Format: 1.8 Date: Wed, 05 Aug 2020 10:49:12 -0400 Source: dovecot Binary: dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-solr mail-stack-delivery Architecture: i386 i386_translations Version: 1:2.2.33.2-1ubuntu4.6 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support mail-stack-delivery - mail server delivery agent stack provided by Ubuntu server team Changes: dovecot (1:2.2.33.2-1ubuntu4.6) bionic-security; urgency=medium . * SECURITY UPDATE: DoS via deeply nested MIME parts - debian/patches/CVE-2020-12100/*.patch: backports of upstream patches to fix the issue. - CVE-2020-12100 * SECURITY UPDATE: DoS via incorrect NTLM message buffer size - debian/patches/CVE-2020-12673/*.patch: check buffer length in src/lib-ntlm/ntlm-message.c. - CVE-2020-12673 * SECURITY UPDATE: DoS via zero-length message - debian/patches/CVE-2020-12674/*.patch: fail on zero-length buffer in src/auth/mech-rpa.c. - CVE-2020-12674 Checksums-Sha1: 86f066518282bd797d00d1fa2ae65215f9e29c14 9076532 dovecot-core-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 4678332f2faea72400d71f7c76924489fb5ad275 2945708 dovecot-core_2.2.33.2-1ubuntu4.6_i386.deb 4c279dcbbecf0165277ae439dec4a030fd00c539 308188 dovecot-dev_2.2.33.2-1ubuntu4.6_i386.deb 78b651193468b7f2a3e874614e7609d055c1648f 17212 dovecot-gssapi-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb acf8e2106af69d48a051236b629eb7748cfec0f2 10996 dovecot-gssapi_2.2.33.2-1ubuntu4.6_i386.deb 5b6950c0dff07e56e9cadd60dedfbf550ef8fb0c 647260 dovecot-imapd-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 3e39dbd7e0a9ff3170c1afc5d2fdebaee8de6b77 172308 dovecot-imapd_2.2.33.2-1ubuntu4.6_i386.deb 3a576b32129d7f297121c050d06bc80b22df5b11 507412 dovecot-ldap-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 8b49c6853f6afa8463616205c8cd19a4ef4e3d7f 247528 dovecot-ldap_2.2.33.2-1ubuntu4.6_i386.deb 0559b8f9b24d21c9eeb9005897bb35379af7c6f0 73900 dovecot-lmtpd-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 5d65ce066e7079c4d49d1fde32228366b8177f9e 27448 dovecot-lmtpd_2.2.33.2-1ubuntu4.6_i386.deb b9a6e91864c668684b9c73953569f6bb4f2a4d18 122100 dovecot-managesieved-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb f10b489fb698117b8590b1568e5d843b842063a0 45180 dovecot-managesieved_2.2.33.2-1ubuntu4.6_i386.deb 68c9a38348aa7b5153a63a1df97e349d43aabc8f 18308 dovecot-mysql-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 55c9a7925f34dddca5a43be56fdcb2d74bf00038 12152 dovecot-mysql_2.2.33.2-1ubuntu4.6_i386.deb 74cc7b473f6b40d43955048b6758844bca1386e4 21728 dovecot-pgsql-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 6bff6e342615011b6f897c8221d3e0af50dadba4 15544 dovecot-pgsql_2.2.33.2-1ubuntu4.6_i386.deb 173f90fa7e5b05f2c4bafcab07a93a18c65eba53 73956 dovecot-pop3d-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb d7d0bcd8ac1f0700095d1a313c46df42256fac20 35172 dovecot-pop3d_2.2.33.2-1ubuntu4.6_i386.deb be3cdd128b95344205f0944875f5826b652e5728 1481528 dovecot-sieve-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 8b6c7822ab9decadd7729fdef1944de77c05baaa 340100 dovecot-sieve_2.2.33.2-1ubuntu4.6_i386.deb 71e707071a0edae35423605f556e0dd31c1e076f 84516 dovecot-solr-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb a9d1e34ceca07d8319c300461c76610c2a1f7044 24556 dovecot-solr_2.2.33.2-1ubuntu4.6_i386.deb e11dcdb069fc89f9638b8f2bab3114f02e3f2388 11632 dovecot-sqlite-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 78d72802be1b0338a446b538a2b365db0abecb15 10028 dovecot-sqlite_2.2.33.2-1ubuntu4.6_i386.deb b7490bebb0b9541c08b7f6fe60609b52ce8e0e96 15687 dovecot_2.2.33.2-1ubuntu4.6_i386.buildinfo 0885c8ec750e179a8500358f7e07d3cfc800f3e6 1469 dovecot_2.2.33.2-1ubuntu4.6_i386_translations.tar.gz Checksums-Sha256: aad444319cdab7bb532d521c45faac91c28e7257569caadcf47d40c53fb16aa2 9076532 dovecot-core-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb ed2a4402a7508e68328ad11c95c115e8c8daf28f2eec85b451e073fcf3a38dc1 2945708 dovecot-core_2.2.33.2-1ubuntu4.6_i386.deb 7f99f7ddf8dfa15075542b215013c7f25eaf728e3395b10539d3e82b45a3398d 308188 dovecot-dev_2.2.33.2-1ubuntu4.6_i386.deb 2246e120dd0d1a32569d55dae69defaac992cef77806c537e985ab5e54512aa5 17212 dovecot-gssapi-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 830a292e043cba8d22ba7fc5177cd52c31382d1b44d10dbfac89acf5be8bbc85 10996 dovecot-gssapi_2.2.33.2-1ubuntu4.6_i386.deb 2c0d472144a36e424e32420a1c75a94a2b1ad976856299f24776a6cbe4265bde 647260 dovecot-imapd-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 3ad918141239ebd6a8e97ffa02d28b2a66f60afc486a2df9acd954002519d9b7 172308 dovecot-imapd_2.2.33.2-1ubuntu4.6_i386.deb 004d3bdfa9a92a77067ac8f78ec9debe78c2753b4b149719fd7b0396ffdfc49a 507412 dovecot-ldap-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb c67f8581a6daa2dc584118156233e6b4760c4bf6f0fe1222da82ffd3eb86e8ca 247528 dovecot-ldap_2.2.33.2-1ubuntu4.6_i386.deb b52ce170e493bd33fc494d84d71d5770c2f0eddacb65e71e9097302a46dc6c65 73900 dovecot-lmtpd-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 89df47a5a790bd0f31c00cc57cf43d6e8029cd44cdec3169b9a36a6b93c6fd13 27448 dovecot-lmtpd_2.2.33.2-1ubuntu4.6_i386.deb 7fdfe3d3151cd1cb92f7e457f6b71ec45f1c442a4b231c5d52ba16f5707060d7 122100 dovecot-managesieved-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 4f22f389e5aa14dd38ef7386654b68929a7015c5dbb35d8e03c05aa612c9024b 45180 dovecot-managesieved_2.2.33.2-1ubuntu4.6_i386.deb 3fa7f0ff205ebe74d5232d87d530d0827921dae6f0736c0d90f601740d211017 18308 dovecot-mysql-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb a9968f4180ec19e392addbfbf29e8fc123bef0294d7eb576b9b94ecdfc1071c6 12152 dovecot-mysql_2.2.33.2-1ubuntu4.6_i386.deb e37d2b5132dbb2dc6822f76ca9cc8ee01f0e09e8b923f86f0e45c37f8c761aa9 21728 dovecot-pgsql-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb dba6b280e963ad1db90b3bec6fc7085866166f7eecb26a1461c5bf29b4e47926 15544 dovecot-pgsql_2.2.33.2-1ubuntu4.6_i386.deb 6523ddb7aa3ed9afde98c5a0141b58a02e3a6c0253bef64662c2d095bfb20154 73956 dovecot-pop3d-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb a102909dbe37b86ef9e0d5e5f0f76506c16dcc757c4804294eeba29b2098b44c 35172 dovecot-pop3d_2.2.33.2-1ubuntu4.6_i386.deb 72724c8166b0de45dc89276ea6461e594254305a311209e9dfd2bc225b8d3a6b 1481528 dovecot-sieve-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb c8bffac40e3322860355e6b2be82c0e903b91e82c0885451ffa83c415457c0cf 340100 dovecot-sieve_2.2.33.2-1ubuntu4.6_i386.deb 2eec3a5cc9cb5f014dd9a168d1a37e7f51eb995e75a31e6b842f46c508a98442 84516 dovecot-solr-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb b2c71958e9419a63e0e696ab938493ee51f461ec80663f1e3cdb3b727559ec15 24556 dovecot-solr_2.2.33.2-1ubuntu4.6_i386.deb a6a1ba2c17a9293f0cf1d6e697a70f66fd3a46dac7db764dba339b0c1ba938e1 11632 dovecot-sqlite-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb c26bbe121d6f6e51616c3716ed9502897747028efb7626d8c6a03ce2008a808b 10028 dovecot-sqlite_2.2.33.2-1ubuntu4.6_i386.deb f4367941e2c87b35f6aa7b2678c61135b4f6c0a04266ab7b2e80fac83fa19d3a 15687 dovecot_2.2.33.2-1ubuntu4.6_i386.buildinfo f605203e7bccfde19fe8a8bd11f579ed11d869dc41e4c36da6952d408916d4c2 1469 dovecot_2.2.33.2-1ubuntu4.6_i386_translations.tar.gz Files: 7aeb0b0e0224ae274623f77a5757b874 9076532 debug optional dovecot-core-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb bd63ee462a7279a111ee737056d97a68 2945708 mail optional dovecot-core_2.2.33.2-1ubuntu4.6_i386.deb b51494ea7c9b46f4d54fd06df1417c7f 308188 mail optional dovecot-dev_2.2.33.2-1ubuntu4.6_i386.deb 3805c8272dd8c0aeba53e4a3d3a32666 17212 debug optional dovecot-gssapi-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 3e436f3c66334e9727b1b61f8de034d7 10996 mail optional dovecot-gssapi_2.2.33.2-1ubuntu4.6_i386.deb c0e6b410725709308bf5017a1897ef6f 647260 debug optional dovecot-imapd-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 159eee7c156f7ce4343c24cab0d255db 172308 mail optional dovecot-imapd_2.2.33.2-1ubuntu4.6_i386.deb 7f949d99770f72bcc4f13890222b3cc9 507412 debug optional dovecot-ldap-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb b1f2e99882f71cc5d34b5210b0ac27bc 247528 mail optional dovecot-ldap_2.2.33.2-1ubuntu4.6_i386.deb f80dedde12f01067582417c3b43ccd93 73900 debug optional dovecot-lmtpd-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 3c23391537dc0fdba8f94255d0ba64ec 27448 mail optional dovecot-lmtpd_2.2.33.2-1ubuntu4.6_i386.deb 2ed12145c6c2f6a31d62baa4d621ff57 122100 debug optional dovecot-managesieved-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb b81a974b563dbd10885262622ecce300 45180 mail optional dovecot-managesieved_2.2.33.2-1ubuntu4.6_i386.deb f618bc1ee8e92ad33d9614a7679dcabb 18308 debug optional dovecot-mysql-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 0ffe65e2a2bf94d3102b50c700d2f54b 12152 mail optional dovecot-mysql_2.2.33.2-1ubuntu4.6_i386.deb 0e7819577a8e2048b19eecd0f041bb9f 21728 debug optional dovecot-pgsql-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 18bf731269df6bb374f1f4c1d8406f10 15544 mail optional dovecot-pgsql_2.2.33.2-1ubuntu4.6_i386.deb 34f9220db61639bd5137a6db41241122 73956 debug optional dovecot-pop3d-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 66e9152a95e1631577577fb7ae4ce286 35172 mail optional dovecot-pop3d_2.2.33.2-1ubuntu4.6_i386.deb dd35ed927ecccefab95a6f4ee87da9c1 1481528 debug optional dovecot-sieve-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb a12fc9c897d81989a336fc9de051352f 340100 mail optional dovecot-sieve_2.2.33.2-1ubuntu4.6_i386.deb 6d4d617ce262d5a91c76cc9fc51980e1 84516 debug optional dovecot-solr-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 165ce35d5fe7527420b69d080fee7517 24556 mail optional dovecot-solr_2.2.33.2-1ubuntu4.6_i386.deb 066534a6c89394e3c69dc808bd547f6e 11632 debug optional dovecot-sqlite-dbgsym_2.2.33.2-1ubuntu4.6_i386.ddeb 9d05116b9903d892a8fa33e636e69afe 10028 mail optional dovecot-sqlite_2.2.33.2-1ubuntu4.6_i386.deb 224073855fd064f218f03c4aa7c5aeee 15687 mail optional dovecot_2.2.33.2-1ubuntu4.6_i386.buildinfo 791b24fe75f643d35dc62610f0cc73e8 1469 raw-translations - dovecot_2.2.33.2-1ubuntu4.6_i386_translations.tar.gz Original-Maintainer: Dovecot Maintainers