Changes between Initial Version and Version 1 of Ticket #12907


Ignore:
Timestamp:
12/14/2019 10:52:24 AM (4 years ago)
Author:
ken@…
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #12907

    • Property Priority normal → high
    • Property Type enhancement → defect

  • Ticket #12907 – Description

    initial v1  
    11New micro version.
     2
     3In fact two micro versions, the first has a CVE. From https://dovecot.org/doc/NEWS :
     4
     5v2.3.9.2 2019-12-13  Aki Tuomi <aki.tuomi@open-xchange.com>
     6
     7        - Mails with empty From/To headers can also cause crash
     8          in push notification drivers.
     9
     10v2.3.9.1 2019-12-13  Aki Tuomi <aki.tuomi@open-xchange.com>
     11
     12        * CVE-2019-19722: Mails with group addresses in From or To fields
     13          caused crash in push notification drivers.