Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 21 articles for you...
197
security advisorybuffer overflowdebianDebian 10 Buster: DLA-3774-1 Critical: Gross Buffer Overflow Fix
Stack-based buffer overflow has been fixed in gross, a server for greylisting emails. For Debian 10 buster, this problem has been fixed in version . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3774-1
Mar 25, 2024
•Critical
Debian LTS
91
security advisorygentooprivilege escalationGentoo: GLSA-202310-19 Normal: Dovecot Privilege Escalation Issue
A vulnerability has been discovered in Dovecot that can lead to a privilege escalation when master and non-master passdbs are used.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202310-19 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Dovecot: Privilege Escalation Date: October 30, 2023 Bugs: #856733 ID: 202310-19 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A vulnerability has been discovered in Dovecot that can lead to a privilege escalation when master and non-master passdbs are used. Background ========== Dovecot is an open source IMAP and POP3 email server. Affected packages ================= Package Vulnerable Unaffected ---------------- ------------- -------------- net-mail/dovecot < 2.3.19.1-r1 > = 2.3.19.1-r1 Description =========== A vulnerability has been discovered in Dovecot. Please review the CVE identifier referenced below for details. Impact ====== When two passdb configuration entries exist in Dovecot configuration, which have the same driver and args settings, the incorrect username_filter and mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead to an unintended security configuration and can permit privilege escalation with certain configurations involving master user authentication. Dovecot documentation does not advise against the use of passdb definitions which have the same driver and args settings. One such configuration would be where an administrator wishes to use the same pam configuration or passwd file for both normal and master users but use the username_filter setting to restrict which of the users is able to be a master user. Workaround ========== There isno known workaround at this time. Resolution ========== All Dovecot users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =net-mail/dovecot-2.3.19.1-r1" References ========== [ 1 ] CVE-2022-30550 https://nvd.nist.gov/vuln/detail/CVE-2022-30550 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202310-19 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Oct 30, 2023
Gentoo
197
security advisorycriticaldebianDebian 10 Buster: DLA-3122-1 Critical: Dovecot IMAP and POP3 Issues
Two security issues were discovered in dovecot: IMAP and POP3 email server. CVE-2021-33515 . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3122-1
Sep 27, 2022
•Critical
Debian LTS
219
security advisorysecurity updatemoderate impactRocky Linux 8 Dovecot Update RLSA-2022:1950 Moderate Security Risk
Moderate: dovecot security update. \{'type': 'Security', 'shortCode': 'RL', 'name': 'RLSA-2022:1950', 'synopsis': 'Moderate: dovecot security update', 'severity': 'Moderate', 'topic': 'An update for dovecot is now available for Rocky Linux 8.\nRocky Linux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.', 'description': 'Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. \nThe following packages have been upgraded to a later upstream version: dovecot (2.3.16). (BZ#1980014)\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\nAdditional Changes:\nFor detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.', 'solution': None, 'affectedProducts': ['Rocky Linux 8'], 'fixes': ['1973610', '1974508'], 'cves': ['Red Hat:::https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-33515.json:::CVE-2021-33515'], 'references': [], 'publishedAt': '2022-05-18T19:45:00.249923Z', 'rpms': ['dovecot-2.3.16-2.el8.aarch64.rpm', 'dovecot-2.3.16-2.el8.i686.rpm', 'dovecot-2.3.16-2.el8.src.rpm', 'dovecot-2.3.16-2.el8.x86_64.rpm', 'dovecot-debuginfo-2.3.16-2.el8.aarch64.rpm', 'dovecot-debuginfo-2.3.16-2.el8.i686.rpm', 'dovecot-debuginfo-2.3.16-2.el8.x86_64.rpm', 'dovecot-debugsource-2.3.16-2.el8.aarch64.rpm', 'dovecot-debugsource-2.3.16-2.el8.i686.rpm', 'dovecot-debugsource-2.3.16-2.el8.x86_64.rpm', 'dovecot-devel-2.3.16-2.el8.aarch64.rpm', 'dovecot-devel-2.3.16-2.el8.i686.rpm','dovecot-devel-2.3.16-2.el8.x86_64.rpm', 'dovecot-mysql-2.3.16-2.el8.aarch64.rpm', 'dovecot-mysql-2.3.16-2.el8.x86_64.rpm', 'dovecot-mysql-debuginfo-2.3.16-2.el8.aarch64.rpm', 'dovecot-mysql-debuginfo-2.3.16-2.el8.x86_64.rpm', 'dovecot-pgsql-2.3.16-2.el8.aarch64.rpm', 'dovecot-pgsql-2.3.16-2.el8.x86_64.rpm', 'dovecot-pgsql-debuginfo-2.3.16-2.el8.aarch64.rpm', 'dovecot-pgsql-debuginfo-2.3.16-2.el8.x86_64.rpm', 'dovecot-pigeonhole-2.3.16-2.el8.aarch64.rpm', 'dovecot-pigeonhole-2.3.16-2.el8.x86_64.rpm', 'dovecot-pigeonhole-debuginfo-2.3.16-2.el8.aarch64.rpm', 'dovecot-pigeonhole-debuginfo-2.3.16-2.el8.x86_64.rpm']}\. Dovecot security patch released for Rocky Linux 8 to mitigate moderate risk vulnerabilities. Update now for improved security!. Rocky Linux Dovecot Security Update, Moderate Security Patch, Dovecot Email Server. . LinuxSecurity.com Team
Sep 02, 2022
Rocky Linux
172
security advisoryUbuntudovecotUbuntu 21.04, 20.10: USN-4993-1 Moderate: Dovecot Security Issues
Several security issues were fixed in Dovecot.. =========================================================================Ubuntu Security Notice USN-4993-1 June 21, 2021 dovecot vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 21.04 - Ubuntu 20.10 - Ubuntu 20.04 LTS Summary: Several security issues were fixed in Dovecot. Software Description: - dovecot: IMAP and POP3 email server Details: Kirin discovered that Dovecot incorrectly escaped kid and azp fields in JWT tokens. A local attacker could possibly use this issue to validate tokens using arbitrary keys. This issue only affected Ubuntu 20.10 and Ubuntu 21.04. (CVE-2021-29157) Fabian Ising and Damian Poddebniak discovered that Dovecot incorrectly handled STARTTLS when using the SMTP submission service. A remote attacker could possibly use this issue to inject plaintext commands before STARTTLS negotiation. (CVE-2021-33515) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 21.04: dovecot-core 1:2.3.13+dfsg1-1ubuntu1.1 Ubuntu 20.10: dovecot-core 1:2.3.11.3+dfsg1-2ubuntu0.2 Ubuntu 20.04 LTS: dovecot-core 1:2.3.7.2-1ubuntu3.4 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4993-1 CVE-2021-29157, CVE-2021-33515 Package Information: https://launchpad.net/ubuntu/+source/dovecot/1:2.3.13+dfsg1-1ubuntu1.1 https://launchpad.net/ubuntu/+source/dovecot/1:2.3.11.3+dfsg1-2ubuntu0.2 https://launchpad.net/ubuntu/+source/dovecot/1:2.3.7.2-1ubuntu3.4 . Fedora has recognized a number of Postfix vulnerabilities that affect multiple versions, addressing essential mail server vulnerabilities.. Dovecot Security Fixes, Ubuntu Dovecot Advisory, Email Server Issues. .LinuxSecurity.com Team
Jun 21, 2021
Ubuntu
89
security advisoryhigh severityfedoraFedora 33: 2021-848fd34b0b High Severity OpenSMTPD Memory Leak Fix
**opensmtpd 6.8.0p2** New Features: - ECDSA privsep engine support for OpenSSL, sponsored by anonymous community member Bug fixes: - Fixed a resolver memory leak as well as a regex table memory leak - Fixed a bug in the filters state machine leading to a possible crash of the daemon - Fixed the logging format which output truncated process names on some systems - Fixed. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-848fd34b0b 2021-01-30 01:53:46.555441 --------------------------------------------------------------------------------Name : opensmtpd Product : Fedora 33 Version : 6.8.0p2 Release : 1.fc33 URL : https://www.opensmtpd.org/ Summary : Free implementation of the server-side SMTP protocol as defined by RFC 5321 Description : OpenSMTPD is a FREE implementation of the server-side SMTP protocol as defined by RFC 5321, with some additional standard extensions. It allows ordinary machines to exchange e-mails with other systems speaking the SMTP protocol. Started out of dissatisfaction with other implementations, OpenSMTPD nowadays is a fairly complete SMTP implementation. OpenSMTPD is primarily developed by Gilles Chehade, Eric Faurot and Charles Longeau; with contributions from various OpenBSD hackers. OpenSMTPD is part of the OpenBSD Project. The software is freely usable and re-usable by everyone under an ISC license. This package uses standard "alternatives" mechanism, you may call "/usr/sbin/alternatives --set mta /usr/sbin/sendmail.opensmtpd" if you want to switch to OpenSMTPD MTA immediately after install, and "/usr/sbin/alternatives --set mta /usr/sbin/sendmail.sendmail" to revert back to Sendmail as a default mail daemon. --------------------------------------------------------------------------------Update Information: **opensmtpd 6.8.0p2** New Features: - ECDSA privsep engine support for OpenSSL, sponsored by anonymous community member Bug fixes: - Fixeda resolver memory leak as well as a regex table memory leak - Fixed a bug in the filters state machine leading to a possible crash of the daemon - Fixed the logging format which output truncated process names on some systems - Fixed build on macOS - Various man page improvements --------------------------------------------------------------------------------ChangeLog: * Wed Jan 20 2021 Denis Fateyev - 6.8.0p2-1 - Update to 6.8.0p2 release * Thu Sep 17 2020 Denis Fateyev - 6.7.1p1-3 - Rebuild for libevent soname change --------------------------------------------------------------------------------References: [ 1 ] Bug #1910343 - opensmtpd-6.8.0p2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1910343 [ 2 ] Bug #1911290 - CVE-2020-35679 opensmtpd: memory leak via messages to an instance that performs many regex lookups due to a missing regfree call [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1911290 [ 3 ] Bug #1911294 - CVE-2020-35680 opensmtpd: NULL pointer dereference via a crafted pattern of client activity [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1911294 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-848fd34b0b' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jan 29, 2021
Fedora
89
security advisoryupdateFedoraFedora 32 Moderate: OpensmtpD Memory Leak Advisory 2021-71fbdecdf8
**opensmtpd 6.8.0p2** New Features: - ECDSA privsep engine support for OpenSSL, sponsored by anonymous community member Bug fixes: - Fixed a resolver memory leak as well as a regex table memory leak - Fixed a bug in the filters state machine leading to a possible crash of the daemon - Fixed the logging format which output truncated process names on some systems - Fixed. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-71fbdecdf8 2021-01-30 01:42:12.132353 --------------------------------------------------------------------------------Name : opensmtpd Product : Fedora 32 Version : 6.8.0p2 Release : 1.fc32 URL : https://www.opensmtpd.org/ Summary : Free implementation of the server-side SMTP protocol as defined by RFC 5321 Description : OpenSMTPD is a FREE implementation of the server-side SMTP protocol as defined by RFC 5321, with some additional standard extensions. It allows ordinary machines to exchange e-mails with other systems speaking the SMTP protocol. Started out of dissatisfaction with other implementations, OpenSMTPD nowadays is a fairly complete SMTP implementation. OpenSMTPD is primarily developed by Gilles Chehade, Eric Faurot and Charles Longeau; with contributions from various OpenBSD hackers. OpenSMTPD is part of the OpenBSD Project. The software is freely usable and re-usable by everyone under an ISC license. This package uses standard "alternatives" mechanism, you may call "/usr/sbin/alternatives --set mta /usr/sbin/sendmail.opensmtpd" if you want to switch to OpenSMTPD MTA immediately after install, and "/usr/sbin/alternatives --set mta /usr/sbin/sendmail.sendmail" to revert back to Sendmail as a default mail daemon. --------------------------------------------------------------------------------Update Information: **opensmtpd 6.8.0p2** New Features: - ECDSA privsep engine support for OpenSSL, sponsored by anonymous community member Bug fixes: - Fixeda resolver memory leak as well as a regex table memory leak - Fixed a bug in the filters state machine leading to a possible crash of the daemon - Fixed the logging format which output truncated process names on some systems - Fixed build on macOS - Various man page improvements --------------------------------------------------------------------------------ChangeLog: * Wed Jan 20 2021 Denis Fateyev - 6.8.0p2-1 - Update to 6.8.0p2 release * Thu Sep 17 2020 Denis Fateyev - 6.7.1p1-3 - Rebuild for libevent soname change * Tue Jul 28 2020 Fedora Release Engineering - 6.7.1p1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1910343 - opensmtpd-6.8.0p2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1910343 [ 2 ] Bug #1911290 - CVE-2020-35679 opensmtpd: memory leak via messages to an instance that performs many regex lookups due to a missing regfree call [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1911290 [ 3 ] Bug #1911294 - CVE-2020-35680 opensmtpd: NULL pointer dereference via a crafted pattern of client activity [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1911294 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-71fbdecdf8' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jan 29, 2021
Fedora
100
security advisorysoftware updateimportantSUSE OpenStack Cloud: 2021:0018-1 Important: Dovecot22 IMAP Access Issue
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for dovecot22 ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:0018-1 Rating: important References: #1180405 Cross-References: CVE-2020-24386 Affected Products: SUSE OpenStack Cloud Crowbar 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 7 SUSE Linux Enterprise Software Development Kit 12-SP5 SUSE Linux Enterprise Server for SAP 12-SP4 SUSE Linux Enterprise Server for SAP 12-SP3 SUSE Linux Enterprise Server for SAP 12-SP2 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server 12-SP4-LTSS SUSE Linux Enterprise Server 12-SP3-LTSS SUSE Linux Enterprise Server 12-SP3-BCL SUSE Linux Enterprise Server 12-SP2-LTSS SUSE Linux Enterprise Server 12-SP2-BCL SUSE Enterprise Storage 5 HPE Helion Openstack 8 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for dovecot22 fixes the following issues: - CVE-2020-24386: Fixed an issue with IMAP hibernation that allowed users to access other users' emails (bsc#1180405). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 9: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2021-18=1 - SUSE OpenStack Cloud Crowbar 8: zypper in -t patchSUSE-OpenStack-Cloud-Crowbar-8-2021-18=1 - SUSE OpenStack Cloud 9: zypper in -t patch SUSE-OpenStack-Cloud-9-2021-18=1 - SUSE OpenStack Cloud 8: zypper in -t patch SUSE-OpenStack-Cloud-8-2021-18=1 - SUSE OpenStack Cloud 7: zypper in -t patch SUSE-OpenStack-Cloud-7-2021-18=1 - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2021-18=1 - SUSE Linux Enterprise Server for SAP 12-SP4: zypper in -t patch SUSE-SLE-SAP-12-SP4-2021-18=1 - SUSE Linux Enterprise Server for SAP 12-SP3: zypper in -t patch SUSE-SLE-SAP-12-SP3-2021-18=1 - SUSE Linux Enterprise Server for SAP 12-SP2: zypper in -t patch SUSE-SLE-SAP-12-SP2-2021-18=1 - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2021-18=1 - SUSE Linux Enterprise Server 12-SP4-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2021-18=1 - SUSE Linux Enterprise Server 12-SP3-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2021-18=1 - SUSE Linux Enterprise Server 12-SP3-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2021-18=1 - SUSE Linux Enterprise Server 12-SP2-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2021-18=1 - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2021-18=1 - SUSE Enterprise Storage 5: zypper in -t patch SUSE-Storage-5-2021-18=1 - HPE Helion Openstack 8: zypper in -t patch HPE-Helion-OpenStack-8-2021-18=1 Package List: - SUSE OpenStack Cloud Crowbar 9 (x86_64): dovecot22-2.2.31-19.25.1 dovecot22-backend-mysql-2.2.31-19.25.1 dovecot22-backend-mysql-debuginfo-2.2.31-19.25.1 dovecot22-backend-pgsql-2.2.31-19.25.1 dovecot22-backend-pgsql-debuginfo-2.2.31-19.25.1 dovecot22-backend-sqlite-2.2.31-19.25.1 dovecot22-backend-sqlite-debuginfo-2.2.31-19.25.1 dovecot22-debuginfo-2.2.31-19.25.1 dovecot22-debugsource-2.2.31-19.25.1 - SUSE OpenStack Cloud Crowbar 8 (x86_64): dovecot22-2.2.31-19.25.1 dovecot22-backend-mysql-2.2.31-19.25.1 dovecot22-backend-mysql-debuginfo-2.2.31-19.25.1 dovecot22-backend-pgsql-2.2.31-19.25.1 dovecot22-backend-pgsql-debuginfo-2.2.31-19.25.1 dovecot22-backend-sqlite-2.2.31-19.25.1 dovecot22-backend-sqlite-debuginfo-2.2.31-19.25.1 dovecot22-debuginfo-2.2.31-19.25.1 dovecot22-debugsource-2.2.31-19.25.1 - SUSE OpenStack Cloud 9 (x86_64): dovecot22-2.2.31-19.25.1 dovecot22-backend-mysql-2.2.31-19.25.1 dovecot22-backend-mysql-debuginfo-2.2.31-19.25.1 dovecot22-backend-pgsql-2.2.31-19.25.1 dovecot22-backend-pgsql-debuginfo-2.2.31-19.25.1 dovecot22-backend-sqlite-2.2.31-19.25.1 dovecot22-backend-sqlite-debuginfo-2.2.31-19.25.1 dovecot22-debuginfo-2.2.31-19.25.1 dovecot22-debugsource-2.2.31-19.25.1 - SUSE OpenStack Cloud 8 (x86_64): dovecot22-2.2.31-19.25.1 dovecot22-backend-mysql-2.2.31-19.25.1 dovecot22-backend-mysql-debuginfo-2.2.31-19.25.1 dovecot22-backend-pgsql-2.2.31-19.25.1 dovecot22-backend-pgsql-debuginfo-2.2.31-19.25.1 dovecot22-backend-sqlite-2.2.31-19.25.1 dovecot22-backend-sqlite-debuginfo-2.2.31-19.25.1 dovecot22-debuginfo-2.2.31-19.25.1 dovecot22-debugsource-2.2.31-19.25.1 - SUSE OpenStack Cloud 7 (s390x x86_64): dovecot22-2.2.31-19.25.1 dovecot22-backend-mysql-2.2.31-19.25.1 dovecot22-backend-mysql-debuginfo-2.2.31-19.25.1 dovecot22-backend-pgsql-2.2.31-19.25.1 dovecot22-backend-pgsql-debuginfo-2.2.31-19.25.1 dovecot22-backend-sqlite-2.2.31-19.25.1 dovecot22-backend-sqlite-debuginfo-2.2.31-19.25.1 dovecot22-debuginfo-2.2.31-19.25.1 dovecot22-debugsource-2.2.31-19.25.1 - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64): dovecot22-debuginfo-2.2.31-19.25.1 dovecot22-debugsource-2.2.31-19.25.1 dovecot22-devel-2.2.31-19.25.1 - SUSE Linux Enterprise Server for SAP 12-SP4 (ppc64le x86_64): dovecot22-2.2.31-19.25.1 dovecot22-backend-mysql-2.2.31-19.25.1 dovecot22-backend-mysql-debuginfo-2.2.31-19.25.1 dovecot22-backend-pgsql-2.2.31-19.25.1 dovecot22-backend-pgsql-debuginfo-2.2.31-19.25.1 dovecot22-backend-sqlite-2.2.31-19.25.1 dovecot22-backend-sqlite-debuginfo-2.2.31-19.25.1 dovecot22-debuginfo-2.2.31-19.25.1 dovecot22-debugsource-2.2.31-19.25.1 - SUSE Linux Enterprise Server for SAP 12-SP3 (ppc64le x86_64): dovecot22-2.2.31-19.25.1 dovecot22-backend-mysql-2.2.31-19.25.1 dovecot22-backend-mysql-debuginfo-2.2.31-19.25.1 dovecot22-backend-pgsql-2.2.31-19.25.1 dovecot22-backend-pgsql-debuginfo-2.2.31-19.25.1 dovecot22-backend-sqlite-2.2.31-19.25.1 dovecot22-backend-sqlite-debuginfo-2.2.31-19.25.1 dovecot22-debuginfo-2.2.31-19.25.1 dovecot22-debugsource-2.2.31-19.25.1 - SUSE Linux Enterprise Server for SAP 12-SP2 (ppc64le x86_64): dovecot22-2.2.31-19.25.1 dovecot22-backend-mysql-2.2.31-19.25.1 dovecot22-backend-mysql-debuginfo-2.2.31-19.25.1 dovecot22-backend-pgsql-2.2.31-19.25.1 dovecot22-backend-pgsql-debuginfo-2.2.31-19.25.1 dovecot22-backend-sqlite-2.2.31-19.25.1 dovecot22-backend-sqlite-debuginfo-2.2.31-19.25.1 dovecot22-debuginfo-2.2.31-19.25.1 dovecot22-debugsource-2.2.31-19.25.1 - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): dovecot22-2.2.31-19.25.1 dovecot22-backend-mysql-2.2.31-19.25.1 dovecot22-backend-mysql-debuginfo-2.2.31-19.25.1 dovecot22-backend-pgsql-2.2.31-19.25.1 dovecot22-backend-pgsql-debuginfo-2.2.31-19.25.1 dovecot22-backend-sqlite-2.2.31-19.25.1 dovecot22-backend-sqlite-debuginfo-2.2.31-19.25.1 dovecot22-debuginfo-2.2.31-19.25.1 dovecot22-debugsource-2.2.31-19.25.1 - SUSE LinuxEnterprise Server 12-SP4-LTSS (aarch64 ppc64le s390x x86_64): dovecot22-2.2.31-19.25.1 dovecot22-backend-mysql-2.2.31-19.25.1 dovecot22-backend-mysql-debuginfo-2.2.31-19.25.1 dovecot22-backend-pgsql-2.2.31-19.25.1 dovecot22-backend-pgsql-debuginfo-2.2.31-19.25.1 dovecot22-backend-sqlite-2.2.31-19.25.1 dovecot22-backend-sqlite-debuginfo-2.2.31-19.25.1 dovecot22-debuginfo-2.2.31-19.25.1 dovecot22-debugsource-2.2.31-19.25.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (aarch64 ppc64le s390x x86_64): dovecot22-2.2.31-19.25.1 dovecot22-backend-mysql-2.2.31-19.25.1 dovecot22-backend-mysql-debuginfo-2.2.31-19.25.1 dovecot22-backend-pgsql-2.2.31-19.25.1 dovecot22-backend-pgsql-debuginfo-2.2.31-19.25.1 dovecot22-backend-sqlite-2.2.31-19.25.1 dovecot22-backend-sqlite-debuginfo-2.2.31-19.25.1 dovecot22-debuginfo-2.2.31-19.25.1 dovecot22-debugsource-2.2.31-19.25.1 - SUSE Linux Enterprise Server 12-SP3-BCL (x86_64): dovecot22-2.2.31-19.25.1 dovecot22-backend-mysql-2.2.31-19.25.1 dovecot22-backend-mysql-debuginfo-2.2.31-19.25.1 dovecot22-backend-pgsql-2.2.31-19.25.1 dovecot22-backend-pgsql-debuginfo-2.2.31-19.25.1 dovecot22-backend-sqlite-2.2.31-19.25.1 dovecot22-backend-sqlite-debuginfo-2.2.31-19.25.1 dovecot22-debuginfo-2.2.31-19.25.1 dovecot22-debugsource-2.2.31-19.25.1 - SUSE Linux Enterprise Server 12-SP2-LTSS (ppc64le s390x x86_64): dovecot22-2.2.31-19.25.1 dovecot22-backend-mysql-2.2.31-19.25.1 dovecot22-backend-mysql-debuginfo-2.2.31-19.25.1 dovecot22-backend-pgsql-2.2.31-19.25.1 dovecot22-backend-pgsql-debuginfo-2.2.31-19.25.1 dovecot22-backend-sqlite-2.2.31-19.25.1 dovecot22-backend-sqlite-debuginfo-2.2.31-19.25.1 dovecot22-debuginfo-2.2.31-19.25.1 dovecot22-debugsource-2.2.31-19.25.1 - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): dovecot22-2.2.31-19.25.1 dovecot22-backend-mysql-2.2.31-19.25.1 dovecot22-backend-mysql-debuginfo-2.2.31-19.25.1 dovecot22-backend-pgsql-2.2.31-19.25.1 dovecot22-backend-pgsql-debuginfo-2.2.31-19.25.1 dovecot22-backend-sqlite-2.2.31-19.25.1 dovecot22-backend-sqlite-debuginfo-2.2.31-19.25.1 dovecot22-debuginfo-2.2.31-19.25.1 dovecot22-debugsource-2.2.31-19.25.1 - SUSE Enterprise Storage 5 (aarch64 x86_64): dovecot22-2.2.31-19.25.1 dovecot22-backend-mysql-2.2.31-19.25.1 dovecot22-backend-mysql-debuginfo-2.2.31-19.25.1 dovecot22-backend-pgsql-2.2.31-19.25.1 dovecot22-backend-pgsql-debuginfo-2.2.31-19.25.1 dovecot22-backend-sqlite-2.2.31-19.25.1 dovecot22-backend-sqlite-debuginfo-2.2.31-19.25.1 dovecot22-debuginfo-2.2.31-19.25.1 dovecot22-debugsource-2.2.31-19.25.1 - HPE Helion Openstack 8 (x86_64): dovecot22-2.2.31-19.25.1 dovecot22-backend-mysql-2.2.31-19.25.1 dovecot22-backend-mysql-debuginfo-2.2.31-19.25.1 dovecot22-backend-pgsql-2.2.31-19.25.1 dovecot22-backend-pgsql-debuginfo-2.2.31-19.25.1 dovecot22-backend-sqlite-2.2.31-19.25.1 dovecot22-backend-sqlite-debuginfo-2.2.31-19.25.1 dovecot22-debuginfo-2.2.31-19.25.1 dovecot22-debugsource-2.2.31-19.25.1 References: https://www.suse.com/security/cve/CVE-2020-24386.html https://bugzilla.suse.com/1180405 . SUSE Security Patch addresses critical IMAP connectivity problem in dovecot22. Ensure to implement the required updates across various distributions.. SUSE Dovecot Update, IMAP Access Issue, Security Update, Email Software Patch, SUSE Security Advisory. . Severity: Important. LinuxSecurity.com Team
Jan 04, 2021
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!