Dovecot 2.3.5.2 has been released

DirectAdmin Support

Administrator
Staff member
Joined
Feb 27, 2003
Messages
8,937
Hello,

Dovecot 2.3.5.2 has been released:
https://dovecot.org/pipermail/dovecot-news/2019-April/000407.html

It contains an important fix to prevent someone from DDOSing your server via invalid login.
It mentions "auth policy" must be enabled for this to be affected, which I don't believe most DA boxes use (assuming they're referring to external authentication servers.. but I could be wrong).
Also mentioned possible crash with delivery for similar reasons.

Regardless, update either way :)

Update is now on files1, other mirrors should get it within 24 hours, likely less.

John
 
Top