CVE catalog

CVE-2023-32182

Security update for postfix

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.30% · Oct 25, 2026

This update for postfix fixes the following issues: Security fixes: - CVE-2023-32182: Fixed config_postfix SUSE specific script using potentially bad /tmp file (bsc#1211196). Other fixes: - postfix: config.postfix causes too tight permission on main.cf (bsc#1215372).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Susepostfixlinux enterprise software development kit 12 sp53.2.10-3.27.2fixed
Susepostfixlinux enterprise server 12 sp53.2.10-3.27.2fixed
Susepostfixlinux enterprise server for sap applications 12 sp53.2.10-3.27.2fixed
Susepostfixlinux enterprise module for basesystem 15 sp43.5.9-150300.5.12.2fixed
Susepostfix-bdblinux enterprise module for legacy 15 sp43.5.9-150300.5.12.2fixed
Susepostfixlinux enterprise module for server applications 15 sp43.5.9-150300.5.12.2fixed
Susepostfixmanager proxy 4.23.5.9-150300.5.12.2fixed
Susepostfixmanager server 4.23.5.9-150300.5.12.2fixed
Opensusepostfixleap 15.43.5.9-150300.5.12.2fixed
Opensusepostfix-bdbleap 15.43.5.9-150300.5.12.2fixed
Opensusepostfixleap 15.43.4.7-150200.3.12.2fixed
Opensusepostfixtumbleweed3.8.3-1.1fixed
Susepostfixlinux enterprise module for basesystem 15 sp53.7.3-150500.3.5.1fixed
Susepostfix-bdblinux enterprise module for legacy 15 sp53.7.3-150500.3.5.1fixed
Susepostfixlinux enterprise module for server applications 15 sp53.7.3-150500.3.5.1fixed
Opensusepostfixleap 15.53.7.3-150500.3.5.1fixed
Opensusepostfix-bdbleap 15.53.7.3-150500.3.5.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Susepostfixrpmlinux enterprise software development kit 12 sp53.2.10-3.27.2Not reportedSUSE-SU-2023:3732-1Not reported
Susepostfixrpmlinux enterprise server 12 sp53.2.10-3.27.2Not reportedSUSE-SU-2023:3732-1Not reported
Susepostfixrpmlinux enterprise server for sap applications 12 sp53.2.10-3.27.2Not reportedSUSE-SU-2023:3732-1Not reported
Susepostfixrpmlinux enterprise module for basesystem 15 sp43.5.9-150300.5.12.2Not reportedSUSE-SU-2023:3945-1Not reported
Susepostfix-bdbrpmlinux enterprise module for legacy 15 sp43.5.9-150300.5.12.2Not reportedSUSE-SU-2023:3945-1Not reported
Susepostfixrpmlinux enterprise module for server applications 15 sp43.5.9-150300.5.12.2Not reportedSUSE-SU-2023:3945-1Not reported
Susepostfixrpmmanager proxy 4.23.5.9-150300.5.12.2Not reportedSUSE-SU-2023:3945-1Not reported
Susepostfixrpmmanager server 4.23.5.9-150300.5.12.2Not reportedSUSE-SU-2023:3945-1Not reported
Opensusepostfixrpmleap 15.43.5.9-150300.5.12.2Not reportedSUSE-SU-2023:3945-1Not reported
Opensusepostfix-bdbrpmleap 15.43.5.9-150300.5.12.2Not reportedSUSE-SU-2023:3945-1Not reported
Opensusepostfixrpmleap 15.43.4.7-150200.3.12.2Not reportedSUSE-SU-2023:3791-1Not reported
Opensusepostfixrpmtumbleweed3.8.3-1.1Not reportedOPENSUSE-SU-2024:13416-1Not reported
Susepostfixrpmlinux enterprise module for basesystem 15 sp53.7.3-150500.3.5.1Not reportedSUSE-SU-2023:3394-1Not reported
Susepostfix-bdbrpmlinux enterprise module for legacy 15 sp53.7.3-150500.3.5.1Not reportedSUSE-SU-2023:3394-1Not reported
Susepostfixrpmlinux enterprise module for server applications 15 sp53.7.3-150500.3.5.1Not reportedSUSE-SU-2023:3394-1Not reported
Opensusepostfixrpmleap 15.53.7.3-150500.3.5.1Not reportedSUSE-SU-2023:3394-1Not reported
Opensusepostfix-bdbrpmleap 15.53.7.3-150500.3.5.1Not reportedSUSE-SU-2023:3394-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]