Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:1212-1

Опубликовано: 16 апр. 2019
Источник: suse-cvrf

Описание

Security update for dovecot23

This update for dovecot23 fixes the following issue:

Security issue fixed:

  • CVE-2019-7524: Fixed an improper file handling which could result in stack oveflow allowing local root escalation (bsc#1130116).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.0
dovecot23-2.3.3-lp150.8.2
dovecot23-backend-mysql-2.3.3-lp150.8.2
dovecot23-backend-pgsql-2.3.3-lp150.8.2
dovecot23-backend-sqlite-2.3.3-lp150.8.2
dovecot23-devel-2.3.3-lp150.8.2
dovecot23-fts-2.3.3-lp150.8.2
dovecot23-fts-lucene-2.3.3-lp150.8.2
dovecot23-fts-solr-2.3.3-lp150.8.2
dovecot23-fts-squat-2.3.3-lp150.8.2

Ссылки

Описание

In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used to elevate to root. This occurs because of missing checks in the fts and pop3-uidl components.

Затронутые продукты
openSUSE Leap 15.0:dovecot23-2.3.3-lp150.8.2
openSUSE Leap 15.0:dovecot23-backend-mysql-2.3.3-lp150.8.2
openSUSE Leap 15.0:dovecot23-backend-pgsql-2.3.3-lp150.8.2
openSUSE Leap 15.0:dovecot23-backend-sqlite-2.3.3-lp150.8.2
Ссылки