Format: 1.8 Date: Thu, 06 Aug 2020 09:40:07 -0400 Source: dovecot Binary: dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-solr dovecot-lucene dovecot-dbg mail-stack-delivery Architecture: i386 i386_translations Version: 1:2.2.22-1ubuntu2.13 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: dovecot-core - secure POP3/IMAP server - core files dovecot-dbg - secure POP3/IMAP server - debug symbols dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-lucene - secure POP3/IMAP server - Lucene support dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support mail-stack-delivery - mail server delivery agent stack provided by Ubuntu server team Changes: dovecot (1:2.2.22-1ubuntu2.13) xenial-security; urgency=medium . * SECURITY UPDATE: DoS via deeply nested MIME parts - debian/patches/CVE-2020-12100/*.patch: backports of upstream patches to fix the issue. - CVE-2020-12100 * SECURITY UPDATE: DoS via incorrect NTLM message buffer size - debian/patches/CVE-2020-12673/*.patch: check buffer length in src/lib-ntlm/ntlm-message.c. - CVE-2020-12673 * SECURITY UPDATE: DoS via zero-length message - debian/patches/CVE-2020-12674/*.patch: fail on zero-length buffer in src/auth/mech-rpa.c. - CVE-2020-12674 Checksums-Sha1: 93d1118fd8769351fc24a3ef7d67a2b7057d9357 1014 dovecot-core-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 7644f6c0cda351499c8aee37930279d2a9fd88b7 2621238 dovecot-core_2.2.22-1ubuntu2.13_i386.deb d99d9748351c63c5dcc996801b51cf91eb1858b8 9715624 dovecot-dbg_2.2.22-1ubuntu2.13_i386.deb 999c7f08036fdbd5a98cecc3bd49a03df80da777 1022 dovecot-dev-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 0a4ef7fb7c4213b531a1cba2d5ac669bc3e6567f 277434 dovecot-dev_2.2.22-1ubuntu2.13_i386.deb dac10b520db053babd0110701d4177e7e666659b 1014 dovecot-gssapi-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb dc23e52e05408bc4c5f00a48b96e1ad523b57eec 9264 dovecot-gssapi_2.2.22-1ubuntu2.13_i386.deb e73ebd979cdef88b86ca4109ae4ecfd4ed162b84 1002 dovecot-imapd-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 79cc2b5ee52a8579b31da348a2c09d5c2d1cd182 162630 dovecot-imapd_2.2.22-1ubuntu2.13_i386.deb 85cc8c4d1cefa2ae760f593fe8e2cdfd6fd8ba97 1002 dovecot-ldap-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 7dddc2ec3160003a55547cd070f7637177f9713f 24694 dovecot-ldap_2.2.22-1ubuntu2.13_i386.deb 948f58f30f5d4e55ae1f9847278d358fad628afc 1000 dovecot-lmtpd-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb b716b7e55260481271f4823645eb812f86c546c7 25084 dovecot-lmtpd_2.2.22-1ubuntu2.13_i386.deb 347dbd950370841860a22136b709cd50db9aa6c0 1012 dovecot-lucene-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 342099e73b09a16fc89e02a5182960a8b9c39a6a 4246 dovecot-lucene_2.2.22-1ubuntu2.13_i386.deb cfacd18899e3eed6a874326d915b69bf6b169743 1006 dovecot-managesieved-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb f186041485e2f2721fa11634608c99ec74ae025c 43188 dovecot-managesieved_2.2.22-1ubuntu2.13_i386.deb 9f388a3e1898cea31082c98f4ec04116b6cab9fa 1004 dovecot-mysql-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 0f3cdad102db40c474f0259de19723ee8ede7e63 10428 dovecot-mysql_2.2.22-1ubuntu2.13_i386.deb f7ad6f73ee88770be3fc9e6202e02a154d6a7935 1006 dovecot-pgsql-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb be73b5dca2252a28106f9920c1b34262f8779572 13624 dovecot-pgsql_2.2.22-1ubuntu2.13_i386.deb 00080d9a9bb4269972aad1223970659c0895da49 1002 dovecot-pop3d-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 2d04b02a5a86be990d410283fc294fe1f94e4613 31538 dovecot-pop3d_2.2.22-1ubuntu2.13_i386.deb 2c30cb8c4da4f3709b2607f1e0a9ffb4a1f17400 1006 dovecot-sieve-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb b102fd73fb8b85599d7b643dcc07852883ef3daf 316842 dovecot-sieve_2.2.22-1ubuntu2.13_i386.deb 21cf078c5ad3b2c0a02bf7d4194e7ea1c978e54e 1010 dovecot-solr-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb b602acef2068c6e81ac2f29d787be7f3dba601ad 22508 dovecot-solr_2.2.22-1ubuntu2.13_i386.deb 7979083ecc32a4bcfc06b4cee42737fc1939a650 1002 dovecot-sqlite-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 42984d2792beb495433ae1137f072e4c1dce0c6b 8298 dovecot-sqlite_2.2.22-1ubuntu2.13_i386.deb 946be6697ee70730cb92139190b83286ec341ad7 1468 dovecot_2.2.22-1ubuntu2.13_i386_translations.tar.gz Checksums-Sha256: 805bcd0176d9615a395ec5fa318248c894602870227dac0b003507ed920022a2 1014 dovecot-core-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 63b433ad7502c331a2c119661c9fbfb9dd32ac63cb118cb9361598ff7f07b877 2621238 dovecot-core_2.2.22-1ubuntu2.13_i386.deb 8a432a858a80acd6691820f3aa2dd5c385123ee410c2733f10d8aed451aff4ca 9715624 dovecot-dbg_2.2.22-1ubuntu2.13_i386.deb 96856f77adbfb0c8930da69d90a461d9f5f8015eb2de9ff7046c6f2d293132c4 1022 dovecot-dev-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 0b5a3a9a062bb19dd276c512cdd059c32c35b7a4d3c29e8852fdd4d91cfb61ac 277434 dovecot-dev_2.2.22-1ubuntu2.13_i386.deb 22d40162edb262c28f8e394f7b979f1340c75e5b57f2db34b9ff9335c084b152 1014 dovecot-gssapi-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 00f4abaa5003405191d8cb61a32f1caffba53ed5392f1ad7e1cd2a3cf1f12090 9264 dovecot-gssapi_2.2.22-1ubuntu2.13_i386.deb 624610068c006a246a0d581ee20c7784bb54f16faa025e083730180a1eb6c811 1002 dovecot-imapd-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 94606bb991d1d4bac44b54adb734f75b59d60f248c1f3167e8ed2e5ec908d298 162630 dovecot-imapd_2.2.22-1ubuntu2.13_i386.deb c83ca7a34dd1e7d3a7ad8faf2cec3953a3af47fdd9cf6fbaad850709335b8fb6 1002 dovecot-ldap-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 8793795348d0d68ff45db425378aa0c28d1a586cd6d73e06c455c77e4914d31d 24694 dovecot-ldap_2.2.22-1ubuntu2.13_i386.deb 822e1800039e27997a234b4e4a841edb3a6032663d108b891dc9f8c3caa22cd6 1000 dovecot-lmtpd-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 0cc35641a83d72eb1209a361216d8dd9ecc6446ee6371e894ee254a2934341e1 25084 dovecot-lmtpd_2.2.22-1ubuntu2.13_i386.deb 9dccc8780445364ad1dcc8cbf92ba6460a931204e8443a3206bef9c3458dd371 1012 dovecot-lucene-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 262cfd299981401997a9d92856f920d5c9a59842337024f635ca3da13c9a2796 4246 dovecot-lucene_2.2.22-1ubuntu2.13_i386.deb 40f6b7f4cc9a51598f69d9908da8759c02c957fbda52d95eab781d91d7dbd213 1006 dovecot-managesieved-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb eda8b2e10c971235ef3f16822219ac4c7de3eaff4026d83e253938dcda0c31d4 43188 dovecot-managesieved_2.2.22-1ubuntu2.13_i386.deb 9189ebc83f7b320e731e5e87a1c97fea576378f6ee6a1279628f59cf5c3c72d1 1004 dovecot-mysql-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb fb657dc8fadb01a9636b5ecffaf8c7c0abeba0addda6cdb61a1b0f5b56cdbbdf 10428 dovecot-mysql_2.2.22-1ubuntu2.13_i386.deb dce540ecc58d151402f98be00a02cf2d1c4d95a9afe04f26059b451d0186ba8c 1006 dovecot-pgsql-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 502e91c6c5a0c586b0d0738bfba1c6aea213dec2cf9ae0c0ad925eb729e674e9 13624 dovecot-pgsql_2.2.22-1ubuntu2.13_i386.deb 5082a7e461b640a3001207f6be0b303aa129dd6c5e1905b0f51c6419e7ada6dd 1002 dovecot-pop3d-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 4f34cf20a56de97f6934b12a988d9b45b14a94453d27f21fd58990b9c0eef91c 31538 dovecot-pop3d_2.2.22-1ubuntu2.13_i386.deb 479e10a31ef1c5a7f372d6969236d6fc112694840dbf9c0d8a19beb2b0ee029d 1006 dovecot-sieve-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 575beb2cf4bdaeae4d95ac3b7ae0ba1df18cbe494f8ed4b5aeb140eec02eaef8 316842 dovecot-sieve_2.2.22-1ubuntu2.13_i386.deb 7b3bd45a3733dc157362199f66ce6b7779939cb5e6971a5350fa75f715bb91f7 1010 dovecot-solr-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb df06debb2a892971cb840e071301020628f1a2deb0f2c510c2d5d7bcab255424 22508 dovecot-solr_2.2.22-1ubuntu2.13_i386.deb e0df8ce99762e56f015790fd2f0f79e7fee5045cac06b536518383c8342451ba 1002 dovecot-sqlite-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 86b21798798d8dcf2053fa24e1a03f9e637a49380ccd7090fda46bf3192a722f 8298 dovecot-sqlite_2.2.22-1ubuntu2.13_i386.deb d5cf0d6549690de213ab626e8d80524004d7b8ef2837b4c708cfb60eefcd15f0 1468 dovecot_2.2.22-1ubuntu2.13_i386_translations.tar.gz Files: 57e068c73170fed321097e6d69624ef3 1014 mail extra dovecot-core-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb e5d58aa1545c5c553694c33fc969602d 2621238 mail optional dovecot-core_2.2.22-1ubuntu2.13_i386.deb 7c659ab7805e6f999416731aba56dfd1 9715624 debug extra dovecot-dbg_2.2.22-1ubuntu2.13_i386.deb ce0f2ecc9fb6244f432677b1b5d728bf 1022 mail extra dovecot-dev-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 6b4a8f12544ee5211f359f2e9811ee71 277434 mail optional dovecot-dev_2.2.22-1ubuntu2.13_i386.deb 146a04e793d9cccbf2e50156e2f3e739 1014 mail extra dovecot-gssapi-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 69d2cbb4658acc6230cd629c3ab5a537 9264 mail optional dovecot-gssapi_2.2.22-1ubuntu2.13_i386.deb 20c57bf1cfff1db89e5be88be05c0430 1002 mail extra dovecot-imapd-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 39fd87f6d588a121028d18cdb67ad564 162630 mail optional dovecot-imapd_2.2.22-1ubuntu2.13_i386.deb fbf701164d0462105e779ba16e1d2d20 1002 mail extra dovecot-ldap-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 78497dec31ed97ca4452d75b0fb23d71 24694 mail optional dovecot-ldap_2.2.22-1ubuntu2.13_i386.deb 9bf4202071e044ddf7606b4d862d05f5 1000 mail extra dovecot-lmtpd-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 4e5abd77e0fea3db56cf007e6069875d 25084 mail optional dovecot-lmtpd_2.2.22-1ubuntu2.13_i386.deb a24fb97674f1b0bcb50f5c9a4e4cfe37 1012 mail extra dovecot-lucene-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 4b448e723f642f9a41117f6d6deafaec 4246 mail optional dovecot-lucene_2.2.22-1ubuntu2.13_i386.deb 1f5c80840f3c3ef195abd7e9a507dab2 1006 mail extra dovecot-managesieved-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 03969e1960edc522602d6d9daf35501f 43188 mail optional dovecot-managesieved_2.2.22-1ubuntu2.13_i386.deb 46bbc583c81c88736eb3a561ad719462 1004 mail extra dovecot-mysql-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 04eb0f25626c62ac260c134c04af879a 10428 mail optional dovecot-mysql_2.2.22-1ubuntu2.13_i386.deb 611389bce67a3db68668391bb19bf7d6 1006 mail extra dovecot-pgsql-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb c10d9265fb2f316e4d596aac14686b5a 13624 mail optional dovecot-pgsql_2.2.22-1ubuntu2.13_i386.deb e7a58b32f1a44fd2056b837cbebe4e46 1002 mail extra dovecot-pop3d-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 384acdb2055f5f9fcf8387b359f6a4f7 31538 mail optional dovecot-pop3d_2.2.22-1ubuntu2.13_i386.deb e8df1f25641a8f6a2db2d64a1986986a 1006 mail extra dovecot-sieve-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb b6529923358eacfeec1bd2aa9e25a845 316842 mail optional dovecot-sieve_2.2.22-1ubuntu2.13_i386.deb 5a8ae60d1137bae65881b26f9f9d8cf9 1010 mail extra dovecot-solr-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 2773a04292a5650c0011235ac084aaaa 22508 mail optional dovecot-solr_2.2.22-1ubuntu2.13_i386.deb 5af283efb12e122a28554fa778794a45 1002 mail extra dovecot-sqlite-dbgsym_2.2.22-1ubuntu2.13_i386.ddeb 7fff016e33387eda938276de29b26acc 8298 mail optional dovecot-sqlite_2.2.22-1ubuntu2.13_i386.deb cd595b259122a8166576fad4abf7e9d9 1468 raw-translations - dovecot_2.2.22-1ubuntu2.13_i386_translations.tar.gz Original-Maintainer: Dovecot Maintainers