[ol10_appstream] dovecot-1:2.3.21-16.el10_1.1.aarch64

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security
primarily in mind.  It also contains a small POP3 server.  It supports mail
in either of maildir or mbox formats.

The SQL drivers and authentication plug-ins are in their subpackages.

Changelog (Show File list) (Show related packages)

• Tue Apr 07 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-16.1

  - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161625)
  - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162273)
  - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161664)

• Wed Feb 05 2025 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-16

  - fix sysusers config file name (RHEL-77323)

• Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 1:2.3.21-15

  - Bump release for October 2024 mass rebuild:
    Resolves: RHEL-64018

• Tue Aug 20 2024 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-14

  - fix CVE-2024-23185: very large headers can cause resource exhaustion
    when parsing message (RHEL-55218)
  - fix CVE-2024-23184: using a large number of address headers may trigger
    a denial of service (RHEL-55205)

• Mon Aug 05 2024 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-13

  - fix crash when user has sieve script that includes two missing scripts (RHEL-52541)

• Tue Jul 23 2024 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-12

  - fix building with noengine openssl

• Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 1:2.3.21-11

  - Bump release for June 2024 mass rebuild

• Tue Jun 18 2024 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-10

  - set min uid to 1000

• Thu Jun 13 2024 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-9

  - do not run during systemd commands during leap upgrade

• Tue Jun 11 2024 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-8

  - drop dependency on libstemmer (#RHEL-40657)