Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:1312-1

Опубликовано: 02 мая 2019
Источник: suse-cvrf

Описание

Security update for dovecot23

This update for dovecot23 fixes the following issues:

Security issue fixed:

  • CVE-2019-10691: Fixed a denial of service via reachable assertion when processing invalid UTF-8 characters (bsc#1132501).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.0
dovecot23-2.3.3-lp150.11.1
dovecot23-backend-mysql-2.3.3-lp150.11.1
dovecot23-backend-pgsql-2.3.3-lp150.11.1
dovecot23-backend-sqlite-2.3.3-lp150.11.1
dovecot23-devel-2.3.3-lp150.11.1
dovecot23-fts-2.3.3-lp150.11.1
dovecot23-fts-lucene-2.3.3-lp150.11.1
dovecot23-fts-solr-2.3.3-lp150.11.1
dovecot23-fts-squat-2.3.3-lp150.11.1

Ссылки

Описание

The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication service by attempting to authenticate with an invalid UTF-8 sequence as the username.

Затронутые продукты
openSUSE Leap 15.0:dovecot23-2.3.3-lp150.11.1
openSUSE Leap 15.0:dovecot23-backend-mysql-2.3.3-lp150.11.1
openSUSE Leap 15.0:dovecot23-backend-pgsql-2.3.3-lp150.11.1
openSUSE Leap 15.0:dovecot23-backend-sqlite-2.3.3-lp150.11.1
Ссылки