Format: 1.8 Date: Mon, 28 Jan 2019 08:53:54 -0500 Source: dovecot Binary: dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-solr dovecot-dbg mail-stack-delivery Architecture: amd64 amd64_translations Version: 1:2.2.9-1ubuntu2.5 Distribution: trusty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: dovecot-core - secure POP3/IMAP server - core files dovecot-dbg - secure POP3/IMAP server - debug symbols dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support mail-stack-delivery - mail server delivery agent stack provided by Ubuntu server team Changes: dovecot (1:2.2.9-1ubuntu2.5) trusty-security; urgency=medium . * SECURITY UPDATE: incorrect client certificate validation - debian/patches/CVE-2019-3814-1.patch: do not import empty certificate username in src/auth/auth-request.c. - debian/patches/CVE-2019-3814-2.patch: fail authentication if certificate username was unexpectedly missing in src/auth/auth-request-handler.c. - debian/patches/CVE-2019-3814-3.patch: ensure we get username from certificate in src/login-common/sasl-server.c. - CVE-2019-3814 Checksums-Sha1: 3ca0c23e709b76364754eb7f75e5d0b786c5d1a3 2096870 dovecot-core_2.2.9-1ubuntu2.5_amd64.deb d2d592f5a0a322470dafe134a7dc8f5710c7bc5a 224896 dovecot-dev_2.2.9-1ubuntu2.5_amd64.deb 326aec22f9bc0667718e84cb3081e14bcc85bf5e 121888 dovecot-imapd_2.2.9-1ubuntu2.5_amd64.deb 055f0e9280fc8cf8236b88deb0ba591a3e139bbc 28424 dovecot-pop3d_2.2.9-1ubuntu2.5_amd64.deb 8df5074bb4259a26f86fba73a73c1d28a3502b1c 20510 dovecot-lmtpd_2.2.9-1ubuntu2.5_amd64.deb 05442bd98139baf1dd94eb21ac2806cae7146d06 46608 dovecot-managesieved_2.2.9-1ubuntu2.5_amd64.deb 853f31413181d87390ae22df7557593f913d2de6 12028 dovecot-pgsql_2.2.9-1ubuntu2.5_amd64.deb 02ec1b7a7fa263c54376e87869ddd7b25d386ee7 9498 dovecot-mysql_2.2.9-1ubuntu2.5_amd64.deb 7645d08f199fe3fa116890abb82eec9882df442d 7956 dovecot-sqlite_2.2.9-1ubuntu2.5_amd64.deb e8389c2a88e38d8d828606bc008d3b26084dfb31 22426 dovecot-ldap_2.2.9-1ubuntu2.5_amd64.deb 5e775d6d1a24824d2c5f95e6751a11e9010155df 8992 dovecot-gssapi_2.2.9-1ubuntu2.5_amd64.deb 4e8c22ba6d168d62f81195b98bdcdb82185fdac5 235832 dovecot-sieve_2.2.9-1ubuntu2.5_amd64.deb e618e0f1405cf5b5d63255892e5bea599061a974 18848 dovecot-solr_2.2.9-1ubuntu2.5_amd64.deb 4864e63c2ecee5ea2d2cd0e05999f49bc29665db 5770602 dovecot-dbg_2.2.9-1ubuntu2.5_amd64.deb cf2dfadb4ed4dc12dd76e327da4e922cfce00959 1012 dovecot-core-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 6ad898157d6c104f56edf64bdc90d93fc79ebe0d 1018 dovecot-dev-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 36b8eae886492ed62bb1441de451fb0d351ff748 998 dovecot-imapd-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb ace8e98354a1689a452c4d2bc1c85dcc60e97664 996 dovecot-pop3d-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 306ba32dba9c85e151634497df3773a7e3eb5eb4 996 dovecot-lmtpd-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb b3aa8d0407654428ac8cdb0f8ab036c93286910e 1006 dovecot-managesieved-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 2f1553a2a76c72b1e125d0061a5b6170d02e09bf 1004 dovecot-pgsql-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 3e1adc16126c295879869019b30290e7c62c1d84 1002 dovecot-mysql-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 38972117d78fbb61e2ce278ac90898a2b4c3781f 1002 dovecot-sqlite-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 91366f05fb0831a75324051f45f7b6f3e9adefb4 1000 dovecot-ldap-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 53a89babc4f9e3763012f05223709d1bbf1ccda7 1012 dovecot-gssapi-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 4b91fa963dc45b320d50d8f29c932cf7c637454e 1004 dovecot-sieve-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 4fe0fba7837b569553b3291045596db1c9f37617 1008 dovecot-solr-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb e813cf6bae2abf4caeb637a7fbae1ab547866cc9 6895 dovecot_2.2.9-1ubuntu2.5_amd64_translations.tar.gz Checksums-Sha256: 9d89cddef5b58b4e54c6f13cbdf21144b8dd0a0aadacc64bf6816ae3f74e7734 2096870 dovecot-core_2.2.9-1ubuntu2.5_amd64.deb dda50df95c792cbe427da179bed5531514acff32d5741afa1a33bec43f693685 224896 dovecot-dev_2.2.9-1ubuntu2.5_amd64.deb e2b51a8cb7aef9ef94e9c3bbdc1a3a1f4dd5693bca9fb4c38bf6fd44ca0cdc23 121888 dovecot-imapd_2.2.9-1ubuntu2.5_amd64.deb 24ab3ebd2eb49b2ee76920bb53acec8d38ffcc45ed8317505583a3e8d8cff733 28424 dovecot-pop3d_2.2.9-1ubuntu2.5_amd64.deb 32d6e5c64940dc1e167630ac5963c3ff8cbdec9869f121c35c1d1c563ac61cc0 20510 dovecot-lmtpd_2.2.9-1ubuntu2.5_amd64.deb d0559bea267c5a7d1eadf3ff28be773ff6a86cf1db24b8781f0152d35e0905eb 46608 dovecot-managesieved_2.2.9-1ubuntu2.5_amd64.deb 937d46cf93c01af186846346159ae40bbe7e9767b00ce92cd8b8202cf0c0fd4f 12028 dovecot-pgsql_2.2.9-1ubuntu2.5_amd64.deb 207b178b615ea59f3cf9a9be167a9441ffc2980ec07aa38296b426807f8946a6 9498 dovecot-mysql_2.2.9-1ubuntu2.5_amd64.deb 3a70471b47983e0e3b119985037aa8a5efc993450dcaa06191da228f2a5feb47 7956 dovecot-sqlite_2.2.9-1ubuntu2.5_amd64.deb 8ab3f169ff2ebc417388f6a02863441c3c7d9a599e22a93d7e30da06a97140a2 22426 dovecot-ldap_2.2.9-1ubuntu2.5_amd64.deb 9cc77ca37ebfcc180d812333a3306f27ce3d74ef6d2b92950a3dd3a1c2a2070b 8992 dovecot-gssapi_2.2.9-1ubuntu2.5_amd64.deb a4067e066e952a698c6e485903565ba4ee9f5b0777abe7a54cd1a028fef3fd92 235832 dovecot-sieve_2.2.9-1ubuntu2.5_amd64.deb 96c9a2a21061d7a5d4d5683234c3a4f2611ea7a4946243dec353d7b4095ccbea 18848 dovecot-solr_2.2.9-1ubuntu2.5_amd64.deb db28ebb946ac0cf13ee1454ad8a6d3d53054222c4a3305b0c8a9691cc1793533 5770602 dovecot-dbg_2.2.9-1ubuntu2.5_amd64.deb cfb98460838943c591ca9b5d252a9096e16d727da507e48e57cb32b40c082010 1012 dovecot-core-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 3b58cadb9f8679c3c4303a4ce58e58d0aba498526ae0ef9b1f27ac826c2d7dc8 1018 dovecot-dev-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 936dbb8b457750e9805716be315dc3993e8a70575859eeaeeeb82261c77095d9 998 dovecot-imapd-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb e09d1abff45d392aaac6cc2ddfd32fbb8286467c86b7a04b452d1722c140c2d4 996 dovecot-pop3d-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb f1ee21c8eeb571563fa65c547d7a4a54fcf63de3b95573de1ddd882ec5fd09ed 996 dovecot-lmtpd-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb aa5f863bf3180c4f7ce21c7589c1c4cd447cfd2e53fa869d550c6f75d6fc3898 1006 dovecot-managesieved-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 7a694f1bfe472b56350525def50ed93fe407381b3ca6a2d906f02cc8d92e4001 1004 dovecot-pgsql-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 5bb68cb931896845f099cfba1bd0ea719c3e414a984d05be6268f6905f883d3d 1002 dovecot-mysql-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 40fb032bf32ed5ea8fe48910ce07e1abea3fca966db852f83911fb60a7072044 1002 dovecot-sqlite-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 007dfbbb7ecb3eb27eee914c7a597875980d1c53457819aedae7a3bfdf5fce8d 1000 dovecot-ldap-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 1a219514bdfa3971b8b64a0eb301729f8cd9af42f57bff7e64b5a4790b1b4c26 1012 dovecot-gssapi-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb a9ef17f5bc2ad60a096f8eef59146ccc5ec62cb58f6a46f18c29824b8d93a10f 1004 dovecot-sieve-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 4eb85e0eb03ea0c5001ed9885e3a814d0e3005abeee130c473c4b1ddbae3e4bb 1008 dovecot-solr-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 2294aff22bed4d2f9672e50fe90be8b451779c276a93b81c66527fd49c6b998b 6895 dovecot_2.2.9-1ubuntu2.5_amd64_translations.tar.gz Files: 91bb2197f6bfa0b0518162134be6aa0d 2096870 mail optional dovecot-core_2.2.9-1ubuntu2.5_amd64.deb a6e92088fa1da6d15d840f06600e60e2 224896 mail optional dovecot-dev_2.2.9-1ubuntu2.5_amd64.deb 8f325746e52c302cbf0de95f76738ced 121888 mail optional dovecot-imapd_2.2.9-1ubuntu2.5_amd64.deb b8ed65d86140bd5835d57d3270505f2d 28424 mail optional dovecot-pop3d_2.2.9-1ubuntu2.5_amd64.deb 41b8612d44edf063d0b7b586e657ec99 20510 mail optional dovecot-lmtpd_2.2.9-1ubuntu2.5_amd64.deb 2d3cb58214dce8425c17370f7fbebf9c 46608 mail optional dovecot-managesieved_2.2.9-1ubuntu2.5_amd64.deb eadc552c697298ac2ba86a75c46d2887 12028 mail optional dovecot-pgsql_2.2.9-1ubuntu2.5_amd64.deb fb631f7ccdf3eed910be06b88a0f3902 9498 mail optional dovecot-mysql_2.2.9-1ubuntu2.5_amd64.deb ca2ee442791ade4edaded9250f7a35d1 7956 mail optional dovecot-sqlite_2.2.9-1ubuntu2.5_amd64.deb 74f1584d0ca21a44234149a077aa70d8 22426 mail optional dovecot-ldap_2.2.9-1ubuntu2.5_amd64.deb bef33ab16c03b9711c7fa0e67bf8f496 8992 mail optional dovecot-gssapi_2.2.9-1ubuntu2.5_amd64.deb 92b915b209657fbce3bdafa3a890597f 235832 mail optional dovecot-sieve_2.2.9-1ubuntu2.5_amd64.deb ed39e3d20bb421828d23e6ff01d3836f 18848 mail optional dovecot-solr_2.2.9-1ubuntu2.5_amd64.deb 96895a1b7d5bf44b2a7e913f475969ee 5770602 debug extra dovecot-dbg_2.2.9-1ubuntu2.5_amd64.deb b2663cf1bf5d99f1c15f7767943b3842 1012 mail extra dovecot-core-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 12b2ee7378caa8fea472998864f5a5ab 1018 mail extra dovecot-dev-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 03ca9848f253189421aa2a97096e5120 998 mail extra dovecot-imapd-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 11b98ea459724550bb4e1186f0dac90b 996 mail extra dovecot-pop3d-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb ad3497d8d3ed09a1e7116b1bc669de4b 996 mail extra dovecot-lmtpd-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 5939d559ede09a2b400c4829dfd24f23 1006 mail extra dovecot-managesieved-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb c06ef907b1366df5c3bd337933aa4879 1004 mail extra dovecot-pgsql-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 7c5e70eb1e190e15a590ed8680d27d11 1002 mail extra dovecot-mysql-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb e147c7adae257a2741d9d58ad42482d8 1002 mail extra dovecot-sqlite-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 8633a377301913f827487343b449d7f1 1000 mail extra dovecot-ldap-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 7b6dc225ac69a27ff48e0352b00380e9 1012 mail extra dovecot-gssapi-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 0ba01f427d0dd2759cf081aa5b9381c5 1004 mail extra dovecot-sieve-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 865e3ab5fe4dc8d7c043f3028f519ef5 1008 mail extra dovecot-solr-dbgsym_2.2.9-1ubuntu2.5_amd64.ddeb 8292d6fa4534c6a1c232a54daf48935a 6895 raw-translations - dovecot_2.2.9-1ubuntu2.5_amd64_translations.tar.gz Original-Maintainer: Dovecot Maintainers