SUSE-SU-2021:0018-1

Details

Description of the patch:

This update for dovecot22 fixes the following issues:

CVE-2020-24386: Fixed an issue with IMAP hibernation that allowed users to access other users' emails (bsc#1180405).

Affected Packages

dovecot22

SUSE Enterprise Storage 5SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSS

Fixed in:

2.2.31-19.25.1

dovecot22-backend-mysql

SUSE Enterprise Storage 5SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSS

Fixed in:

2.2.31-19.25.1

dovecot22-backend-pgsql

SUSE Enterprise Storage 5SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSS

Fixed in:

2.2.31-19.25.1

dovecot22-backend-sqlite

SUSE Enterprise Storage 5SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSS

Fixed in:

2.2.31-19.25.1

dovecot22-devel

SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

2.2.31-19.25.1

References

ADVISORY

https://bugzilla.suse.com/1180405

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2021-January/008134.html

ADVISORY

https://www.suse.com/security/cve/CVE-2020-24386/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2021/suse-su-20210018-1/