.3.20-1.amzn2023.0.2.aarch64
dovecot-mysql-2.3.20-1.amzn2023.0.2.aarch64
dovecot-pigeonhole-debuginfo-2.3.20-1.amzn2023.0.2.aarch64
dovecot-pgsql-2.3.20-1.amzn2023.0.2.aarch64
dovecot-mysql-debuginfo-2.3.20-1.amzn2023.0.2.aarch64
dovecot-pigeonhole-2.3.20-1.amzn2023.0.2.aarch64
dovecot-devel-2.3.20-1.amzn2023.0.2.aarch64
dovecot-debuginfo-2.3.20-1.amzn2023.0.2.aarch64
dovecot-2.3.20-1.amzn2023.0.2.aarch64
dovecot-debugsource-2.3.20-1.amzn2023.0.2.aarch64
src:
dovecot-2.3.20-1.amzn2023.0.2.src
x86_64:
dovecot-mysql-debuginfo-2.3.20-1.amzn2023.0.2.x86_64
dovecot-pgsql-debuginfo-2.3.20-1.amzn2023.0.2.x86_64
dovecot-pigeonhole-debuginfo-2.3.20-1.amzn2023.0.2.x86_64
dovecot-mysql-2.3.20-1.amzn2023.0.2.x86_64
dovecot-pigeonhole-2.3.20-1.amzn2023.0.2.x86_64
dovecot-pgsql-2.3.20-1.amzn2023.0.2.x86_64
dovecot-devel-2.3.20-1.amzn2023.0.2.x86_64
dovecot-debuginfo-2.3.20-1.amzn2023.0.2.x86_64
dovecot-2.3.20-1.amzn2023.0.2.x86_64
dovecot-debugsource-2.3.20-1.amzn2023.0.2.x86_64