Debian Security Advisory 1359-1 – It was discovered that dovecot, a secure mail server that supports mbox and maildir mailboxes, when configured to use non-system-user spools and compressed folders, may allow directory traversal in mailbox names.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/58918/dsa-1359-1.txt
Source: https://packetstormsecurity.com/files/58918/Debian-Linux-Security-Advisory-1359-1.html