| Revision Date: | 2020-12-01 | Version: | 1 |
| Title: | Security update for dovecot23 (Important) |
| Description: |
This update for dovecot23 to 2.3.10 fixes the following issues:
Security issues fixed:
- CVE-2020-10957: Fixed a crash caused by malformed NOOP commands (bsc#1171457). - CVE-2020-10958: Fixed a use-after-free when receiving too many newlines (bsc#1171458). - CVE-2020-10967: Fixed a crash in the lmtp and submission components caused by mails with empty quoted localparts (bsc#1171456).
Non-security issues fixed:
- The update to 2.3.10 fixes several bugs. Please refer to https://dovecot.org/doc/NEWS for a complete list of changes.
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1141267
1144059
1171456
1171457
1171458
CVE-2019-10197
CVE-2020-10957
CVE-2020-10958
CVE-2020-10967
SUSE-SU-2020:1380-1
|
| Platform(s): | SUSE Linux Enterprise High Availability 15 SP1
SUSE Linux Enterprise Module for Server Applications 15 SP1
| Product(s): | |
| Definition Synopsis |
| SUSE Linux Enterprise High Availability 15 SP1 is installed AND Package Information
ctdb-4.9.5+git.187.71edee57d5a-3.9 is installed
OR samba-4.9.5+git.187.71edee57d5a-3.9 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
AND Package Information
dovecot23-2.3.10-11 is installed
OR dovecot23-backend-mysql-2.3.10-11 is installed
OR dovecot23-backend-pgsql-2.3.10-11 is installed
OR dovecot23-backend-sqlite-2.3.10-11 is installed
OR dovecot23-devel-2.3.10-11 is installed
OR dovecot23-fts-2.3.10-11 is installed
OR dovecot23-fts-lucene-2.3.10-11 is installed
OR dovecot23-fts-solr-2.3.10-11 is installed
OR dovecot23-fts-squat-2.3.10-11 is installed
|