Format: 1.8 Date: Mon, 28 Dec 2020 10:59:24 -0500 Source: dovecot Binary: dovecot-auth-lua dovecot-core dovecot-dev dovecot-gssapi dovecot-imapd dovecot-ldap dovecot-lmtpd dovecot-lucene dovecot-managesieved dovecot-mysql dovecot-pgsql dovecot-pop3d dovecot-sieve dovecot-solr dovecot-sqlite dovecot-submissiond Architecture: arm64 arm64_translations Version: 1:2.3.11.3+dfsg1-2ubuntu0.1 Distribution: groovy Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-lucene - secure POP3/IMAP server - Lucene support dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support dovecot-submissiond - secure POP3/IMAP server - mail submission agent Changes: dovecot (1:2.3.11.3+dfsg1-2ubuntu0.1) groovy-security; urgency=medium . * SECURITY UPDATE: information disclosure via imap hibernation - debian/patches/CVE-2020-24386-1.patch: escape tag when sending it to imap-hibernate process in src/imap/imap-client-hibernate.c. - debian/patches/CVE-2020-24386-2.patch: add unit test for imap-client-hibernate in src/imap/Makefile.am, src/imap/imap-client-hibernate.c, src/imap/imap-client.h, src/imap/test-imap-client-hibernate.c. - CVE-2020-24386 * SECURITY UPDATE: remote DoS via large number of MIME parts - debian/patches/CVE-2020-25275-1.patch: fix assert-crash when enforcing MIME part limit in src/lib-mail/message-parser.c, src/lib-mail/test-message-parser.c. - debian/patches/CVE-2020-25275-2.patch: don't generate invalid BODYSTRUCTURE when reaching MIME part limit in src/lib-imap/imap-bodystructure.c. - CVE-2020-25275 Checksums-Sha1: b7356500afabc37ca7f5dfcdd1b1b40c4da86ce8 52484 dovecot-auth-lua-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb d3efe1581e1f935617b8151a810e45538eebf9a4 20420 dovecot-auth-lua_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 7f315e86e11509b19a44fa0bc14a6bd40ea6bd07 8979676 dovecot-core-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb fa5ba3a85fb18e501d1568220e058834218704d3 2819264 dovecot-core_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 7da4727ac7135cc7b290b7ee0c2f824c8661aef3 366164 dovecot-dev_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 908e9deb4bf1dcfd4de01a5ea42d668a0b9b8250 21076 dovecot-gssapi-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 4115ed122dc78c327dcbd236c6af568e818db929 10960 dovecot-gssapi_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb b004e17a7165708f206e07530af90660a9d64d47 616304 dovecot-imapd-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 88a17df249af1872893ababd12fa3207f35d310a 154824 dovecot-imapd_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 2f7ba75e242937da14b7ba7ec7d3bd4e4d0f5c01 115788 dovecot-ldap-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 2401da2d3f74bb1f76af1f05f0c5bc7c9172abcf 38508 dovecot-ldap_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 1b996e0fd88e91a8d7bffcf2c8b7c75ccf584de3 87688 dovecot-lmtpd-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb cc41509f904ab11e9de3a7fec15ab207ae464072 24948 dovecot-lmtpd_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb d4a909ed50938d571580c3e2e28e9463977a2313 149344 dovecot-lucene-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 593686badc9b2bb992a41ebb18b4fea8430068fc 28532 dovecot-lucene_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 5e8b3c5566bb5531e9e24bbb1f39711d9a8a5903 136540 dovecot-managesieved-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb b19864339c5410f46825398075159f643b620667 44716 dovecot-managesieved_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 49d0bb1d700c095e633ff92903a9d06a33d3d4c4 23980 dovecot-mysql-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 0a37d60e25349721b39b6fe7458ad6785b500b9b 12180 dovecot-mysql_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb eff4427aa7c09aa39a1b6a2f7b6179ccaf54b184 29944 dovecot-pgsql-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb a9173060c3b03b0f2ffe5794421f64e4b72a46e8 14948 dovecot-pgsql_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb ba8db24f7572edd831946e7ef0dad1112d8564d6 88104 dovecot-pop3d-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 5e60f7ed976ca67b1b85ac66f7e3daa0c9a424d6 32572 dovecot-pop3d_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb c2e6b51438ff93684b4ab8b768c2295c06685f27 1452216 dovecot-sieve-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 37f2a0bcb8fdbe99b6873c1db928c5c422462835 318680 dovecot-sieve_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 28c2c3af505c46f5adf3b03c22c62460bcf393b9 86420 dovecot-solr-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb c16dd48d995043a1bcc69f62ec1bf83c599551dc 22700 dovecot-solr_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 30909f3d7889e4ed982fd8445905ef84c5c136ce 17296 dovecot-sqlite-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 943a5b798165fe3099fc3bbe8bf03061f9166d74 10588 dovecot-sqlite_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 33e5beceb1913dee709950aeb576d349a52f6fb2 166724 dovecot-submissiond-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb c45e38c2dc9c30f1285b8ea4d5c99abe3942ab2a 45860 dovecot-submissiond_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb df253b6f0c9cf5e6ec3dbb3120eb367239bcb780 18833 dovecot_2.3.11.3+dfsg1-2ubuntu0.1_arm64.buildinfo c40306570ecf6c501b91d10cb86c77b80237ae48 1470 dovecot_2.3.11.3+dfsg1-2ubuntu0.1_arm64_translations.tar.gz Checksums-Sha256: de948464c4ddf81d191bc45b60a33ef06879ed9535a402e970284ab994ffa772 52484 dovecot-auth-lua-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 0b3d5eeba6fb5ebf44c340ba7a25813aa8d24490ad9c147b1b04086e4faaa179 20420 dovecot-auth-lua_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb a848febc6570fe58a93b7fe376adc500d51f695605da395743436e986bbaca8c 8979676 dovecot-core-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 74fbd7f0302d127d443b3df78803983dde82a32708aae9bca394d3867a601635 2819264 dovecot-core_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 040b9527bb76a2e9acd0efd15f475c683cb313573493446dffd5bb823e2ae99f 366164 dovecot-dev_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 0c6626fb6cda8e49e8294b060c98269a2dcc7dab481e06733a5c2a1070ccffe3 21076 dovecot-gssapi-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 6833553c0ec8a581482455bb82086a75afe24a703146e31a86afdce900151342 10960 dovecot-gssapi_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb b64219e27f4490f1e756cd73fbde7bbebc2988e180d2efe00dac896163fdfaf8 616304 dovecot-imapd-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 61eca3deba5d61bbdfffac7e1262ae9657ff9cabbacf86c4b66306921619720a 154824 dovecot-imapd_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 9bbf19a393bc2cc6f82aba937ed32e695216d216732abcc701609455fcb3e55f 115788 dovecot-ldap-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 3d6fdf57cad7042d92b8673d1262ad941d0b1cf4ce35ccbd84f568c14afe21f2 38508 dovecot-ldap_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb d6c542f23e5a02c2e5a4ecaf41bc13a8c059f5cf665791ecb17864603ef93505 87688 dovecot-lmtpd-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb be85b3101e573aa39453883ca100b1f27079da870c0d5a17583ee0111a89d8b8 24948 dovecot-lmtpd_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 625ba47b7616f9c23cebb7f460b0349973f531db82328b3aa363d8eb2caffbe9 149344 dovecot-lucene-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb bdcc7af9c3e7144f59678839a953a982d7401e516d50b3bd171a4c896371c4c7 28532 dovecot-lucene_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb bc40375d833d3ee7030eb8f352f216d5f471238941962536571b50aed631171e 136540 dovecot-managesieved-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb f542252c9b77c037644314e615fb81ee072a36f1eb7cc431b22afab720e107fa 44716 dovecot-managesieved_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb b055f2f447e444ac660537ced616a733165193eed50eacec893595488dbd7545 23980 dovecot-mysql-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 83aa5341b203c4764a416907af3672e9bfd8acd0bc22b0ee63333cc8207c9f8f 12180 dovecot-mysql_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 287c36fd2673af8efffa76ef093cffdb1e61fa35480ec866dcb3c2c678e028d5 29944 dovecot-pgsql-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb afc7171aa6edbb5793f99cbeed1706b86ce9797ade7da4c1b14dba583cb2f49b 14948 dovecot-pgsql_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb da254e6f0d949337d76cb5dc67a10f5d5bc6a8a232c5c00763c2b0fcadf39f79 88104 dovecot-pop3d-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 506b65246be83a4fc286dc836efa24b90f2f0598c8a2e739d712e658cce54ac9 32572 dovecot-pop3d_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 7c10bef593188ddb5fb1799f042d55b47eb25fab79a843c6ae9eef19604021d1 1452216 dovecot-sieve-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb b5a6ee947a5791fd541121f345c88b6279e2107afb220ef1e90cf469f285235a 318680 dovecot-sieve_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 12a31282055fb3bc575ac63020451d03a12efcf869a568aadb05a6e22a441599 86420 dovecot-solr-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb d771d2798269851a03862bfde53e26f238183ac98f5263ed38e321c2a4bb99e1 22700 dovecot-solr_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb ad694074abe8585867c22addd145c6062066a5863b68730d5a98a3f58855eda7 17296 dovecot-sqlite-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 3ab2bbeb0c4ceb9a8ef25e12101492dfdf6a7d5d9c4079b7b1186e16b493492d 10588 dovecot-sqlite_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb ad686dd936901b9b735f79cf06eccaba71ff81c75d34fb91a1e0a50d05e81fa9 166724 dovecot-submissiond-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 872d100a4c2c738f73d1598c0152256e0683018d73dd6ab1c1cd16ced3e07b59 45860 dovecot-submissiond_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb e54b0c4304ae5cb78e734d7ebb1666501849c0682b024f7d528c13fe32e83b6c 18833 dovecot_2.3.11.3+dfsg1-2ubuntu0.1_arm64.buildinfo 04bc9f29b8a9aa005625f0b685ad70b60d0fad4ca09656b5b194a6a69bd18fac 1470 dovecot_2.3.11.3+dfsg1-2ubuntu0.1_arm64_translations.tar.gz Files: 01dae393378f38811e7fbb78457717d1 52484 debug optional dovecot-auth-lua-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb d0843529c7a496166a30161df3af4a50 20420 mail optional dovecot-auth-lua_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 566cd184ec96377fcbfef558e0c1b0ae 8979676 debug optional dovecot-core-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 5455277ede69d59c782f4b1332f823bc 2819264 mail optional dovecot-core_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb a4112abc4adc092359b17efbee3c69c1 366164 mail optional dovecot-dev_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb a3f98b9b1f428a7b3307d1283f8036f4 21076 debug optional dovecot-gssapi-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb fdc241be2f5aaf41b5b0bf10bfbab36e 10960 mail optional dovecot-gssapi_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 3c53c4d6d0a9f6d3e2942d5402548d44 616304 debug optional dovecot-imapd-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 7dd3376562c29958337254bf019ed097 154824 mail optional dovecot-imapd_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 9ec452e74f6388fb93600bf0d9a869be 115788 debug optional dovecot-ldap-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 30012346db7530b5e11135fcf5ac53df 38508 mail optional dovecot-ldap_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 1425726b8a64e1f615ff26d55910d4a1 87688 debug optional dovecot-lmtpd-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb f6331ea7caa2c7528c73b8b56d8219e8 24948 mail optional dovecot-lmtpd_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 72051588c0babb88c22d3297db92aedb 149344 debug optional dovecot-lucene-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 9c791fe4672572a028f4f12a549548c1 28532 mail optional dovecot-lucene_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb d9f198ae93244bc0063814bc04d18f36 136540 debug optional dovecot-managesieved-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 37bf4c8788083a85ba082f3b8a8e9e70 44716 mail optional dovecot-managesieved_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb efd688331380e097f5e2adf70caff7cf 23980 debug optional dovecot-mysql-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 999e3b73439f64532ea2f0ea1df6fae5 12180 mail optional dovecot-mysql_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 98b58e529af1a925868ce5a20fbd1629 29944 debug optional dovecot-pgsql-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 3ac7d1bcf878f789adfb7314b140d1bb 14948 mail optional dovecot-pgsql_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 272c0b2988192b80ac290d196fb8e106 88104 debug optional dovecot-pop3d-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb ace4d19cb581f0aaa45b71008345d770 32572 mail optional dovecot-pop3d_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb e4200266932ff7bb90c7ae308d1ee67b 1452216 debug optional dovecot-sieve-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 4947b2c1fddcf2349e797d5975c7521e 318680 mail optional dovecot-sieve_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb be00b8fca2097fddbf441b80ac960579 86420 debug optional dovecot-solr-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb d43d4392389656e8c02416650e290cc0 22700 mail optional dovecot-solr_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 72ed1112833649e6a24aa49f3eeb4b0e 17296 debug optional dovecot-sqlite-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb 197818e0b6863a0dc24fd082428236c2 10588 mail optional dovecot-sqlite_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 1eb79a39b947de253231a3027087b275 166724 debug optional dovecot-submissiond-dbgsym_2.3.11.3+dfsg1-2ubuntu0.1_arm64.ddeb c8cfb598ee9a88643ecb0d277073e197 45860 mail optional dovecot-submissiond_2.3.11.3+dfsg1-2ubuntu0.1_arm64.deb 54cb4243728748c7dcfe8d4c9d6f90cb 18833 mail optional dovecot_2.3.11.3+dfsg1-2ubuntu0.1_arm64.buildinfo 6e239ee46f92c3a2429528e638718560 1470 raw-translations - dovecot_2.3.11.3+dfsg1-2ubuntu0.1_arm64_translations.tar.gz Original-Maintainer: Dovecot Maintainers