Full Disclosure mailing list archives

---

From: Noel Butler via Fulldisclosure <fulldisclosure () seclists org>
Date: Mon, 18 May 2026 08:30:07 +1000

---

So when is the fix for dovecot 2.3 source code due to be released?

Since by your wording by not including the first detected versions, it must be assumed 2.3 is affected, and as no EOL has been published or announced for 2.3.x, and as 2.3 is the still the most popular used version by far, should be prudent one is released, given a few more serious fixes have been made in recent times.

On 12/05/2026 23:41, Aki Tuomi wrote:

Last affected revision: OX Dovecot Pro core 3.1.0, OX Dovecot CE core 2.4.0 First fixed revision: OX Dovecot Pro core 3.1.5, OX Dovecot CE core 2.4.4

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/

---

Current thread:

• Dovecot Security Advisory OXDC-2026-0002 Aki Tuomi (May 17)
  • Re: Dovecot Security Advisory OXDC-2026-0002 Noel Butler via Fulldisclosure (May 25)