Format: 1.8 Date: Mon, 29 Apr 2019 07:46:18 -0400 Source: dovecot Binary: dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-solr dovecot-lucene dovecot-submissiond dovecot-auth-lua mail-stack-delivery Architecture: i386 i386_translations Version: 1:2.3.2.1-1ubuntu3.4 Distribution: cosmic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-lucene - secure POP3/IMAP server - Lucene support dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support dovecot-submissiond - secure POP3/IMAP server - mail submission agent mail-stack-delivery - transitional package Changes: dovecot (1:2.3.2.1-1ubuntu3.4) cosmic-security; urgency=medium . * SECURITY UPDATE: submission-login denial of service issues - debian/patches/CVE-2019-1149x-1.patch: remove unused client->pending_starttls in src/submission-login/client.h. - debian/patches/CVE-2019-1149x-2.patch: fix crash occurring when client disconnects during authentication in src/submission-login/client-authenticate.c, src/submission-login/client.c. - debian/patches/CVE-2019-1149x-3.patch: fix AUTH response error handling so that it stops reading more input in src/lib-smtp/smtp-server-cmd-auth.c. - CVE-2019-11494 - CVE-2019-11499 Checksums-Sha1: 80b56a7471d436314233b7752c6dcedb30ec4963 38252 dovecot-auth-lua-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 9cbcfde04626cd771b728f20ab06cd2219d6708d 18328 dovecot-auth-lua_2.3.2.1-1ubuntu3.4_i386.deb 0b325610170b15ed23ebbe07ba70b964c147af38 11797688 dovecot-core-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb b4286ac9b787b2f736d9c886f4da5a6c64282162 3024304 dovecot-core_2.3.2.1-1ubuntu3.4_i386.deb 0a41f6c5c42af43e32e413a35286201721df0563 337468 dovecot-dev_2.3.2.1-1ubuntu3.4_i386.deb fc8886c3023254cf0196b4fef8b34f2a278a7dd2 19348 dovecot-gssapi-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb f9a74829d466fdd76e250f222afce12a60185727 10900 dovecot-gssapi_2.3.2.1-1ubuntu3.4_i386.deb 4ade1b311cf65cfe4f11b2bb3855b6722a7a45e6 788712 dovecot-imapd-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 41e133fa48eb32e387e6fd727927d39c5a64874d 176800 dovecot-imapd_2.3.2.1-1ubuntu3.4_i386.deb b4a50a65b93a022915ff054a808d279e5eea7cb7 112700 dovecot-ldap-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb a0e24cee15cf6da64dadf71afbfebdb7333cb6e8 43088 dovecot-ldap_2.3.2.1-1ubuntu3.4_i386.deb 1f16cb3cec5cc1823c840171af66769c4aa43c89 99900 dovecot-lmtpd-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 9668ed8ec94c4b2c122a43b5f0517afb321674aa 25168 dovecot-lmtpd_2.3.2.1-1ubuntu3.4_i386.deb 5a1e075bd0d0f807d17d40836c3dce4396632d40 161536 dovecot-lucene-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb d508c1c28a2c58b0ce4c333f5019c48b25101665 33524 dovecot-lucene_2.3.2.1-1ubuntu3.4_i386.deb 6ebe95a931613c315aa18094616d2ceceeaace1a 147096 dovecot-managesieved-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 830e349c256efbdfaf123c9e70e26ffa00f25706 46188 dovecot-managesieved_2.3.2.1-1ubuntu3.4_i386.deb 5c8fad91fb24fdc0dde4f59452e02adee41fc22e 21344 dovecot-mysql-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb f3b5515a1ced986fcfa9cca6da53e9b48b89bae1 12192 dovecot-mysql_2.3.2.1-1ubuntu3.4_i386.deb 889613430f7b7b59dacaf72f916c1c366f8138cb 26044 dovecot-pgsql-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 27dfab464833cb71cb4107f07f4d23084efdbe23 15780 dovecot-pgsql_2.3.2.1-1ubuntu3.4_i386.deb 51ad85e28598bba49bbfb56eea87fa9b88b3d20c 87840 dovecot-pop3d-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 4bc77c1cff08c9f9cc0e525c7074f11b9f9c4f19 35560 dovecot-pop3d_2.3.2.1-1ubuntu3.4_i386.deb c89a989815afeeb133113e9349822c8df6cc3007 1790904 dovecot-sieve-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 072ff220a8144c7d8b0e5d8433ebc0ee1a81ae15 353040 dovecot-sieve_2.3.2.1-1ubuntu3.4_i386.deb cdddd1bd0f4e2956b6140ece4b0622b72f4588f4 100248 dovecot-solr-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb a1c4ef8519b421bf0e092a56d3d40912ab723edc 25160 dovecot-solr_2.3.2.1-1ubuntu3.4_i386.deb a4cb57e204fb2f5db3f625dd413a7a6a852c43ce 13380 dovecot-sqlite-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 31a160278628705da2c84025fe68a9c09fe39cde 10088 dovecot-sqlite_2.3.2.1-1ubuntu3.4_i386.deb b54d3c93368be28014674a945a3acbb0470d19ca 153836 dovecot-submissiond-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 8a56a3566370fce880613e04359ac59b3f954a6c 42956 dovecot-submissiond_2.3.2.1-1ubuntu3.4_i386.deb f24d488432c0702da1a1391c0986634e414733d0 18160 dovecot_2.3.2.1-1ubuntu3.4_i386.buildinfo bc43a679ef2266dcd5f58e59981900ef1d733fe1 1469 dovecot_2.3.2.1-1ubuntu3.4_i386_translations.tar.gz Checksums-Sha256: c1260202160da824a93b01e73a27d384e28744dc5f2d1136446125d745a12666 38252 dovecot-auth-lua-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 214fe0274d4581c53bf3ea95080969a36fef66f93b1d1d5b34fed678d08a9f26 18328 dovecot-auth-lua_2.3.2.1-1ubuntu3.4_i386.deb 97b09a596fa9e2498fec3c335af8c5f55d477fd12fd4c104cd17ff06a914fd67 11797688 dovecot-core-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 84f564660a6c022868ab13219b0d58a4e6defcc6840e53841bd8c94d3fa630e4 3024304 dovecot-core_2.3.2.1-1ubuntu3.4_i386.deb 9a41c0f405c9501fa51714b79e0b65d1dda5f5365bd34deeba4ee143319a41fd 337468 dovecot-dev_2.3.2.1-1ubuntu3.4_i386.deb 5bc8107990dee15eb6c5a48766685ea1716544a8804fe924f86982c824865ad9 19348 dovecot-gssapi-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 9b121242689c3c3a035fb3557cdc27ec666c7db3cfb8ce161c84a7106758b535 10900 dovecot-gssapi_2.3.2.1-1ubuntu3.4_i386.deb dd754ba550f818eab7ba561a7297f4e9a5e9d898aa65bf488042d7875ada9d65 788712 dovecot-imapd-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb da9a5459a07ee05f666759aae144a0ff9325d1e03a5d80453240482ab2fb3b0b 176800 dovecot-imapd_2.3.2.1-1ubuntu3.4_i386.deb e4a44a329655913cf04dbefaa35c14ef87e07cc20d5b5b1ee38f328d74fd9374 112700 dovecot-ldap-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 750559707a12a332a1f52f0d11976a45d667ce5dbc7a956aae45882ec73935fc 43088 dovecot-ldap_2.3.2.1-1ubuntu3.4_i386.deb dd81ce7041097cdeb7983a8cb25768a8b95e4b65773ce3c06b3d1e33972441e8 99900 dovecot-lmtpd-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb c2f43e765b3ee5c67b17051e8ef854b9cc63517105248129cdbd5489d5c7bfaa 25168 dovecot-lmtpd_2.3.2.1-1ubuntu3.4_i386.deb d69254b72c4dfbc1d0fabffe4ff796f8c2bc05db4b63db8d40f89fb5c094ac97 161536 dovecot-lucene-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 695dbc42f5c8246b5af8e36dc20a1b30531c67667de03c17f9109cc72a50753a 33524 dovecot-lucene_2.3.2.1-1ubuntu3.4_i386.deb d56177938e064a35dd25f02cd091ffb37b2c0b25e07ed2a3e3bb46b37255428b 147096 dovecot-managesieved-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 18bc4c3f1c7911fd253023050099634a004003d1a605d4f15ea130b2883a7642 46188 dovecot-managesieved_2.3.2.1-1ubuntu3.4_i386.deb 92cdda24c5fd7f2c9522210356891ee03fae51bcad8cf4dbf59025d6f8c10f73 21344 dovecot-mysql-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb e0a7887a708e4edec61c104269447667fe5b0daf9642fd7a3ee1c7891f3b17c3 12192 dovecot-mysql_2.3.2.1-1ubuntu3.4_i386.deb dc92ab2a8a9964a5bfc10f87aefd92e06a4b392a29b89677fde31db0517feed6 26044 dovecot-pgsql-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb a644a78d012ba7f7ff2180635bce36260c9bc98024cb4c8982102b867ef96489 15780 dovecot-pgsql_2.3.2.1-1ubuntu3.4_i386.deb ed1146627a462585bd1b0f97e43c52e838d330c389b4e0cfe738899beafcaec3 87840 dovecot-pop3d-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 757e15e63c7cd9635e40355d91eb525027b36448a5e6627d2cc3b818c8549e42 35560 dovecot-pop3d_2.3.2.1-1ubuntu3.4_i386.deb ed60722fbee75e0a616f54c384599886c33c78e8f8e06ddd70d7b2214d117320 1790904 dovecot-sieve-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 2258a5fee974fedc9ff63afb7a6cbd30b544df0c6f6c62a3b2d6f905499316d1 353040 dovecot-sieve_2.3.2.1-1ubuntu3.4_i386.deb 46a91ddeb445fc88db9f6338882f9a2ace0e0aae235aa7bfafdf41b187b2a80f 100248 dovecot-solr-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb bdf24a1b0094aec11be604ce00619216c0f03a5ee5e932d5571c133d58ef0351 25160 dovecot-solr_2.3.2.1-1ubuntu3.4_i386.deb afee739c3461ff49b477f0998dd02ace4188762973b1ad53f1e47b809bd1489e 13380 dovecot-sqlite-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb d458145f75c91429a7ca89421fbede4bb36509855e82f9a347956764bf406d30 10088 dovecot-sqlite_2.3.2.1-1ubuntu3.4_i386.deb 0c63f718bb30fb4afab3f2ec152e2f2538c2ca557d67d6592eb1a0fd390f8f37 153836 dovecot-submissiond-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 4cd77fc63de57d38bdbee84ca66436b1dc60ce072864c79bbb6d4b1a3b212f0d 42956 dovecot-submissiond_2.3.2.1-1ubuntu3.4_i386.deb 067d53ee60196e5cb0034211e858809cf7120b5f381c41c077cfdfec97649fe2 18160 dovecot_2.3.2.1-1ubuntu3.4_i386.buildinfo 39b615cce65408ca46a67e61e2c2ebd71d422df4eabd869766e4da0dbfcf3d62 1469 dovecot_2.3.2.1-1ubuntu3.4_i386_translations.tar.gz Files: c94a65aec1505617b87b34e1298d472f 38252 debug optional dovecot-auth-lua-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 04f55a9fa7a63efe8f8a77cd555776ec 18328 mail optional dovecot-auth-lua_2.3.2.1-1ubuntu3.4_i386.deb 8a4f876268e39d4ad97198d0619a19c2 11797688 debug optional dovecot-core-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 306e1ea3c134032637d130e0ac52eeb3 3024304 mail optional dovecot-core_2.3.2.1-1ubuntu3.4_i386.deb 4d674327ffd85fef92b260f4439baf74 337468 mail optional dovecot-dev_2.3.2.1-1ubuntu3.4_i386.deb 2272e6f81fd651693f23988ff4498978 19348 debug optional dovecot-gssapi-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 2131eee45fe536a0c7a6cc58cecc54e1 10900 mail optional dovecot-gssapi_2.3.2.1-1ubuntu3.4_i386.deb 351c646a2e70f0952c8bed0debeba1b6 788712 debug optional dovecot-imapd-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 48e252a3ec04b3eca75326a6630c8924 176800 mail optional dovecot-imapd_2.3.2.1-1ubuntu3.4_i386.deb d71642f5254792118598657d79fb4ef9 112700 debug optional dovecot-ldap-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb fcf14609f2d677b834fc9f7090a7d4d9 43088 mail optional dovecot-ldap_2.3.2.1-1ubuntu3.4_i386.deb 8938f87d7d1ea4803c4b4fbfa5dbf6c7 99900 debug optional dovecot-lmtpd-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb d458739140593a975e44b949e9209eba 25168 mail optional dovecot-lmtpd_2.3.2.1-1ubuntu3.4_i386.deb 62bad98c064a985e35abac39f2ed2dd0 161536 debug optional dovecot-lucene-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 07a3fba915e2c0800d0c35024ffe7c28 33524 mail optional dovecot-lucene_2.3.2.1-1ubuntu3.4_i386.deb 792674c167105113fafdc6c2d25ca1e3 147096 debug optional dovecot-managesieved-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 4a2ae2190f40cd0e9d49e41dad5b593a 46188 mail optional dovecot-managesieved_2.3.2.1-1ubuntu3.4_i386.deb 9d2897133a1c9daf2bd970fee6b0e743 21344 debug optional dovecot-mysql-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb d8c75c6cd670ca16710238fc614b9b6d 12192 mail optional dovecot-mysql_2.3.2.1-1ubuntu3.4_i386.deb 7a68b55ec6955931e0ec353d76a142d0 26044 debug optional dovecot-pgsql-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 1eb60c2263362866c93b74ba1c9ee110 15780 mail optional dovecot-pgsql_2.3.2.1-1ubuntu3.4_i386.deb ad43d1cc81ba6742940c2993a2d8142a 87840 debug optional dovecot-pop3d-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 94c44a70ec034201db4e2fe7082a0a1c 35560 mail optional dovecot-pop3d_2.3.2.1-1ubuntu3.4_i386.deb 03caa9cf25f317851fdb181bd4459c12 1790904 debug optional dovecot-sieve-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 22254bd4ff4324dc7994444a63e09792 353040 mail optional dovecot-sieve_2.3.2.1-1ubuntu3.4_i386.deb a8f7b771599b9987b852d902b5498f85 100248 debug optional dovecot-solr-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 5bf1948c289f403cfa7020c12ad986aa 25160 mail optional dovecot-solr_2.3.2.1-1ubuntu3.4_i386.deb 7e587e840c913de49f0c0d42969bf280 13380 debug optional dovecot-sqlite-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 65223305b41ddbe27a5b105a9e84495c 10088 mail optional dovecot-sqlite_2.3.2.1-1ubuntu3.4_i386.deb a417674c4634158af82b89f5699f3992 153836 debug optional dovecot-submissiond-dbgsym_2.3.2.1-1ubuntu3.4_i386.ddeb 0bdc994df539daaa7b908bb0fdcb9745 42956 mail optional dovecot-submissiond_2.3.2.1-1ubuntu3.4_i386.deb 5013690e3d1894e7a464e6956867d7a8 18160 mail optional dovecot_2.3.2.1-1ubuntu3.4_i386.buildinfo 82bbd88cd5c1f53640f596f3b096a2e9 1469 raw-translations - dovecot_2.3.2.1-1ubuntu3.4_i386_translations.tar.gz Original-Maintainer: Dovecot Maintainers