Format: 1.8 Date: Mon, 28 Dec 2020 10:59:24 -0500 Source: dovecot Binary: dovecot-auth-lua dovecot-core dovecot-dev dovecot-gssapi dovecot-imapd dovecot-ldap dovecot-lmtpd dovecot-lucene dovecot-managesieved dovecot-mysql dovecot-pgsql dovecot-pop3d dovecot-sieve dovecot-solr dovecot-sqlite dovecot-submissiond Architecture: armhf armhf_translations Version: 1:2.3.11.3+dfsg1-2ubuntu1 Distribution: hirsute-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-lucene - secure POP3/IMAP server - Lucene support dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support dovecot-submissiond - secure POP3/IMAP server - mail submission agent Changes: dovecot (1:2.3.11.3+dfsg1-2ubuntu1) hirsute; urgency=medium . * SECURITY UPDATE: information disclosure via imap hibernation - debian/patches/CVE-2020-24386-1.patch: escape tag when sending it to imap-hibernate process in src/imap/imap-client-hibernate.c. - debian/patches/CVE-2020-24386-2.patch: add unit test for imap-client-hibernate in src/imap/Makefile.am, src/imap/imap-client-hibernate.c, src/imap/imap-client.h, src/imap/test-imap-client-hibernate.c. - CVE-2020-24386 * SECURITY UPDATE: remote DoS via large number of MIME parts - debian/patches/CVE-2020-25275-1.patch: fix assert-crash when enforcing MIME part limit in src/lib-mail/message-parser.c, src/lib-mail/test-message-parser.c. - debian/patches/CVE-2020-25275-2.patch: don't generate invalid BODYSTRUCTURE when reaching MIME part limit in src/lib-imap/imap-bodystructure.c. - CVE-2020-25275 Checksums-Sha1: 5e4fcbb5c39da103b7343b8f8cd0a9f244ea55ed 50980 dovecot-auth-lua-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 7ecc640d14ad804de0a0d75fa48d6bd11a6fb791 19428 dovecot-auth-lua_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 1fb512f6a575f4dc3e8b5cb5bcd48167758c3630 8865680 dovecot-core-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb de60e83814f1aa3dcac754009c8983729aa01c93 2739560 dovecot-core_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 1836e9f17f6d7ee45c9ca8ab7bbacc68119261a7 366180 dovecot-dev_2.3.11.3+dfsg1-2ubuntu1_armhf.deb f6783bf42a162fb73d18ae91c3b00a4497f7ea3f 21188 dovecot-gssapi-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb d8415fb1879d4b9b8528e2f23906d563dc337a3a 10596 dovecot-gssapi_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 4cf54248d2a0a2ede934bc67e87f14ffce968292 607132 dovecot-imapd-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 0931c626117c3a27896e577adb7229d87416d8b9 146644 dovecot-imapd_2.3.11.3+dfsg1-2ubuntu1_armhf.deb cefc24fd311e6b7fd0852752af99791caa902170 114384 dovecot-ldap-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 8c529a35faafb9bb66848d6bab1fd060579aa7d3 37252 dovecot-ldap_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 58a6435fa1327bba4f2a06cb4bc9a70985e74293 87468 dovecot-lmtpd-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 496d7ebd5513ae2594939024685b4a416d72fde9 24156 dovecot-lmtpd_2.3.11.3+dfsg1-2ubuntu1_armhf.deb a28b00c25a77eaa602c60b832196bb29b25e08e7 147116 dovecot-lucene-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 7c7ddfca0f4d2bfaae84b79968762a755a7f541b 26684 dovecot-lucene_2.3.11.3+dfsg1-2ubuntu1_armhf.deb ac9b95040bbdf91c750a51dd30055624f5c0bfd3 134004 dovecot-managesieved-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb b713ff17e598d2dcd7e07252221f372515d98d67 42656 dovecot-managesieved_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 8e989033d48dc66f39cee3b9dd7084a461fb0ee7 23908 dovecot-mysql-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb d9e69bd80ae9327c6dea09ed8cd8d860eefe3dfb 11524 dovecot-mysql_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 9386acf70a376671b739b9a26dd2063b57cc9773 30184 dovecot-pgsql-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb dff22ba2ba44a59215ac3e644973144237adb3e0 14492 dovecot-pgsql_2.3.11.3+dfsg1-2ubuntu1_armhf.deb f73e9632c8c893e7eeabecbf92b1523fcdebf9d1 87896 dovecot-pop3d-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 9aded3fc527073bf9f1ac979147224ce2f40ee64 31540 dovecot-pop3d_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 471aedc62e02053967057755ace5b3851b85d90c 1436536 dovecot-sieve-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 2f8c830f48f387edbaa5a80a54097c44456599e5 303280 dovecot-sieve_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 593ecfc94013ac04475218cf3f57e8abe89e0371 85692 dovecot-solr-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb a8d77610c5b33c0ddef4309e7ab81af22a6ce24f 21496 dovecot-solr_2.3.11.3+dfsg1-2ubuntu1_armhf.deb f6dc30b1005dc4d7119528feabc2a44ada4b4844 17356 dovecot-sqlite-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 1463f7aab37fc11dcec793ab7c56b432702fff38 10004 dovecot-sqlite_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 0d0b06814292365ffcfaaeb5e60b130f72ade533 166048 dovecot-submissiond-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 3ae74079d810ef06a312edde955311e06ecd0951 43660 dovecot-submissiond_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 90301db6df4f713480f22152f062a642f6aeb174 18635 dovecot_2.3.11.3+dfsg1-2ubuntu1_armhf.buildinfo 2900ae82cc818e626c20fcafa7e375fdd3858b8e 1467 dovecot_2.3.11.3+dfsg1-2ubuntu1_armhf_translations.tar.gz Checksums-Sha256: c18eb109f9581e2972044d132343a6d40a6f095258d751277f41d1f3da136527 50980 dovecot-auth-lua-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 90d9530dc4ea4636d883f4a2267532b57c0f2f59afde3b89657abb4085b58839 19428 dovecot-auth-lua_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 9e3c0020a14f93101439e2a79b26f603ac836d71cb0369e32e06afad6d166373 8865680 dovecot-core-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb d9cbecb5485b654a647ad8fd69826bfe193b3d7f7f6fbf161b70738845156b2f 2739560 dovecot-core_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 95effebab43d39126125602c29e3b12177e5bfbab6777bce9347d1afc158c9d4 366180 dovecot-dev_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 1b34ecaf788facb1e038a7c8043c30943774686f148252bb762d4431bc8a9221 21188 dovecot-gssapi-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 4ad29d5f759b34fc94ec517b3247c58c27b58476ca8e8cdefa8ebed6aae8fa85 10596 dovecot-gssapi_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 1673cc0a3a073bca818e69acc5e33fea31aee184cc2c95a401e1f4872ff91f19 607132 dovecot-imapd-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 37a3eee8431512afba1198787a925e5f604f029f2a6317aa818a3e08ed2c287b 146644 dovecot-imapd_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 81a1cc707f358c4c5cf0d5a3c9bc3e5bdc1271bf1fb9b873cef1ecf77481f94e 114384 dovecot-ldap-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 752479a867efbf17fdba6023f1b2718eae75dad525a90eea4355bbeb9eb42ffe 37252 dovecot-ldap_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 1859d893ffa99a737bdbad5caea8feb4bfc51ef91dfc3e192cc9c9a295c6e2a3 87468 dovecot-lmtpd-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb fcdf6f60e03fc631be3601e5fe69018ca31d0dc3c1211252ee42b1fe1c940035 24156 dovecot-lmtpd_2.3.11.3+dfsg1-2ubuntu1_armhf.deb aa116e16d7a6571f5b582d0d9bf76fc7daafbf564b589bb1e6192645cffd2e72 147116 dovecot-lucene-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 15cbb2c4d53cb0cf943fcaece1a4201683ba07c10eb12708521eb4cb7cc05912 26684 dovecot-lucene_2.3.11.3+dfsg1-2ubuntu1_armhf.deb b328db5594ff55c2c708f25f4e3dfaf2b83afede3448631e2e0df1bd0d55fda1 134004 dovecot-managesieved-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 4e73b5051d29ebbd76093c6bc4b2f15092b9952196b02d48ff80bd00c9767613 42656 dovecot-managesieved_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 9f74e17154e791c582fc423b2ed1563a7dd3a1c1f87a667118c954377a5c00b7 23908 dovecot-mysql-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 3251a22d946297f3ce8830c997427b435fa65f869948245df6405d2328fbe53b 11524 dovecot-mysql_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 52d66662609fcb5fe15f0e801a2d9f2f6d4d628132723086f2b9e4605abd22b6 30184 dovecot-pgsql-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 74a1e8908fd266c17a7ce33ee32b70b9cdaa4a209dd71d57ad4fb15352f5b7ff 14492 dovecot-pgsql_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 3b3aa8dac0c5c2155ad27e7283ec4f47ae51b03c18214c4a39999c0272329982 87896 dovecot-pop3d-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 711a79a105bc2a4de63e8cc8b2a0bc6a139c70747f98f1488ad0de97e7187c78 31540 dovecot-pop3d_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 4d8b3105ccc0af983924ab3a3f55c30cccf2a9a3421fe28306a4e51dfafda9d8 1436536 dovecot-sieve-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb f70cf47a815c185ff8830505dae4179d07d9fe25e5afc4690f433cf043410b96 303280 dovecot-sieve_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 5180afafa7c31ed6da5e2f578f08c507180be175db0efc497d596b58fee352dd 85692 dovecot-solr-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 12cec715663515f5bf94aabfa461de80efce4b2cb640ed55cf59596dec1b505a 21496 dovecot-solr_2.3.11.3+dfsg1-2ubuntu1_armhf.deb d32e84e7d8a1be57b60524f902c52e9565fa0993f0b78a2582113d7b1624102f 17356 dovecot-sqlite-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb ac86d64cc77c319f459d0c864032e4d3f80dac18255b5e3de165ed298fe7c072 10004 dovecot-sqlite_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 1ab6fa748e132cd8592bb10e73e9e46c5e798220825b95253431e5628408947a 166048 dovecot-submissiond-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 249bc872e92a7b479af0458871fede2a25f336822c03bca1465b1a03db3e2811 43660 dovecot-submissiond_2.3.11.3+dfsg1-2ubuntu1_armhf.deb f8abd1765ff773e2649650acfcf8fc4b71315718beabac69af5c2490f5619222 18635 dovecot_2.3.11.3+dfsg1-2ubuntu1_armhf.buildinfo 1ddf618820662e8290e42f659a3ecfed006a321e24071b16cf71b72c7c54d7d1 1467 dovecot_2.3.11.3+dfsg1-2ubuntu1_armhf_translations.tar.gz Files: 136ea0bcc55d588747a2a1ace8f34939 50980 debug optional dovecot-auth-lua-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb fc6b2ecc0dd94d2f3612256aca7dfa2b 19428 mail optional dovecot-auth-lua_2.3.11.3+dfsg1-2ubuntu1_armhf.deb e56927f95b36b847df89e7152d0de69f 8865680 debug optional dovecot-core-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 3d58d57b9ee879fc4ec340b5a7961a4f 2739560 mail optional dovecot-core_2.3.11.3+dfsg1-2ubuntu1_armhf.deb fe9ea5da6ac27a6162134f6b858c26f9 366180 mail optional dovecot-dev_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 8eff1fa6a5d8e9a17df08fbfd3ffd059 21188 debug optional dovecot-gssapi-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 587b1b8d71a1f4b75f2760863fc4ce96 10596 mail optional dovecot-gssapi_2.3.11.3+dfsg1-2ubuntu1_armhf.deb b2a919889d5775ebaf3ff4a02b9c5860 607132 debug optional dovecot-imapd-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb a1d6ba807c5103bcd48edea9300bee09 146644 mail optional dovecot-imapd_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 83e964e793a339600cf2c4761de348bb 114384 debug optional dovecot-ldap-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 21560349ef2c74d05143f3c28239a99a 37252 mail optional dovecot-ldap_2.3.11.3+dfsg1-2ubuntu1_armhf.deb e1a1e5c9b29409e1a9264b8b89ca7a67 87468 debug optional dovecot-lmtpd-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb e62ebc39f810a424a1086ba9878a6044 24156 mail optional dovecot-lmtpd_2.3.11.3+dfsg1-2ubuntu1_armhf.deb c50b69fd832264b98415829234bd069c 147116 debug optional dovecot-lucene-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb de373af8bf56d7f06d4786e8699380bc 26684 mail optional dovecot-lucene_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 967f3811397006b98a074fd982b16a4a 134004 debug optional dovecot-managesieved-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 8d8afaf89806e7fea9bcb6285cf084b5 42656 mail optional dovecot-managesieved_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 4993d412a6c24091ab593c766ed633e3 23908 debug optional dovecot-mysql-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb bcf60e14dd66b88505f8dfcd231cc412 11524 mail optional dovecot-mysql_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 64cc7ce6bc60ae6a1fbcb600a91996e4 30184 debug optional dovecot-pgsql-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb fe03f5fba2136cf2b4569cace8e38419 14492 mail optional dovecot-pgsql_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 4e5ab529205e2c72dc7d346fb652c57b 87896 debug optional dovecot-pop3d-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb e9a4ff5150cf8f5936e7842c578c8341 31540 mail optional dovecot-pop3d_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 3d9ecce949945ab90a9f14430800c7bf 1436536 debug optional dovecot-sieve-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb da169570f1a9fe7ca83d7c821777053b 303280 mail optional dovecot-sieve_2.3.11.3+dfsg1-2ubuntu1_armhf.deb bd8a3abc5fc0018200dacc7103a7099a 85692 debug optional dovecot-solr-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 00cb2bfdb252a79741f389571228fa3c 21496 mail optional dovecot-solr_2.3.11.3+dfsg1-2ubuntu1_armhf.deb d48c130ea434e566a3156453fb5fd33c 17356 debug optional dovecot-sqlite-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb 36e35a96b4b2254d9ef90bc7c02759cf 10004 mail optional dovecot-sqlite_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 6ca632cd651a1c338c460638de99687b 166048 debug optional dovecot-submissiond-dbgsym_2.3.11.3+dfsg1-2ubuntu1_armhf.ddeb f1b79261a2a36079170fc8c2bb11d7b9 43660 mail optional dovecot-submissiond_2.3.11.3+dfsg1-2ubuntu1_armhf.deb 72ee96fcfa68635e6485ea9e86625904 18635 mail optional dovecot_2.3.11.3+dfsg1-2ubuntu1_armhf.buildinfo 025b49dbca0c955377f329a09551581c 1467 raw-translations - dovecot_2.3.11.3+dfsg1-2ubuntu1_armhf_translations.tar.gz Original-Maintainer: Dovecot Maintainers