CVE-2016-8652 (the version in 6.0 isn't affected): "If auth-policy component has been activated in Dovecot, then remote user can use SASL authentication to crash auth component. Workaround is to disable auth-policy component until fix is in place."
CVE-2016-8652 (the version in 6.0 isn't affected): "If auth-policy component has been activated in Dovecot, then remote user can use SASL authentication to crash auth component. Workaround is to disable auth-policy component until fix is in place."