{
  "cveId": "CVE-2024-23184",
  "url": "https://patchblox.com/security/cve/CVE-2024-23184",
  "summary": "CVE-2024-23184 is fixed in 24 products on 1 platform, first by DSA-5752-1, released August 21, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "dovecot23: This update for dovecot23 fixes the following issues:\n\n- CVE-2024-23184: parsing of messages containing many address...",
  "description": "This update for dovecot23 fixes the following issues:\n\n- CVE-2024-23184: parsing of messages containing many address headers (From, To, Cc, Bcc, etc.) could be excessively CPU\n  intensive (bsc#1229184).\n- CVE-2024-23185: large headers can cause resource exhaustion when parsing message (bsc#1229183).\n- CVE-2025-59028: Invalid base64 authentication can cause DoS for other logins (bsc#1260894).\n- CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks and read unintended files during indexing\n  (bsc#1260895).\n- CVE-2025-59032: pigeonhole: ManageSieve panic occurs with sieve-connect as a client (bsc#1260902).\n- CVE-2026-27852: DoS by sending mail with bad header (bsc#1276799).\n- CVE-2026-27855: OTP driver vulnerable to replay attack (bsc#1260900).\n- CVE-2026-27856: Doveadm credentials were not checked using timing-safe checking function (bsc#1260899).\n- CVE-2026-27857: sending excessive parenthesis causes imap-login to use excessive memory (bsc#1260898).\n- CVE-2026-27858: pigeonhole: managesieve-login can allocate large amount of memory during authentication (bsc#1260901).\n- CVE-2026-27859: excessive RFC 2231 MIME parameters in email would can excessive CPU usage (bsc#1260897).\n- CVE-2026-33263: submission-login: Panic when mail_max_userip_connections is reached (bsc#1276794).\n- CVE-2026-33603: login: base64 input can contain tabs that bypass IPC protection (bsc#1265147).\n- CVE-2026-33604: SMTP Smuggling via Missing Dot-Stuffing (bsc#1276802).\n- CVE-2026-33605: managesieve-login: Pre-auth crash (bsc#1276809).\n- CVE-2026-33606: dsync: Mail content can cause dsync protocol injection (bsc#1276800).\n- CVE-2026-33607: IMAP LIST match_sub() Exponential Backtracking -- CPU Denial of Service (bsc#1276795).\n- CVE-2026-40014: CPU DoS via Crafted References Header (bsc#1276804).\n- CVE-2026-40015: imap-hibernate can be crashed (bsc#1276812).\n- CVE-2026-40016: Sieve :contains/:matches O(NxM) substring match bypasses sieve_max_cpu_time limit (bsc#1265148).\n- CVE-2026-40019: managesieve-login pre-auth infinite loop (bsc#1276811).\n- CVE-2026-40020: IMAP folders can be shared-spammed to everyone (bsc#1265149).\n- CVE-2026-40203: IMAP Compression Can Reveal Whether a Small Synced Email Body Matches Sender-Chosen Text\n  (bsc#1276815).\n- CVE-2026-40205: OAuth2 passdb scope enforcement bypass via OR semantics in remote validation path (bsc#1276820).\n- CVE-2026-42006: imap-login: uncontrolled memory usage with excessive bracing over IMAP (bsc#1265150).\n- CVE-2026-42007: editheader RCE (bsc#1276817).\n- CVE-2026-42008: XCLIENT FORWARD= bare token not namespaced (bsc#1276824).\n- CVE-2026-42391: imap: Pre-login memory/CPU growth with ID command (bsc#1276835).\n- CVE-2026-42393: doveadm_password or api key length can still be leaked with timing comparisons (bsc#1276827).\n- CVE-2026-42395: Single NUL-Byte XCLIENT FORWARD Payload Crashes (bsc#1276826).\n- CVE-2026-52681: Sieve resource usage tracking lost when active script changes (bsc#1276828).\n- CVE-2026-52687: IMAP: COMPRESS ZSTD can cause excessive memory usage (bsc#1276837).\n- CVE-2026-73208: auth: db-oauth2: aud claim used as fallback for missing scope claim (bsc#1276830).\n- CVE-2026-73209: imap-login crash: Self-recursion on zero-output decompress chunks (bsc#1276833).\n\nChanges for dovecot23:\n\n- Update to version 2.3.21.1.",
  "published": "2024-08-21T00:00:00Z",
  "severity": "Moderate",
  "cvss": 6.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
  "epss": 0.00846,
  "epssPercentile": 0.58298,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "dovecot",
      "release": "Debian 11.6 (bullseye)",
      "fixedVersion": "1:2.3.13\u002Bdfsg1-2\u002Bdeb11u2",
      "fix": "DLA-3860-1",
      "url": "https://patchblox.com/security/fix/linux/dla-3860-1",
      "released": "2024-09-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "1:2.3.19.1\u002Bdfsg1-2.1\u002Bdeb12u1",
      "fix": "DSA-5752-1",
      "url": "https://patchblox.com/security/fix/linux/dsa-5752-1",
      "released": "2024-08-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1:2.3.21.1\u002Bdfsg1-1",
      "fix": "DEBIAN-CVE-2024-23184",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-23184",
      "released": "2024-09-10T15:15:14Z"
    },
    {
      "platform": "linux",
      "product": "dovecot",
      "release": "Debian 14",
      "fixedVersion": "1:2.3.21.1\u002Bdfsg1-1",
      "fix": "DEBIAN-CVE-2024-23184",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-23184",
      "released": "2024-09-10T15:15:14Z"
    },
    {
      "platform": "linux",
      "product": "dovecot",
      "release": "RHEL 8",
      "fixedVersion": "1:2.3.16-6.el8_10",
      "fix": "RHSA-2024:6973",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-6973",
      "released": "2024-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot",
      "release": "RHEL 9",
      "fixedVersion": "1:2.3.16-11.el9_4.1",
      "fix": "RHSA-2024:6529",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-6529",
      "released": "2024-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot",
      "release": "almalinux 8",
      "fixedVersion": "1:2.3.16-6.el8_10",
      "fix": "ALSA-2024:6973",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-6973",
      "released": "2024-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot",
      "release": "almalinux 9",
      "fixedVersion": "1:2.3.16-11.el9_4.1",
      "fix": "ALSA-2024:6529",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-6529",
      "released": "2024-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot",
      "release": "amzn 2023",
      "fixedVersion": "1:2.3.20-1.amzn2023.0.2",
      "fix": "ALAS2023-2024-785",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-785",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot",
      "release": "ol 8",
      "fixedVersion": "1:2.3.16-6.el8_10",
      "fix": "ELSA-2024-6973",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-6973",
      "released": "2024-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot",
      "release": "ol 9",
      "fixedVersion": "1:2.3.16-11.el9_4.1",
      "fix": "ELSA-2024-6529",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-6529",
      "released": "2024-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot",
      "release": "rocky 8",
      "fixedVersion": "1:2.3.16-6.el8_10",
      "fix": "RLSA-2024:6973",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-6973",
      "released": "2024-09-30T14:30:36Z"
    },
    {
      "platform": "linux",
      "product": "dovecot",
      "release": "rocky 9",
      "fixedVersion": "1:2.3.16-11.el9_4.1",
      "fix": "RLSA-2024:6529",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-6529",
      "released": "2024-09-17T00:55:55Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-auth-lua",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "fix": "dovecot-auth-lua 1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-dovecot-auth-lua-1-2.3.16-dfsg1-3ubuntu2.4",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-auth-lua",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1:2.3.21\u002Bdfsg1-2ubuntu6",
      "fix": "dovecot-auth-lua 1:2.3.21\u002Bdfsg1-2ubuntu6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-dovecot-auth-lua-1-2.3.21-dfsg1-2ubuntu6",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-core",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "fix": "dovecot-core 1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-dovecot-core-1-2.3.16-dfsg1-3ubuntu2.4",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-core",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1:2.3.21\u002Bdfsg1-2ubuntu6",
      "fix": "dovecot-core 1:2.3.21\u002Bdfsg1-2ubuntu6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-dovecot-core-1-2.3.21-dfsg1-2ubuntu6",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:2.3.20-1.amzn2023.0.2",
      "fix": "ALAS2023-2024-785",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-785",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1:2.3.20-1.amzn2023.0.2",
      "fix": "ALAS2023-2024-785",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-785",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-devel",
      "release": "RHEL 8",
      "fixedVersion": "1:2.3.16-6.el8_10",
      "fix": "RHSA-2024:6973",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-6973",
      "released": "2024-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-devel",
      "release": "RHEL 9",
      "fixedVersion": "1:2.3.16-11.el9_4.1",
      "fix": "RHSA-2024:6529",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-6529",
      "released": "2024-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-devel",
      "release": "almalinux 8",
      "fixedVersion": "1:2.3.16-6.el8_10",
      "fix": "ALSA-2024:6973",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-6973",
      "released": "2024-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-devel",
      "release": "almalinux 9",
      "fixedVersion": "1:2.3.16-11.el9_4.1",
      "fix": "ALSA-2024:6529",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-6529",
      "released": "2024-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:2.3.20-1.amzn2023.0.2",
      "fix": "ALAS2023-2024-785",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-785",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-devel",
      "release": "ol 8",
      "fixedVersion": "1:2.3.16-6.el8_10",
      "fix": "ELSA-2024-6973",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-6973",
      "released": "2024-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-devel",
      "release": "ol 9",
      "fixedVersion": "1:2.3.16-11.el9_4.1",
      "fix": "ELSA-2024-6529",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-6529",
      "released": "2024-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-gssapi",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "fix": "dovecot-gssapi 1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-dovecot-gssapi-1-2.3.16-dfsg1-3ubuntu2.4",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-gssapi",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1:2.3.21\u002Bdfsg1-2ubuntu6",
      "fix": "dovecot-gssapi 1:2.3.21\u002Bdfsg1-2ubuntu6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-dovecot-gssapi-1-2.3.21-dfsg1-2ubuntu6",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-imapd",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "fix": "dovecot-imapd 1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-dovecot-imapd-1-2.3.16-dfsg1-3ubuntu2.4",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-imapd",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1:2.3.21\u002Bdfsg1-2ubuntu6",
      "fix": "dovecot-imapd 1:2.3.21\u002Bdfsg1-2ubuntu6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-dovecot-imapd-1-2.3.21-dfsg1-2ubuntu6",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-ldap",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "fix": "dovecot-ldap 1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-dovecot-ldap-1-2.3.16-dfsg1-3ubuntu2.4",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-ldap",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1:2.3.21\u002Bdfsg1-2ubuntu6",
      "fix": "dovecot-ldap 1:2.3.21\u002Bdfsg1-2ubuntu6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-dovecot-ldap-1-2.3.21-dfsg1-2ubuntu6",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-lmtpd",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "fix": "dovecot-lmtpd 1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-dovecot-lmtpd-1-2.3.16-dfsg1-3ubuntu2.4",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-lmtpd",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1:2.3.21\u002Bdfsg1-2ubuntu6",
      "fix": "dovecot-lmtpd 1:2.3.21\u002Bdfsg1-2ubuntu6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-dovecot-lmtpd-1-2.3.21-dfsg1-2ubuntu6",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-lucene",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "fix": "dovecot-lucene 1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-dovecot-lucene-1-2.3.16-dfsg1-3ubuntu2.4",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-managesieved",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "fix": "dovecot-managesieved 1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-dovecot-managesieved-1-2.3.16-dfsg1-3ubuntu2.4",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-managesieved",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1:2.3.21\u002Bdfsg1-2ubuntu6",
      "fix": "dovecot-managesieved 1:2.3.21\u002Bdfsg1-2ubuntu6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-dovecot-managesieved-1-2.3.21-dfsg1-2ubuntu6",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-mysql",
      "release": "RHEL 8",
      "fixedVersion": "1:2.3.16-6.el8_10",
      "fix": "RHSA-2024:6973",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-6973",
      "released": "2024-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-mysql",
      "release": "RHEL 9",
      "fixedVersion": "1:2.3.16-11.el9_4.1",
      "fix": "RHSA-2024:6529",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-6529",
      "released": "2024-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-mysql",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "fix": "dovecot-mysql 1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-dovecot-mysql-1-2.3.16-dfsg1-3ubuntu2.4",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-mysql",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1:2.3.21\u002Bdfsg1-2ubuntu6",
      "fix": "dovecot-mysql 1:2.3.21\u002Bdfsg1-2ubuntu6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-dovecot-mysql-1-2.3.21-dfsg1-2ubuntu6",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-mysql",
      "release": "almalinux 8",
      "fixedVersion": "1:2.3.16-6.el8_10",
      "fix": "ALSA-2024:6973",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-6973",
      "released": "2024-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-mysql",
      "release": "almalinux 9",
      "fixedVersion": "1:2.3.16-11.el9_4.1",
      "fix": "ALSA-2024:6529",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-6529",
      "released": "2024-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-mysql",
      "release": "amzn 2023",
      "fixedVersion": "1:2.3.20-1.amzn2023.0.2",
      "fix": "ALAS2023-2024-785",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-785",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-mysql",
      "release": "ol 8",
      "fixedVersion": "1:2.3.16-6.el8_10",
      "fix": "ELSA-2024-6973",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-6973",
      "released": "2024-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-mysql",
      "release": "ol 9",
      "fixedVersion": "1:2.3.16-11.el9_4.1",
      "fix": "ELSA-2024-6529",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-6529",
      "released": "2024-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-mysql-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:2.3.20-1.amzn2023.0.2",
      "fix": "ALAS2023-2024-785",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-785",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pgsql",
      "release": "RHEL 8",
      "fixedVersion": "1:2.3.16-6.el8_10",
      "fix": "RHSA-2024:6973",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-6973",
      "released": "2024-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pgsql",
      "release": "RHEL 9",
      "fixedVersion": "1:2.3.16-11.el9_4.1",
      "fix": "RHSA-2024:6529",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-6529",
      "released": "2024-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pgsql",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "fix": "dovecot-pgsql 1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-dovecot-pgsql-1-2.3.16-dfsg1-3ubuntu2.4",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pgsql",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1:2.3.21\u002Bdfsg1-2ubuntu6",
      "fix": "dovecot-pgsql 1:2.3.21\u002Bdfsg1-2ubuntu6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-dovecot-pgsql-1-2.3.21-dfsg1-2ubuntu6",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pgsql",
      "release": "almalinux 8",
      "fixedVersion": "1:2.3.16-6.el8_10",
      "fix": "ALSA-2024:6973",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-6973",
      "released": "2024-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pgsql",
      "release": "almalinux 9",
      "fixedVersion": "1:2.3.16-11.el9_4.1",
      "fix": "ALSA-2024:6529",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-6529",
      "released": "2024-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pgsql",
      "release": "amzn 2023",
      "fixedVersion": "1:2.3.20-1.amzn2023.0.2",
      "fix": "ALAS2023-2024-785",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-785",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pgsql",
      "release": "ol 8",
      "fixedVersion": "1:2.3.16-6.el8_10",
      "fix": "ELSA-2024-6973",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-6973",
      "released": "2024-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pgsql",
      "release": "ol 9",
      "fixedVersion": "1:2.3.16-11.el9_4.1",
      "fix": "ELSA-2024-6529",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-6529",
      "released": "2024-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pgsql-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:2.3.20-1.amzn2023.0.2",
      "fix": "ALAS2023-2024-785",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-785",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pigeonhole",
      "release": "RHEL 8",
      "fixedVersion": "1:2.3.16-6.el8_10",
      "fix": "RHSA-2024:6973",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-6973",
      "released": "2024-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pigeonhole",
      "release": "RHEL 9",
      "fixedVersion": "1:2.3.16-11.el9_4.1",
      "fix": "RHSA-2024:6529",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-6529",
      "released": "2024-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pigeonhole",
      "release": "almalinux 8",
      "fixedVersion": "1:2.3.16-6.el8_10",
      "fix": "ALSA-2024:6973",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-6973",
      "released": "2024-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pigeonhole",
      "release": "almalinux 9",
      "fixedVersion": "1:2.3.16-11.el9_4.1",
      "fix": "ALSA-2024:6529",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-6529",
      "released": "2024-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pigeonhole",
      "release": "amzn 2023",
      "fixedVersion": "1:2.3.20-1.amzn2023.0.2",
      "fix": "ALAS2023-2024-785",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-785",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pigeonhole",
      "release": "ol 8",
      "fixedVersion": "1:2.3.16-6.el8_10",
      "fix": "ELSA-2024-6973",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-6973",
      "released": "2024-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pigeonhole",
      "release": "ol 9",
      "fixedVersion": "1:2.3.16-11.el9_4.1",
      "fix": "ELSA-2024-6529",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-6529",
      "released": "2024-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pigeonhole-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:2.3.20-1.amzn2023.0.2",
      "fix": "ALAS2023-2024-785",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-785",
      "released": "2024-12-05T20:34:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pop3d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "fix": "dovecot-pop3d 1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-dovecot-pop3d-1-2.3.16-dfsg1-3ubuntu2.4",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-pop3d",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1:2.3.21\u002Bdfsg1-2ubuntu6",
      "fix": "dovecot-pop3d 1:2.3.21\u002Bdfsg1-2ubuntu6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-dovecot-pop3d-1-2.3.21-dfsg1-2ubuntu6",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-sieve",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "fix": "dovecot-sieve 1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-dovecot-sieve-1-2.3.16-dfsg1-3ubuntu2.4",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-sieve",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1:2.3.21\u002Bdfsg1-2ubuntu6",
      "fix": "dovecot-sieve 1:2.3.21\u002Bdfsg1-2ubuntu6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-dovecot-sieve-1-2.3.21-dfsg1-2ubuntu6",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-solr",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "fix": "dovecot-solr 1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-dovecot-solr-1-2.3.16-dfsg1-3ubuntu2.4",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-solr",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1:2.3.21\u002Bdfsg1-2ubuntu6",
      "fix": "dovecot-solr 1:2.3.21\u002Bdfsg1-2ubuntu6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-dovecot-solr-1-2.3.21-dfsg1-2ubuntu6",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-sqlite",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "fix": "dovecot-sqlite 1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-dovecot-sqlite-1-2.3.16-dfsg1-3ubuntu2.4",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-sqlite",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1:2.3.21\u002Bdfsg1-2ubuntu6",
      "fix": "dovecot-sqlite 1:2.3.21\u002Bdfsg1-2ubuntu6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-dovecot-sqlite-1-2.3.21-dfsg1-2ubuntu6",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-submissiond",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "fix": "dovecot-submissiond 1:2.3.16\u002Bdfsg1-3ubuntu2.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-dovecot-submissiond-1-2.3.16-dfsg1-3ubuntu2.4",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot-submissiond",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1:2.3.21\u002Bdfsg1-2ubuntu6",
      "fix": "dovecot-submissiond 1:2.3.21\u002Bdfsg1-2ubuntu6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-dovecot-submissiond-1-2.3.21-dfsg1-2ubuntu6",
      "released": "2024-08-23T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "dovecot23",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.3.15-150200.65.1",
      "fix": "SUSE-SU-2024:3118-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3118-1",
      "released": "2024-09-03T15:08:50Z"
    },
    {
      "platform": "linux",
      "product": "dovecot23",
      "release": "sles 15.6",
      "fixedVersion": "2.3.21.1-150200.76.1",
      "fix": "SUSE-SU-2026:4139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4139-1",
      "released": "2026-09-14T07:22:32Z"
    },
    {
      "platform": "linux",
      "product": "dovecot23",
      "release": "sles 15.7",
      "fixedVersion": "2.3.21.1-150200.76.1",
      "fix": "SUSE-SU-2026:4139-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4139-1",
      "released": "2026-09-14T07:22:32Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}