Format: 1.8 Date: Mon, 28 Dec 2020 10:59:24 -0500 Source: dovecot Binary: dovecot-auth-lua dovecot-core dovecot-dev dovecot-gssapi dovecot-imapd dovecot-ldap dovecot-lmtpd dovecot-lucene dovecot-managesieved dovecot-mysql dovecot-pgsql dovecot-pop3d dovecot-sieve dovecot-solr dovecot-sqlite dovecot-submissiond Architecture: amd64 amd64_translations Version: 1:2.3.11.3+dfsg1-2ubuntu1 Distribution: hirsute-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-lucene - secure POP3/IMAP server - Lucene support dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support dovecot-submissiond - secure POP3/IMAP server - mail submission agent Changes: dovecot (1:2.3.11.3+dfsg1-2ubuntu1) hirsute; urgency=medium . * SECURITY UPDATE: information disclosure via imap hibernation - debian/patches/CVE-2020-24386-1.patch: escape tag when sending it to imap-hibernate process in src/imap/imap-client-hibernate.c. - debian/patches/CVE-2020-24386-2.patch: add unit test for imap-client-hibernate in src/imap/Makefile.am, src/imap/imap-client-hibernate.c, src/imap/imap-client.h, src/imap/test-imap-client-hibernate.c. - CVE-2020-24386 * SECURITY UPDATE: remote DoS via large number of MIME parts - debian/patches/CVE-2020-25275-1.patch: fix assert-crash when enforcing MIME part limit in src/lib-mail/message-parser.c, src/lib-mail/test-message-parser.c. - debian/patches/CVE-2020-25275-2.patch: don't generate invalid BODYSTRUCTURE when reaching MIME part limit in src/lib-imap/imap-bodystructure.c. - CVE-2020-25275 Checksums-Sha1: 0e54f93b8eef8e2b70b223e4e750f4b244d781c7 53744 dovecot-auth-lua-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb f865bb7250bbc2614e2def35802bb2b8ca0076d8 21940 dovecot-auth-lua_2.3.11.3+dfsg1-2ubuntu1_amd64.deb c6fed55d72c918e0b184477c38dad6ac1e9c608e 9276060 dovecot-core-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 762cbbdda2795f62419c41daf308bc9413ee7336 3010912 dovecot-core_2.3.11.3+dfsg1-2ubuntu1_amd64.deb ad8d5a56f912b6650f007761221e82c5c4b991da 366148 dovecot-dev_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 886de8d912160fe25ab0899d4f6a99e0893a9d8e 20984 dovecot-gssapi-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb ffe50e081342d48cc49430622315664504910d80 11356 dovecot-gssapi_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 5b14810d894973e72b13565e37dabbb18da7449a 631136 dovecot-imapd-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb e6376ee2140ec87a155b2b37d7f2a397c8775651 165708 dovecot-imapd_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 4c16e67118b3d26e2af3c4510049a424296bf4a0 119332 dovecot-ldap-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 50f09b6d21333c112221f8ccd8a4a2befa37a771 41444 dovecot-ldap_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 8ee52329a23b2612d013980489554cf00d1858ce 88252 dovecot-lmtpd-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb a1bad357e2c478035d2c3a4af141193835461dc5 25856 dovecot-lmtpd_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 745a0f20c7718d6d85548d6ac6a59ba5092c3d2a 154032 dovecot-lucene-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 5732dba91bc7a29aef5e1d5fe8d8cd5de844caf3 31284 dovecot-lucene_2.3.11.3+dfsg1-2ubuntu1_amd64.deb afd0522c3d05a2550641c5a4b666b0c9f065a0d5 138664 dovecot-managesieved-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 626d895302c7ceab51b673e77aec042fc4039bec 47588 dovecot-managesieved_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 12202da97efc332044f83292ca8a1db314a4b070 24328 dovecot-mysql-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 0ab08b47e856592ba187abc5e7428332bef9aa04 12792 dovecot-mysql_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 197248d508c1ec90d54fa28af6230f1849887758 31088 dovecot-pgsql-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb a0b40afb4544d1f6981fd7a44dddbbc2118f080f 16084 dovecot-pgsql_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 1a937f59b2950c1a072410f2fed3d31792751782 89260 dovecot-pop3d-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 81fc46db0021cbb9c899829a95e80ec6f099fe65 34432 dovecot-pop3d_2.3.11.3+dfsg1-2ubuntu1_amd64.deb fd9bd6bcf12f061804602ed9a84998eeac8459b3 1481484 dovecot-sieve-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb c0353863af2d382a59da048fa9b86f1c95e85c23 344920 dovecot-sieve_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 162029cdfcf7007a51d6ff9f688c04f6dbf5eee9 88076 dovecot-solr-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb dce981ebd7ad0e657817acfb0694983d4bfa1399 23924 dovecot-solr_2.3.11.3+dfsg1-2ubuntu1_amd64.deb e81caf8d960a7a448fe2a2856760fb54cfca7f9d 17444 dovecot-sqlite-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb c30a138d4b3c488fcee704da7d18367ac436ddba 10916 dovecot-sqlite_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 0b4366bbaf0675ac9bb89932b9792030f390d01e 171172 dovecot-submissiond-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb e310319f9bf28c0fd8f7d1a8782bbfa69348847c 49276 dovecot-submissiond_2.3.11.3+dfsg1-2ubuntu1_amd64.deb a0e14976cea59a24ea8f7aaf350b85fe9536a81e 18759 dovecot_2.3.11.3+dfsg1-2ubuntu1_amd64.buildinfo 08651bb38f4032e0534121a07cdefde5421595e8 1469 dovecot_2.3.11.3+dfsg1-2ubuntu1_amd64_translations.tar.gz Checksums-Sha256: d6ea5e8cac79ec0fb59c20d37c0f4a37b29ba4635594844b268bfe194236a960 53744 dovecot-auth-lua-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 2f4066f933c581fcbc8a0e3742e4f4c4bcfa10297e638a86ae266ff957e9f247 21940 dovecot-auth-lua_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 29587288f8dd1008cf1adb1a45c7b996d26db3076d28de1008f3d9d5d806041f 9276060 dovecot-core-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 81053702ac042ea27fbbfe2538b39458fb256cb3d870a90b50fe743234235afe 3010912 dovecot-core_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 2350d8d2db85682e17c04f15f38319b7fb16b353fa1ce64cb77003debe6dab9a 366148 dovecot-dev_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 68ab6e757d82c0e4f9555d99e80021990dd570a8c64bdad60268b7f6b08f671f 20984 dovecot-gssapi-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 46fc94447f3a85203a224477164be9bb9ae9cebc17cab1b08a8708e6dcdcae7d 11356 dovecot-gssapi_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 22e7c522e58e8cd0c4797371a341d957aba83edf4841a6ee384498a0ddc06eee 631136 dovecot-imapd-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb f83b72da9f2cc9e55ae38ad8db08c7776f7d53efcfef96fa4a74b68395bdb794 165708 dovecot-imapd_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 48a8594475889d3d13ed9ddb66d51481168f9dd8c1dffa4918d2ccde5883d662 119332 dovecot-ldap-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 006419eb5bf005165ef409212f8c107d4003ca43dfcaa60fb697a266f06659f1 41444 dovecot-ldap_2.3.11.3+dfsg1-2ubuntu1_amd64.deb fdc19a3a0feee513e700dfb21198021aa62b3489a264014d95ace36a1bafd32d 88252 dovecot-lmtpd-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb e0b7208b8fbe5b0a897a4eb2f41a811d16bd0e7a2bf4b7205ac70dbdd04b492c 25856 dovecot-lmtpd_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 6d8a764330e4bd69b2f5459711422030b0280c8f13f0c026a7cf513092c0f756 154032 dovecot-lucene-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 97b6f248ffd528cd9dd062cfbdfa7c0b1712dd4e9bf0cd4ecf09e1d138576bf1 31284 dovecot-lucene_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 9515abc490b69340024f43aec422a59c51841640e1ca616de38512187d1e8c4e 138664 dovecot-managesieved-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 0b728f03044c20e9f5ce5c4559747ab9637e2873697761b4bc6ba575cf8ff98f 47588 dovecot-managesieved_2.3.11.3+dfsg1-2ubuntu1_amd64.deb f0703c42f1eb252789dbe6f5a55c10dd160fa4501a9382a796fe8d037329c1a4 24328 dovecot-mysql-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 55f9eadd61e58bd4563490886c6b22157e38dd7c478e8993c755011a7ee6e4ab 12792 dovecot-mysql_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 2b3909c5473a9d70c6299dbc4d8b147e3a47ff05bb3a7f4fd8ed542da2972a4e 31088 dovecot-pgsql-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb b52d997981b7421e0e92f7801c74a9e5a1c6c434f5a50a696c399f5166e96a6e 16084 dovecot-pgsql_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 42f174012b497062975f8e36527e292108110e8d6d5f71ba56ffdf3eeeb98edd 89260 dovecot-pop3d-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 69bc2d3420f200097099be8bd663e09b725d1c5a7cae1dc6805b30a6655036ff 34432 dovecot-pop3d_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 17bda59f7cd762865515f9794db4ed71bc5a37add2d2e7ad08c290603dee9060 1481484 dovecot-sieve-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb ccb3760c621b4fc50c9f2cdf7ae42b080c3135d475b294d78598a310c61e4edb 344920 dovecot-sieve_2.3.11.3+dfsg1-2ubuntu1_amd64.deb b01b99849ff46b370efd315a20685e0bd0e37b3317c24138be3d09df45eb38a5 88076 dovecot-solr-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb e7c3ec3fbe81f019140a3fb2588f2953a864138fa7c4535c2b6bc9effa27942a 23924 dovecot-solr_2.3.11.3+dfsg1-2ubuntu1_amd64.deb bf7f804d088633d5d8b91eec53ee63fa6b8e1a4497fa0e7956494b6014ee19b9 17444 dovecot-sqlite-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb d1d66d4d2aef19c1aa688b4f5dfba34742c7dd9b3e501d82a37f5cae8b83395f 10916 dovecot-sqlite_2.3.11.3+dfsg1-2ubuntu1_amd64.deb f02e7916d991ed22cb937f69b28f5e863637f739ba5078098deaf4cb64fefca1 171172 dovecot-submissiond-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb fbd1cd23e9a001c1a401a96a6f262e41c0f78a152ea03a9cdcefe8b879ee4cef 49276 dovecot-submissiond_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 7d4f2d1580857b5d4dc2bbc1cbfd9deb01c37645b2cc6dbfd3fbefc7dbe149b8 18759 dovecot_2.3.11.3+dfsg1-2ubuntu1_amd64.buildinfo ab4e8229c14ca9cc46c9637dc53ac984a9bc28550e0f9f56f4b9ed695d35bc59 1469 dovecot_2.3.11.3+dfsg1-2ubuntu1_amd64_translations.tar.gz Files: d50306ac850904a734ebcca9c253a312 53744 debug optional dovecot-auth-lua-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 6194b6e36dc4d5bf19936e6b241001b7 21940 mail optional dovecot-auth-lua_2.3.11.3+dfsg1-2ubuntu1_amd64.deb d36319bc1e6588fc94359a4ea7cd0e14 9276060 debug optional dovecot-core-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 30c5094804ffd585e71d641c5b7cb23a 3010912 mail optional dovecot-core_2.3.11.3+dfsg1-2ubuntu1_amd64.deb dbf52da1a91d78d3d8e07c6f2419cc03 366148 mail optional dovecot-dev_2.3.11.3+dfsg1-2ubuntu1_amd64.deb ac7decc635c5929a9575a6a7c0fe8c78 20984 debug optional dovecot-gssapi-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 6207f60d4a5863c7b6cf4496a858b9e4 11356 mail optional dovecot-gssapi_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 0aba50931a5ca721b0226fcddcd11d54 631136 debug optional dovecot-imapd-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 745574ab57fc081507be546c3367626d 165708 mail optional dovecot-imapd_2.3.11.3+dfsg1-2ubuntu1_amd64.deb bbf1ff3537fc5ce32333f3ce51a67d61 119332 debug optional dovecot-ldap-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 7f2126979a01479d5f3e1a3d55dd0e48 41444 mail optional dovecot-ldap_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 56acf09144136cd69c1a4cf1db135dd0 88252 debug optional dovecot-lmtpd-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb b6861d26a35d1416ed9d943bb09af99b 25856 mail optional dovecot-lmtpd_2.3.11.3+dfsg1-2ubuntu1_amd64.deb f36732762bb91944991d424a1a816eb3 154032 debug optional dovecot-lucene-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb b6bd427cfb8f30ad3a43fd88f840d2d6 31284 mail optional dovecot-lucene_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 58feb80f30d3a73f2613b3547a7bc11c 138664 debug optional dovecot-managesieved-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 185be18006c95fe53b4952bdf4711532 47588 mail optional dovecot-managesieved_2.3.11.3+dfsg1-2ubuntu1_amd64.deb bf17bb1f05f5663a5466cdba8147c1f7 24328 debug optional dovecot-mysql-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 04f2b1e0a472e69a16f4e4652c5d3f16 12792 mail optional dovecot-mysql_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 435b2d17b18ecedfa93f54f37caf72d8 31088 debug optional dovecot-pgsql-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 98af2fcba06750f59488d261d1099f2f 16084 mail optional dovecot-pgsql_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 84c8af6c6ba9879104e91fff6f4954d8 89260 debug optional dovecot-pop3d-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 28cdec2f89f421709e2de24f6b0a6a1a 34432 mail optional dovecot-pop3d_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 6ad1d53949be4f024bca095ceebf851a 1481484 debug optional dovecot-sieve-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 66401ae266ea024970a7c17e3ad8bc1d 344920 mail optional dovecot-sieve_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 88ed4b994f5f29835dcdd730f805efb2 88076 debug optional dovecot-solr-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb 6b0038cff708021a31ac5060d987aacb 23924 mail optional dovecot-solr_2.3.11.3+dfsg1-2ubuntu1_amd64.deb 951c462fd3483d5526b6ad9e0ed25a4e 17444 debug optional dovecot-sqlite-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb e1dc8a1d93b76cf456dd576be5950743 10916 mail optional dovecot-sqlite_2.3.11.3+dfsg1-2ubuntu1_amd64.deb df396d054cd703321df3835ab9c68351 171172 debug optional dovecot-submissiond-dbgsym_2.3.11.3+dfsg1-2ubuntu1_amd64.ddeb b7dfe5cde0786e0c464f1a7f5a27efbd 49276 mail optional dovecot-submissiond_2.3.11.3+dfsg1-2ubuntu1_amd64.deb fb918f48bdd390f63aafb1bc42fe7869 18759 mail optional dovecot_2.3.11.3+dfsg1-2ubuntu1_amd64.buildinfo cf297c7dd408af6ef9ba59cfb1412351 1469 raw-translations - dovecot_2.3.11.3+dfsg1-2ubuntu1_amd64_translations.tar.gz Original-Maintainer: Dovecot Maintainers