Format: 1.8 Date: Wed, 13 Nov 2019 18:50:44 -0800 Source: dovecot Binary: dovecot-auth-lua dovecot-core dovecot-dev dovecot-gssapi dovecot-imapd dovecot-ldap dovecot-lmtpd dovecot-lucene dovecot-managesieved dovecot-mysql dovecot-pgsql dovecot-pop3d dovecot-sieve dovecot-solr dovecot-sqlite dovecot-submissiond Architecture: arm64 arm64_translations Version: 1:2.3.7.2-1ubuntu1 Distribution: focal-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Bryce Harrington Description: dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-lucene - secure POP3/IMAP server - Lucene support dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support dovecot-submissiond - secure POP3/IMAP server - mail submission agent Changes: dovecot (1:2.3.7.2-1ubuntu1) focal; urgency=medium . * Merge with Debian unstable. Remaining changes: - carry mail-stack-delivery as empty transitional package * Dropped: - SECURITY UPDATE: The IMAP protocol parser does not properly handled the NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes. + debian/patches/CVE-2019-11500-*.patch: doesn't accept strings with NULs in src/lib-imap/imap-parser.c and pigeonhole/src/lib-managesieve/managesieve-parser.c, make sure str_unescape won't be writing past allocated memory in src/lib-imap/imap-parser.c and pieonhole/src/lig-managesieve/managesieve-parser.c. + CVE-2019-11500 [Now in upstream for 1:2.3.7.2-1] Checksums-Sha1: a9a561af011ef364cc97b428d37c3fef177c4db6 51124 dovecot-auth-lua-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 636dfaf96d70645e5075691c08e769834d91d10a 19452 dovecot-auth-lua_2.3.7.2-1ubuntu1_arm64.deb 1c22cbb39c7b9703dab6d0ef84bba94ccb9693e4 8653040 dovecot-core-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 8822b413cd996b463be3b080598af60b855075f7 2742720 dovecot-core_2.3.7.2-1ubuntu1_arm64.deb 5d2c59d7aea6cd28581d90a8c6eb640606e316c5 352036 dovecot-dev_2.3.7.2-1ubuntu1_arm64.deb 27d32a1573c5fbf4737c4b3bdb95bfbf9d4bddb9 22980 dovecot-gssapi-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 8aabbbce0386e50c99bf0694760c525a7d2c3c49 10876 dovecot-gssapi_2.3.7.2-1ubuntu1_arm64.deb 09b0f2d887862c599a4c696810e895f75fba4470 591320 dovecot-imapd-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 9d1e9edfea34f3fb43af0cc18a6cdd0f1f20467f 149740 dovecot-imapd_2.3.7.2-1ubuntu1_arm64.deb 88841a44762f02018c6f936f5b6c55f163d3f3bc 115356 dovecot-ldap-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb df0ce2a021e7999a4eb1003e88433d08dc67db3f 38444 dovecot-ldap_2.3.7.2-1ubuntu1_arm64.deb 9c767f591d411e01c214ed563f76cad8cb297e0f 87644 dovecot-lmtpd-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 884ad56bd62f82ff8f0e6d97c445e9a2b3678d38 23880 dovecot-lmtpd_2.3.7.2-1ubuntu1_arm64.deb 9937deb5dea306aa387ec9a39d41e19e97923cd5 150028 dovecot-lucene-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb fb84bd097b6b8039b64827362788f92235474d9b 28508 dovecot-lucene_2.3.7.2-1ubuntu1_arm64.deb 9a5cf2a9f8e9c5096ea5713b27d3db6a77e75cb0 119644 dovecot-managesieved-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb aff06ca0cae1957325b6dfce91bea57ee7eaf1e8 40432 dovecot-managesieved_2.3.7.2-1ubuntu1_arm64.deb ed33c63ac4b9986ce0d79f266371ea2ffde28609 24500 dovecot-mysql-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 5f5b46c89dc695baa4a471485136f7717ef0360e 12060 dovecot-mysql_2.3.7.2-1ubuntu1_arm64.deb c529688319c58f81bad8c7feb72d1d9f108cdb63 30236 dovecot-pgsql-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb ceaf5b62ca303cf3040e35a84864197d5f7d7a98 14856 dovecot-pgsql_2.3.7.2-1ubuntu1_arm64.deb af73a312d295a8b2ee0d5fb67ef64014a29983ec 80256 dovecot-pop3d-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 61b54a9c6548dd85bc4b9e1f09dec63c5fe58076 31476 dovecot-pop3d_2.3.7.2-1ubuntu1_arm64.deb be05445dcd3e2172c71ed950baa0daba961add1b 1429356 dovecot-sieve-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb ffba51e5df4bb4ae3974c0817fb38eba1228c884 302708 dovecot-sieve_2.3.7.2-1ubuntu1_arm64.deb 47d7565909eecc1db291ffed679780a48c30dfe9 83708 dovecot-solr-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb a09ca2b136bbd858159291da46b53ec5c81c8b58 22488 dovecot-solr_2.3.7.2-1ubuntu1_arm64.deb a13f76f83e284b238d9c10ae63337ab8fd1ab30b 17504 dovecot-sqlite-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 68e9ae5ac9ea13e5b544d14fb41e5f9382bed193 10556 dovecot-sqlite_2.3.7.2-1ubuntu1_arm64.deb ee7b03d700d971be7beeae73cfc678b98579100b 163264 dovecot-submissiond-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 59818e240531072bfc5db9408777c6ab3c06b800 43988 dovecot-submissiond_2.3.7.2-1ubuntu1_arm64.deb a09bae7b5c8840c4a2789351256a544028aebf6d 17251 dovecot_2.3.7.2-1ubuntu1_arm64.buildinfo be85d6e156c26309896c24812cfbf2cace4eac15 1470 dovecot_2.3.7.2-1ubuntu1_arm64_translations.tar.gz Checksums-Sha256: cdb0576b067baa19f1cb67cc2a9a2e2f00c30b2c60dd81daa70491e9293c8e8e 51124 dovecot-auth-lua-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb c3db17a7652399adb7da1ec53e2669602ad2af361fdd79208c3ee7f1c8faa883 19452 dovecot-auth-lua_2.3.7.2-1ubuntu1_arm64.deb e64198690d59e4d171bcb4e5b908a5481bb83fe3485377cbdae0899d4287b954 8653040 dovecot-core-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb b7abd7f522be15f80bf7f905878c68210cc2e70e02186ea3118847b10289a78a 2742720 dovecot-core_2.3.7.2-1ubuntu1_arm64.deb 4f76698f5d4c5623936cb37c7bd70dc9044ac8d73413bd13984dc5a6e1271c21 352036 dovecot-dev_2.3.7.2-1ubuntu1_arm64.deb a0cd8a6a7724ec0baf7326b9957099d30b66af4e627f825d10664299c99b95cc 22980 dovecot-gssapi-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 44e8db30f2e18eed4a4ef46a65c6d5acf8893e500c3e3cd5598b852409dddd56 10876 dovecot-gssapi_2.3.7.2-1ubuntu1_arm64.deb 0a13ae527fdbffb9df3242be49f672d074c66e2b898f88f90de198b9f82b59ce 591320 dovecot-imapd-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 6ea963a23ff80a861280ef47a07bbce69880403c10fc834e41a210468ef1c538 149740 dovecot-imapd_2.3.7.2-1ubuntu1_arm64.deb 438fa0b318b1e8867264ddc5e5936941072bdcb0bc14cc109a61d1d401957421 115356 dovecot-ldap-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 107c857d0c8930ef03ed667b6f04ee1af8c8d6d7464d02b41f2374065656b8b0 38444 dovecot-ldap_2.3.7.2-1ubuntu1_arm64.deb d2bdd9650302e43b1bca6b24eb13c2afd6c3f47a0eeb98e1115c8dd30528abe5 87644 dovecot-lmtpd-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 2f1883ce447176bc8471ed3ceb122dbb20a9e5c6e05a1934b9305ac7f65a2915 23880 dovecot-lmtpd_2.3.7.2-1ubuntu1_arm64.deb 3084ac13e0f5589ec49ea148259c7ca43d33b404808963e09fb77327de6470b3 150028 dovecot-lucene-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 46b29b8aaa2a65b335867e2362fcb822885be46019850b1bd5c2463c1f01db0b 28508 dovecot-lucene_2.3.7.2-1ubuntu1_arm64.deb 5d2a5b8f6e2bb6d95dcb96005be9cf5183955bf0e47db1f7bf3b3bd62737d282 119644 dovecot-managesieved-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 5587dcec1d8afc55ad6cbc2ecc0c61c728799433a32149c6090de780e94310a2 40432 dovecot-managesieved_2.3.7.2-1ubuntu1_arm64.deb a391555383d8ae25007ad34513f733cdf7d5ba70e928bdad496ed25229af87b5 24500 dovecot-mysql-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 9005c25e35c156eeb4ff593dc74c82b56c1958e0f46ac1a494f5aa96d96581b2 12060 dovecot-mysql_2.3.7.2-1ubuntu1_arm64.deb afbe8fff7ef1874de5cc7015b47fda34901fd5d0a8e724e4966d141b480a4042 30236 dovecot-pgsql-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb eb6a77bf8f88fefcce7fc1fcf39b828cee56b75211c3e63f20d6de6c3505fb31 14856 dovecot-pgsql_2.3.7.2-1ubuntu1_arm64.deb b4d33fed8556560df06de73394146d198b008e39afdf1034245e3835ef2102ec 80256 dovecot-pop3d-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 87d759f8435437677773ed21637a72ce66903422f87dedc7ad610730a0088de7 31476 dovecot-pop3d_2.3.7.2-1ubuntu1_arm64.deb 37a1745b345e47372bd5aa900791907c58300faacbf3448ac2f2ba84180d0861 1429356 dovecot-sieve-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb b0bd9ac3f45b8ca3e2d52a1335c1ea46da71fa47609cb83d083f6c3fba2d2fce 302708 dovecot-sieve_2.3.7.2-1ubuntu1_arm64.deb 6cf58ad63f30051aaf7b5a47a3846eb7ef77ffcd4eca1b5a2d17945f624d83bc 83708 dovecot-solr-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb a96506bb5d89f6e19e9cddb483e7259a44cf2701c6644c14acdcd2d270682242 22488 dovecot-solr_2.3.7.2-1ubuntu1_arm64.deb f41a5cfeb3d3ffe7f42934e813c6f1c365518a27d483aea0c1d01d96940e1f39 17504 dovecot-sqlite-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 0f2a9e2dfee965c390a3384977bade33402bc56929812b39718b7eb4bd064fc3 10556 dovecot-sqlite_2.3.7.2-1ubuntu1_arm64.deb f915d61dd8ddb669f51f9b33074eabf193e32af63643226ac5f855ad8013aceb 163264 dovecot-submissiond-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 0662a381ee01e9d1c22c24c6d23afb39a67a7527e45eda19274355dc97ef235a 43988 dovecot-submissiond_2.3.7.2-1ubuntu1_arm64.deb b305cb534e32505692da7b51241d8175eb0f81f5ea20b5630b861bc36f0ccd60 17251 dovecot_2.3.7.2-1ubuntu1_arm64.buildinfo 2abc3843489903e351588f5fae346fcac3b0761db09d6c504e82303ca4199efd 1470 dovecot_2.3.7.2-1ubuntu1_arm64_translations.tar.gz Files: e636b3417b758356a7d604b61a3e2bb6 51124 debug optional dovecot-auth-lua-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb d8bbc7f34d8a364d4f47025527d85ccf 19452 mail optional dovecot-auth-lua_2.3.7.2-1ubuntu1_arm64.deb d8296dd27c8b3a0fe0479b6952b4e30c 8653040 debug optional dovecot-core-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb f22448388b1259a27145bf9be109bf9b 2742720 mail optional dovecot-core_2.3.7.2-1ubuntu1_arm64.deb c4ea59bf5e4771ca3a18ef84047687d6 352036 mail optional dovecot-dev_2.3.7.2-1ubuntu1_arm64.deb 4d738d3bd6c9a34990883e54f763cea7 22980 debug optional dovecot-gssapi-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb c41a1b3f506cc52d4311aac42bc21cd5 10876 mail optional dovecot-gssapi_2.3.7.2-1ubuntu1_arm64.deb d9cb4ab5cfcbd59dec709a2fd5526de0 591320 debug optional dovecot-imapd-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 83f6d49b8016493c86aeab12d52f08cb 149740 mail optional dovecot-imapd_2.3.7.2-1ubuntu1_arm64.deb c6d0c2d450ebafb97ade364f7ec36ef3 115356 debug optional dovecot-ldap-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 86f6f93366f03a76d1ac671b5f327e3a 38444 mail optional dovecot-ldap_2.3.7.2-1ubuntu1_arm64.deb 4a12880c0ab2922e57b15d10d8e6c03b 87644 debug optional dovecot-lmtpd-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb dfdbcdefae9289db6bee9f2c972f88cd 23880 mail optional dovecot-lmtpd_2.3.7.2-1ubuntu1_arm64.deb 1f8ea0c403fcdaedddfefe53d4279f66 150028 debug optional dovecot-lucene-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 3c87f899510398daaa001f4209e2702b 28508 mail optional dovecot-lucene_2.3.7.2-1ubuntu1_arm64.deb 00de68f444b2cdce14adf92343568077 119644 debug optional dovecot-managesieved-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 0ff358c8dd180f003878c98b4cf4718a 40432 mail optional dovecot-managesieved_2.3.7.2-1ubuntu1_arm64.deb 661fb41979c54e71ff4496005ea2d32c 24500 debug optional dovecot-mysql-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 39e3efbf04e485dd82b5e55b380c7895 12060 mail optional dovecot-mysql_2.3.7.2-1ubuntu1_arm64.deb a9d3ee2371935b41082fd8166bbf2ab9 30236 debug optional dovecot-pgsql-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 55892e865416d0f48bb7bfeb0d607e12 14856 mail optional dovecot-pgsql_2.3.7.2-1ubuntu1_arm64.deb 305d1e81117b5c60248a79ba618572d3 80256 debug optional dovecot-pop3d-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb dd20872b76b4742bd4797f59e5bf23e2 31476 mail optional dovecot-pop3d_2.3.7.2-1ubuntu1_arm64.deb 34606c19eea26eaed80ce868bce5216c 1429356 debug optional dovecot-sieve-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 3a9d51313c448ff012c5c2e02c709cd1 302708 mail optional dovecot-sieve_2.3.7.2-1ubuntu1_arm64.deb d78d8d83f62a23fa1f0a70534a92c376 83708 debug optional dovecot-solr-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 97ff62e73135fa1f8c5f29b4ce954c80 22488 mail optional dovecot-solr_2.3.7.2-1ubuntu1_arm64.deb e256a8685bf618dbb8cf32dbc2d058ab 17504 debug optional dovecot-sqlite-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 852e1a1cef25ed8dd4c480f3e2a6ad5a 10556 mail optional dovecot-sqlite_2.3.7.2-1ubuntu1_arm64.deb 32fe95bb0d13c8bddcb64e21b0bf11f6 163264 debug optional dovecot-submissiond-dbgsym_2.3.7.2-1ubuntu1_arm64.ddeb 96e7abf7b2b7756d0795ab3ca8b405d2 43988 mail optional dovecot-submissiond_2.3.7.2-1ubuntu1_arm64.deb 1200fb59c648c27faf117a3d082f4bde 17251 mail optional dovecot_2.3.7.2-1ubuntu1_arm64.buildinfo 924b44945ad8db633cfdd068e8fc251e 1470 raw-translations - dovecot_2.3.7.2-1ubuntu1_arm64_translations.tar.gz Original-Maintainer: Dovecot Maintainers