UbuntuUpdates.org

Package "dovecot-imapd"

Name: dovecot-imapd

Description:

secure POP3/IMAP server - IMAP daemon

Latest version: 1:2.3.16+dfsg1-3ubuntu2.2
Release: jammy (22.04)
Level: updates
Repository: main
Head package: dovecot
Homepage: https://dovecot.org/

Links


Download "dovecot-imapd"


Other versions of "dovecot-imapd" in Jammy

Repository Area Version
base main 1:2.3.16+dfsg1-3ubuntu2
security main 1:2.3.16+dfsg1-3ubuntu2.1
proposed main 1:2.3.16+dfsg1-3ubuntu2.3

Changelog

Version: 1:2.3.16+dfsg1-3ubuntu2.2 2023-06-01 15:07:21 UTC

  dovecot (1:2.3.16+dfsg1-3ubuntu2.2) jammy; urgency=medium

  * Backport fix + refactoring for handling ssl settings
    (LP: #1991564)
    - d/p/split-master_service_ssl_settings_to_iostream_set-to-client-server-functions.patch
    - d/p/split-off-master_service_ssl_server_settings.patch
    - d/p/remove-unused-master_service_is_ssl_module_loaded.patch
    - d/p/use-ssl-server-settings-only-when-necessary.patch
    - d/p/remove-unnecessary-master_service_flag_use_ssl_settings.patch

 -- Bryce Harrington <email address hidden> Wed, 11 Jan 2023 06:39:32 -0800

Source diff to previous version
1991564 doveadm requires read access to SSL key

Version: 1:2.3.16+dfsg1-3ubuntu2.1 2022-07-11 16:07:18 UTC

  dovecot (1:2.3.16+dfsg1-3ubuntu2.1) jammy-security; urgency=medium

  * SECURITY UPDATE: privilege escalation via multiple passdbs
    - debian/patches/CVE-2022-30550.patch: fix handling passdbs with
      identical driver/args but different mechanisms/username_filter in
      src/auth/auth-request.c, src/auth/auth.c, src/auth/auth.h,
      src/auth/passdb.c, src/auth/passdb.h.
    - CVE-2022-30550

 -- Marc Deslauriers <email address hidden> Thu, 07 Jul 2022 13:13:40 -0400

CVE-2022-30550 Privilege escalation possible in dovecot when imilar master and non-master passdbs are used



About   -   Send Feedback to @ubuntu_updates