The current version of Dovecot is 2.4.5 (as of 29/08/2026). patchletter checks the official source daily and emails you new releases.
BSI security advisories
Advisories the German BSI (CERT-Bund) published for this product. Whether your version is affected is stated in the advisory itself.
- Dovecot: Mehrere Schwachstellen
WID-SEC-W-2026-3076 · 7 Oct
- OX Dovecot Pro: Mehrere Schwachstellen
WID-SEC-W-2026-1510 · 22 Sept
- Dovecot: Mehrere Schwachstellen
WID-SEC-W-2026-0891 · 17 Sept
- Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service
WID-SEC-W-2024-1867 · 17 Sept
- Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service
WID-SEC-W-2025-0235 · 11 Aug
Dovecot at a glance
Dovecot is one of the most widely used open-source IMAP and POP3 servers, delivering mail to clients on a large share of mail systems. Dovecot ships regular releases plus coordinated security fixes; as an internet-facing mail component handling authentication and untrusted input, prompt patching matters.
For admins Dovecot usually comes from the distribution, which backports fixes — for security advisories, confirm the patched package is installed and the service restarted. Harden the configuration: enforce TLS, strong authentication, and current settings; Dovecot often also handles SASL auth for the MTA, so its security underpins the whole mail stack. Keep an eye on the version branch you run and its support. After updating, verify that clients can still connect and authenticate over TLS. Because mail is a prime target, treat Dovecot advisories seriously. Patchletter surfaces new Dovecot releases so security fixes aren't missed.
Version history & changelog · as detected by patchletter
| Version | Channel | Date | Notes |
|---|---|---|---|
| 2.4.5 | STABLE | 29/08/2026 | – |
| 2.4.4 | STABLE | 08/07/2026 | – |
Frequently asked questions
- What is the latest version of Dovecot?
- Dovecot 2.4.5, released 29/08/2026. patchletter checks the vendor's official source daily for new releases.
- Where can I find the Dovecot release notes?
- The version history above links to the vendor's official release notes where the vendor publishes them. patchletter deliberately stores no vendor full texts.
- How do I get notified about new Dovecot updates?
- Tick Dovecot off in the catalogue and leave your address. From then on new versions go out by email — one at a time, or bundled in the daily or weekly digest.
An email as soon as a new Dovecot version ships
We reconcile the vendor source daily. When a new version appears, it lands in your inbox right away or bundled as a digest. The update email is free and ends with one click. Alerts about vulnerabilities and end of support are part of patchletter Pro.
Embed this badge
The badge shows the current Dovecot version and keeps it up to date. Anyone may embed it, no account needed.
[](https://patchletter.com/en/software/dovecot)https://patchletter.com/badge/dovecot.svgAlso available: ?v=eol (end of support) and ?v=cve (actively exploited).
