- Joined
- Feb 27, 2003
- Messages
- 8,500
Hello,
Dovecot 2.3.5.2 has been released:
https://dovecot.org/pipermail/dovecot-news/2019-April/000407.html
It contains an important fix to prevent someone from DDOSing your server via invalid login.
It mentions "auth policy" must be enabled for this to be affected, which I don't believe most DA boxes use (assuming they're referring to external authentication servers.. but I could be wrong).
Also mentioned possible crash with delivery for similar reasons.
Regardless, update either way
Update is now on files1, other mirrors should get it within 24 hours, likely less.
John
Dovecot 2.3.5.2 has been released:
https://dovecot.org/pipermail/dovecot-news/2019-April/000407.html
It contains an important fix to prevent someone from DDOSing your server via invalid login.
It mentions "auth policy" must be enabled for this to be affected, which I don't believe most DA boxes use (assuming they're referring to external authentication servers.. but I could be wrong).
Also mentioned possible crash with delivery for similar reasons.
Regardless, update either way
Update is now on files1, other mirrors should get it within 24 hours, likely less.
John