Format: 1.8 Date: Mon, 28 Jan 2019 08:52:28 -0500 Source: dovecot Binary: dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-solr mail-stack-delivery Architecture: armhf armhf_translations Version: 1:2.2.33.2-1ubuntu4.2 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support mail-stack-delivery - mail server delivery agent stack provided by Ubuntu server team Changes: dovecot (1:2.2.33.2-1ubuntu4.2) bionic-security; urgency=medium . * SECURITY UPDATE: incorrect client certificate validation - debian/patches/CVE-2019-3814-1.patch: do not import empty certificate username in src/auth/auth-request.c. - debian/patches/CVE-2019-3814-2.patch: fail authentication if certificate username was unexpectedly missing in src/auth/auth-request-handler.c. - debian/patches/CVE-2019-3814-3.patch: ensure we get username from certificate in src/login-common/sasl-server.c. - CVE-2019-3814 Checksums-Sha1: 4be0af64d33ea52c2a39f3a6923e7c80fd63e072 9769616 dovecot-core-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 18cf3ad14c54180f3f4dbaf8c36b8072cdcc51e4 2479680 dovecot-core_2.2.33.2-1ubuntu4.2_armhf.deb 91507cc7a582490686b0a41813fdaadedf4f59ca 308308 dovecot-dev_2.2.33.2-1ubuntu4.2_armhf.deb 7fceb7e60db19c74836f7ec5ddd76517b6e2b5ac 18576 dovecot-gssapi-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb fbb9b0bc73fa45605387b03e5c3c20a66031592e 9860 dovecot-gssapi_2.2.33.2-1ubuntu4.2_armhf.deb b14ed2cc7fd79a375fbb1f80013cd43f5e820ab2 692904 dovecot-imapd-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 87d359c58798d8f6bc1e4a23f94a76994f0a04cc 133728 dovecot-imapd_2.2.33.2-1ubuntu4.2_armhf.deb 33a382c50fd92c9738dbbca9153067d526c8eeb7 576648 dovecot-ldap-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb d0111feed7f58d27521e066b4ae65d2dee8834cc 192460 dovecot-ldap_2.2.33.2-1ubuntu4.2_armhf.deb 9fa673f013968ecd210bc917b67b1f1cac40989f 79996 dovecot-lmtpd-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 7b865e614991e77044671047ecccd425cef8b0b1 22964 dovecot-lmtpd_2.2.33.2-1ubuntu4.2_armhf.deb 4b57a450df9dd386e2fa49297f0ce2a783fd4f5a 132940 dovecot-managesieved-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 990b49a99101eadb59009ca31234e174298eadfb 37372 dovecot-managesieved_2.2.33.2-1ubuntu4.2_armhf.deb 36e1866dfeb4625b73b320653428551e1503cf6d 19988 dovecot-mysql-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb df9af0e59bb4fd3cbe0339e0c11a4ea83fc7cf81 10432 dovecot-mysql_2.2.33.2-1ubuntu4.2_armhf.deb 1ea1edf33ec3ac7fec113ea0cda3f67d2218c16b 24476 dovecot-pgsql-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb adc1cd3b06c8b1dfbeca97f16886394b54bc4040 13052 dovecot-pgsql_2.2.33.2-1ubuntu4.2_armhf.deb 45fc03b6f104135e8e8b1f17b3ef5c10a6b69426 80148 dovecot-pop3d-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 10133300768f9f635f9d0157d61edcdf22fdcbea 29332 dovecot-pop3d_2.2.33.2-1ubuntu4.2_armhf.deb 953cc2e7e7210b7cf4b64d6f032704454a9f807f 1612844 dovecot-sieve-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb ba5826d6e8a30029c9d5a48f451f2f74f49e7abd 264316 dovecot-sieve_2.2.33.2-1ubuntu4.2_armhf.deb 113b43098a1e33f5e845a1324862de76bdfa312d 89512 dovecot-solr-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 9a34d0de97afa2111fe2f2db7a8dd849d2d74fe9 19884 dovecot-solr_2.2.33.2-1ubuntu4.2_armhf.deb 3835f5cd22f68c17c7370765a0d8e64da0836735 13096 dovecot-sqlite-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 0be6239fcc3b1b5978b085c93956df20769bfc07 8820 dovecot-sqlite_2.2.33.2-1ubuntu4.2_armhf.deb 39bd9f4338e01395b341591d21e43cafce64c78b 15381 dovecot_2.2.33.2-1ubuntu4.2_armhf.buildinfo c01220372efbdfccfe406d7f3e356ef36c18033e 1469 dovecot_2.2.33.2-1ubuntu4.2_armhf_translations.tar.gz Checksums-Sha256: 9abbcff6d169fc64dc7ec16be91d44307cd8fc84ce3f22d6af25e815235ce2ad 9769616 dovecot-core-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 08d6d1642453949a1f7ec3724708e0e23ad437ea0304f7fd668205264f968780 2479680 dovecot-core_2.2.33.2-1ubuntu4.2_armhf.deb b76bca6f7359c44263aef581b3a66e2d5a7fa61b544666a5f72e3e84ac3f6f64 308308 dovecot-dev_2.2.33.2-1ubuntu4.2_armhf.deb a7d22a298f21e58a380b647a177b48c73b424a683d7757bd252f1feb6bc74c7b 18576 dovecot-gssapi-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 09ea526e49847d913a6dbd6e355889c8fc17a1e7e2a55d86a35b4109f6dafb27 9860 dovecot-gssapi_2.2.33.2-1ubuntu4.2_armhf.deb 1490721a737d219ae57007d6c31d45cee104d5541a2ec07c513b3dcf76c0aaca 692904 dovecot-imapd-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 797a2af93ed52d9538303066fdaefdfb0ea741cd4e2a9eb83194848a4ee7a37f 133728 dovecot-imapd_2.2.33.2-1ubuntu4.2_armhf.deb 95d58223f2edf1dbc28f62d58808a588a47c474ef0d6f2cf75b46a1be19dbb66 576648 dovecot-ldap-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 3cc99b7fea933ca4c9b29a0649a17ca1260e7d2d642bcd0d372425eeb8fd0fdb 192460 dovecot-ldap_2.2.33.2-1ubuntu4.2_armhf.deb 677a78c4d4261378eb31993b84ede706475b08f7833efc6bf2de35a9779e29ea 79996 dovecot-lmtpd-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 50f8599e1a023c33c93cfc52c735cd02e922a085659a508cdbd4e519b5dac057 22964 dovecot-lmtpd_2.2.33.2-1ubuntu4.2_armhf.deb f9d40ef8d552ceaf3d2f78c0b1736b93845549319448fc828459a8e97ebdad73 132940 dovecot-managesieved-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 779d3b051c21419b1be912d7bc2aedb369f3c18a46ff15a83242ab6a9c4bb1ac 37372 dovecot-managesieved_2.2.33.2-1ubuntu4.2_armhf.deb 00ed5bff5ca00e85bad0b96b3ac0de6151ea8337147d903d7581a80e1a464856 19988 dovecot-mysql-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb d1f9e2160876e6dc9bae0dc3312bbc80f950c55c540ce34bfc67e70a6558a02a 10432 dovecot-mysql_2.2.33.2-1ubuntu4.2_armhf.deb dfc44ba8e69dc1956dfd7e1525ae37098d10419b08745251c79d6b6dd5e313e4 24476 dovecot-pgsql-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 05a3e51d2f52ef06d9b9b3eb3b6a29581a8fe292087f88561c782e216f84410e 13052 dovecot-pgsql_2.2.33.2-1ubuntu4.2_armhf.deb 71b521f5229ea8ade8314edb9dc5df0ed7a277d9e9cbe92cb0630ba6476fbede 80148 dovecot-pop3d-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb e02b8fdb00a1e39bb97370a00ee39d4bc1bccf3c7cd96b3ccd8a8446d1e99af8 29332 dovecot-pop3d_2.2.33.2-1ubuntu4.2_armhf.deb 29d1dc7b8f921098a302eefe05f4edc341182fd0f8663377f8c35523e57e62bc 1612844 dovecot-sieve-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb f91d73057913bb00d601399af4356b3341c9899827722c524d7da02eaf65b1ec 264316 dovecot-sieve_2.2.33.2-1ubuntu4.2_armhf.deb 06377ac32b9c1ed7879070b927e0656bf42755d9cf84994539ac3021b8adf0f6 89512 dovecot-solr-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 856453b52162c3a8f12613a34fd08e0b439448d7124606cc4e54efe0e22c773b 19884 dovecot-solr_2.2.33.2-1ubuntu4.2_armhf.deb ab171fe2a1f5a3da5960ef06a232cc39bb9f014977dbd101697b736c1cbe6071 13096 dovecot-sqlite-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb b945c049ff7887bf2b8464ba3d1f94624a92c97b4c32b7fd69612d5ea4fe5218 8820 dovecot-sqlite_2.2.33.2-1ubuntu4.2_armhf.deb 064b0007fbd7702afa1fc934008cd89db99080de1efb2d85ad0796099f416e47 15381 dovecot_2.2.33.2-1ubuntu4.2_armhf.buildinfo d25abef2d18dc55a2b2c89b1d68de83fa2835b0030997f12776abae84cf7cddf 1469 dovecot_2.2.33.2-1ubuntu4.2_armhf_translations.tar.gz Files: 735b4e1eb727f3a91928941bcd49f34d 9769616 debug optional dovecot-core-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb f5f4566c092d808898f72dcb3556d465 2479680 mail optional dovecot-core_2.2.33.2-1ubuntu4.2_armhf.deb 31fb5ce9ae0020168fe7d306fd7df68d 308308 mail optional dovecot-dev_2.2.33.2-1ubuntu4.2_armhf.deb 65a8f26466f495e792ee3bdcd4105fdf 18576 debug optional dovecot-gssapi-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 0be9cbe3b08c953cf8fd5030dc5eafc8 9860 mail optional dovecot-gssapi_2.2.33.2-1ubuntu4.2_armhf.deb 0e35b9e67fd67cf3a864f3aa3576dffa 692904 debug optional dovecot-imapd-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb cd6af036db128eca8fe1352155da3844 133728 mail optional dovecot-imapd_2.2.33.2-1ubuntu4.2_armhf.deb 7c69361d7a1c7dfd800a1bb8c7882a19 576648 debug optional dovecot-ldap-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 76a99932d2c8bb9993dd9bcea07b97d5 192460 mail optional dovecot-ldap_2.2.33.2-1ubuntu4.2_armhf.deb 9e4b33f34ab5bf684fabdb6c23e0efa0 79996 debug optional dovecot-lmtpd-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 45cf46b77fbfcaefed748809df37175f 22964 mail optional dovecot-lmtpd_2.2.33.2-1ubuntu4.2_armhf.deb 1a7e992f5c61b7062e382935b2020daa 132940 debug optional dovecot-managesieved-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 4f21f2e6ee351ecc1ea505f5358edca8 37372 mail optional dovecot-managesieved_2.2.33.2-1ubuntu4.2_armhf.deb 59f2358d2ec0f7e1a272b37beaccd6ac 19988 debug optional dovecot-mysql-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb ea2c285189601cb089e0052ea37dfb0a 10432 mail optional dovecot-mysql_2.2.33.2-1ubuntu4.2_armhf.deb 7466dd4bc82ca7f5785336b8ce9970ff 24476 debug optional dovecot-pgsql-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb aec187b46152ace51f38f9e426f85093 13052 mail optional dovecot-pgsql_2.2.33.2-1ubuntu4.2_armhf.deb 4d0a65d4249fc5225c5ca5997ddb919d 80148 debug optional dovecot-pop3d-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 524117d8fbdf15c9baa72e3ef0e72ff6 29332 mail optional dovecot-pop3d_2.2.33.2-1ubuntu4.2_armhf.deb 4ece8fb3fef345e7786b5c71734a56c1 1612844 debug optional dovecot-sieve-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 5165d8d3f13d0bbdbc31b7697957801e 264316 mail optional dovecot-sieve_2.2.33.2-1ubuntu4.2_armhf.deb bac53e22476f8546ed8be9d818a83196 89512 debug optional dovecot-solr-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 5d9982fb53d568edb8a21c96f501c9b9 19884 mail optional dovecot-solr_2.2.33.2-1ubuntu4.2_armhf.deb 630dc2fc172750a3261fe64972ed89e3 13096 debug optional dovecot-sqlite-dbgsym_2.2.33.2-1ubuntu4.2_armhf.ddeb 45577c748acf9feae2f7f5896026f662 8820 mail optional dovecot-sqlite_2.2.33.2-1ubuntu4.2_armhf.deb d65faf99d807c2608b53e96691a257df 15381 mail optional dovecot_2.2.33.2-1ubuntu4.2_armhf.buildinfo e4b540e73c3053d756d2bcc2470c54a7 1469 raw-translations - dovecot_2.2.33.2-1ubuntu4.2_armhf_translations.tar.gz Original-Maintainer: Dovecot Maintainers