Format: 1.8 Date: Mon, 28 Jan 2019 08:52:28 -0500 Source: dovecot Binary: dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-solr mail-stack-delivery Architecture: arm64 arm64_translations Version: 1:2.2.33.2-1ubuntu4.2 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support mail-stack-delivery - mail server delivery agent stack provided by Ubuntu server team Changes: dovecot (1:2.2.33.2-1ubuntu4.2) bionic-security; urgency=medium . * SECURITY UPDATE: incorrect client certificate validation - debian/patches/CVE-2019-3814-1.patch: do not import empty certificate username in src/auth/auth-request.c. - debian/patches/CVE-2019-3814-2.patch: fail authentication if certificate username was unexpectedly missing in src/auth/auth-request-handler.c. - debian/patches/CVE-2019-3814-3.patch: ensure we get username from certificate in src/login-common/sasl-server.c. - CVE-2019-3814 Checksums-Sha1: 4f0b53a06e45805d0a0e1a98cc634c630ae358bc 10259368 dovecot-core-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb d9576dc1d927ad6643e772cac010815a84e90b0c 2446624 dovecot-core_2.2.33.2-1ubuntu4.2_arm64.deb e97cf439aa18f17416d8fc4331183912a6c7282b 308392 dovecot-dev_2.2.33.2-1ubuntu4.2_arm64.deb 4483a098be93d87bcc97d83bb574d91e3bbf9f7b 19252 dovecot-gssapi-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 1fcdd17c9d5a2e85b5e259eb150b8e3c816d84b6 10076 dovecot-gssapi_2.2.33.2-1ubuntu4.2_arm64.deb 34a772fd5fda2ba5d80060440e1fcfcd445d9df4 720672 dovecot-imapd-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb feb4f030381fcf4eee13111462f3e4943539b461 132808 dovecot-imapd_2.2.33.2-1ubuntu4.2_arm64.deb b82a536058f5be26ae5cf0f65e53260e95d97ad1 611684 dovecot-ldap-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb d1dab060b13f70557aff49757c9c3d3680611c1e 185256 dovecot-ldap_2.2.33.2-1ubuntu4.2_arm64.deb 74ae567813d0d6e678f6b866ce79d60473fe621e 85292 dovecot-lmtpd-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 2cb441a0b415a28880ba1990b95250d15ae0a8bc 23056 dovecot-lmtpd_2.2.33.2-1ubuntu4.2_arm64.deb 94c31402f6e92573c85ccaa61033c415aae3182e 139396 dovecot-managesieved-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb cdf2c934e4820178b5d15aaab6e84b9343d9b38e 37216 dovecot-managesieved_2.2.33.2-1ubuntu4.2_arm64.deb e49d9ca1ae086aa5d2f89a58b8e5ca782741c67f 20848 dovecot-mysql-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 7fc5d5d4bea5aee328ede32bb8847c79aee40ed2 10680 dovecot-mysql_2.2.33.2-1ubuntu4.2_arm64.deb 8d9fa5f17a31f03f78e8ca2a1a1157fb86202f57 25368 dovecot-pgsql-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb acd35ce286d8998801cfe5bc5e9136d3abd7ab7e 12824 dovecot-pgsql_2.2.33.2-1ubuntu4.2_arm64.deb 854c5db1cae62c4df68efdd38813703b94666d88 83384 dovecot-pop3d-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 98fa193aa4b581ce0091147f45c4bd65c4e33839 29216 dovecot-pop3d_2.2.33.2-1ubuntu4.2_arm64.deb a8e93f6fb7c433d56d81f64bd865e452ba592d72 1682756 dovecot-sieve-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb acb1ef7905a9c321291e05ea1e3e484b598d7977 262880 dovecot-sieve_2.2.33.2-1ubuntu4.2_arm64.deb 08dc05ec99b3afe2ba383dca0d3bdaf71aeb56e5 92996 dovecot-solr-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 33ce380baacd64ad2840c9da4eb76324cc68f5ee 20072 dovecot-solr_2.2.33.2-1ubuntu4.2_arm64.deb 445a5e117a59d3a4dd4cee6ba6bc6017c1343b3b 13396 dovecot-sqlite-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 79c38d870fd2905513910c6fa1ab2607c328d31e 8940 dovecot-sqlite_2.2.33.2-1ubuntu4.2_arm64.deb 07367bf95f87117a004c336be47781996d585ab8 15455 dovecot_2.2.33.2-1ubuntu4.2_arm64.buildinfo 2310d8aea557ced8c412105a3a611059fd0107ed 1467 dovecot_2.2.33.2-1ubuntu4.2_arm64_translations.tar.gz Checksums-Sha256: 27925de03b262634ace3858d4c45d6c51c905c44aeef239bfe4a4f911d958b25 10259368 dovecot-core-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 90ca1398749e4bed42a642a9a2c86f412e3a220618698ce67d864ee50a51f26b 2446624 dovecot-core_2.2.33.2-1ubuntu4.2_arm64.deb 182b13229dfca6febf8fadc15042efd3a3f7ed01354b121086796783b69ef014 308392 dovecot-dev_2.2.33.2-1ubuntu4.2_arm64.deb 865d61e701fca15fef3259ee596107aa11594212d9cdb196a5686a6c20c5aba0 19252 dovecot-gssapi-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 95c70c36b902e1b1890d34e3253483857b357f5413fe1577372ea3c8acade286 10076 dovecot-gssapi_2.2.33.2-1ubuntu4.2_arm64.deb 113bbb1cf8684ca740742329db9ecc55362c3bc5103ee3cdc0ff951613da1473 720672 dovecot-imapd-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 431f0889dd66f20a47fe35c97850f189b4d4eedd0cea4e4e4368855727f0525d 132808 dovecot-imapd_2.2.33.2-1ubuntu4.2_arm64.deb 9d38dd22494b72bc352cc2e87e1e5ad8676a2f3f4ac4276cc1e6baf88060065c 611684 dovecot-ldap-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 8ee7b4ce3eacbb9f912a54e7b13ef484608129e921194c95c5ed4a7c5705325d 185256 dovecot-ldap_2.2.33.2-1ubuntu4.2_arm64.deb 9357d5bb19fa725ca6ca1466e63543ec5b60b2ed4a3d2861eeb06b90c9de0f8a 85292 dovecot-lmtpd-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 66996cf7b3510ed92213a9d82c8591e321479d192517b23f2d14d7e006791bb4 23056 dovecot-lmtpd_2.2.33.2-1ubuntu4.2_arm64.deb 6868b87b0fdfe0b0f026c6b42d468206b67f47df7fc45d35967391bf6a7db5c2 139396 dovecot-managesieved-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 2eb4f0772ed54c9e48b1e0b14a467ece34a021cd2db7710e2b6a1caeeda8296f 37216 dovecot-managesieved_2.2.33.2-1ubuntu4.2_arm64.deb 68607c5a3c9dbfb397ea12cb054edeb97d2a3f2f521ae5d2e04b0536eb0536cc 20848 dovecot-mysql-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 031653687cadb160e62e767658d007039b88aa4f3c3615db3575edfb729a00c5 10680 dovecot-mysql_2.2.33.2-1ubuntu4.2_arm64.deb 12d092a17391cf4b66797b3b47398fe13446e2d549b4801d763ebd9a37be83f7 25368 dovecot-pgsql-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 1ff9671a531f33c8ecacd3f8a0eda11d0f0e66d526adc3f0c188c0f933ed35e8 12824 dovecot-pgsql_2.2.33.2-1ubuntu4.2_arm64.deb 7d3accd99c3998e4ac5fc8590abae0a48b66c2a7feb4dbb8cdbf42228643bef3 83384 dovecot-pop3d-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 4ec1284f8660ee9573984ba7678af46f595aacea448c38aa7aade48b0b9204ab 29216 dovecot-pop3d_2.2.33.2-1ubuntu4.2_arm64.deb 44a1fa6d30299b4dcd00bd53b0c212eb9eaa4c8be61fb3213d7c194dd5d3a872 1682756 dovecot-sieve-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 710e150c201d4d54c92105ad29b29d79bcd85ee5c2a59707ed2677b1f23ecb34 262880 dovecot-sieve_2.2.33.2-1ubuntu4.2_arm64.deb da502a3077873ee196e185d7be0b01796664cf2b7bdbb59294ebb9b8ef6dcbd3 92996 dovecot-solr-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb ac4c376a8952c6f84ce64c8a8ef671ba1adc616d01e1652b5b8874781d50dadd 20072 dovecot-solr_2.2.33.2-1ubuntu4.2_arm64.deb 936b356b5005127b340db300cbb1b5961a2eccdc533395d8c158677f985dfe4c 13396 dovecot-sqlite-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 81b42ab9b6bca129af34fe493a415f7c58c2ebaff0f1be17c145571e6b9de3e6 8940 dovecot-sqlite_2.2.33.2-1ubuntu4.2_arm64.deb c0c2784d94fc4b276189e6d8400dda9a111f6520f7b400be2f198688ca487ca6 15455 dovecot_2.2.33.2-1ubuntu4.2_arm64.buildinfo 58dcf76ef2fcd4430d7e755c455ae10f214246438fb365ebddb8bb0af9b1c6ce 1467 dovecot_2.2.33.2-1ubuntu4.2_arm64_translations.tar.gz Files: 0a029e3c5b1bb6454586a798462a101e 10259368 debug optional dovecot-core-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb bcfbd4b31e620eef33412a62e43c5680 2446624 mail optional dovecot-core_2.2.33.2-1ubuntu4.2_arm64.deb 1dd1e4fd24cc62737d41e5656da3d98b 308392 mail optional dovecot-dev_2.2.33.2-1ubuntu4.2_arm64.deb 77d16ce1de15dd240ae8dea03bf33deb 19252 debug optional dovecot-gssapi-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 48d8c902175dbb2c1baa3b76ce3d93bc 10076 mail optional dovecot-gssapi_2.2.33.2-1ubuntu4.2_arm64.deb 2ef48189a94b983ca4afe3f298e08b27 720672 debug optional dovecot-imapd-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 0002db7d3c9f8049a79ce304bb6962a7 132808 mail optional dovecot-imapd_2.2.33.2-1ubuntu4.2_arm64.deb 15aa7405677ad3d4e3f3b9c3ca488cac 611684 debug optional dovecot-ldap-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb ebcf2199112e6318ef8bf3dd84d2ae78 185256 mail optional dovecot-ldap_2.2.33.2-1ubuntu4.2_arm64.deb 75a1de3a7d5d01a7276f1e7db8224361 85292 debug optional dovecot-lmtpd-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 3c4214aa9a928e8b1af22bc20b69b27d 23056 mail optional dovecot-lmtpd_2.2.33.2-1ubuntu4.2_arm64.deb 390755ff9042fe0bfc6b7417db399db8 139396 debug optional dovecot-managesieved-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb e440b314d99a58b1d0872a96be968099 37216 mail optional dovecot-managesieved_2.2.33.2-1ubuntu4.2_arm64.deb bfee218ff0a6934bce9a56b9d675e89b 20848 debug optional dovecot-mysql-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 6a92921e4680aeaaca7066829aabf8e9 10680 mail optional dovecot-mysql_2.2.33.2-1ubuntu4.2_arm64.deb cfff906c9df7a5d295d682d7f6a62a56 25368 debug optional dovecot-pgsql-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb f5f323f3859399721e14356ff219c8bf 12824 mail optional dovecot-pgsql_2.2.33.2-1ubuntu4.2_arm64.deb 5db8ba3f5c7fdab4518b9cb801109183 83384 debug optional dovecot-pop3d-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 25bb32b54233b4879b7ce624565ecc9d 29216 mail optional dovecot-pop3d_2.2.33.2-1ubuntu4.2_arm64.deb 7e554d8a1e95b6670da584e3231d9c52 1682756 debug optional dovecot-sieve-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb 371a397094a816390d3b2c655804b93d 262880 mail optional dovecot-sieve_2.2.33.2-1ubuntu4.2_arm64.deb 903792a64743c938e5837a4587b05a26 92996 debug optional dovecot-solr-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb fcb3f7f219348cbd325b6a4b99ffe7c9 20072 mail optional dovecot-solr_2.2.33.2-1ubuntu4.2_arm64.deb 532115c358b9540f059f7ba5e576466a 13396 debug optional dovecot-sqlite-dbgsym_2.2.33.2-1ubuntu4.2_arm64.ddeb afa07af9f559130c7d1a5a3001aae79a 8940 mail optional dovecot-sqlite_2.2.33.2-1ubuntu4.2_arm64.deb b32b2622bd017972954ec60f40219107 15455 mail optional dovecot_2.2.33.2-1ubuntu4.2_arm64.buildinfo 5a21f325dbd26fc7ce4e418548abb1f5 1467 raw-translations - dovecot_2.2.33.2-1ubuntu4.2_arm64_translations.tar.gz Original-Maintainer: Dovecot Maintainers