Oval Definition:oval:org.opensuse.security:def:53622
Revision Date:2020-12-01Version:1
Title:Security update for dovecot23 (Important)
Description:

This update for dovecot23 fixes the following issues:

Security issues fixed:

- CVE-2020-10957: Fixed a crash caused by malformed NOOP commands (bsc#1171457). - CVE-2020-10958: Fixed a use-after-free when receiving too many newlines (bsc#1171458). - CVE-2020-10967: Fixed a crash in the lmtp and submission components caused by mails with empty quoted localparts (bsc#1171456).

Non-security issues fixed:

- The update to 2.3.10 fixes several bugs. Please refer to https://dovecot.org/doc/NEWS for a complete list of changes.
Family:unixClass:patch
Status:Reference(s):1003846
1010829
1013659
1013678
1013680
1025282
1029907
1029908
1029909
1029995
1030296
1030297
1030298
1030583
1030584
1030585
1030588
1030589
1031590
1031593
1031595
1031638
1031644
1031656
1033122
1037052
1037057
1037061
1037062
1037066
1037070
1037072
1037273
1038874
1038875
1038876
1038877
1038878
1038880
1038881
1044891
1044897
1044901
1044909
1044925
1044927
1046094
1052061
1052496
1052503
1052507
1052509
1052511
1052514
1052518
1053347
1055825
1056058
1056312
1056437
1057139
1057144
1057149
1058480
1059050
1060599
1060621
1060877
1061241
1065363
1066242
1068648
1171456
1171457
1171458
1172686
1173937
1176589
437293
445037
546106
561142
578249
590820
691290
698346
713504
776968
863764
930361
930362
938658
953518
955104
959330
959552
970135
970239
971949
974657
982366
983549
983638
983639
983643
983646
983651
983652
983653
983655
984006
984126
985659
988675
988676
990500
990970
991934
992224
993665
994421
994625
994761
994772
994775
995785
995789
995792
CVE-2009-1892
CVE-2010-2156
CVE-2010-2947
CVE-2010-3611
CVE-2010-3616
CVE-2011-0413
CVE-2011-0997
CVE-2011-2748
CVE-2011-2749
CVE-2011-4539
CVE-2011-4868
CVE-2012-3570
CVE-2012-3571
CVE-2012-3954
CVE-2012-3955
CVE-2013-2266
CVE-2013-6418
CVE-2014-9720
CVE-2014-9939
CVE-2015-1038
CVE-2015-2924
CVE-2015-8605
CVE-2016-0764
CVE-2016-2335
CVE-2016-2815
CVE-2016-2818
CVE-2016-2819
CVE-2016-2821
CVE-2016-2822
CVE-2016-2824
CVE-2016-2828
CVE-2016-2831
CVE-2016-2834
CVE-2016-6258
CVE-2016-6259
CVE-2016-6833
CVE-2016-6834
CVE-2016-6835
CVE-2016-6836
CVE-2016-6888
CVE-2016-7092
CVE-2016-7093
CVE-2016-7094
CVE-2016-9445
CVE-2016-9446
CVE-2016-9809
CVE-2016-9812
CVE-2016-9813
CVE-2017-0381
CVE-2017-12166
CVE-2017-12448
CVE-2017-12450
CVE-2017-12452
CVE-2017-12453
CVE-2017-12454
CVE-2017-12456
CVE-2017-12799
CVE-2017-13757
CVE-2017-14128
CVE-2017-14129
CVE-2017-14130
CVE-2017-14333
CVE-2017-14529
CVE-2017-14729
CVE-2017-14745
CVE-2017-14974
CVE-2017-16844
CVE-2017-3144
CVE-2017-3735
CVE-2017-3736
CVE-2017-6965
CVE-2017-6966
CVE-2017-6969
CVE-2017-7209
CVE-2017-7210
CVE-2017-7223
CVE-2017-7224
CVE-2017-7225
CVE-2017-7226
CVE-2017-7227
CVE-2017-7299
CVE-2017-7300
CVE-2017-7301
CVE-2017-7302
CVE-2017-7303
CVE-2017-7304
CVE-2017-7614
CVE-2017-8392
CVE-2017-8393
CVE-2017-8394
CVE-2017-8395
CVE-2017-8396
CVE-2017-8397
CVE-2017-8398
CVE-2017-8421
CVE-2017-9038
CVE-2017-9039
CVE-2017-9040
CVE-2017-9041
CVE-2017-9042
CVE-2017-9043
CVE-2017-9044
CVE-2017-9746
CVE-2017-9747
CVE-2017-9748
CVE-2017-9750
CVE-2017-9755
CVE-2017-9756
CVE-2017-9954
CVE-2017-9955
CVE-2018-5732
CVE-2018-5733
CVE-2020-10957
CVE-2020-10958
CVE-2020-10967
CVE-2020-15095
CVE-2020-8252
SUSE-SU-2016:1195-1
SUSE-SU-2016:1691-1
SUSE-SU-2016:2473-1
SUSE-SU-2016:3297-1
SUSE-SU-2017:2839-1
SUSE-SU-2017:3169-1
SUSE-SU-2017:3170-1
SUSE-SU-2018:0173-1
SUSE-SU-2020:1379-1
SUSE-SU-2020:2829-1
Platform(s):openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server for SAP Applications 15
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 6-LTSS
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud 9
SUSE OpenStack Cloud Crowbar 9
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND Package Information
  • curl-7.59.0-lp150.1 is installed
  • OR libcurl4-7.59.0-lp150.1 is installed
  • OR libcurl4-32bit-7.59.0-lp150.1 is installed
  • Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • update-test-32bit-pkg-5.1-lp151.12 is installed
  • OR update-test-affects-package-manager-5.1-lp151.12 is installed
  • OR update-test-broken-5.1-lp151.12 is installed
  • OR update-test-feature-5.1-lp151.12 is installed
  • OR update-test-interactive-5.1-lp151.12 is installed
  • OR update-test-optional-5.1-lp151.12 is installed
  • OR update-test-reboot-needed-5.1-lp151.12 is installed
  • OR update-test-relogin-suggested-5.1-lp151.12 is installed
  • OR update-test-security-5.1-lp151.12 is installed
  • OR update-test-trivial-5.1-lp151.12 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP2 is installed
  • AND Package Information
  • ImageMagick-6.4.3.6-7.26 is installed
  • OR libMagick++1-6.4.3.6-7.26 is installed
  • OR libMagickCore1-6.4.3.6-7.26 is installed
  • OR libMagickCore1-32bit-6.4.3.6-7.26 is installed
  • OR libMagickWand1-6.4.3.6-7.26 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • file-4.24-43.27 is installed
  • OR file-32bit-4.24-43.27 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP4 is installed
  • AND Package Information
  • MozillaFirefox-38.5.0esr-28 is installed
  • OR MozillaFirefox-translations-38.5.0esr-28 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • MozillaFirefox-45.2.0esr-75 is installed
  • OR MozillaFirefox-branding-SLE-45.0-28 is installed
  • OR MozillaFirefox-translations-45.2.0esr-75 is installed
  • OR libfreebl3-3.21.1-46 is installed
  • OR libfreebl3-32bit-3.21.1-46 is installed
  • OR libsoftokn3-3.21.1-46 is installed
  • OR libsoftokn3-32bit-3.21.1-46 is installed
  • OR mozilla-nspr-4.12-15 is installed
  • OR mozilla-nspr-32bit-4.12-15 is installed
  • OR mozilla-nss-3.21.1-46 is installed
  • OR mozilla-nss-32bit-3.21.1-46 is installed
  • OR mozilla-nss-certs-3.21.1-46 is installed
  • OR mozilla-nss-certs-32bit-3.21.1-46 is installed
  • OR mozilla-nss-sysinit-3.21.1-46 is installed
  • OR mozilla-nss-sysinit-32bit-3.21.1-46 is installed
  • OR mozilla-nss-tools-3.21.1-46 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • xen-4.5.3_10-20 is installed
  • OR xen-kmp-default-4.5.3_10_k3.12.62_60.62-20 is installed
  • OR xen-libs-4.5.3_10-20 is installed
  • OR xen-libs-32bit-4.5.3_10-20 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • gstreamer-plugins-bad-1.2.4-3.4 is installed
  • OR libgstegl-1_0-0-1.2.4-3.4 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND p7zip-9.20.1-6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • NetworkManager-1.0.12-13.6 is installed
  • OR NetworkManager-lang-1.0.12-13.6 is installed
  • OR libnm-glib-vpn1-1.0.12-13.6 is installed
  • OR libnm-glib4-1.0.12-13.6 is installed
  • OR libnm-util2-1.0.12-13.6 is installed
  • OR libnm0-1.0.12-13.6 is installed
  • OR typelib-1_0-NM-1_0-1.0.12-13.6 is installed
  • OR typelib-1_0-NMClient-1_0-1.0.12-13.6 is installed
  • OR typelib-1_0-NetworkManager-1_0-1.0.12-13.6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • e2fsprogs-1.42.11-7 is installed
  • OR libcom_err2-1.42.11-7 is installed
  • OR libcom_err2-32bit-1.42.11-7 is installed
  • OR libext2fs2-1.42.11-7 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • kgraft-patch-3_12_74-60_64_51-default-3-4 is installed
  • OR kgraft-patch-3_12_74-60_64_51-xen-3-4 is installed
  • OR kgraft-patch-SLE12-SP1_Update_18-3-4 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • libpolkit0-0.113-5.6 is installed
  • OR polkit-0.113-5.6 is installed
  • OR typelib-1_0-Polkit-1_0-0.113-5.6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND mailman-2.1.17-3.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND sudo-1.8.10p3-10.23 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_121-92_120-default-5-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_32-5-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND busybox-1.21.1-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • glib2-2.48.2-12.15 is installed
  • OR glib2-lang-2.48.2-12.15 is installed
  • OR glib2-tools-2.48.2-12.15 is installed
  • OR libgio-2_0-0-2.48.2-12.15 is installed
  • OR libgio-2_0-0-32bit-2.48.2-12.15 is installed
  • OR libglib-2_0-0-2.48.2-12.15 is installed
  • OR libglib-2_0-0-32bit-2.48.2-12.15 is installed
  • OR libgmodule-2_0-0-2.48.2-12.15 is installed
  • OR libgmodule-2_0-0-32bit-2.48.2-12.15 is installed
  • OR libgobject-2_0-0-2.48.2-12.15 is installed
  • OR libgobject-2_0-0-32bit-2.48.2-12.15 is installed
  • OR libgthread-2_0-0-2.48.2-12.15 is installed
  • OR libgthread-2_0-0-32bit-2.48.2-12.15 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND Package Information
  • kgraft-patch-4_4_176-94_88-default-7-2 is installed
  • OR kgraft-patch-SLE12-SP3_Update_24-7-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND clamav-0.100.3-33.29 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • libpython3_4m1_0-3.4.6-25.16 is installed
  • OR python3-3.4.6-25.16 is installed
  • OR python3-base-3.4.6-25.16 is installed
  • OR python3-curses-3.4.6-25.16 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • bind-9.11.2-1 is installed
  • OR bind-chrootenv-9.11.2-1 is installed
  • OR bind-doc-9.11.2-1 is installed
  • OR bind-utils-9.11.2-1 is installed
  • OR libbind9-160-9.11.2-1 is installed
  • OR libdns169-9.11.2-1 is installed
  • OR libirs160-9.11.2-1 is installed
  • OR libisc166-9.11.2-1 is installed
  • OR libisc166-32bit-9.11.2-1 is installed
  • OR libisccc160-9.11.2-1 is installed
  • OR libisccfg160-9.11.2-1 is installed
  • OR liblwres160-9.11.2-1 is installed
  • OR python-bind-9.11.2-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND Package Information
  • dovecot23-2.3.10-4.22 is installed
  • OR dovecot23-backend-mysql-2.3.10-4.22 is installed
  • OR dovecot23-backend-pgsql-2.3.10-4.22 is installed
  • OR dovecot23-backend-sqlite-2.3.10-4.22 is installed
  • OR dovecot23-devel-2.3.10-4.22 is installed
  • OR dovecot23-fts-2.3.10-4.22 is installed
  • OR dovecot23-fts-lucene-2.3.10-4.22 is installed
  • OR dovecot23-fts-solr-2.3.10-4.22 is installed
  • OR dovecot23-fts-squat-2.3.10-4.22 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 6 is installed
  • AND apache2-mod_wsgi-4.4.13-1 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 6-LTSS is installed
  • AND Package Information
  • containerd-1.2.2-16.14 is installed
  • OR docker-18.09.1_ce-98.34 is installed
  • OR docker-libnetwork-0.7.0.1+gitr2711_2cfbf9b1f981-16 is installed
  • OR docker-runc-1.0.0rc6+gitr3748_96ec2177ae84-1.17 is installed
  • OR golang-github-docker-libnetwork-0.7.0.1+gitr2711_2cfbf9b1f981-16 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • qemu-2.6.2-41.55 is installed
  • OR qemu-block-curl-2.6.2-41.55 is installed
  • OR qemu-block-rbd-2.6.2-41.55 is installed
  • OR qemu-block-ssh-2.6.2-41.55 is installed
  • OR qemu-guest-agent-2.6.2-41.55 is installed
  • OR qemu-ipxe-1.0.0-41.55 is installed
  • OR qemu-kvm-2.6.2-41.55 is installed
  • OR qemu-lang-2.6.2-41.55 is installed
  • OR qemu-s390-2.6.2-41.55 is installed
  • OR qemu-seabios-1.9.1-41.55 is installed
  • OR qemu-sgabios-8-41.55 is installed
  • OR qemu-tools-2.6.2-41.55 is installed
  • OR qemu-vgabios-1.9.1-41.55 is installed
  • OR qemu-x86-2.6.2-41.55 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • xen-4.9.4_04-3.56 is installed
  • OR xen-doc-html-4.9.4_04-3.56 is installed
  • OR xen-libs-4.9.4_04-3.56 is installed
  • OR xen-libs-32bit-4.9.4_04-3.56 is installed
  • OR xen-tools-4.9.4_04-3.56 is installed
  • OR xen-tools-domU-4.9.4_04-3.56 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 9 is installed
  • AND python-requests-2.20.1-4.3 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 9 is installed
  • AND python-Twisted-15.2.1-9.5 is installed
  • BACK