Oval Definition:oval:org.opensuse.security:def:4871
Revision Date:2020-12-02Version:1
Title:Security update for dovecot23 (Important)
Description:

This update for dovecot23 to 2.3.10 fixes the following issues:

Security issues fixed:

- CVE-2020-10957: Fixed a crash caused by malformed NOOP commands (bsc#1171457). - CVE-2020-10958: Fixed a use-after-free when receiving too many newlines (bsc#1171458). - CVE-2020-10967: Fixed a crash in the lmtp and submission components caused by mails with empty quoted localparts (bsc#1171456).

Non-security issues fixed:

- The update to 2.3.10 fixes several bugs. Please refer to https://dovecot.org/doc/NEWS for a complete list of changes.
Family:unixClass:patch
Status:Reference(s):1093733
1094301
1098447
1098649
1101776
1101777
1101786
1101788
1101791
1101794
1101800
1101802
1101804
1101810
1106514
1111647
1117740
1120498
1120499
1120500
1120515
1120516
1120517
1120519
1121231
1121232
1121233
1121234
1121235
1127367
1127369
1127370
1131941
1131945
1134157
1134853
1136021
1141025
1141980
1143463
1143777
1143817
1143818
1143819
1143820
1143821
1143823
1143824
1143825
1143827
1143828
1143830
1143831
1150690
1151317
1156288
1158505
1161052
1161167
1162198
1163102
1163103
1163104
1165241
1165710
1167209
1171456
1171457
1171458
1173477
1175070
1175071
1175074
1175686
1176069
957624
CVE-2009-0688
CVE-2010-3170
CVE-2011-1526
CVE-2011-3389
CVE-2011-3640
CVE-2011-4862
CVE-2013-0157
CVE-2013-0743
CVE-2013-0791
CVE-2013-1620
CVE-2013-1739
CVE-2013-1740
CVE-2013-5605
CVE-2014-1492
CVE-2014-1568
CVE-2017-18922
CVE-2018-11354
CVE-2018-11355
CVE-2018-11356
CVE-2018-11357
CVE-2018-11358
CVE-2018-11359
CVE-2018-11360
CVE-2018-11361
CVE-2018-11362
CVE-2018-12086
CVE-2018-14339
CVE-2018-14340
CVE-2018-14341
CVE-2018-14342
CVE-2018-14343
CVE-2018-14344
CVE-2018-14367
CVE-2018-14368
CVE-2018-14369
CVE-2018-14370
CVE-2018-16056
CVE-2018-16057
CVE-2018-16058
CVE-2018-18225
CVE-2018-18226
CVE-2018-18227
CVE-2018-19622
CVE-2018-19623
CVE-2018-19624
CVE-2018-19625
CVE-2018-19626
CVE-2018-19627
CVE-2018-19628
CVE-2018-20337
CVE-2018-20363
CVE-2018-20364
CVE-2018-20365
CVE-2018-5817
CVE-2018-5818
CVE-2018-5819
CVE-2019-10894
CVE-2019-10895
CVE-2019-10896
CVE-2019-10897
CVE-2019-10898
CVE-2019-10899
CVE-2019-10900
CVE-2019-10901
CVE-2019-10902
CVE-2019-10903
CVE-2019-11059
CVE-2019-11690
CVE-2019-13103
CVE-2019-13619
CVE-2019-14192
CVE-2019-14193
CVE-2019-14194
CVE-2019-14195
CVE-2019-14196
CVE-2019-14197
CVE-2019-14198
CVE-2019-14199
CVE-2019-14200
CVE-2019-14201
CVE-2019-14202
CVE-2019-14203
CVE-2019-14204
CVE-2019-15604
CVE-2019-15605
CVE-2019-15606
CVE-2019-16319
CVE-2019-19553
CVE-2019-5716
CVE-2019-5717
CVE-2019-5718
CVE-2019-5719
CVE-2019-5721
CVE-2019-9208
CVE-2019-9209
CVE-2019-9214
CVE-2020-0569
CVE-2020-10648
CVE-2020-10957
CVE-2020-10958
CVE-2020-10967
CVE-2020-11984
CVE-2020-11993
CVE-2020-14386
CVE-2020-15663
CVE-2020-15664
CVE-2020-15669
CVE-2020-7044
CVE-2020-8432
CVE-2020-9428
CVE-2020-9429
CVE-2020-9430
CVE-2020-9431
CVE-2020-9490
SUSE-SU-2019:0133-1
SUSE-SU-2019:2982-1
SUSE-SU-2020:0349-1
SUSE-SU-2020:0455-1
SUSE-SU-2020:0693-1
SUSE-SU-2020:1380-1
SUSE-SU-2020:1873-1
SUSE-SU-2020:2344-1
SUSE-SU-2020:2552-1
SUSE-SU-2020:2577-1
SUSE-SU-2020:3283-1
Platform(s):SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise High Availability 12
SUSE Linux Enterprise High Availability 12 SP1
SUSE Linux Enterprise High Availability 12 SP2
SUSE Linux Enterprise High Availability 12 SP3
SUSE Linux Enterprise High Availability 12 SP4
SUSE Linux Enterprise High Availability 12 SP5
SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise Live Patching 12
SUSE Linux Enterprise Module for Containers 12
SUSE Linux Enterprise Module for Legacy Software 12
SUSE Linux Enterprise Module for Public Cloud 12
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Module for Web Scripting 12
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP3-LTSS
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12-LTSS
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
SUSE Linux Enterprise Server for Rasperry Pi 12 SP2
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server for VMWare 11 SP3
SUSE Linux Enterprise Software Development Kit 11 SP3
SUSE Linux Enterprise Software Development Kit 11 SP4
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Software Development Kit 12 SP2
SUSE Linux Enterprise Software Development Kit 12 SP3
SUSE Linux Enterprise Workstation Extension 15
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE Linux Enterprise Workstation Extension 15 SP2
SUSE OpenStack Cloud 5
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP2 is installed
  • AND Package Information
  • libpython2_6-1_0-2.6.8-0.23.1 is installed
  • OR libpython2_6-1_0-32bit-2.6.8-0.23.1 is installed
  • OR python-2.6.8-0.23.1 is installed
  • OR python-base-2.6.8-0.23.1 is installed
  • OR python-base-32bit-2.6.8-0.23.1 is installed
  • OR python-curses-2.6.8-0.23.1 is installed
  • OR python-devel-2.6.8-0.23.1 is installed
  • OR python-tk-2.6.8-0.23.1 is installed
  • OR python-xml-2.6.8-0.23.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • cyrus-sasl-2.1.26-7 is installed
  • OR cyrus-sasl-32bit-2.1.26-7 is installed
  • OR cyrus-sasl-crammd5-2.1.26-7 is installed
  • OR cyrus-sasl-crammd5-32bit-2.1.26-7 is installed
  • OR cyrus-sasl-digestmd5-2.1.26-7 is installed
  • OR cyrus-sasl-digestmd5-32bit-2.1.26-7 is installed
  • OR cyrus-sasl-gssapi-2.1.26-7 is installed
  • OR cyrus-sasl-gssapi-32bit-2.1.26-7 is installed
  • OR cyrus-sasl-plain-2.1.26-7 is installed
  • OR cyrus-sasl-plain-32bit-2.1.26-7 is installed
  • OR cyrus-sasl-saslauthd-2.1.26-7 is installed
  • OR libsasl2-3-2.1.26-7 is installed
  • OR libsasl2-3-32bit-2.1.26-7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • bash-4.2-75 is installed
  • OR bash-doc-4.2-75 is installed
  • OR bash-lang-4.2-75 is installed
  • OR libreadline6-6.2-75 is installed
  • OR libreadline6-32bit-6.2-75 is installed
  • OR readline-doc-6.2-75 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • aaa_base-13.2+git20140911.61c1681-28 is installed
  • OR aaa_base-extras-13.2+git20140911.61c1681-28 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • bzip2-1.0.6-29 is installed
  • OR libbz2-1-1.0.6-29 is installed
  • OR libbz2-1-32bit-1.0.6-29 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND SuSEfirewall2-3.6.312.333-3.13 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 is installed
  • AND Package Information
  • conntrack-tools-1.4.2-5.2 is installed
  • OR libnetfilter_cthelper-1.0.0-7.1 is installed
  • OR libnetfilter_cthelper0-1.0.0-7.1 is installed
  • OR libnetfilter_cttimeout-1.0.0-9.1 is installed
  • OR libnetfilter_cttimeout1-1.0.0-9.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP1 is installed
  • AND Package Information
  • ctdb-4.2.4-28.24.1 is installed
  • OR samba-4.2.4-28.24.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP2 is installed
  • AND Package Information
  • cluster-md-kmp-default-4.4.21-69 is installed
  • OR cluster-network-kmp-default-4.4.21-69 is installed
  • OR dlm-kmp-default-4.4.21-69 is installed
  • OR gfs2-kmp-default-4.4.21-69 is installed
  • OR ocfs2-kmp-default-4.4.21-69 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP3 is installed
  • AND ctdb-4.6.5+git.27.6afd48b1083-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP4 is installed
  • AND python-requests-2.11.1-6.28 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP5 is installed
  • AND ctdb-4.10.5+git.129.35f7bb6e177-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
  • AND Package Information
  • DirectFB-1.7.1-6 is installed
  • OR lib++dfb-1_7-1-1.7.1-6 is installed
  • OR libdirectfb-1_7-1-1.7.1-6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Live Patching 12 is installed
  • AND Package Information
  • kgraft-patch-3_12_39-47-default-1-2.1 is installed
  • OR kgraft-patch-3_12_39-47-xen-1-2.1 is installed
  • OR kgraft-patch-SLE12_Update_4-1-2.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 12 is installed
  • AND Package Information
  • cups154-1.5.4-9.1 is installed
  • OR cups154-client-1.5.4-9.1 is installed
  • OR cups154-filters-1.5.4-9.1 is installed
  • OR cups154-libs-1.5.4-9.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • AND Package Information
  • dovecot23-2.3.10-11 is installed
  • OR dovecot23-backend-mysql-2.3.10-11 is installed
  • OR dovecot23-backend-pgsql-2.3.10-11 is installed
  • OR dovecot23-backend-sqlite-2.3.10-11 is installed
  • OR dovecot23-devel-2.3.10-11 is installed
  • OR dovecot23-fts-2.3.10-11 is installed
  • OR dovecot23-fts-lucene-2.3.10-11 is installed
  • OR dovecot23-fts-solr-2.3.10-11 is installed
  • OR dovecot23-fts-squat-2.3.10-11 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT is installed
  • AND Package Information
  • libseccomp-2.4.1-11.3 is installed
  • OR libseccomp2-2.4.1-11.3 is installed
  • OR libseccomp2-32bit-2.4.1-11.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND Package Information
  • libsnmp15-5.4.2.1-8.12.6.1 is installed
  • OR libsnmp15-32bit-5.4.2.1-8.12.6.1 is installed
  • OR libsnmp15-x86-5.4.2.1-8.12.6.1 is installed
  • OR net-snmp-5.4.2.1-8.12.6.1 is installed
  • OR perl-SNMP-5.4.2.1-8.12.6.1 is installed
  • OR snmp-mibs-5.4.2.1-8.12.6.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND aaa_base-11-6.90.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP3-LTSS is installed
  • AND Package Information
  • java-1_7_0-ibm-1.7.0_sr9.40-52.1 is installed
  • OR java-1_7_0-ibm-alsa-1.7.0_sr9.40-52.1 is installed
  • OR java-1_7_0-ibm-jdbc-1.7.0_sr9.40-52.1 is installed
  • OR java-1_7_0-ibm-plugin-1.7.0_sr9.40-52.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 is installed
  • AND Package Information
  • libpython2_7-1_0-2.7.7-9.3 is installed
  • OR libpython2_7-1_0-32bit-2.7.7-9.3 is installed
  • OR python-2.7.7-9.1 is installed
  • OR python-32bit-2.7.7-9.1 is installed
  • OR python-base-2.7.7-9.3 is installed
  • OR python-base-32bit-2.7.7-9.3 is installed
  • OR python-curses-2.7.7-9.1 is installed
  • OR python-demo-2.7.7-9.1 is installed
  • OR python-doc-2.7.7-9.1 is installed
  • OR python-doc-pdf-2.7.7-9.1 is installed
  • OR python-gdbm-2.7.7-9.1 is installed
  • OR python-idle-2.7.7-9.1 is installed
  • OR python-tk-2.7.7-9.1 is installed
  • OR python-xml-2.7.7-9.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND quagga-0.99.22.1-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • apache2-2.4.23-14 is installed
  • OR apache2-doc-2.4.23-14 is installed
  • OR apache2-example-pages-2.4.23-14 is installed
  • OR apache2-prefork-2.4.23-14 is installed
  • OR apache2-utils-2.4.23-14 is installed
  • OR apache2-worker-2.4.23-14 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • audiofile-0.3.6-10 is installed
  • OR libaudiofile1-0.3.6-10 is installed
  • OR libaudiofile1-32bit-0.3.6-10 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • apache-commons-daemon-1.0.15-6 is installed
  • OR apache-commons-daemon-javadoc-1.0.15-6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12-LTSS is installed
  • AND Package Information
  • kgraft-patch-3_12_51-52_39-default-4-2.2 is installed
  • OR kgraft-patch-3_12_51-52_39-xen-4-2.2 is installed
  • OR kgraft-patch-SLE12_Update_11-4-2.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed
  • AND Package Information
  • libX11-1.6.2-8 is installed
  • OR libX11-6-1.6.2-8 is installed
  • OR libX11-data-1.6.2-8 is installed
  • OR libX11-xcb1-1.6.2-8 is installed
  • OR libXfixes-5.0.1-7 is installed
  • OR libXfixes3-5.0.1-7 is installed
  • OR libXi-1.7.4-14 is installed
  • OR libXi6-1.7.4-14 is installed
  • OR libXrender-0.9.8-7 is installed
  • OR libXrender1-0.9.8-7 is installed
  • OR libXtst-1.2.2-7 is installed
  • OR libXtst6-1.2.2-7 is installed
  • OR libXv-1.0.10-7 is installed
  • OR libXv1-1.0.10-7 is installed
  • OR libXvMC-1.0.8-7 is installed
  • OR libXvMC1-1.0.8-7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND Package Information
  • u-boot-2018.03-4.6 is installed
  • OR u-boot-tools-2018.03-4.6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP3 is installed
  • AND Package Information
  • quagga-0.99.15-0.14.1 is installed
  • OR quagga-devel-0.99.15-0.14.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
  • AND Package Information
  • krb5-1.6.3-133.49.68.1 is installed
  • OR krb5-devel-1.6.3-133.49.68.1 is installed
  • OR krb5-devel-32bit-1.6.3-133.49.68.1 is installed
  • OR krb5-server-1.6.3-133.49.68.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 is installed
  • AND libzip-devel-0.11.1-4 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP1 is installed
  • AND Package Information
  • FastCGI-2.4.0-167 is installed
  • OR perl-FastCGI-2.4.0-167 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP2 is installed
  • AND MozillaFirefox-devel-45.4.0esr-81 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
  • AND Package Information
  • ImageMagick-6.8.8.1-70 is installed
  • OR ImageMagick-devel-6.8.8.1-70 is installed
  • OR libMagick++-6_Q16-3-6.8.8.1-70 is installed
  • OR libMagick++-devel-6.8.8.1-70 is installed
  • OR perl-PerlMagick-6.8.8.1-70 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 is installed
  • AND Package Information
  • libraw-0.18.9-3.8 is installed
  • OR libraw-devel-0.18.9-3.8 is installed
  • OR libraw16-0.18.9-3.8 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
  • AND Package Information
  • MozillaThunderbird-68.12.0-3.94 is installed
  • OR MozillaThunderbird-translations-common-68.12.0-3.94 is installed
  • OR MozillaThunderbird-translations-other-68.12.0-3.94 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP2 is installed
  • AND Package Information
  • LibVNCServer-0.9.10-4.19 is installed
  • OR libvncclient0-0.9.10-4.19 is installed
  • OR libvncserver0-0.9.10-4.19 is installed
    • BACK