• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.

Question Devcot Security Patch available?

T

Thoka

New Pleskian
I just got aware that the Devcot Mail Server has a serious security problem below version 2.3.11.3
When will be a Plesk Update available to close this security leak?

* CVE-2020-24386: Specially crafted command can cause IMAP hibernate to allow logged in user to access other people's emails and filesystem information.


regards
Thomas
 
This bug only applies to installations that allow hibernation mode. In a default Dovecot installation, this is not the case. So the alerting bug is not as dangerous as it sounds.
 
You must log in or register to reply here.

Similar threads

M
Question Dovecot CVE-2020-12100
Replies
5
Views
1K
Bitpalast
Bitpalast
M
BIND DNS Server 9.8.3-P1
Replies
1
Views
2K
IgorG
IgorG
Back
Top