Format: 1.8 Date: Mon, 28 Dec 2020 15:52:17 -0500 Source: dovecot Binary: dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-solr mail-stack-delivery Architecture: armhf armhf_translations Version: 1:2.2.33.2-1ubuntu4.7 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support mail-stack-delivery - mail server delivery agent stack provided by Ubuntu server team Changes: dovecot (1:2.2.33.2-1ubuntu4.7) bionic-security; urgency=medium . * SECURITY UPDATE: information disclosure via imap hibernation - debian/patches/CVE-2020-24386-1.patch: escape tag when sending it to imap-hibernate process in src/imap/imap-client-hibernate.c. - debian/patches/CVE-2020-24386-2.patch: add unit test for imap-client-hibernate in src/imap/Makefile.am, src/imap/imap-client-hibernate.c, src/imap/imap-client.h, src/imap/test-imap-client-hibernate.c. - CVE-2020-24386 * SECURITY UPDATE: remote DoS via large number of MIME parts - debian/patches/CVE-2020-25275-1.patch: fix assert-crash when enforcing MIME part limit in src/lib-mail/message-parser.c. - debian/patches/CVE-2020-25275-2.patch: don't generate invalid BODYSTRUCTURE when reaching MIME part limit in src/lib-imap/imap-bodystructure.c. - CVE-2020-25275 Checksums-Sha1: ffe9186f37ecdad00b9846985d4fb0aabd61ef45 9770680 dovecot-core-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 8b6f3ed802349fc79ba1e0b27c6d6193b66bad37 2480536 dovecot-core_2.2.33.2-1ubuntu4.7_armhf.deb ab4e0612864ceba0980775ef4cee8295b83f95d6 307552 dovecot-dev_2.2.33.2-1ubuntu4.7_armhf.deb 8b2770fdd97de948ea3303ab7a50099fd54fe135 18592 dovecot-gssapi-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb ac55c687b5096d65784cfb22de8e1cfa709a6022 9868 dovecot-gssapi_2.2.33.2-1ubuntu4.7_armhf.deb dbb6da28b3b049a29df3ee1d3f237a5170efb2db 693128 dovecot-imapd-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 0cd25d88276ebc10a8f657ca1184d912ba93eb92 133692 dovecot-imapd_2.2.33.2-1ubuntu4.7_armhf.deb a432e04961e0d0b8ecdcbcd6b626a523f1b96d8b 576540 dovecot-ldap-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 12dc4b2d6106fb0fd167e010b43c931a1a920d09 192380 dovecot-ldap_2.2.33.2-1ubuntu4.7_armhf.deb d93a0f1cd7ffc5facdeaf9320553e7023b84a954 79892 dovecot-lmtpd-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb a87d002cd93a551e05c94468ec9c89318f962336 22964 dovecot-lmtpd_2.2.33.2-1ubuntu4.7_armhf.deb d141a34c878d03f6b99dc2cf3b66fdab78eb25fd 132996 dovecot-managesieved-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 386e58be14885789409959411363a14e04de39c0 37420 dovecot-managesieved_2.2.33.2-1ubuntu4.7_armhf.deb cc5c87ba9ff9fe501de9dff9b4e5bffe4d8f7d4e 20000 dovecot-mysql-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb a3a6ff17e475d2bf291a619c1608e429e35dafe1 10436 dovecot-mysql_2.2.33.2-1ubuntu4.7_armhf.deb 2785274533b744abd927a01d80d34952a02f00ce 24500 dovecot-pgsql-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 8666b774bf2598c050dcb5d633385e4a2328847a 12984 dovecot-pgsql_2.2.33.2-1ubuntu4.7_armhf.deb a8503636e41f4e0801899ba000c87e016954781f 80248 dovecot-pop3d-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 82c25046407f8be08f9ca790e4e6e3e9b9d310e3 29360 dovecot-pop3d_2.2.33.2-1ubuntu4.7_armhf.deb b238342234237f2d5558959ad9c74ccb694eddd4 1613616 dovecot-sieve-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 70c221f1c3c4a766cbdfa10649cbd12c21ff65fc 264304 dovecot-sieve_2.2.33.2-1ubuntu4.7_armhf.deb 77a419809392654554547434e8c06d2d5d8b114d 89592 dovecot-solr-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 55400483215a0775037e634d528ac8bc94114efc 19872 dovecot-solr_2.2.33.2-1ubuntu4.7_armhf.deb 59d9979cc9fda0007b17128fb1f07e21c0d2d59c 13120 dovecot-sqlite-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 116cd34796e5000b1b019ba9c4401c2151544b95 8816 dovecot-sqlite_2.2.33.2-1ubuntu4.7_armhf.deb cf51aa21721dc7ba826522ab7908c5a909f0cd38 15674 dovecot_2.2.33.2-1ubuntu4.7_armhf.buildinfo 150cd6f719fd2b1889a9b4bf4c4be6130e357e19 1469 dovecot_2.2.33.2-1ubuntu4.7_armhf_translations.tar.gz Checksums-Sha256: ef60973ff88a1cc03cfaa5606ca822ffc159e8848148addcac70897c5b6ec975 9770680 dovecot-core-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb d548ffd55a2d677c8faf6d4f5116ff86b2e355199e42b0342d648e05b40782ff 2480536 dovecot-core_2.2.33.2-1ubuntu4.7_armhf.deb 03375918604a95d539e239c4d0283ee723ee7a197f5db5630cabf01c5955cb0d 307552 dovecot-dev_2.2.33.2-1ubuntu4.7_armhf.deb 1baaf6400cf0b4369c06861d35d39ea9d4a605207b956968aacfe3d99f3b568b 18592 dovecot-gssapi-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb d312300489f0d5ea5a9931958dc2a43ddeab17834f8a2d1b1e6874930f81ce32 9868 dovecot-gssapi_2.2.33.2-1ubuntu4.7_armhf.deb 04896a7316f32c01de479918fa6a948fa68de6bea62c80fe4cb2e5aed6ac8ab2 693128 dovecot-imapd-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb cf59d09befe4b9319f1f88b1a83f166b588cc880b91854340746ee231384c2ed 133692 dovecot-imapd_2.2.33.2-1ubuntu4.7_armhf.deb fc23b958d8823c04728d0ab5f7c1f7687cfb1916c8abe77dcb5db0cb205308a7 576540 dovecot-ldap-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 2c7c15fe7757e126ca718061566a42cf8b0ebd83fd8957585e2cfa3e25923012 192380 dovecot-ldap_2.2.33.2-1ubuntu4.7_armhf.deb 2d9de909cc54fbced4d2f480e1f9a5ea2c0ce5336aaf30e275e28329550b4aa9 79892 dovecot-lmtpd-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 391872952c0ffc5d43d33d37b563e59a0ef2c5c7051f99b8a633618ccb420b4b 22964 dovecot-lmtpd_2.2.33.2-1ubuntu4.7_armhf.deb cd827539d5a087b7f193e983443c7eb75b7987e187e8b37db9b437a74301143f 132996 dovecot-managesieved-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 91e56915e5d5538756b3684f0fa3681c26457ef53821726ba02711d1ce19d038 37420 dovecot-managesieved_2.2.33.2-1ubuntu4.7_armhf.deb a8a7cf8cbe7695f9910bf44ad671cba3b8e71cae3f22a5f67c512cbafcc26d19 20000 dovecot-mysql-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb d3c0b52eeba23221936e5a0a8eaa5ae600ce79b8e5a2eb982f539ac425e83080 10436 dovecot-mysql_2.2.33.2-1ubuntu4.7_armhf.deb 281cae1bf0b4dbbcb601ae8e5081cc1c9fce1b5a65ce532a34bb1dbd11f5bd0a 24500 dovecot-pgsql-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb fa8111eaafffbd04d7e07510eea8547860842091f194974836f21e223a243ba0 12984 dovecot-pgsql_2.2.33.2-1ubuntu4.7_armhf.deb e9f61e24a403373a3db7bf3cfacd5c161b689598ba66e552f4f4310a6d88b881 80248 dovecot-pop3d-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 1ce23683107a5d2cbe406070285e7021008735d76303d5cb680689bd06e6d866 29360 dovecot-pop3d_2.2.33.2-1ubuntu4.7_armhf.deb 6605d9c9f0b2308c919ecc5967d9276c1335bbf8b040bbf4da32e9bdd1267e28 1613616 dovecot-sieve-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 3921b9b194e78ca5d91cfcc4169bb69a2e213b85e7e7ca1af22e627c72110a6e 264304 dovecot-sieve_2.2.33.2-1ubuntu4.7_armhf.deb f1fa4d4f0f2af1d60178c37c74dc2413978d60b80c93bb38a30162c1e026e94f 89592 dovecot-solr-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb d97bc9b3448ba7736acd2ad6ec3e4504b0a8ffabc5903859896e1f47b4c6e335 19872 dovecot-solr_2.2.33.2-1ubuntu4.7_armhf.deb d884c851ace92aea50d9fca26e6702063b6df35f7a56d3e13a3529996a076fe4 13120 dovecot-sqlite-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb ffaede7eb42c40bc8b8cd652a1060ec0ec3e88a00b753f6f2a6b415f6a041bdf 8816 dovecot-sqlite_2.2.33.2-1ubuntu4.7_armhf.deb df1c05d5f72398a5ee3a2bbaecdb46ed2b8fb2bb8e6c991bc3dee254920b942d 15674 dovecot_2.2.33.2-1ubuntu4.7_armhf.buildinfo b39d82e89385147b518ee683c35065ccb089c5d431ca58ff5415ffeda695992f 1469 dovecot_2.2.33.2-1ubuntu4.7_armhf_translations.tar.gz Files: 2df220628c1c72a4ad15bc76fc0731cf 9770680 debug optional dovecot-core-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb cfbc962b9cd648c5a768ecb219bc6d28 2480536 mail optional dovecot-core_2.2.33.2-1ubuntu4.7_armhf.deb 84ad8d0e59d0ebe5de365df40230e6ee 307552 mail optional dovecot-dev_2.2.33.2-1ubuntu4.7_armhf.deb 22b9b6989dd8d8df5fa1a3fd497b8055 18592 debug optional dovecot-gssapi-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 30491bbd139913fa64b3d6fbedec7e0a 9868 mail optional dovecot-gssapi_2.2.33.2-1ubuntu4.7_armhf.deb 0e1229ac6609c318af8e9f23f0eec5eb 693128 debug optional dovecot-imapd-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb e3e6ee26aa1de86b7472b196d236dc19 133692 mail optional dovecot-imapd_2.2.33.2-1ubuntu4.7_armhf.deb 57e6f1e9603782c85d2dd3580a359722 576540 debug optional dovecot-ldap-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 21e905f1befc0552785d1ac5535a28f8 192380 mail optional dovecot-ldap_2.2.33.2-1ubuntu4.7_armhf.deb e1fc1bcbc353848fe0f6360d65db7bb4 79892 debug optional dovecot-lmtpd-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 4b73cefd86042b421bb8eb435ba8db61 22964 mail optional dovecot-lmtpd_2.2.33.2-1ubuntu4.7_armhf.deb 243a59f9d68dbc8ac912166ee3d61f36 132996 debug optional dovecot-managesieved-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 31c820b353b23d8a6da9cceddf6416e8 37420 mail optional dovecot-managesieved_2.2.33.2-1ubuntu4.7_armhf.deb 90e564ef6ba886924c3cbf4e07b306b0 20000 debug optional dovecot-mysql-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 73eb717cbe86fbd9f5657e6e22b72c54 10436 mail optional dovecot-mysql_2.2.33.2-1ubuntu4.7_armhf.deb 7c5d69828b275fa4d31f4e9dbe880d90 24500 debug optional dovecot-pgsql-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb ad5dbf45c43baf01f0382f5ebcab448e 12984 mail optional dovecot-pgsql_2.2.33.2-1ubuntu4.7_armhf.deb 779157e8c31966107dd5c512ce373fc4 80248 debug optional dovecot-pop3d-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 2e0924051db46df722472bb36244611c 29360 mail optional dovecot-pop3d_2.2.33.2-1ubuntu4.7_armhf.deb 1dce7044e2bba39dc73b483276020303 1613616 debug optional dovecot-sieve-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb afe154cfda2030fd0d28ad17942f2b33 264304 mail optional dovecot-sieve_2.2.33.2-1ubuntu4.7_armhf.deb 6b243b13e7a4e48715fa09b98db11c90 89592 debug optional dovecot-solr-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 21f505b98bac1924fd12a6dd590a15f4 19872 mail optional dovecot-solr_2.2.33.2-1ubuntu4.7_armhf.deb 30a3c25efc0e15d462bad98d4dfe3c26 13120 debug optional dovecot-sqlite-dbgsym_2.2.33.2-1ubuntu4.7_armhf.ddeb 102272230dd6602a54812369c497cf69 8816 mail optional dovecot-sqlite_2.2.33.2-1ubuntu4.7_armhf.deb 7aab30c0446a9c596424a520b33384f7 15674 mail optional dovecot_2.2.33.2-1ubuntu4.7_armhf.buildinfo 6dc24fb2e2bdac2266e16fb259a66b89 1469 raw-translations - dovecot_2.2.33.2-1ubuntu4.7_armhf_translations.tar.gz Original-Maintainer: Dovecot Maintainers