Oval Definition:oval:org.opensuse.security:def:50530
Revision Date:2020-12-01Version:1
Title:Security update for amavisd-new (Moderate)
Description:

This update for amavisd-new fixes the following issues:

wmavisd-new was updated to version 2.11.1 (bsc#1123389):

removed a trailing dot element from @INC, as a workaround for a perl vulnerability CVE-2016-1238 (bsc#987887) * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR for a message 'PID went away', and removed redundant newlines from some log messages * safe_decode() and safe_decode_utf8(): avoid warning messages 'Use of uninitialized value in subroutine entry' in Encode::MIME::Header when the $check argument is undefined * @sa_userconf_maps has been extended to allow loading of per-recipient (or per-policy bank, or global) SpamAssassin configuration set from LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with 'ldap:' will load SpamAssassin configuration set using the load_scoreonly_ldap() method; a patch by Atanas Karashenski * add some Sanesecurity.Foxhole false positives to the default list @virus_name_to_spam_score_maps * updated some comments

Update amavis-milter to version 2.6.1:

Fixed bug when creating amavisd-new policy bank names
Family:unixClass:patch
Status:Reference(s):1092115
1094420
1100369
1109160
1118367
1118368
1123389
1124729
1124734
1126284
1128220
1128378
1130040
1135881
1136029
1136480
1137715
1137940
1138313
1138358
1138494
1138822
1139083
1139453
1142038
1143856
1144155
1144889
1146358
1146359
1148125
1148177
1148311
1156205
1157051
1159646
1159819
1159913
1161167
1161168
1164903
1165631
1169746
1169832
1170667
1170713
1170826
1171313
1171740
1171978
1172515
1172868
1172958
1173307
1173311
1173983
1174153
1174154
1174191
1174955
1174977
1175443
1175465
1175574
1176092
1176315
1176430
1176674
1177155
1177480
906079
987887
CVE-2016-1238
CVE-2017-3136
CVE-2018-5741
CVE-2018-9154
CVE-2019-10136
CVE-2019-12900
CVE-2019-17006
CVE-2019-17571
CVE-2019-5108
CVE-2019-6477
CVE-2019-6974
CVE-2019-7221
CVE-2019-8675
CVE-2019-8696
CVE-2019-8912
CVE-2019-9213
CVE-2020-0569
CVE-2020-12399
CVE-2020-14039
CVE-2020-15586
CVE-2020-15708
CVE-2020-15719
CVE-2020-16845
CVE-2020-1749
CVE-2020-17507
CVE-2020-25637
CVE-2020-8616
CVE-2020-8617
CVE-2020-8618
CVE-2020-8619
CVE-2020-8620
CVE-2020-8621
CVE-2020-8622
CVE-2020-8623
CVE-2020-8624
SUSE-SU-2018:1952-1
SUSE-SU-2019:0505-1
SUSE-SU-2019:0745-1
SUSE-SU-2019:2004-1
SUSE-SU-2019:2317-1
SUSE-SU-2019:3030-1
SUSE-SU-2020:0053-1
SUSE-SU-2020:0349-1
SUSE-SU-2020:1677-1
SUSE-SU-2020:2581-1
SUSE-SU-2020:2914-1
SUSE-SU-2020:3037-1
Platform(s):SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for Basesystem 15
SUSE Linux Enterprise Module for Legacy Software 15 SP2
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • libfreebl3-3.16.5-0.7 is installed
  • OR libfreebl3-32bit-3.16.5-0.7 is installed
  • OR libsoftokn3-3.16.5-0.7 is installed
  • OR libsoftokn3-32bit-3.16.5-0.7 is installed
  • OR mozilla-nss-3.16.5-0.7 is installed
  • OR mozilla-nss-32bit-3.16.5-0.7 is installed
  • OR mozilla-nss-tools-3.16.5-0.7 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP4 is installed
  • AND Package Information
  • gtk2-2.18.9-0.39 is installed
  • OR gtk2-32bit-2.18.9-0.39 is installed
  • OR gtk2-lang-2.18.9-0.39 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • avahi-0.6.31-20 is installed
  • OR avahi-lang-0.6.31-20 is installed
  • OR libavahi-client3-0.6.31-20 is installed
  • OR libavahi-client3-32bit-0.6.31-20 is installed
  • OR libavahi-common3-0.6.31-20 is installed
  • OR libavahi-common3-32bit-0.6.31-20 is installed
  • OR libavahi-core7-0.6.31-20 is installed
  • OR libdns_sd-0.6.31-20 is installed
  • OR libdns_sd-32bit-0.6.31-20 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND busybox-1.21.1-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • curl-7.37.0-28 is installed
  • OR libcurl4-7.37.0-28 is installed
  • OR libcurl4-32bit-7.37.0-28 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • glibc-2.22-61 is installed
  • OR glibc-32bit-2.22-61 is installed
  • OR glibc-devel-2.22-61 is installed
  • OR glibc-devel-32bit-2.22-61 is installed
  • OR glibc-i18ndata-2.22-61 is installed
  • OR glibc-locale-2.22-61 is installed
  • OR glibc-locale-32bit-2.22-61 is installed
  • OR nscd-2.22-61 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • NetworkManager-1.0.12-13.6 is installed
  • OR NetworkManager-lang-1.0.12-13.6 is installed
  • OR libnm-glib-vpn1-1.0.12-13.6 is installed
  • OR libnm-glib4-1.0.12-13.6 is installed
  • OR libnm-util2-1.0.12-13.6 is installed
  • OR libnm0-1.0.12-13.6 is installed
  • OR typelib-1_0-NM-1_0-1.0.12-13.6 is installed
  • OR typelib-1_0-NMClient-1_0-1.0.12-13.6 is installed
  • OR typelib-1_0-NetworkManager-1_0-1.0.12-13.6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 is installed
  • AND Package Information
  • amavisd-new-2.11.1-6.3 is installed
  • OR amavisd-new-docs-2.11.1-6.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 15 SP2 is installed
  • AND Package Information
  • openldap2-2.4.46-9.34 is installed
  • OR openldap2-back-meta-2.4.46-9.34 is installed
  • OR openldap2-back-perl-2.4.46-9.34 is installed
  • OR openldap2-ppolicy-check-password-1.2-9.34 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-25_13-default-6-2 is installed
  • OR kernel-livepatch-SLE15_Update_3-6-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-197_21-default-5-2 is installed
  • OR kernel-livepatch-SLE15-SP1_Update_6-5-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed
  • AND Package Information
  • log4j-1.2.17-5.3 is installed
  • OR log4j-javadoc-1.2.17-5.3 is installed
  • OR log4j-mini-1.2.17-5.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
  • AND Package Information
  • bzip2-1.0.6-5.9 is installed
  • OR bzip2-doc-1.0.6-5.9 is installed
  • OR libbz2-devel-32bit-1.0.6-5.9 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed
  • AND Package Information
  • libQt5Bootstrap-devel-static-5.12.7-4.6 is installed
  • OR libQt5Bootstrap-devel-static-32bit-5.12.7-4.6 is installed
  • OR libQt5Concurrent-devel-32bit-5.12.7-4.6 is installed
  • OR libQt5Concurrent5-32bit-5.12.7-4.6 is installed
  • OR libQt5Core-devel-32bit-5.12.7-4.6 is installed
  • OR libQt5Core5-32bit-5.12.7-4.6 is installed
  • OR libQt5DBus-devel-32bit-5.12.7-4.6 is installed
  • OR libQt5DBus5-32bit-5.12.7-4.6 is installed
  • OR libQt5Gui-devel-32bit-5.12.7-4.6 is installed
  • OR libQt5Gui5-32bit-5.12.7-4.6 is installed
  • OR libQt5Network-devel-32bit-5.12.7-4.6 is installed
  • OR libQt5Network5-32bit-5.12.7-4.6 is installed
  • OR libQt5OpenGL-devel-32bit-5.12.7-4.6 is installed
  • OR libQt5OpenGL5-32bit-5.12.7-4.6 is installed
  • OR libQt5OpenGLExtensions-devel-static-32bit-5.12.7-4.6 is installed
  • OR libQt5PlatformSupport-devel-static-32bit-5.12.7-4.6 is installed
  • OR libQt5PrintSupport-devel-32bit-5.12.7-4.6 is installed
  • OR libQt5PrintSupport5-32bit-5.12.7-4.6 is installed
  • OR libQt5Sql-devel-32bit-5.12.7-4.6 is installed
  • OR libQt5Sql5-32bit-5.12.7-4.6 is installed
  • OR libQt5Sql5-mysql-32bit-5.12.7-4.6 is installed
  • OR libQt5Sql5-postgresql-32bit-5.12.7-4.6 is installed
  • OR libQt5Sql5-sqlite-32bit-5.12.7-4.6 is installed
  • OR libQt5Sql5-unixODBC-32bit-5.12.7-4.6 is installed
  • OR libQt5Test-devel-32bit-5.12.7-4.6 is installed
  • OR libQt5Test5-32bit-5.12.7-4.6 is installed
  • OR libQt5Widgets-devel-32bit-5.12.7-4.6 is installed
  • OR libQt5Widgets5-32bit-5.12.7-4.6 is installed
  • OR libQt5Xml-devel-32bit-5.12.7-4.6 is installed
  • OR libQt5Xml5-32bit-5.12.7-4.6 is installed
  • OR libqt5-qtbase-5.12.7-4.6 is installed
  • OR libqt5-qtbase-examples-5.12.7-4.6 is installed
  • OR libqt5-qtbase-examples-32bit-5.12.7-4.6 is installed
  • OR libqt5-qtbase-platformtheme-xdgdesktopportal-5.12.7-4.6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 is installed
  • AND Package Information
  • dpdk-17.11.2-3.2 is installed
  • OR dpdk-devel-17.11.2-3.2 is installed
  • OR dpdk-kmp-default-17.11.2_k4.12.14_23-3.2 is installed
  • OR dpdk-thunderx-17.11.2-3.2 is installed
  • OR dpdk-thunderx-devel-17.11.2-3.2 is installed
  • OR dpdk-thunderx-kmp-default-17.11.2_k4.12.14_23-3.2 is installed
  • OR dpdk-tools-17.11.2-3.2 is installed
  • OR libdpdk-17_11-0-17.11.2-3.2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • AND Package Information
  • libfreebl3-hmac-3.53-3.40 is installed
  • OR libsoftokn3-hmac-3.53-3.40 is installed
  • OR mozilla-nss-3.53-3.40 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND apache2-mod_perl-2.0.8-11 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND wget-1.14-21.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • accountsservice-0.6.42-14 is installed
  • OR accountsservice-lang-0.6.42-14 is installed
  • OR libaccountsservice0-0.6.42-14 is installed
  • OR typelib-1_0-AccountsService-1_0-0.6.42-14 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND Package Information
  • libvirt-2.0.0-27.42 is installed
  • OR libvirt-client-2.0.0-27.42 is installed
  • OR libvirt-daemon-2.0.0-27.42 is installed
  • OR libvirt-daemon-config-network-2.0.0-27.42 is installed
  • OR libvirt-daemon-config-nwfilter-2.0.0-27.42 is installed
  • OR libvirt-daemon-driver-interface-2.0.0-27.42 is installed
  • OR libvirt-daemon-driver-libxl-2.0.0-27.42 is installed
  • OR libvirt-daemon-driver-lxc-2.0.0-27.42 is installed
  • OR libvirt-daemon-driver-network-2.0.0-27.42 is installed
  • OR libvirt-daemon-driver-nodedev-2.0.0-27.42 is installed
  • OR libvirt-daemon-driver-nwfilter-2.0.0-27.42 is installed
  • OR libvirt-daemon-driver-qemu-2.0.0-27.42 is installed
  • OR libvirt-daemon-driver-secret-2.0.0-27.42 is installed
  • OR libvirt-daemon-driver-storage-2.0.0-27.42 is installed
  • OR libvirt-daemon-hooks-2.0.0-27.42 is installed
  • OR libvirt-daemon-lxc-2.0.0-27.42 is installed
  • OR libvirt-daemon-qemu-2.0.0-27.42 is installed
  • OR libvirt-daemon-xen-2.0.0-27.42 is installed
  • OR libvirt-doc-2.0.0-27.42 is installed
  • OR libvirt-lock-sanlock-2.0.0-27.42 is installed
  • OR libvirt-nss-2.0.0-27.42 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND shadow-4.2.1-27.9 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_90-92_45-default-7-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_14-7-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • augeas-1.2.0-15 is installed
  • OR augeas-lenses-1.2.0-15 is installed
  • OR libaugeas0-1.2.0-15 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • perl-5.18.2-12.20 is installed
  • OR perl-32bit-5.18.2-12.20 is installed
  • OR perl-base-5.18.2-12.20 is installed
  • OR perl-doc-5.18.2-12.20 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND Package Information
  • libssh2-1-1.4.3-20.14 is installed
  • OR libssh2-1-32bit-1.4.3-20.14 is installed
  • OR libssh2_org-1.4.3-20.14 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • libpython2_7-1_0-2.7.13-28.31 is installed
  • OR libpython2_7-1_0-32bit-2.7.13-28.31 is installed
  • OR python-2.7.13-28.31 is installed
  • OR python-32bit-2.7.13-28.31 is installed
  • OR python-base-2.7.13-28.31 is installed
  • OR python-base-32bit-2.7.13-28.31 is installed
  • OR python-curses-2.7.13-28.31 is installed
  • OR python-demo-2.7.13-28.31 is installed
  • OR python-devel-2.7.13-28.31 is installed
  • OR python-doc-2.7.13-28.31 is installed
  • OR python-doc-pdf-2.7.13-28.31 is installed
  • OR python-gdbm-2.7.13-28.31 is installed
  • OR python-idle-2.7.13-28.31 is installed
  • OR python-tk-2.7.13-28.31 is installed
  • OR python-xml-2.7.13-28.31 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • ceph-12.2.10+git.1549630712.bb089269ea-2.27 is installed
  • OR ceph-common-12.2.10+git.1549630712.bb089269ea-2.27 is installed
  • OR libcephfs2-12.2.10+git.1549630712.bb089269ea-2.27 is installed
  • OR librados2-12.2.10+git.1549630712.bb089269ea-2.27 is installed
  • OR libradosstriper1-12.2.10+git.1549630712.bb089269ea-2.27 is installed
  • OR librbd1-12.2.10+git.1549630712.bb089269ea-2.27 is installed
  • OR librgw2-12.2.10+git.1549630712.bb089269ea-2.27 is installed
  • OR python-cephfs-12.2.10+git.1549630712.bb089269ea-2.27 is installed
  • OR python-rados-12.2.10+git.1549630712.bb089269ea-2.27 is installed
  • OR python-rbd-12.2.10+git.1549630712.bb089269ea-2.27 is installed
  • OR python-rgw-12.2.10+git.1549630712.bb089269ea-2.27 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 15-LTSS is installed
  • AND Package Information
  • libssh2-1-1.8.0-4.10 is installed
  • OR libssh2-1-32bit-1.8.0-4.10 is installed
  • OR libssh2-devel-1.8.0-4.10 is installed
  • OR libssh2_org-1.8.0-4.10 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND ntp-4.2.8p15-4.10 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
  • AND Package Information
  • kernel-default-4.12.14-197.18 is installed
  • OR kernel-default-extra-4.12.14-197.18 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 6 is installed
  • AND memcached-1.4.15-1 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • perl-5.18.2-12.14 is installed
  • OR perl-32bit-5.18.2-12.14 is installed
  • OR perl-base-5.18.2-12.14 is installed
  • OR perl-doc-5.18.2-12.14 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND git-2.12.3-27.14 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND Package Information
  • libpcap-1.8.1-10.3 is installed
  • OR libpcap1-1.8.1-10.3 is installed
  • OR tcpdump-4.9.2-14.14 is installed
  • BACK