Red Hat Product Errata RHEA-2014:1898 - Product Enhancement Advisory
Issued:
2014-11-25
Updated:
2014-11-25

RHEA-2014:1898 - Product Enhancement Advisory

Synopsis

dovecot enhancement update

Type/Severity

Product Enhancement Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated dovecot packages that add one enhancement are now available for Red Hat
Enterprise Linux 5.

Description

Dovecot is an IMAP server for Linux and other UNIX-like systems, primarily
written with security in mind. It also contains a small POP3 server. It supports
email in either the maildir or mbox format. The SQL drivers and authentication
plug-ins are provided as sub-packages.

This update adds the following enhancement:

  • With this update, it is possible to configure which Secure Sockets Layer (SSL)

protocols dovecot allows. Among other things, this allows users to disable SSLv3
connections and thus mitigate the impact of the POODLE vulnerability. Due to
security concerns, SSLv2 and SSLv3 are now also disabled by default, and they
have to be allowed manually if the user needs them. (BZ#1153027)

Users of dovecot are advised to upgrade to these updated packages, which add
this enhancement.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 ia64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux for IBM z Systems 5 s390x
  • Red Hat Enterprise Linux for Power, big endian 5 ppc
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 5

SRPM
dovecot-1.0.7-9.el5_11.4.src.rpm SHA-256: 74bb4ab32477bb04b1cb00e5a11f299d8116f0b01800900161b53f093b015701
x86_64
dovecot-1.0.7-9.el5_11.4.x86_64.rpm SHA-256: 9ba100744979a7f45779e03573358d6b259554ac668cf26bcd69509255b335fb
dovecot-debuginfo-1.0.7-9.el5_11.4.x86_64.rpm SHA-256: 8cea3397faae8841e366cb3e261c6dbdd5b41c734170f2b17d56d8418a8eb086
ia64
dovecot-1.0.7-9.el5_11.4.ia64.rpm SHA-256: ed5607de599e57610ce269053db17f2d81d8dbac82af4330c92a569d495c7634
dovecot-debuginfo-1.0.7-9.el5_11.4.ia64.rpm SHA-256: 8a535449af61f306a1198e73e1ebc6de52fe10ed3e390901cde6cdecfd724b2f
i386
dovecot-1.0.7-9.el5_11.4.i386.rpm SHA-256: 5bd819da743cbc8883f7bf3de91589962a19f48481cfd0bc70ad1ccf1431e8c3
dovecot-debuginfo-1.0.7-9.el5_11.4.i386.rpm SHA-256: 58db31b906f36856360dd897636c3c4fa5ce661628cf03ead72e3c881f95bb55

Red Hat Enterprise Linux Workstation 5

SRPM
dovecot-1.0.7-9.el5_11.4.src.rpm SHA-256: 74bb4ab32477bb04b1cb00e5a11f299d8116f0b01800900161b53f093b015701
x86_64
dovecot-1.0.7-9.el5_11.4.x86_64.rpm SHA-256: 9ba100744979a7f45779e03573358d6b259554ac668cf26bcd69509255b335fb
dovecot-debuginfo-1.0.7-9.el5_11.4.x86_64.rpm SHA-256: 8cea3397faae8841e366cb3e261c6dbdd5b41c734170f2b17d56d8418a8eb086
i386
dovecot-1.0.7-9.el5_11.4.i386.rpm SHA-256: 5bd819da743cbc8883f7bf3de91589962a19f48481cfd0bc70ad1ccf1431e8c3
dovecot-debuginfo-1.0.7-9.el5_11.4.i386.rpm SHA-256: 58db31b906f36856360dd897636c3c4fa5ce661628cf03ead72e3c881f95bb55

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
dovecot-1.0.7-9.el5_11.4.src.rpm SHA-256: 74bb4ab32477bb04b1cb00e5a11f299d8116f0b01800900161b53f093b015701
s390x
dovecot-1.0.7-9.el5_11.4.s390x.rpm SHA-256: 5f12418bb932cf5a259f86ec06f2c02d6bf006eb6a63a15d9ee415a56b5910d8
dovecot-debuginfo-1.0.7-9.el5_11.4.s390x.rpm SHA-256: 42dd0bc234a5c6307b61ed939e2b74cbc01fc21bad3e22197bc73bce7324887f

Red Hat Enterprise Linux for Power, big endian 5

SRPM
dovecot-1.0.7-9.el5_11.4.src.rpm SHA-256: 74bb4ab32477bb04b1cb00e5a11f299d8116f0b01800900161b53f093b015701
ppc
dovecot-1.0.7-9.el5_11.4.ppc.rpm SHA-256: c3c6dfe6a15a8b552db655cda718dc7335fbebca32e0164cf6b6590bcdc5dc73
dovecot-debuginfo-1.0.7-9.el5_11.4.ppc.rpm SHA-256: ba9b42ed2204f3d643d1b0cfc840fbbdb3ebac4e3a47416e171804f1215fa182

Red Hat Enterprise Linux Server from RHUI 5

SRPM
dovecot-1.0.7-9.el5_11.4.src.rpm SHA-256: 74bb4ab32477bb04b1cb00e5a11f299d8116f0b01800900161b53f093b015701
x86_64
dovecot-1.0.7-9.el5_11.4.x86_64.rpm SHA-256: 9ba100744979a7f45779e03573358d6b259554ac668cf26bcd69509255b335fb
dovecot-debuginfo-1.0.7-9.el5_11.4.x86_64.rpm SHA-256: 8cea3397faae8841e366cb3e261c6dbdd5b41c734170f2b17d56d8418a8eb086
i386
dovecot-1.0.7-9.el5_11.4.i386.rpm SHA-256: 5bd819da743cbc8883f7bf3de91589962a19f48481cfd0bc70ad1ccf1431e8c3
dovecot-debuginfo-1.0.7-9.el5_11.4.i386.rpm SHA-256: 58db31b906f36856360dd897636c3c4fa5ce661628cf03ead72e3c881f95bb55

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.