dovecot 1:2.3.11.3+dfsg1-2ubuntu0.2 source package in Ubuntu

Changelog

dovecot (1:2.3.11.3+dfsg1-2ubuntu0.2) groovy-security; urgency=medium

  * SECURITY UPDATE: incorrectly escapes kid and azp fields in JWT tokens
    - debian/patches/CVE-2021-29157.patch: improve escaping in
      src/lib-dict-extra/dict-fs.c, src/lib-oauth2/oauth2-jwt.c,
      src/lib-oauth2/test-oauth2-jwt.c.
    - CVE-2021-29157
  * SECURITY UPDATE: plaintext command injection before STARTTLS
    - debian/patches/CVE-2021-33515.patch: properly handle command queue in
      src/lib-smtp/smtp-server-cmd-starttls.c,
      src/lib-smtp/smtp-server-connection.c.
    - CVE-2021-33515

 -- Marc Deslauriers <email address hidden>  Wed, 16 Jun 2021 09:09:18 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Groovy
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
mail
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
dovecot_2.3.11.3+dfsg1.orig-pigeonhole.tar.gz 1.5 MiB 73ffc0cff40b768f8dcf772957b58f3fe8b4a740ffe6fb6e9e66093aec41bc1c
dovecot_2.3.11.3+dfsg1.orig.tar.gz 7.0 MiB d3d9ea9010277f57eb5b9f4166a5d2ba539b172bd6d5a2b2529a6db524baafdc
dovecot_2.3.11.3+dfsg1.orig.tar.gz.asc 866 bytes fd73852972032af5e9b25992d94736d18460938ed21b9b6b10c9f77b5468ff89
dovecot_2.3.11.3+dfsg1-2ubuntu0.2.debian.tar.xz 66.3 KiB b812de595c5c770fba56565a40302b1b570a61ba33f6ef2608b58a38d92187f8
dovecot_2.3.11.3+dfsg1-2ubuntu0.2.dsc 4.0 KiB 2b791c1fa6a1fc923be50f242bc42bb7f4dc2e5fa825d25b34dfdb0d6a7bebc2

View changes file

Binary packages built by this source

dovecot-auth-lua: No summary available for dovecot-auth-lua in ubuntu groovy.

No description available for dovecot-auth-lua in ubuntu groovy.

dovecot-auth-lua-dbgsym: No summary available for dovecot-auth-lua-dbgsym in ubuntu groovy.

No description available for dovecot-auth-lua-dbgsym in ubuntu groovy.

dovecot-core: No summary available for dovecot-core in ubuntu groovy.

No description available for dovecot-core in ubuntu groovy.

dovecot-core-dbgsym: No summary available for dovecot-core-dbgsym in ubuntu groovy.

No description available for dovecot-core-dbgsym in ubuntu groovy.

dovecot-dev: No summary available for dovecot-dev in ubuntu groovy.

No description available for dovecot-dev in ubuntu groovy.

dovecot-gssapi: No summary available for dovecot-gssapi in ubuntu groovy.

No description available for dovecot-gssapi in ubuntu groovy.

dovecot-gssapi-dbgsym: No summary available for dovecot-gssapi-dbgsym in ubuntu groovy.

No description available for dovecot-gssapi-dbgsym in ubuntu groovy.

dovecot-imapd: No summary available for dovecot-imapd in ubuntu groovy.

No description available for dovecot-imapd in ubuntu groovy.

dovecot-imapd-dbgsym: No summary available for dovecot-imapd-dbgsym in ubuntu groovy.

No description available for dovecot-imapd-dbgsym in ubuntu groovy.

dovecot-ldap: No summary available for dovecot-ldap in ubuntu groovy.

No description available for dovecot-ldap in ubuntu groovy.

dovecot-ldap-dbgsym: No summary available for dovecot-ldap-dbgsym in ubuntu groovy.

No description available for dovecot-ldap-dbgsym in ubuntu groovy.

dovecot-lmtpd: No summary available for dovecot-lmtpd in ubuntu groovy.

No description available for dovecot-lmtpd in ubuntu groovy.

dovecot-lmtpd-dbgsym: No summary available for dovecot-lmtpd-dbgsym in ubuntu groovy.

No description available for dovecot-lmtpd-dbgsym in ubuntu groovy.

dovecot-lucene: No summary available for dovecot-lucene in ubuntu groovy.

No description available for dovecot-lucene in ubuntu groovy.

dovecot-lucene-dbgsym: No summary available for dovecot-lucene-dbgsym in ubuntu groovy.

No description available for dovecot-lucene-dbgsym in ubuntu groovy.

dovecot-managesieved: No summary available for dovecot-managesieved in ubuntu groovy.

No description available for dovecot-managesieved in ubuntu groovy.

dovecot-managesieved-dbgsym: No summary available for dovecot-managesieved-dbgsym in ubuntu groovy.

No description available for dovecot-managesieved-dbgsym in ubuntu groovy.

dovecot-mysql: No summary available for dovecot-mysql in ubuntu groovy.

No description available for dovecot-mysql in ubuntu groovy.

dovecot-mysql-dbgsym: No summary available for dovecot-mysql-dbgsym in ubuntu groovy.

No description available for dovecot-mysql-dbgsym in ubuntu groovy.

dovecot-pgsql: No summary available for dovecot-pgsql in ubuntu groovy.

No description available for dovecot-pgsql in ubuntu groovy.

dovecot-pgsql-dbgsym: No summary available for dovecot-pgsql-dbgsym in ubuntu groovy.

No description available for dovecot-pgsql-dbgsym in ubuntu groovy.

dovecot-pop3d: No summary available for dovecot-pop3d in ubuntu groovy.

No description available for dovecot-pop3d in ubuntu groovy.

dovecot-pop3d-dbgsym: No summary available for dovecot-pop3d-dbgsym in ubuntu groovy.

No description available for dovecot-pop3d-dbgsym in ubuntu groovy.

dovecot-sieve: No summary available for dovecot-sieve in ubuntu groovy.

No description available for dovecot-sieve in ubuntu groovy.

dovecot-sieve-dbgsym: No summary available for dovecot-sieve-dbgsym in ubuntu groovy.

No description available for dovecot-sieve-dbgsym in ubuntu groovy.

dovecot-solr: No summary available for dovecot-solr in ubuntu groovy.

No description available for dovecot-solr in ubuntu groovy.

dovecot-solr-dbgsym: No summary available for dovecot-solr-dbgsym in ubuntu groovy.

No description available for dovecot-solr-dbgsym in ubuntu groovy.

dovecot-sqlite: No summary available for dovecot-sqlite in ubuntu groovy.

No description available for dovecot-sqlite in ubuntu groovy.

dovecot-sqlite-dbgsym: No summary available for dovecot-sqlite-dbgsym in ubuntu groovy.

No description available for dovecot-sqlite-dbgsym in ubuntu groovy.

dovecot-submissiond: No summary available for dovecot-submissiond in ubuntu groovy.

No description available for dovecot-submissiond in ubuntu groovy.

dovecot-submissiond-dbgsym: No summary available for dovecot-submissiond-dbgsym in ubuntu groovy.

No description available for dovecot-submissiond-dbgsym in ubuntu groovy.