Security update for postfix SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:3394-1 Final 1 1 2023-08-23T16:06:06Z current 2023-08-23T16:06:06Z 2023-08-23T16:06:06Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for postfix This update for postfix fixes the following issues: - CVE-2023-32182: Fixed config_postfix SUSE specific script potentially bad /tmp file usage (bsc#1211196). - Update to from 3.7.2 to 3.7.3: - Fixes a bug where some messages were not delivered after 'warning: Unexpected record type 'X'. (bsc#1213515) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2023-3394,SUSE-SLE-Module-Basesystem-15-SP5-2023-3394,SUSE-SLE-Module-Legacy-15-SP5-2023-3394,SUSE-SLE-Module-Server-Applications-15-SP5-2023-3394,openSUSE-SLE-15.5-2023-3394 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20233394-1/ Link for SUSE-SU-2023:3394-1 https://lists.suse.com/pipermail/sle-updates/2023-August/031154.html E-Mail link for SUSE-SU-2023:3394-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1211196 SUSE Bug 1211196 https://bugzilla.suse.com/1213515 SUSE Bug 1213515 https://www.suse.com/security/cve/CVE-2023-32182/ SUSE CVE CVE-2023-32182 page SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 openSUSE Leap 15.5 postfix-3.7.3-150500.3.5.1 postfix-bdb-3.7.3-150500.3.5.1 postfix-bdb-lmdb-3.7.3-150500.3.5.1 postfix-devel-3.7.3-150500.3.5.1 postfix-doc-3.7.3-150500.3.5.1 postfix-ldap-3.7.3-150500.3.5.1 postfix-mysql-3.7.3-150500.3.5.1 postfix-postgresql-3.7.3-150500.3.5.1 postfix-3.7.3-150500.3.5.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 postfix-devel-3.7.3-150500.3.5.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 postfix-doc-3.7.3-150500.3.5.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 postfix-ldap-3.7.3-150500.3.5.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 postfix-bdb-3.7.3-150500.3.5.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP5 postfix-bdb-lmdb-3.7.3-150500.3.5.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP5 postfix-mysql-3.7.3-150500.3.5.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 postfix-3.7.3-150500.3.5.1 as a component of openSUSE Leap 15.5 postfix-bdb-3.7.3-150500.3.5.1 as a component of openSUSE Leap 15.5 postfix-bdb-lmdb-3.7.3-150500.3.5.1 as a component of openSUSE Leap 15.5 postfix-devel-3.7.3-150500.3.5.1 as a component of openSUSE Leap 15.5 postfix-doc-3.7.3-150500.3.5.1 as a component of openSUSE Leap 15.5 postfix-ldap-3.7.3-150500.3.5.1 as a component of openSUSE Leap 15.5 postfix-mysql-3.7.3-150500.3.5.1 as a component of openSUSE Leap 15.5 postfix-postgresql-3.7.3-150500.3.5.1 as a component of openSUSE Leap 15.5 A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 postfix, SUSE openSUSE Leap 15.5 postfix.This issue affects SUSE Linux Enterprise Desktop 15 SP5: before 3.7.3-150500.3.5.1; SUSE Linux Enterprise High Performance Computing 15 SP5: before 3.7.3-150500.3.5.1; openSUSE Leap 15.5 : before 3.7.3-150500.3.5.1. CVE-2023-32182 SUSE Linux Enterprise Module for Basesystem 15 SP5:postfix-3.7.3-150500.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:postfix-devel-3.7.3-150500.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:postfix-doc-3.7.3-150500.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:postfix-ldap-3.7.3-150500.3.5.1 SUSE Linux Enterprise Module for Legacy 15 SP5:postfix-bdb-3.7.3-150500.3.5.1 SUSE Linux Enterprise Module for Legacy 15 SP5:postfix-bdb-lmdb-3.7.3-150500.3.5.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:postfix-mysql-3.7.3-150500.3.5.1 openSUSE Leap 15.5:postfix-3.7.3-150500.3.5.1 openSUSE Leap 15.5:postfix-bdb-3.7.3-150500.3.5.1 openSUSE Leap 15.5:postfix-bdb-lmdb-3.7.3-150500.3.5.1 openSUSE Leap 15.5:postfix-devel-3.7.3-150500.3.5.1 openSUSE Leap 15.5:postfix-doc-3.7.3-150500.3.5.1 openSUSE Leap 15.5:postfix-ldap-3.7.3-150500.3.5.1 openSUSE Leap 15.5:postfix-mysql-3.7.3-150500.3.5.1 openSUSE Leap 15.5:postfix-postgresql-3.7.3-150500.3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233394-1/ https://www.suse.com/security/cve/CVE-2023-32182.html CVE-2023-32182 https://bugzilla.suse.com/1211196 SUSE Bug 1211196