[BlueOnyx:23180] Re: dovecot CVE-2019-11500 - YUM updates released

[Steve Howes]

On 2019-09-01 19:03, Michael Stauber wrote:
> I just published dovecot-2.2.36.4 for BlueOnyx 5207R, 5208R and 5209R.
> Updates for Aventurin{e} 6108R and 6109R have also been released.

We've seen a marked decrease in stability since we installed this 
update. Dovecot seems to kill itself fairly regularly. e.g.

#grep kill /var/log/maillog
Sep  9 09:12:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=11801 uid=0 code=kill)
Sep  9 09:28:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=7197 uid=0 code=kill)
Sep  9 09:47:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=13913 uid=0 code=kill)
Sep  9 10:05:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=15856 uid=0 code=kill)
Sep  9 10:16:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=24684 uid=0 code=kill)
Sep  9 10:30:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=11029 uid=0 code=kill)
Sep  9 10:35:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=29842 uid=0 code=kill)
Sep  9 10:47:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=9311 uid=0 code=kill)
Sep  9 10:58:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=16389 uid=0 code=kill)
Sep  9 11:09:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=24157 uid=0 code=kill)
Sep  9 11:17:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=20990 uid=0 code=kill)
Sep  9 11:31:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=7024 uid=0 code=kill)
Sep  9 11:46:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=28746 uid=0 code=kill)
Sep  9 12:01:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=17603 uid=0 code=kill)
Sep  9 12:11:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=20536 uid=0 code=kill)
Sep  9 12:18:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=13436 uid=0 code=kill)
Sep  9 12:42:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=1465 uid=0 code=kill)
Sep  9 12:58:02 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=26270 uid=0 code=kill)
Sep  9 13:04:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=15896 uid=0 code=kill)
Sep  9 13:12:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=11956 uid=0 code=kill)
Sep  9 13:18:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=1454 uid=0 code=kill)
Sep  9 13:26:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=29711 uid=0 code=kill)
Sep  9 14:00:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=20841 uid=0 code=kill)
Sep  9 14:14:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=6176 uid=0 code=kill)
Sep  9 14:23:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=6267 uid=0 code=kill)
Sep  9 14:32:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=6563 uid=0 code=kill)
Sep  9 14:46:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=24558 uid=0 code=kill)
Sep  9 14:58:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=1498 uid=0 code=kill)
Sep  9 15:04:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=23260 uid=0 code=kill)
Sep  9 15:17:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=4456 uid=0 code=kill)
Sep  9 15:22:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=22064 uid=0 code=kill)
Sep  9 15:25:40 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=3671 uid=0 code=kill)
Sep  9 15:26:12 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=7258 uid=0 code=kill)
Sep  9 15:32:01 jude dovecot: master: Warning: Killed with signal 15 (by 
pid=25919 uid=0 code=kill)


Doesn't seem to log anything other than normal user logins before thaat 
point.

Steve