openSUSE-SU-2020:1241-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:1241-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/openSUSE-SU-2020:1241-1
- Upstream
CVE (2)
- Related
- Published
- 2020-08-21T14:22:15Z
- Modified
- 2026-03-11T07:32:38Z
- Summary
- Security update for dovecot23
- Details
-
This update for dovecot23 fixes the following issues:
- CVE-2020-12673: improper implementation of NTLM does not check message buffer size (bsc#1174922).
- CVE-2020-12674: improper implementation of RPA mechanism (bsc#1174923).
This update was imported from the SUSE:SLE-15-SP1:Update update project.
- References
Affected packages
openSUSE:Leap 15.1 / dovecot23
Package
- Name
- dovecot23
- Purl
- pkg:rpm/opensuse/dovecot23&distro=openSUSE%20Leap%2015.1
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2.3.10-lp151.2.12.1
Ecosystem specific
{
"binaries": [
{
"dovecot23": "2.3.10-lp151.2.12.1",
"dovecot23-backend-mysql": "2.3.10-lp151.2.12.1",
"dovecot23-backend-pgsql": "2.3.10-lp151.2.12.1",
"dovecot23-backend-sqlite": "2.3.10-lp151.2.12.1",
"dovecot23-devel": "2.3.10-lp151.2.12.1",
"dovecot23-fts": "2.3.10-lp151.2.12.1",
"dovecot23-fts-lucene": "2.3.10-lp151.2.12.1",
"dovecot23-fts-solr": "2.3.10-lp151.2.12.1",
"dovecot23-fts-squat": "2.3.10-lp151.2.12.1"
}
]
}