Welcome Guest. Please Login or Register  
Client Area  |  Softaculous Cloud  |  Calendar  |  Quick Links  |  
   


You are here: Index > Webuzo > General Support > Topic : Security Issue on Dovecot 2.0.9



Normal Mode | Print  

Security Issue on Dovecot 2.0.9
Guest
December 29, 2015, 1:53 pm | Post: 3
Group: Guest
Status:
As you can see from this URL article

https://www.linode.com/docs/security/security-patches/disabling-sslv3-for-poodle



If you scroll down to Dovecot you will be able to read:

If you are running a version of Dovecot before 2.1, you will need to edit the source code of Dovecot.



A patch is needed

Also you can read here:

https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1381537



Original description:

The current version of dovecot in Ubuntu 12.04 LTS, Precise Pangolin is 2.0.19



This version is too old to switch off SSLv3 which has been designated insecure as of the recent "poodle" discovery [1].

In dovecot versions 2.1+ the protocol can be switched off, but for older versions the source code would need to be patched [2,3]



http://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566
IP: --   


Threads
 Guest   Security Issue on Dovecot 2.0.9 (17 Replies, Read 41804 times)
    |--  Guest   Dovecot 2.0.9 needs...   on December 28, 2015, 10:38 pm
    |--  Guest   If I disable...   on December 29, 2015, 10:38 am
    |--  Guest   As you can...   on December 29, 2015, 1:53 pm
    |--  Guest   Please be also...   on December 29, 2015, 4:08 pm
    |--  Guest   Any news on...   on January 10, 2016, 9:49 am
    |--  Guest   Seems this has...   on January 11, 2016, 2:20 pm
    |--  Guest   Sorry, Issue not...   on January 18, 2016, 7:19 pm
    |--  valley   Dovecot is fetched...   on January 19, 2016, 1:45 pm
    |--  Guest   Dovecot is fetched...   on January 19, 2016, 1:47 pm
    |--  valley   Update CentOS and...   on January 20, 2016, 4:25 am
    |--  Guest   Webuzo last Dovecot...   on January 20, 2016, 8:27 am
    |--  valley   Oops !!! Webuzo...   on January 21, 2016, 4:32 am
    |--  Guest   Hi valley, comand:...   on January 21, 2016, 8:45 am
    |--  Guest   Update: The issue...   on January 21, 2016, 9:30 am
    |--  Guest   Not all TLS...   on January 21, 2016, 9:39 am
    |--  Guest   Update: The issue...   on January 21, 2016, 12:19 pm
    |--  Guest   Seems an EXIM...   on January 21, 2016, 1:54 pm

« Previous    Next »

Normal Mode | Print  



Users viewing this topic
1 guests, 0 users.


All times are GMT. The time now is May 7, 2025, 9:41 am.

  Powered By AEF 1.0.8 © 2007-2008 Electron Inc.Queries: 10  |  Page Created In:0.023