RHBA-2015:0003 - Bug Fix Advisory

Topic

Updated dovecot packages that fix one bug and add one enhancement are now
available for Red Hat Enterprise Linux 6.

Description

Dovecot is an IMAP server for Linux and other UNIX-like systems, primarily
written with security in mind. It also contains a small POP3 server. It supports
e-mail in either the maildir or mbox format. The SQL drivers and authentication
plug-ins are provided as sub-packages.

This update fixes the following bug:

• Previously, the dovecot utility used too small a login input buffer for

kerberos authentication. As a consequence, users who attempted to use kerberos
authentication were not able to log in. This updated version of dovecot uses a
bigger input buffer, and users can now authenticate to their email accounts
using a kerberos ticket. (BZ#1171771)

In addition, this update adds the following enhancement:

• With this update, it is possible to configure which Secure Sockets

Layer (SSL) protocols dovecot allows. Among other things, this allows
users to disable SSLv3 connections and thus mitigate the impact of the
POODLE vulnerability. Due to security concerns, SSLv2 and SSLv3 are now
also disabled by default, and they have to be allowed manually if the
user needs them. (BZ#1174158)

Users of dovecot are advised to upgrade to these updated packages, which fix
this bug and add this enhancement.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.6 i386
• Red Hat Enterprise Linux Server - AUS 6.6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.6 ppc64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.6 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Server - TUS 6.6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 1174158 - RFE: backport method to disable SSLv3 or disable SSv3 permanently

CVEs

(none)

References

(none)