Debian/dovecot: medium 5.9
Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An attacker can use this to determine the configured credentials. Figuring out the credential wil
Action: Upgrade dovecot to 1:2.4.3+dfsg1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:2.4.3+dfsg1-1 | - |
Fixed versions
| 1:2.4.3+dfsg1-1 |
Sources
- osv: DEBIAN-CVE-2026-27856#Debian:14/dovecot
- https://security-tracker.debian.org/tracker/CVE-2026-27856
published · modified · JSON