Format: 1.8 Date: Mon, 28 Dec 2020 11:04:43 -0500 Source: dovecot Binary: dovecot-auth-lua dovecot-core dovecot-dev dovecot-gssapi dovecot-imapd dovecot-ldap dovecot-lmtpd dovecot-lucene dovecot-managesieved dovecot-mysql dovecot-pgsql dovecot-pop3d dovecot-sieve dovecot-solr dovecot-sqlite dovecot-submissiond Architecture: arm64 arm64_translations Version: 1:2.3.7.2-1ubuntu3.3 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: dovecot-auth-lua - secure POP3/IMAP server - Lua authentication plugin dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-lucene - secure POP3/IMAP server - Lucene support dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support dovecot-submissiond - secure POP3/IMAP server - mail submission agent Changes: dovecot (1:2.3.7.2-1ubuntu3.3) focal-security; urgency=medium . * SECURITY UPDATE: information disclosure via imap hibernation - debian/patches/CVE-2020-24386-1.patch: escape tag when sending it to imap-hibernate process in src/imap/imap-client-hibernate.c. - debian/patches/CVE-2020-24386-2.patch: add unit test for imap-client-hibernate in src/imap/Makefile.am, src/imap/imap-client-hibernate.c, src/imap/imap-client.h, src/imap/test-imap-client-hibernate.c. - CVE-2020-24386 * SECURITY UPDATE: remote DoS via large number of MIME parts - debian/patches/CVE-2020-25275-1.patch: fix assert-crash when enforcing MIME part limit in src/lib-mail/message-parser.c, src/lib-mail/test-message-parser.c. - debian/patches/CVE-2020-25275-2.patch: don't generate invalid BODYSTRUCTURE when reaching MIME part limit in src/lib-imap/imap-bodystructure.c. - CVE-2020-25275 Checksums-Sha1: 033a560907147f74f3ed76dd45debcea0a2cb20f 51028 dovecot-auth-lua-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 9a624fbb7332ff413ceaaf41ab59007d12202d8f 19472 dovecot-auth-lua_2.3.7.2-1ubuntu3.3_arm64.deb 8f64a49e33e82919e9b41c77e4bd73b8194ed2b4 8652844 dovecot-core-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 8adff2266874cc02f6621a2afc4c1fd354f7bf70 2742184 dovecot-core_2.3.7.2-1ubuntu3.3_arm64.deb f3be50c9e7527ca6ffb7e8342301e0854a3053a2 352352 dovecot-dev_2.3.7.2-1ubuntu3.3_arm64.deb 7ceb9e3faaf4e0adf8c4942b2dfa359388a4e94a 22968 dovecot-gssapi-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb bcb564a469fc191c7b54703c541ce3f592624e5a 10928 dovecot-gssapi_2.3.7.2-1ubuntu3.3_arm64.deb d52a007645d0e7f79b73b6453a94b7539c079017 591040 dovecot-imapd-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb a6d044d8e65c0d9d5e8d453a7231503a2b936c9b 150080 dovecot-imapd_2.3.7.2-1ubuntu3.3_arm64.deb 4e505f5a5d7a2ba12e0e4caa3d7ec7dcee5d33ff 115236 dovecot-ldap-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb c76cf6872d27b48fe06efbbe373975fdd38d2ee9 38508 dovecot-ldap_2.3.7.2-1ubuntu3.3_arm64.deb 20095d2e7c71aca287ae2ed4bd3e3c8c4ff91de8 88000 dovecot-lmtpd-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 4728c6c1844bdd590b396506d325380d4c5acba1 24012 dovecot-lmtpd_2.3.7.2-1ubuntu3.3_arm64.deb 88b412cf91b56aeea9fecf1f1ace293814dc9e11 149860 dovecot-lucene-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 48249473d19112bebbe3194d90895b3eafa106f5 28432 dovecot-lucene_2.3.7.2-1ubuntu3.3_arm64.deb 67b20e17e487283fa9d65d5734612defb99db9dd 119500 dovecot-managesieved-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 9fac44cda38ca4f527be05674016ee34e38341e9 40500 dovecot-managesieved_2.3.7.2-1ubuntu3.3_arm64.deb d7595fa5241be9581dc344c2ef06627aab097c6d 24480 dovecot-mysql-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb e848e9a1ff345c9cd5fb5eee09e46d385d565478 12056 dovecot-mysql_2.3.7.2-1ubuntu3.3_arm64.deb 340698d7d8807356b2e2045e03e22c95f73c8c28 30176 dovecot-pgsql-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb a665d1cdb7184c1510d2e41fca481378406fbefb 14872 dovecot-pgsql_2.3.7.2-1ubuntu3.3_arm64.deb 26c836ecb83e8511d2a2375a9599fd2099f5d9e7 80184 dovecot-pop3d-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 9288dbb2cf21fb83ad3cb2cdfe6546fc91f0bd1c 31576 dovecot-pop3d_2.3.7.2-1ubuntu3.3_arm64.deb 45ef938dea046fd7e79c3e205be1afcac14d8e79 1434224 dovecot-sieve-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 1901e750218b1d6f74e548ebff17affe2e17cb34 302612 dovecot-sieve_2.3.7.2-1ubuntu3.3_arm64.deb 0eab6a95c32069507de1c9e2b956c13a52073623 83684 dovecot-solr-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb dfaa39c2b5debd8e1241c8bcff1c3fbdd2b03691 22488 dovecot-solr_2.3.7.2-1ubuntu3.3_arm64.deb 9f8e81b3057eb7d7a8cde022ce9145013034b00d 17472 dovecot-sqlite-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb f31da04807acf6b8884700cd2812228f12385f8a 10572 dovecot-sqlite_2.3.7.2-1ubuntu3.3_arm64.deb 7f073a501ba9c01a807028f4dc3c2ec0fa663631 162784 dovecot-submissiond-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb c17cc51732038643d8ec8053c30edf2dac73e66a 43944 dovecot-submissiond_2.3.7.2-1ubuntu3.3_arm64.deb 16ae77288f130ec42dc23a5809891299fe0f0b49 17934 dovecot_2.3.7.2-1ubuntu3.3_arm64.buildinfo 4dff1ba2ed03ed273fba70e60b2672035bab92b3 1469 dovecot_2.3.7.2-1ubuntu3.3_arm64_translations.tar.gz Checksums-Sha256: 51d8012447a1342dd821c51998ecdc25990b9f88ea2eabc6f7cb6daa6ee02e3d 51028 dovecot-auth-lua-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 91f2aa32f3b3504c6dd67adb78572558b5d0023c17cef3eb32095e8d8a6fd650 19472 dovecot-auth-lua_2.3.7.2-1ubuntu3.3_arm64.deb 673f76b73703059d0154b66cd6f561196c456c98419100420db5b03ecb31d0fb 8652844 dovecot-core-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb c96ebea9e9c1584a18661d5dee76aaef7096d94211df220a630b68627b28dc58 2742184 dovecot-core_2.3.7.2-1ubuntu3.3_arm64.deb 9df4a496e80cf43d888340ec2cbe121275ae7862a283fc6d5ed3cfc4ff551fbe 352352 dovecot-dev_2.3.7.2-1ubuntu3.3_arm64.deb d9699d5afb6c7515f740be403223bf4b432e8f2cbf74ff368773a58ff3316ed9 22968 dovecot-gssapi-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 8ad8a53663e44ed0a5c5bf8d19892a56d3a12074ce345366ac3dcb5a77dfaa81 10928 dovecot-gssapi_2.3.7.2-1ubuntu3.3_arm64.deb 9cbe15d764799088246cc293dd49e8d359f7db19276a32cbb86f5763ae10546b 591040 dovecot-imapd-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb ff3873449d982d057fac742c072f1952d7a2262934403224fa04282b03acb312 150080 dovecot-imapd_2.3.7.2-1ubuntu3.3_arm64.deb 14cb022faa3347ec5b20ad31e940ffc2e68679412e68d0e4b8107e918d13bc83 115236 dovecot-ldap-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 1adedaac1471a24d6358e2cd78b1712918989d3f2af43ececf5a1280bc5910de 38508 dovecot-ldap_2.3.7.2-1ubuntu3.3_arm64.deb 05c67804a66af80c582b2338130a051dec5fd4cc65b2acef21a0e0f54d9b4d3e 88000 dovecot-lmtpd-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 46f3b43989a17869b14674370544ff4956431146a8b1fb8482e7fa0a2f4fd115 24012 dovecot-lmtpd_2.3.7.2-1ubuntu3.3_arm64.deb 9adf8ba928b6017869bff670755b8a4b6455bf48e9d421b60c2fad26f798cbe1 149860 dovecot-lucene-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 23fb936a2d1ae497ddcecadd0d2e2df86d126a6277b0e32d708084448236c9f2 28432 dovecot-lucene_2.3.7.2-1ubuntu3.3_arm64.deb 8218648fd51d116a0f926eeb173c89fb2ec0d1ebf975279ebe8a2927ae59d5f3 119500 dovecot-managesieved-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 4db953507ed2498ab0e6a18c8ae2a86800f42fafc4ee9312a5f7dac1684ec2f3 40500 dovecot-managesieved_2.3.7.2-1ubuntu3.3_arm64.deb 018a6b9864fa51b93c7ce5a3433fd44bd8dbf04819b28118c407caedd3839ace 24480 dovecot-mysql-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 10c74b3cdc5a1ebe8b9193609de9fbdca52021a79d8b0f2f8c18bd03cd55cbef 12056 dovecot-mysql_2.3.7.2-1ubuntu3.3_arm64.deb 252394787224a1f01702d4853df34d3b94679663b618e2ded6ea072042aea1c4 30176 dovecot-pgsql-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb e66fa7cd5611f2dd8c92e1ac2246ac04dfffc72ce08a34c6f4d75e99dfc8e5ca 14872 dovecot-pgsql_2.3.7.2-1ubuntu3.3_arm64.deb 43103bf976c4887494f108c5b2ac2afe847968052eae076d77de6ed202b259e3 80184 dovecot-pop3d-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 12441ff7ffc173db29ba8c9c5e8d50064fcbbe7372cb48f6246f4ab143aa1b6c 31576 dovecot-pop3d_2.3.7.2-1ubuntu3.3_arm64.deb dbd78915346a36c82b62d6944efb0c1ff78432caebac6b26296e9032a47261c1 1434224 dovecot-sieve-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 77a7f34eb54acb482a5dbd79054951f7b7db974b05da764e9c3740ae05082fea 302612 dovecot-sieve_2.3.7.2-1ubuntu3.3_arm64.deb 45c26da1db668330c952afee9985a8930c43c4e778e78b224e709af55325a691 83684 dovecot-solr-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb eb81abdd119ff73ae0549af2005c7c338de8f898fc8097dc9f8ffdfaeb190cd1 22488 dovecot-solr_2.3.7.2-1ubuntu3.3_arm64.deb af1bd60a4f434de090c0117b56fa5fed3f5cbb1cfa9341923f162ca7a34341bb 17472 dovecot-sqlite-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb b07e32d42d7c17c1c6d8f569ddd9e93dc103c8b79d61d099553502c5d5c63782 10572 dovecot-sqlite_2.3.7.2-1ubuntu3.3_arm64.deb eff9410d57827ef5e5eda8826cff1bb75411cff274a3622073e89d5eb85d2b8d 162784 dovecot-submissiond-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 371d254d7ba1c76d73ef0f4c43c1a25db06a9d69aea0648837a8ab2d22dd3c2d 43944 dovecot-submissiond_2.3.7.2-1ubuntu3.3_arm64.deb 1c28973384eaaadbfb6428653586086dcb139aa3e51616b8cd4b07ee316a81ee 17934 dovecot_2.3.7.2-1ubuntu3.3_arm64.buildinfo ccd73ea578da56cb04a6e746df23846a7adb3bc217066561c95451c65c98ae1d 1469 dovecot_2.3.7.2-1ubuntu3.3_arm64_translations.tar.gz Files: d2ff9cfe662f32dde70b594169686035 51028 debug optional dovecot-auth-lua-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 92ab1807274a8b0b9ae10c4bb10ba447 19472 mail optional dovecot-auth-lua_2.3.7.2-1ubuntu3.3_arm64.deb 83ca6db46ff6ccdf264a14b5a86c19a3 8652844 debug optional dovecot-core-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 6e19ffc09c6e086ff271f8d0cc0dd911 2742184 mail optional dovecot-core_2.3.7.2-1ubuntu3.3_arm64.deb a034b4e4e585db813133f8b3b27f27e0 352352 mail optional dovecot-dev_2.3.7.2-1ubuntu3.3_arm64.deb 2a63ce08a59f7903a2f8ab2be144285d 22968 debug optional dovecot-gssapi-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb ed2d0abff1338c18432cec4c33c1781d 10928 mail optional dovecot-gssapi_2.3.7.2-1ubuntu3.3_arm64.deb 28da959e04560f39a9b03d9737e5342c 591040 debug optional dovecot-imapd-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 5452346f8ab7bbaca8ef4a2fd8550acd 150080 mail optional dovecot-imapd_2.3.7.2-1ubuntu3.3_arm64.deb d0c6b1565c5ef8327da80b0070ba34d7 115236 debug optional dovecot-ldap-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 9a9d5fbdbb93379d14bcd72b3455e746 38508 mail optional dovecot-ldap_2.3.7.2-1ubuntu3.3_arm64.deb d019af81ff7dc5c4a0795427a438770e 88000 debug optional dovecot-lmtpd-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb f19b1f0a1950b23b555bfae2e1d0901d 24012 mail optional dovecot-lmtpd_2.3.7.2-1ubuntu3.3_arm64.deb 7660e3647803c096187257cbdcf1f5ef 149860 debug optional dovecot-lucene-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb aa15abf8cc8a8c7afa0d29fea8c414de 28432 mail optional dovecot-lucene_2.3.7.2-1ubuntu3.3_arm64.deb f094b87527073e0b657249d9feaa368d 119500 debug optional dovecot-managesieved-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 831d7ed4fc4e091ab759872858588796 40500 mail optional dovecot-managesieved_2.3.7.2-1ubuntu3.3_arm64.deb 1409f284ab1a6fd52e20e22f0c9ca406 24480 debug optional dovecot-mysql-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 67d35cff715ec4d0c8b4b35b09a7e591 12056 mail optional dovecot-mysql_2.3.7.2-1ubuntu3.3_arm64.deb e0d141c758a2c0b8d3184c4d166669ad 30176 debug optional dovecot-pgsql-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 083b0d55608a42a1c6d78c82db98fa8b 14872 mail optional dovecot-pgsql_2.3.7.2-1ubuntu3.3_arm64.deb 9155809d60a32bea6b00eb5836f0324a 80184 debug optional dovecot-pop3d-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 489e926805df54f43884232edf352a37 31576 mail optional dovecot-pop3d_2.3.7.2-1ubuntu3.3_arm64.deb 1ec4b4368e3d9734c860644b79842f17 1434224 debug optional dovecot-sieve-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 03876ab325a53f4e7635c1efa46fcc6e 302612 mail optional dovecot-sieve_2.3.7.2-1ubuntu3.3_arm64.deb b61084365183d4e67164e389a404ddee 83684 debug optional dovecot-solr-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb e3d0dbbf4b0404d5fe07cbd6cf2cc955 22488 mail optional dovecot-solr_2.3.7.2-1ubuntu3.3_arm64.deb a0c04d15fd24fdcfab9ded3a7957a0b0 17472 debug optional dovecot-sqlite-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 934fea6a267f04be4816a31002d5d99e 10572 mail optional dovecot-sqlite_2.3.7.2-1ubuntu3.3_arm64.deb f1a8713762c41331bdac133337feaf70 162784 debug optional dovecot-submissiond-dbgsym_2.3.7.2-1ubuntu3.3_arm64.ddeb 58685a775cd0d359e71a44af68002ea4 43944 mail optional dovecot-submissiond_2.3.7.2-1ubuntu3.3_arm64.deb 106638a46e61f655b7e8d2f62fba1f94 17934 mail optional dovecot_2.3.7.2-1ubuntu3.3_arm64.buildinfo 72ad6120f97c55f18cb8bb0937560edb 1469 raw-translations - dovecot_2.3.7.2-1ubuntu3.3_arm64_translations.tar.gz Original-Maintainer: Dovecot Maintainers