UbuntuUpdates.org

Package "dovecot"

Name: dovecot

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • secure POP3/IMAP server - core files
  • secure POP3/IMAP server - header files
  • secure POP3/IMAP server - IMAP daemon
  • secure POP3/IMAP server - POP3 daemon

Latest version: 1:2.3.7.2-1ubuntu3.2
Release: focal (20.04)
Level: security
Repository: main

Links



Other versions of "dovecot" in Focal

Repository Area Version
base universe 1:2.3.7.2-1ubuntu3
base main 1:2.3.7.2-1ubuntu3
security universe 1:2.3.7.2-1ubuntu3.2
updates main 1:2.3.7.2-1ubuntu3.2
updates universe 1:2.3.7.2-1ubuntu3.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1:2.3.7.2-1ubuntu3.2 2020-08-12 15:07:17 UTC

  dovecot (1:2.3.7.2-1ubuntu3.2) focal-security; urgency=medium

  * SECURITY UPDATE: DoS via deeply nested MIME parts
    - debian/patches/CVE-2020-12100/*.patch: backports of upstream patches
      to fix the issue.
    - CVE-2020-12100
  * SECURITY UPDATE: DoS via incorrect NTLM message buffer size
    - debian/patches/CVE-2020-12673/*.patch: check buffer length in
      src/lib-ntlm/ntlm-message.c.
    - CVE-2020-12673
  * SECURITY UPDATE: DoS via zero-length message
    - debian/patches/CVE-2020-12674/*.patch: fail on zero-length buffer in
      src/auth/mech-rpa.c.
    - CVE-2020-12674

 -- Marc Deslauriers <email address hidden> Wed, 05 Aug 2020 10:26:17 -0400

Source diff to previous version

Version: 1:2.3.7.2-1ubuntu3.1 2020-05-18 13:06:26 UTC

  dovecot (1:2.3.7.2-1ubuntu3.1) focal-security; urgency=medium

  * SECURITY UPDATE: Multiple security issues
    - debian/patches/CVE-2020-109xx/*.patch: add patches provided by
      upstream to fix issues.
    - CVE-2020-10957
    - CVE-2020-10958
    - CVE-2020-10967

 -- Marc Deslauriers <email address hidden> Wed, 13 May 2020 09:29:10 -0400

CVE-2020-10957 RESERVED
CVE-2020-10958 RESERVED
CVE-2020-10967 RESERVED



About   -   Send Feedback to @ubuntu_updates