openSUSE-SU-2016:2876-1

Опубликовано: 22 нояб. 2016

Источник: suse-cvrf

Описание

Security update for dovecot22

This update for dovecot22 fixes the following issues:

dovecot insecure SSL/TLS key and certificate file creation (CVE-2016-4983, bnc#984639)

dovecot22-2.2.25-3.1

dovecot22-backend-mysql-2.2.25-3.1

dovecot22-backend-pgsql-2.2.25-3.1

dovecot22-backend-sqlite-2.2.25-3.1

dovecot22-devel-2.2.25-3.1

dovecot22-fts-2.2.25-3.1

dovecot22-fts-lucene-2.2.25-3.1

dovecot22-fts-solr-2.2.25-3.1

dovecot22-fts-squat-2.2.25-3.1

dovecot22-2.2.25-3.1

dovecot22-backend-mysql-2.2.25-3.1

dovecot22-backend-pgsql-2.2.25-3.1

dovecot22-backend-sqlite-2.2.25-3.1

dovecot22-devel-2.2.25-3.1

dovecot22-fts-2.2.25-3.1

dovecot22-fts-lucene-2.2.25-3.1

dovecot22-fts-solr-2.2.25-3.1

dovecot22-fts-squat-2.2.25-3.1

A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files.

openSUSE Leap 42.1:dovecot22-2.2.25-3.1

openSUSE Leap 42.1:dovecot22-backend-mysql-2.2.25-3.1

openSUSE Leap 42.1:dovecot22-backend-pgsql-2.2.25-3.1

openSUSE Leap 42.1:dovecot22-backend-sqlite-2.2.25-3.1