UbuntuUpdates.org

Package "dovecot-lmtpd"

Name: dovecot-lmtpd

Description:

secure POP3/IMAP server - LMTP server
Latest version: 1:2.3.7.2-1ubuntu3.7
Release: focal (20.04)
Level: updates
Repository: universe
Head package: dovecot
Homepage: http://dovecot.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "dovecot-lmtpd"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "dovecot-lmtpd" in Focal

Repository Area Version
base universe 1:2.3.7.2-1ubuntu3
security universe 1:2.3.7.2-1ubuntu3.7

Changelog

Version: 1:2.3.7.2-1ubuntu3.2 2020-08-12 15:07:18 UTC

  dovecot (1:2.3.7.2-1ubuntu3.2) focal-security; urgency=medium

  * SECURITY UPDATE: DoS via deeply nested MIME parts
    - debian/patches/CVE-2020-12100/*.patch: backports of upstream patches
      to fix the issue.
    - CVE-2020-12100
  * SECURITY UPDATE: DoS via incorrect NTLM message buffer size
    - debian/patches/CVE-2020-12673/*.patch: check buffer length in
      src/lib-ntlm/ntlm-message.c.
    - CVE-2020-12673
  * SECURITY UPDATE: DoS via zero-length message
    - debian/patches/CVE-2020-12674/*.patch: fail on zero-length buffer in
      src/auth/mech-rpa.c.
    - CVE-2020-12674

 -- Marc Deslauriers <email address hidden> Wed, 05 Aug 2020 10:26:17 -0400
Source diff to previous version

Version: 1:2.3.7.2-1ubuntu3.1 2020-05-18 13:06:27 UTC

  dovecot (1:2.3.7.2-1ubuntu3.1) focal-security; urgency=medium

  * SECURITY UPDATE: Multiple security issues
    - debian/patches/CVE-2020-109xx/*.patch: add patches provided by
      upstream to fix issues.
    - CVE-2020-10957
    - CVE-2020-10958
    - CVE-2020-10967

 -- Marc Deslauriers <email address hidden> Wed, 13 May 2020 09:29:10 -0400
CVE-2020-10957 RESERVED
CVE-2020-10958 RESERVED
CVE-2020-10967 RESERVED


About   -   Send Feedback to @ubuntu_updates