Dovecot 2.x — End of Life
ActiveDovecot 2.x is partially supported: only 2.4, 2.3 still receive security fixes. The most recent release in this series is 2.4.5. No CVE is currently tracked for Dovecot 2.x.
Dovecot 2.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 2.4 | Jan 24, 2025 | — | No | 2.4.5 | Active | |
| 2.3 | Dec 22, 2017 | Jan 24, 2025 | No | 2.3.21.1 | Active | |
| 2.2 | Apr 11, 2013 | Dec 22, 2017 | Jan 24, 2025 | 2.2.36.4 | EOL | |
| 2.1 | Feb 16, 2012 | Apr 11, 2013 | Dec 22, 2017 | 2.1.16 | EOL | |
| 2.0 | Aug 16, 2010 | Feb 16, 2012 | Apr 11, 2013 | 2.0.15 | EOL |
CVEs affecting Dovecot 2.x (0)
Add a Dovecot 2 EOL badge to your README
Show your users which Dovecot version your project runs and whether it is still supported. The badge updates automatically. More formats and options →
[](https://eolcanary.com/explore/dovecot/2)Frequently asked questions
Is Dovecot 2 end of life?
Partially. 3 of the 5 Dovecot 2.x releases have reached end of life. Still supported: 2.4, 2.3.
What CVEs affect Dovecot 2?
No CVEs are currently tracked for Dovecot 2.x in the NVD data we monitor.
What is the latest Dovecot 2 version?
The latest Dovecot 2.x patch release is 2.4.5, released on August 28, 2026. Always run the latest patch to benefit from all security fixes.
When was Dovecot 2 first released?
Dovecot 2.0 was released on August 16, 2010. See the full version timeline in the table above.
Is it safe to run Dovecot 2 in production?
Only on a supported release (2.4, 2.3). Make sure you run the latest patch (2.4.5) to have all security fixes applied.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA