Format: 1.8 Date: Wed, 14 Aug 2019 13:19:55 -0300 Source: dovecot Binary: dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-solr dovecot-lucene dovecot-dbg mail-stack-delivery Architecture: i386 i386_translations Version: 1:2.2.22-1ubuntu2.11 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Leonidas S. Barbosa Description: dovecot-core - secure POP3/IMAP server - core files dovecot-dbg - secure POP3/IMAP server - debug symbols dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-lucene - secure POP3/IMAP server - Lucene support dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support mail-stack-delivery - mail server delivery agent stack provided by Ubuntu server team Changes: dovecot (1:2.2.22-1ubuntu2.11) xenial-security; urgency=medium . * SECURITY UPDATE: IMAP do not properly handled NULL byte - bounds heap memory writes - debian/patches/CVE-2019-11500-*.patch: doesn't accept strings with NULs in src/lib-imap/imap-parser.c and pigeonhole/src/lib-managesieve/managesieve-parser.c, make sure str_unescape won't be writing past allocated memory in src/lib-imap/imap-parser.c and pieonhole/src/lig-managesieve/managesieve-parser.c. - CVE-2019-11500 Checksums-Sha1: b7b9d1f927f5ff183ff15804c6f4b4cd15734cec 1014 dovecot-core-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 151ee8c7e58fa577a2602cfd0f372164e38c5e2a 2618006 dovecot-core_2.2.22-1ubuntu2.11_i386.deb 02b0cc3e084a636fb8aa57b4d290d282c7132afa 9710236 dovecot-dbg_2.2.22-1ubuntu2.11_i386.deb c91661f26f83d5b8f7872e091471257a1cf83479 1022 dovecot-dev-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 023c686a98f761c4fd02c74983e7508695bf8ea0 277348 dovecot-dev_2.2.22-1ubuntu2.11_i386.deb 53388c64107adb2b83fa94bf0c6186b44eba7125 1014 dovecot-gssapi-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 3c3d404498c65889d58b172260809175c14bd070 9256 dovecot-gssapi_2.2.22-1ubuntu2.11_i386.deb 0766d2961b813e97e84cd52e9fae45e147ef40f3 1002 dovecot-imapd-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb d4472968d5fe57210e0887ce2cdb470767bb8414 162940 dovecot-imapd_2.2.22-1ubuntu2.11_i386.deb 5bfc0c7a0f9754d37b5b236008cdd4924e6bc378 1002 dovecot-ldap-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 218b819d84ac77b17a42515a0ab2c531952ed91b 24678 dovecot-ldap_2.2.22-1ubuntu2.11_i386.deb 84701d3e3379314b539cfc4156251f08bec74673 1002 dovecot-lmtpd-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 1feed755d315876b9519bf2ac4b8244f3796b9d0 25054 dovecot-lmtpd_2.2.22-1ubuntu2.11_i386.deb 8cdb47459185941ecd9874cb36ae706d65a1484c 1012 dovecot-lucene-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 6e77a2d600991cccef5a4bb97faf4da87ddf94c4 4244 dovecot-lucene_2.2.22-1ubuntu2.11_i386.deb 4baa3e6cf71077f938a29c2aaf18b99b3af69070 1008 dovecot-managesieved-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb f3cc605fe1b242f705bf685bfffd2cd762b25d96 43112 dovecot-managesieved_2.2.22-1ubuntu2.11_i386.deb 0edb6c11b1ed9fdba88a918e4423550c6d7167bf 1006 dovecot-mysql-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 4c87995181fcae920dfed219044fc81248de4ff1 10392 dovecot-mysql_2.2.22-1ubuntu2.11_i386.deb 893d0a8f72945dc6a6cd074f837a208fe0433fb2 1006 dovecot-pgsql-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 2ee4d35f969f62c536a532df305fd304f5eb5baf 13606 dovecot-pgsql_2.2.22-1ubuntu2.11_i386.deb ea1766ad586ca775956abf0acaede5031e8212ce 1002 dovecot-pop3d-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 1765eba502ea9959885376c5646d8b435dd8d2e0 31534 dovecot-pop3d_2.2.22-1ubuntu2.11_i386.deb 8a60a31442aa8a8771357bb467749509d62a2309 1006 dovecot-sieve-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 2abd5103c1f96378f9367c988692ce3af0174991 315420 dovecot-sieve_2.2.22-1ubuntu2.11_i386.deb 9aadac22c4065fdd62916d61619d1a9e6e6a3257 1010 dovecot-solr-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 9e13beceea96663af9004a15b70194fb4ef46a29 22496 dovecot-solr_2.2.22-1ubuntu2.11_i386.deb 7a435127a5c53c0be4962339e13aa8e9acf2a5b5 1004 dovecot-sqlite-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb e9c9087ae1cc9d196ca99b8a2f21de8edd61e3e7 8264 dovecot-sqlite_2.2.22-1ubuntu2.11_i386.deb 6547c8638f71e8044b7cc0bf42471cfa7f56da24 1468 dovecot_2.2.22-1ubuntu2.11_i386_translations.tar.gz Checksums-Sha256: b14c5ecd3d498ada67ce605c0860152e532b8a1be50818b67385f209ee20d0c4 1014 dovecot-core-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb e84b264c3f37f9d3a09c084bdb5d5870bd699f4cac34f5549fb539f42662cede 2618006 dovecot-core_2.2.22-1ubuntu2.11_i386.deb 84b6113760b7044b73b251c19094b6ba53f567abeeba615a181bd6bb7fed57aa 9710236 dovecot-dbg_2.2.22-1ubuntu2.11_i386.deb 66950a15390c57dcaaa55aceea09da5d130bf2c79cb2dd9663cf2529ac82a00a 1022 dovecot-dev-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb ec2ef8d79d1d9f9ef1d5033fcb89039e92544513f067f7631c772bbdeec2a37f 277348 dovecot-dev_2.2.22-1ubuntu2.11_i386.deb 475486dcfcda8b448d034925878ec412cc0389eb875519ec4956607d05b62b87 1014 dovecot-gssapi-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 87c5ac1780b4f9e453dfe4e8376919dffa9b2ed8fac11d8d6cca83c0b50f5f57 9256 dovecot-gssapi_2.2.22-1ubuntu2.11_i386.deb 7643e4605fddec457a8659047e944614130bb8561b68d5e1901076fa815b2cd5 1002 dovecot-imapd-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb ebbc7ae4b39ba65f1760153a186372bde7634bfdf0bc7fc21e2d5b1748311f78 162940 dovecot-imapd_2.2.22-1ubuntu2.11_i386.deb 2a2a7a4baf208f695603bc79d07312dbfd42950d17b17cbe6d5f23807f0e2954 1002 dovecot-ldap-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 3bbd713d87baa8ee9cc519c0b7ac03ad520c5264004169cba33976f56a189e12 24678 dovecot-ldap_2.2.22-1ubuntu2.11_i386.deb 2e203fbb041515781582fc8c2d3e0ff61a136769ba722507348b1da8c6cdf005 1002 dovecot-lmtpd-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 6a3fb7a9c311b54bc6c83849a6ca61bc9dd5daff778de211edc17625b8b96512 25054 dovecot-lmtpd_2.2.22-1ubuntu2.11_i386.deb 1a6af57671f34f477ebe1a1bd6b71c31d213ebddf186ec2a14ee30d82d0527eb 1012 dovecot-lucene-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 19a4fcaecb43a33fb29c6b42f1405b3c06b7bbdbfed3650eccf4c364edc7af3d 4244 dovecot-lucene_2.2.22-1ubuntu2.11_i386.deb 05ac923766ebe19af453dc0b073e84e712c74bc1f1e0287bbff1acbe63be299b 1008 dovecot-managesieved-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb cf56fa005b62a3e8760ae6a13383f405e51ddd324c7b389b2ccb22b54fdb558b 43112 dovecot-managesieved_2.2.22-1ubuntu2.11_i386.deb 388be468de2a15d88c8890eb3405b76387c041678e2b69db9b1d639cb6f5699e 1006 dovecot-mysql-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb bb8c95d71122cebf0225f61cb741b9c6d06fc29d5ea42f14df615794b4a3791d 10392 dovecot-mysql_2.2.22-1ubuntu2.11_i386.deb ac73141b1cf4dfd79e50e5ab371e6a4991211b501a71cf4e8648ade95e1318ca 1006 dovecot-pgsql-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb eff527ea5fe66d56de18ae7c251516f06f22291d7f7a68a17ae2c3613c005084 13606 dovecot-pgsql_2.2.22-1ubuntu2.11_i386.deb 310eb126d8771a7e47bd9d8646c550770d15e48ae2d7fb124fb950d8786d0632 1002 dovecot-pop3d-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb fb9abd0922bb4369a75ed6a846a8bde1ad92187030775e38177b367ebe14143f 31534 dovecot-pop3d_2.2.22-1ubuntu2.11_i386.deb e1d8cbfd27bede9cc45afff30de92a2e47b97b8fb5b7bb933b70a216dcbb6b16 1006 dovecot-sieve-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb bb948618f73c6234f9c30d7475369eb3d895bcf7d8d684f5641a30d69b36bc5c 315420 dovecot-sieve_2.2.22-1ubuntu2.11_i386.deb a319ebddeb4e9320695e71b44f40caeb1182aa77eac08f63265f31a49d58ef2f 1010 dovecot-solr-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 316e937d277b4286098fc5c41f56f6142745db6465d5d1894a9db8405064fec5 22496 dovecot-solr_2.2.22-1ubuntu2.11_i386.deb 3111c0e77bee0cd440a6adc9d62d6ea6acca9749b94bddfccf67454e40dde567 1004 dovecot-sqlite-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 7124dba4ba3364257a3ae4fd901f0fd9a152ba76a4db21aff82a56533b29a609 8264 dovecot-sqlite_2.2.22-1ubuntu2.11_i386.deb a4dd8cf4bd9432c54db5dd79c95d3cf8e89b2881d5320d8d73bf589d8f43a358 1468 dovecot_2.2.22-1ubuntu2.11_i386_translations.tar.gz Files: a606ed230e6c7b8f0eb5b7cb7081d0b5 1014 mail extra dovecot-core-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 930a41a815bb33ed9dacb2be17d1902c 2618006 mail optional dovecot-core_2.2.22-1ubuntu2.11_i386.deb 8a853cd71d61ecbaa181d92a63fc9a38 9710236 debug extra dovecot-dbg_2.2.22-1ubuntu2.11_i386.deb 08b6db302e68d5bfae0af64e98cb1395 1022 mail extra dovecot-dev-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 61a07f43b8b9fe7e03ce2270c78653ee 277348 mail optional dovecot-dev_2.2.22-1ubuntu2.11_i386.deb e5b571e5d6a31d88cf7a594e3d99d69a 1014 mail extra dovecot-gssapi-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 67de21b9ee5eaae147e394a51af91e67 9256 mail optional dovecot-gssapi_2.2.22-1ubuntu2.11_i386.deb 7a1f18efd7172920579a494d80f07271 1002 mail extra dovecot-imapd-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb a68344c04f9d80c827bde79e68945326 162940 mail optional dovecot-imapd_2.2.22-1ubuntu2.11_i386.deb 05072d23f681bcc392311967d49c8e27 1002 mail extra dovecot-ldap-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 080949d9639925880e98a572da83eead 24678 mail optional dovecot-ldap_2.2.22-1ubuntu2.11_i386.deb 419b58672121f6bb27875b9e13f2dbb6 1002 mail extra dovecot-lmtpd-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 288ff94f9ef950b28d7ded187aad1f72 25054 mail optional dovecot-lmtpd_2.2.22-1ubuntu2.11_i386.deb 718bfacd71a5aa6f6930e507c2effffd 1012 mail extra dovecot-lucene-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb cec30aa173329557f450ac57f11629f1 4244 mail optional dovecot-lucene_2.2.22-1ubuntu2.11_i386.deb efb739232519f000b4d34b99b1145ec9 1008 mail extra dovecot-managesieved-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb cf66de8f0f12db114a4fb7f8cf3db525 43112 mail optional dovecot-managesieved_2.2.22-1ubuntu2.11_i386.deb 1c55c07f409a9e56d843f47cfd0f8138 1006 mail extra dovecot-mysql-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb dddb45c94e927720c133e275ff5fac4b 10392 mail optional dovecot-mysql_2.2.22-1ubuntu2.11_i386.deb acf803839dad7aafcf0e335a5f3af035 1006 mail extra dovecot-pgsql-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 3deae1a0d6df66ae6fe5e8b0ed15d999 13606 mail optional dovecot-pgsql_2.2.22-1ubuntu2.11_i386.deb f2428be8d33491774bcbdd435768edcf 1002 mail extra dovecot-pop3d-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 92b3e24e7dfbb4faf9962abcf47d86c6 31534 mail optional dovecot-pop3d_2.2.22-1ubuntu2.11_i386.deb a90f70aa5b3076c3b6fda8f8175b0657 1006 mail extra dovecot-sieve-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb b9608681c4196e62704a51fe621cdce8 315420 mail optional dovecot-sieve_2.2.22-1ubuntu2.11_i386.deb 5c86d7e0838823cfe09bb81d3bb96ee3 1010 mail extra dovecot-solr-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb 282fe919c82fdc68c58ea21895215bf8 22496 mail optional dovecot-solr_2.2.22-1ubuntu2.11_i386.deb 263cdb4407bcfec930f963e1c004a366 1004 mail extra dovecot-sqlite-dbgsym_2.2.22-1ubuntu2.11_i386.ddeb ff24b03fd300d9f75968ccc7397a860f 8264 mail optional dovecot-sqlite_2.2.22-1ubuntu2.11_i386.deb ed110ec93a081669ab0d079adaa1fd2b 1468 raw-translations - dovecot_2.2.22-1ubuntu2.11_i386_translations.tar.gz Original-Maintainer: Dovecot Maintainers