dovecot 1:1.2.12-1ubuntu8.1 source package in Ubuntu

Changelog

dovecot (1:1.2.12-1ubuntu8.1) maverick-security; urgency=low

  * SECURITY UPDATE: information disclosure via newly created mailboxes
    with incorrect ACLs
    - debian/patches/CVE-2010-3304.patch: verify the directory isn't the
      same as the INBOX's directory in src/plugins/acl/acl-backend-vfile.c.
    - CVE-2010-3304
  * SECURITY UPDATE: ACL bypass via incorrect ACL merging
    - debian/patches/CVE-2010-370x.patch: fix logic of merging multiple
      ACLs in src/plugins/acl/{acl-api.h,acl-backend-vfile.c,acl-backend.c,
      acl-cache.c}.
    - CVE-2010-3706
    - CVE-2010-3707
  * SECURITY UPDATE: restriction bypass via mailbox ACL changing
    - debian/patches/CVE-2010-3779.patch: don't give admin rights to all
      owner mailboxes in src/plugins/acl/acl-backend-vfile.c.
    - CVE-2010-3779
  * SECURITY UPDATE: denial of service via many simultaneous disconnects.
    - debian/patches/CVE-2010-3780.patch: don't die after three failed
      writes to log in src/lib/failures.c.
    - CVE-2010-3780
  * debian/control: removed linux-kernel-headers from Build-Conflicts to
    resolve building with sbuild.
 -- Marc Deslauriers <email address hidden>   Mon, 10 Jan 2011 15:29:47 -0600

Upload details

Uploaded by:
Marc Deslauriers on 2011-01-11
Uploaded to:
Maverick
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
mail
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
dovecot_1.2.12.orig.tar.gz 2.7 MiB 1ef0c40822cf64f20af1e65b4402da75296489aba25df8b13e2386df6952c281
dovecot_1.2.12-1ubuntu8.1.debian.tar.gz 1.5 MiB 2f1cad84da26e8d9ad96ae2860213cd835a9470d87639c5e39a8008598f5b654
dovecot_1.2.12-1ubuntu8.1.dsc 2.3 KiB 38f474aa28d7089de66eb720dc14bbafef03bb6a1bf7fd96e690e6ff59fe927f

View changes file

Binary packages built by this source

dovecot-common: No summary available for dovecot-common in ubuntu maverick.

No description available for dovecot-common in ubuntu maverick.

dovecot-dbg: No summary available for dovecot-dbg in ubuntu maverick.

No description available for dovecot-dbg in ubuntu maverick.

dovecot-dev: No summary available for dovecot-dev in ubuntu maverick.

No description available for dovecot-dev in ubuntu maverick.

dovecot-imapd: No summary available for dovecot-imapd in ubuntu maverick.

No description available for dovecot-imapd in ubuntu maverick.

dovecot-pop3d: No summary available for dovecot-pop3d in ubuntu maverick.

No description available for dovecot-pop3d in ubuntu maverick.

dovecot-postfix: No summary available for dovecot-postfix in ubuntu maverick.

No description available for dovecot-postfix in ubuntu maverick.

mail-stack-delivery: No summary available for mail-stack-delivery in ubuntu maverick.

No description available for mail-stack-delivery in ubuntu maverick.