SUSE-SU-2019:0505-1

removed a trailing dot element from @INC, as a workaround for a perl vulnerability CVE-2016-1238 (bsc#987887)
amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR for a message 'PID went away', and removed redundant newlines from some log messages
safe_decode() and safe_decode_utf8(): avoid warning messages 'Use of uninitialized value in subroutine entry' in Encode::MIME::Header when the $check argument is undefined
@sa_userconf_maps has been extended to allow loading of per-recipient (or per-policy bank, or global) SpamAssassin configuration set from LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with 'ldap:' will load SpamAssassin configuration set using the load_scoreonly_ldap() method; a patch by Atanas Karashenski
add some Sanesecurity.Foxhole false positives to the default list @virus_name_to_spam_score_maps
updated some comments

Update amavis-milter to version 2.6.1:

References

Affected packages

Name: amavisd-new
Purl: pkg:rpm/suse/amavisd-new&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.11.1-6.3.1

{
    "binaries":  [
        {
            "amavisd-new":  "2.11.1-6.3.1",
            "amavisd-new-docs":  "2.11.1-6.3.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:0505-1.json"