This update for amavisd-new fixes the following issues:
Security issue fixed:
- CVE-2016-1238: Workedaround a perl vulnerability by removing a trailing
dot element from @INC (bsc#987887).
Other issues addressed:
- update to version 2.11.1 (bsc#1123389).
- amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR for
a message "PID
some log messages
- avoid warning messages "Use of uninitialized value in subroutine entry"
in Encode::MIME::Header when the $check argument is undefined
- @sa_userconf_maps has been extended to allow loading of per-recipient
(or per-policy bank, or global) SpamAssassin configuration set from
LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
'ldap:' will load SpamAssassin configuration set using the
load_scoreonly_ldap() method.
- add some Sanesecurity.Foxhole false positives to the default list
...
Read the Full AdvisoryPatch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.0:
zypper in -t patch openSUSE-2019-297=1
- openSUSE Leap 15.0 (x86_64):
amavisd-new-2.11.1-lp150.5.3.1
amavisd-new-debuginfo-2.11.1-lp150.5.3.1
amavisd-new-debugsource-2.11.1-lp150.5.3.1
amavisd-new-docs-2.11.1-lp150.5.3.1
https://www.suse.com/security/cve/CVE-2016-1238.html
https://bugzilla.suse.com/1123389
https://bugzilla.suse.com/987887
--
Get the latest Linux and open source security news straight to your inbox.