From 3c910f64bf3bd57cdf2703cf4c36c7613f1107f0 Mon Sep 17 00:00:00 2001 From: Aki Tuomi Date: Fri, 23 Aug 2019 09:43:33 +0300 Subject: [PATCH] Release 2.3.7.2 --- NEWS | 6 ++++++ configure.ac | 2 +- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/NEWS b/NEWS index 8a1d94496c..e3bce8c674 100644 --- a/NEWS +++ b/NEWS @@ -1,3 +1,9 @@ +v2.3.7.2 2019-08-28 Aki Tuomi + + * CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte + when scanning data in quoted strings, leading to out of bounds heap + memory writes. Found by Nick Roessler and Rafi Rubin. + v2.3.7.1 2019-07-23 Timo Sirainen - Fix TCP_NODELAY errors being logged on non-Linux OSes diff --git a/configure.ac b/configure.ac index 5a9dcc15e8..4b59c6624b 100644 --- a/configure.ac +++ b/configure.ac @@ -2,7 +2,7 @@ AC_PREREQ([2.59]) # Be sure to update ABI version also if anything changes that might require # recompiling plugins. Most importantly that means if any structs are changed. -AC_INIT([Dovecot],[2.3.7.1],[dovecot@dovecot.org]) +AC_INIT([Dovecot],[2.3.7.2],[dovecot@dovecot.org]) AC_DEFINE_UNQUOTED([DOVECOT_ABI_VERSION], "2.3.ABIv7($PACKAGE_VERSION)", [Dovecot ABI version]) AC_CONFIG_SRCDIR([src]) -- 2.47.2