Описание
Security update for dovecot22
This update for dovecot22 fixes the following issues:
- insecure SSL/TLS key and certificate file creation (CVE-2016-4983) (bnc #984639)
- Fix LDAP based authentication for some setups (boo #1003952)
Список пакетов
SUSE Linux Enterprise Server 12 SP1
dovecot22-2.2.13-4.1
dovecot22-backend-mysql-2.2.13-4.1
dovecot22-backend-pgsql-2.2.13-4.1
dovecot22-backend-sqlite-2.2.13-4.1
SUSE Linux Enterprise Server 12 SP2
dovecot22-2.2.13-4.1
dovecot22-backend-mysql-2.2.13-4.1
dovecot22-backend-pgsql-2.2.13-4.1
dovecot22-backend-sqlite-2.2.13-4.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
dovecot22-2.2.13-4.1
dovecot22-backend-mysql-2.2.13-4.1
dovecot22-backend-pgsql-2.2.13-4.1
dovecot22-backend-sqlite-2.2.13-4.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
dovecot22-2.2.13-4.1
dovecot22-backend-mysql-2.2.13-4.1
dovecot22-backend-pgsql-2.2.13-4.1
dovecot22-backend-sqlite-2.2.13-4.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
dovecot22-2.2.13-4.1
dovecot22-backend-mysql-2.2.13-4.1
dovecot22-backend-pgsql-2.2.13-4.1
dovecot22-backend-sqlite-2.2.13-4.1
SUSE Linux Enterprise Software Development Kit 12 SP1
dovecot22-devel-2.2.13-4.1
SUSE Linux Enterprise Software Development Kit 12 SP2
dovecot22-devel-2.2.13-4.1
Ссылки
- Link for SUSE-SU-2016:2915-1
- E-Mail link for SUSE-SU-2016:2915-1
- SUSE Security Ratings
- SUSE Bug 1003952
- SUSE Bug 984639
- SUSE CVE CVE-2016-4983 page
Описание
A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP1:dovecot22-2.2.13-4.1
SUSE Linux Enterprise Server 12 SP1:dovecot22-backend-mysql-2.2.13-4.1
SUSE Linux Enterprise Server 12 SP1:dovecot22-backend-pgsql-2.2.13-4.1
SUSE Linux Enterprise Server 12 SP1:dovecot22-backend-sqlite-2.2.13-4.1
Ссылки
- CVE-2016-4983
- SUSE Bug 984639