Question Devcot Security Patch available?

[Thoka]

I just got aware that the Devcot Mail Server has a serious security problem below version 2.3.11.3
When will be a Plesk Update available to close this security leak?

* CVE-2020-24386: Specially crafted command can cause IMAP hibernate to allow logged in user to access other people's emails and filesystem information.

[Dovecot-news] Dovecot v2.3.13 released

regards
Thomas

 

[Bitpalast]

This bug only applies to installations that allow hibernation mode. In a default Dovecot installation, this is not the case. So the alerting bug is not as dangerous as it sounds.

 

[Thoka]

Thanks for the info, anyhow it would be nice to get security updates in time