Format: 1.8 Date: Mon, 28 Jan 2019 08:52:28 -0500 Source: dovecot Binary: dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-solr mail-stack-delivery Architecture: amd64 amd64_translations all Version: 1:2.2.33.2-1ubuntu4.2 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support mail-stack-delivery - mail server delivery agent stack provided by Ubuntu server team Changes: dovecot (1:2.2.33.2-1ubuntu4.2) bionic-security; urgency=medium . * SECURITY UPDATE: incorrect client certificate validation - debian/patches/CVE-2019-3814-1.patch: do not import empty certificate username in src/auth/auth-request.c. - debian/patches/CVE-2019-3814-2.patch: fail authentication if certificate username was unexpectedly missing in src/auth/auth-request-handler.c. - debian/patches/CVE-2019-3814-3.patch: ensure we get username from certificate in src/login-common/sasl-server.c. - CVE-2019-3814 Checksums-Sha1: ae47136017c47ed0ab232c1219b5c40107e1323e 10008448 dovecot-core-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb d70c3fcb12d2dac8804bf927e164b35ea6be498c 2738536 dovecot-core_2.2.33.2-1ubuntu4.2_amd64.deb a41492b2a4397029e13b11ca3eb090303a6e4c92 308396 dovecot-dev_2.2.33.2-1ubuntu4.2_amd64.deb ec52d16505f1799262aadb47580634adc01ddf40 18656 dovecot-gssapi-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb bf66ed5bf40f3e586ad2b1e547d77ce07332c21d 10632 dovecot-gssapi_2.2.33.2-1ubuntu4.2_amd64.deb c991b3849b4f07496569529af30e2346b868c1e6 702884 dovecot-imapd-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 665f3c02270996ad3f4beafbe2bd073cb6b27173 153088 dovecot-imapd_2.2.33.2-1ubuntu4.2_amd64.deb 60c0bad6583b40242967091a6e9157fa4cd601d7 591136 dovecot-ldap-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb fb65e84df0c061ff0902f01aa6a57f8e39d18098 218808 dovecot-ldap_2.2.33.2-1ubuntu4.2_amd64.deb f898335c2231ccfdc3988eca7158c88cf2b69754 83560 dovecot-lmtpd-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb cfa00a893f0695ffbc61296edee97ddc69c1e23c 25236 dovecot-lmtpd_2.2.33.2-1ubuntu4.2_amd64.deb 8193cb844d4a3359ff8119b43c88e9401c48a8be 134204 dovecot-managesieved-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 0af9f8b43b2ace898f713fc8790516f196584e74 41632 dovecot-managesieved_2.2.33.2-1ubuntu4.2_amd64.deb fab15b53756b3267ce62b169770367b6c83ed08d 19768 dovecot-mysql-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 7a462e32585ba44bef1a2ce25af5b350f7c5aff6 11540 dovecot-mysql_2.2.33.2-1ubuntu4.2_amd64.deb 7789f2b3473fa0675ef33447f5ceea454c63847c 24336 dovecot-pgsql-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 686504887e0337d106e947d5fb36552de8cc73b6 14496 dovecot-pgsql_2.2.33.2-1ubuntu4.2_amd64.deb 47dc3f5d69c57084e18c92e911c2f6d3f295f539 80544 dovecot-pop3d-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 15fa0d75b8b3ee05765e84f2694e2ef9fbc0fef0 32192 dovecot-pop3d_2.2.33.2-1ubuntu4.2_amd64.deb 1fa1ba510da5cc78dd3cb3cbfe4696d7e5e664e3 1644632 dovecot-sieve-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 55ce477d7a78d1f520ccc29cf4bc66a54503baf6 310880 dovecot-sieve_2.2.33.2-1ubuntu4.2_amd64.deb 04e21ed628e98eb2d22df832a31282b76a0b2ad0 90732 dovecot-solr-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb ff133e762a9ae4e1957e0be93d8f098379f342ef 22436 dovecot-solr_2.2.33.2-1ubuntu4.2_amd64.deb 15c8cd97457a023b781ba2819279e7e7d5838129 12764 dovecot-sqlite-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb e55b4cdfbe74be1ecbd63f6eff63dfbc1ccc0b36 9604 dovecot-sqlite_2.2.33.2-1ubuntu4.2_amd64.deb bf3b8905dd330052f0cce5b894d1f871230c5004 15869 dovecot_2.2.33.2-1ubuntu4.2_amd64.buildinfo d19853a10270eb0592feb84125a9360aea20aac9 1469 dovecot_2.2.33.2-1ubuntu4.2_amd64_translations.tar.gz ffce4f2243993e0602cc8539fb2dd463034390bd 10404 mail-stack-delivery_2.2.33.2-1ubuntu4.2_all.deb Checksums-Sha256: a22ba3e14aaca20596a5b4096c264bac0dafac020dd91093f12251d8e127eaf6 10008448 dovecot-core-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 527bf1c026bff365d131e519348532816e6a0f3f15bc82f96cdf72abad187082 2738536 dovecot-core_2.2.33.2-1ubuntu4.2_amd64.deb 49e574a795b08b5d2287ee056cc4dfcbe23c757e4e6475f21cf2c5b3091c5cad 308396 dovecot-dev_2.2.33.2-1ubuntu4.2_amd64.deb bdace0f5b062396b961429b55e8b3ca75fab7d172ee93c5f3fb0b3fbf045c93d 18656 dovecot-gssapi-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 04564e58cf214634f44d5af43fbf781436b4c9b21e7b45179a0c4c44bf52c485 10632 dovecot-gssapi_2.2.33.2-1ubuntu4.2_amd64.deb 4740bf2da74d9857b79d01e2f57a78389fc68e57eaa298be3709c75d3875a4ee 702884 dovecot-imapd-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 32966c17846ce3f525364823bdfa4e7d93b5bc4227d17cb7e53807090aef69ca 153088 dovecot-imapd_2.2.33.2-1ubuntu4.2_amd64.deb e760cecdf79e170998afc6590f3134cea7db795d6382af4f9e4ce4bf7540652f 591136 dovecot-ldap-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 963edecb930979ebe7cef9057e2c88fb6be9e21d9de1a51352bf599fb4dafe5f 218808 dovecot-ldap_2.2.33.2-1ubuntu4.2_amd64.deb bf7f99c24682f80a3f9a5ea46e5b79303e0eb42ac86118c920cfd75239d29544 83560 dovecot-lmtpd-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 243e4208f2ec33ccf6c36977732545c93a0454df8183ec3bb981eb97f8476f12 25236 dovecot-lmtpd_2.2.33.2-1ubuntu4.2_amd64.deb ad75422900563d2445accdc038987de3e75f7ccbe8a5911f31c445a4f30b09a2 134204 dovecot-managesieved-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb fba78e0aa37dd8bc74a7ff20696b683b4dc6952366bee85f555a3c51df6094bc 41632 dovecot-managesieved_2.2.33.2-1ubuntu4.2_amd64.deb 2d6d18c52422591c14da3f527a4d774f53a966d96d2d85a687a9d25412d8cf3e 19768 dovecot-mysql-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb fbf054adbb743be63c8e327f40651d2ea4d15b97b8ba2f2f78a603828fd0580b 11540 dovecot-mysql_2.2.33.2-1ubuntu4.2_amd64.deb 6ea47817ba52b2d58e3ebfd88474cb9f7d9391bf3b7d7ed8eeff1c75373e4d6b 24336 dovecot-pgsql-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb ab25d072302810b3a079286d5487bc6be7f9cc07b59c86dd2323be8af152f53a 14496 dovecot-pgsql_2.2.33.2-1ubuntu4.2_amd64.deb 38baaca88cdf536cf186eb2d2939c9835f46b140142967a626bce45e90141f08 80544 dovecot-pop3d-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb d0129dd0819c942c47154c4c5a8a106d556cba0d01343f6be21c5cba771c3e13 32192 dovecot-pop3d_2.2.33.2-1ubuntu4.2_amd64.deb fbf351ce7b04cf6d0898450509656d8ea20509c13ad7ed53d4b5855d559f0117 1644632 dovecot-sieve-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 15235df7e450572ed0b6551ab92119a939f31b5e10b95c8710a341a7105643d0 310880 dovecot-sieve_2.2.33.2-1ubuntu4.2_amd64.deb 9511b6123630495c94add64a851da45e55325c734ac13e1f37d2f9ca6f2b7f0b 90732 dovecot-solr-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 2b27af07eef7b0d99ba1e2413d37db4944cb23ee99e136041dd28605c331fb91 22436 dovecot-solr_2.2.33.2-1ubuntu4.2_amd64.deb d067759815ba2e44005a26b5a1f8b1ecbb6842beec600dc65a2960d009cff267 12764 dovecot-sqlite-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb b2b03b22cd4a29227e075ff21f727d6594ca0b974f68a2303d5431703b33a510 9604 dovecot-sqlite_2.2.33.2-1ubuntu4.2_amd64.deb eba3fd6b948164afd35fb02f2188ad0fba0addbcc7f6cebcd14dbeddc0d3451e 15869 dovecot_2.2.33.2-1ubuntu4.2_amd64.buildinfo ce346362d7b3b03e3491441fdd7d4c311c0d0f17a0eb2af1401b5bfb26995f9b 1469 dovecot_2.2.33.2-1ubuntu4.2_amd64_translations.tar.gz f1978edae4a7273b467f1b553083c721c9fde3b230bd3c3f3058a056076082ce 10404 mail-stack-delivery_2.2.33.2-1ubuntu4.2_all.deb Files: 3c8f52f978c0accd4e1261f2f2bbb0d0 10008448 debug optional dovecot-core-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 1300545c008884ed04d677f6efc82f7e 2738536 mail optional dovecot-core_2.2.33.2-1ubuntu4.2_amd64.deb 2ee609b229421e8f0e418017c2e6d4c1 308396 mail optional dovecot-dev_2.2.33.2-1ubuntu4.2_amd64.deb 1a7f57a946ba3975234f2a180eaf3d20 18656 debug optional dovecot-gssapi-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb a021a9b3ae66fbacc2b7708a4f0188bf 10632 mail optional dovecot-gssapi_2.2.33.2-1ubuntu4.2_amd64.deb 2bf9f61c8014a4804991b233ce07422a 702884 debug optional dovecot-imapd-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb ba74e0f4e03b2447c98b3e9744cdc127 153088 mail optional dovecot-imapd_2.2.33.2-1ubuntu4.2_amd64.deb 0e46bc7190d8076e6720c3c85d269375 591136 debug optional dovecot-ldap-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 33f6f53cd758d57c659b545c4360b5ff 218808 mail optional dovecot-ldap_2.2.33.2-1ubuntu4.2_amd64.deb 4506ea0a5c831f0495c7153b17b2a67a 83560 debug optional dovecot-lmtpd-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 4f9e6e9dbed04eb781e020f6d064f515 25236 mail optional dovecot-lmtpd_2.2.33.2-1ubuntu4.2_amd64.deb 9b135620d57bf213385d9ff85172ea49 134204 debug optional dovecot-managesieved-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb d3c722ce448955e5d2d2d81e031b5843 41632 mail optional dovecot-managesieved_2.2.33.2-1ubuntu4.2_amd64.deb 40d5e32e282126220a7ab2764cd092a1 19768 debug optional dovecot-mysql-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 381ba3b5d455abc8be076918bcb70f1f 11540 mail optional dovecot-mysql_2.2.33.2-1ubuntu4.2_amd64.deb 2d961b4c8d6f8d0e81eb464c20890b77 24336 debug optional dovecot-pgsql-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 57d5538d648e20c2462fd74f994bebcd 14496 mail optional dovecot-pgsql_2.2.33.2-1ubuntu4.2_amd64.deb 5b49721c07de3a464205a014fb4aa93c 80544 debug optional dovecot-pop3d-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 79cf81368ab70b761664234d71af4f55 32192 mail optional dovecot-pop3d_2.2.33.2-1ubuntu4.2_amd64.deb aa586d188b22b018f4bda8b2fbcd2a76 1644632 debug optional dovecot-sieve-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 50296dc741c763b1a838dad902655dd3 310880 mail optional dovecot-sieve_2.2.33.2-1ubuntu4.2_amd64.deb 4ab46675b7aeb9589cc068b0f9130e58 90732 debug optional dovecot-solr-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb 4f442f28e9be2bb41af473a1c8609e83 22436 mail optional dovecot-solr_2.2.33.2-1ubuntu4.2_amd64.deb 7fe175700be18dcb7e4948f3a145e29d 12764 debug optional dovecot-sqlite-dbgsym_2.2.33.2-1ubuntu4.2_amd64.ddeb e225d176812025f7f504422c1f13f942 9604 mail optional dovecot-sqlite_2.2.33.2-1ubuntu4.2_amd64.deb 709949e296a885417d970164f13e40c0 15869 mail optional dovecot_2.2.33.2-1ubuntu4.2_amd64.buildinfo 178826dcad944fa42ffe5bf43889ca05 1469 raw-translations - dovecot_2.2.33.2-1ubuntu4.2_amd64_translations.tar.gz a6d5e01311c27ff99ad125005d9eb0bf 10404 mail optional mail-stack-delivery_2.2.33.2-1ubuntu4.2_all.deb Original-Maintainer: Dovecot Maintainers