Dovecot 2.4.5 is out with fixes for 18 CVEs, including authentication bypass, email spoofing, information leaks, and denial-of-service flaws, plus several new features.