The remote host is missing updates announced in advisory GLSA 200812-16.

All Dovecot users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=net-mail/dovecot-1.1.7-r1' Users should be aware that dovecot.conf will still be world-readable after the update. If employing ssl_key_password, it should not be used in dovecot.conf but in a separate file which should be included with 'include_try'. http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200812-16 http://bugs.gentoo.org/show_bug.cgi?id=240409 http://bugs.gentoo.org/show_bug.cgi?id=244962 http://bugs.gentoo.org/show_bug.cgi?id=245316

Multiple vulnerabilities were found in the Dovecot mailserver.