SUSE-SU-2019:2454-1

UNKNOWN

Security update for dovecot22

Published Sep 24, 2019

Modified 6 years ago

Fix available

Details

This update for dovecot22 fixes the following issues:

CVE-2019-11500: Fixed a potential remote code execution in the IMAP and ManageSieve protocol parsers (bsc#1145559).

Affected Packages

dovecot22

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

2.2.31-19.17.1

dovecot22-backend-mysql

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

2.2.31-19.17.1

dovecot22-backend-pgsql

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

2.2.31-19.17.1

dovecot22-backend-sqlite

SUSE Enterprise Storage 4SUSE Enterprise Storage 5SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

2.2.31-19.17.1

dovecot22-devel

SUSE Linux Enterprise Software Development Kit 12 SP4SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

2.2.31-19.17.1

References

REPORT

https://bugzilla.suse.com/1145559

WEB

https://www.suse.com/security/cve/CVE-2019-11500

ADVISORY