Format: 1.8 Date: Mon, 28 Jan 2019 08:52:28 -0500 Source: dovecot Binary: dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-solr mail-stack-delivery Architecture: i386 i386_translations Version: 1:2.2.33.2-1ubuntu4.2 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: dovecot-core - secure POP3/IMAP server - core files dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support mail-stack-delivery - mail server delivery agent stack provided by Ubuntu server team Changes: dovecot (1:2.2.33.2-1ubuntu4.2) bionic-security; urgency=medium . * SECURITY UPDATE: incorrect client certificate validation - debian/patches/CVE-2019-3814-1.patch: do not import empty certificate username in src/auth/auth-request.c. - debian/patches/CVE-2019-3814-2.patch: fail authentication if certificate username was unexpectedly missing in src/auth/auth-request-handler.c. - debian/patches/CVE-2019-3814-3.patch: ensure we get username from certificate in src/login-common/sasl-server.c. - CVE-2019-3814 Checksums-Sha1: 345860798db83cfad02c42d73fe160c3cbcc81bc 9073040 dovecot-core-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 8f1f848419059761e8044366dd78e7a17db0ec61 2947372 dovecot-core_2.2.33.2-1ubuntu4.2_i386.deb e5a0b2d7771792c62ca31affb85d2e24a07c0265 308300 dovecot-dev_2.2.33.2-1ubuntu4.2_i386.deb 106da3634d6b2299ca100bcbfca7fde6e58d6a6d 17180 dovecot-gssapi-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb b0c5acac67f9dfc6e602ca5cfb0073c45757f811 10988 dovecot-gssapi_2.2.33.2-1ubuntu4.2_i386.deb 7885bd9f2f12dc53887ca659ea428a1fdd8c928f 646632 dovecot-imapd-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb a3b3c3761236b241135c739cd1f2e73000d0ed09 172276 dovecot-imapd_2.2.33.2-1ubuntu4.2_i386.deb 4704d28ee295028e02ba2d27a8e0b4a65e4118d8 507448 dovecot-ldap-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 56ad8bb44c09afee9c5c0e5261972942a9d63dae 246800 dovecot-ldap_2.2.33.2-1ubuntu4.2_i386.deb 27ee5f3c544c3e5eb8f33260d12d11d7f9db61b4 73716 dovecot-lmtpd-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 453175df7ccebf46481fc6128be6668398a10b2c 27432 dovecot-lmtpd_2.2.33.2-1ubuntu4.2_i386.deb bbeeb4d9fa1863ccee4545cbc341b521749da0d1 121916 dovecot-managesieved-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 740c72833658d449b25a462c6359527e3e8a3bf1 45144 dovecot-managesieved_2.2.33.2-1ubuntu4.2_i386.deb c63c5d226511a2e2f85f41156ab4fb9492def5ff 18292 dovecot-mysql-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb e05252479fe5f3f7dba66b91691ccd3510f27c01 12140 dovecot-mysql_2.2.33.2-1ubuntu4.2_i386.deb 47ec6b7cdce2c2a8f3c88bb452f2c0c594f81026 21724 dovecot-pgsql-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb b221016296f268f9bf290790f10ffb723cfbbb1c 15524 dovecot-pgsql_2.2.33.2-1ubuntu4.2_i386.deb bb112eda74f9ec3b8b0128b7f53845b0882d8b94 74064 dovecot-pop3d-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 183b74c72335178a4d80dffa78904fa63e2391d0 35192 dovecot-pop3d_2.2.33.2-1ubuntu4.2_i386.deb f9edad92cefa164e67a629e523b367218ed6dff3 1481232 dovecot-sieve-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 6e9da441067fe3017957a3d453cc1e63f3efa8c9 339992 dovecot-sieve_2.2.33.2-1ubuntu4.2_i386.deb 2187892694ebd6eacf363f6e1887e4b1faa6a8a5 84468 dovecot-solr-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 69fca04a43a1ab79004e2bac98b6462464a055a7 24552 dovecot-solr_2.2.33.2-1ubuntu4.2_i386.deb 48861ded635ab33b036525d8486dd541dd380749 11628 dovecot-sqlite-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 4413aa19e9d9a903285839eb45f3429285c9648a 10012 dovecot-sqlite_2.2.33.2-1ubuntu4.2_i386.deb d4498aef7b6e5c62440069939bb94292fffe460c 15409 dovecot_2.2.33.2-1ubuntu4.2_i386.buildinfo e664452b776bb4490d73b08b4986671a8be2b60d 1470 dovecot_2.2.33.2-1ubuntu4.2_i386_translations.tar.gz Checksums-Sha256: 15ff5cca691842655272b395b7cff6c3086663c407196e278460bbac3ec27ecf 9073040 dovecot-core-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb f21676f3dc759f6e957548b148ec659130c26390faa656cd41ef67b717b16b8a 2947372 dovecot-core_2.2.33.2-1ubuntu4.2_i386.deb 5f0149fb8a79b559936080e634784da0d0f1231f9e290620c7ac0aee343f9f05 308300 dovecot-dev_2.2.33.2-1ubuntu4.2_i386.deb 03c18f3a7800528716323c3dace25e03d7c49399aef8001c61a41d2204949fa3 17180 dovecot-gssapi-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb f78bdf1cda9df773d3c73a0bebaa7cda812c93fff51fb4baaf9457ba89140c95 10988 dovecot-gssapi_2.2.33.2-1ubuntu4.2_i386.deb b03fc882d0bce57d40b402503eb64f5f3ccfaa7d4069e889ce080b72c8bfe785 646632 dovecot-imapd-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb d67d5793eab9f82768373e33a1f0023bf2a7d9398b5d4fb1f1506b461efcb1e4 172276 dovecot-imapd_2.2.33.2-1ubuntu4.2_i386.deb e26dcdcf6dfd6b9ec8279de6a8a786d33e9bcf47d6b842bd8dcdef2f168144b3 507448 dovecot-ldap-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb a0dc663194f27e784427bdcb693aa9e6d99a28d971a6977feaa95f7d2aae2708 246800 dovecot-ldap_2.2.33.2-1ubuntu4.2_i386.deb 1772b57b367f614268ec72066455b146e4e5be8166def4a0780de84bb1224e88 73716 dovecot-lmtpd-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb e6a2a8e439290dc3b34887888b3434fea913638785c7d89a40fca6aa331f7b6d 27432 dovecot-lmtpd_2.2.33.2-1ubuntu4.2_i386.deb a0cb1922514c9301efa5fe072fad62c6e9dcebee4dd6a5fa6cdf35efb1c2064a 121916 dovecot-managesieved-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 520311086c888645e92c937c856515e8394e3cf0e10fc1d8fae9b3edec772364 45144 dovecot-managesieved_2.2.33.2-1ubuntu4.2_i386.deb e706f18fd8265661195fb36dcaa58210cf4df797be74df3deac96f3c58a891c4 18292 dovecot-mysql-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 1577ba3034bc030db497fd45abea23d33be70764a4d9d65e0e1d2f7631057830 12140 dovecot-mysql_2.2.33.2-1ubuntu4.2_i386.deb 97f7dad11c9c3657afb483e169f69106e0e4695a5bd837e7d0cfdb88febac0ed 21724 dovecot-pgsql-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb ef972549db7b8a4f4bd6d052434a513e64cc607e1383e574461f906189034318 15524 dovecot-pgsql_2.2.33.2-1ubuntu4.2_i386.deb a8138bc9ae5a06cd7f6554d685257ddf2572859f1b5608a634a5e651a3549e36 74064 dovecot-pop3d-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 9de4e5fa57f8fc79fdc563f6d996a4e9b8c8e79535b3bedd25dc38f626dfd941 35192 dovecot-pop3d_2.2.33.2-1ubuntu4.2_i386.deb 92d533444d60b4992c7f34aa6b7dcaa14a0de7283c37e218624f88365029d3d4 1481232 dovecot-sieve-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb cccae5cba450652b10c9f5e2e1ad93e1497b1ab29408cf724df2daa79c4ee282 339992 dovecot-sieve_2.2.33.2-1ubuntu4.2_i386.deb 1b2fc8bd5fdf304b2e36882dd748c47a22aa8ce1afd2392e2936a3c1769afaff 84468 dovecot-solr-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb f3ebb0272ca135cdf2263aea4de2ea763a161b0addc68912923fc9ab3e49d521 24552 dovecot-solr_2.2.33.2-1ubuntu4.2_i386.deb edddab619812cc99795f46a9c42b27fb8baa18d238e89ba9678389e6ea1a9067 11628 dovecot-sqlite-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 02bfa1c31c658d45137f61741e3f48d6093d71f681a81470067771d59aac5a42 10012 dovecot-sqlite_2.2.33.2-1ubuntu4.2_i386.deb fcb9bd4789bb5e6f6510b069c8b4bfa412fe333d7cfd3fb450188f8d0fb2ffa7 15409 dovecot_2.2.33.2-1ubuntu4.2_i386.buildinfo 6e5bf4ea81c191b77baaacbed3704bf6477ce656a86c3806ddc698636e79d5f3 1470 dovecot_2.2.33.2-1ubuntu4.2_i386_translations.tar.gz Files: 19d73d3849ac054bc456ed77bdcbd147 9073040 debug optional dovecot-core-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb b1a279103359297706a0745faa7d0a28 2947372 mail optional dovecot-core_2.2.33.2-1ubuntu4.2_i386.deb c42158906438ca962771bd3b9233ee5c 308300 mail optional dovecot-dev_2.2.33.2-1ubuntu4.2_i386.deb a908ed4db0a29c7abdca6bb110be57de 17180 debug optional dovecot-gssapi-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 016be45e9a5fdcead21807b259703f5c 10988 mail optional dovecot-gssapi_2.2.33.2-1ubuntu4.2_i386.deb 3e97e1bb31cc7f9e9ee9666b75fc0fff 646632 debug optional dovecot-imapd-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb d8161e0e63bbb26b3228b6410b8fc477 172276 mail optional dovecot-imapd_2.2.33.2-1ubuntu4.2_i386.deb e88d4794ca492aa99a8f9e208bf7d630 507448 debug optional dovecot-ldap-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 0874a4660d6ca67eda2bed8f1acf71ee 246800 mail optional dovecot-ldap_2.2.33.2-1ubuntu4.2_i386.deb 80fdacb2bb5c1460038fa7330a8ab044 73716 debug optional dovecot-lmtpd-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb e32fd01303eb1940b1504126cf504825 27432 mail optional dovecot-lmtpd_2.2.33.2-1ubuntu4.2_i386.deb d04b7f65fa2ecb460547c529a5664cfc 121916 debug optional dovecot-managesieved-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 043d08dc96112fca5ea5c8a9d827fc39 45144 mail optional dovecot-managesieved_2.2.33.2-1ubuntu4.2_i386.deb cdd93082c18c88bad84af46413b2d2d5 18292 debug optional dovecot-mysql-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 61d7b3c38b0a280a455b732fe0b428b4 12140 mail optional dovecot-mysql_2.2.33.2-1ubuntu4.2_i386.deb 16169f89f05b554d5bef7d8e926ab6d5 21724 debug optional dovecot-pgsql-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 6956a304a1fe617fd5153dc130b3854b 15524 mail optional dovecot-pgsql_2.2.33.2-1ubuntu4.2_i386.deb 96abd049d618c8c9f7d00187e9ae26f5 74064 debug optional dovecot-pop3d-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 538bf8f80f1a6cfcea0dd200c6cd95a6 35192 mail optional dovecot-pop3d_2.2.33.2-1ubuntu4.2_i386.deb 31b8d8e6694ad9ab1751d90c25b2f168 1481232 debug optional dovecot-sieve-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 21175f76e3a057bd61ce16b62c7bd212 339992 mail optional dovecot-sieve_2.2.33.2-1ubuntu4.2_i386.deb 56c59693bdb23be106f67063d3e31559 84468 debug optional dovecot-solr-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 14bc3b496be6e7b31388d39338ec4c59 24552 mail optional dovecot-solr_2.2.33.2-1ubuntu4.2_i386.deb 1152a73c0c6ca83a198702b4fa1e6299 11628 debug optional dovecot-sqlite-dbgsym_2.2.33.2-1ubuntu4.2_i386.ddeb 78a79bee8e0f2d599c4c9c2c341922af 10012 mail optional dovecot-sqlite_2.2.33.2-1ubuntu4.2_i386.deb eacfb8ffc35ac1b8597fdbfe98838e39 15409 mail optional dovecot_2.2.33.2-1ubuntu4.2_i386.buildinfo a113a9e0ef71d6095650b1e6840048fd 1470 raw-translations - dovecot_2.2.33.2-1ubuntu4.2_i386_translations.tar.gz Original-Maintainer: Dovecot Maintainers