Package "dovecot"

Name: dovecot


This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • secure POP3/IMAP server - core files
  • secure POP3/IMAP server - header files
  • secure POP3/IMAP server - IMAP daemon
  • secure POP3/IMAP server - POP3 daemon

Latest version: 1:2.3.13+dfsg1-1ubuntu1.1
Release: hirsute (21.04)
Level: security
Repository: main


Other versions of "dovecot" in Hirsute

Repository Area Version
base main 1:2.3.13+dfsg1-1ubuntu1
base universe 1:2.3.13+dfsg1-1ubuntu1
security universe 1:2.3.13+dfsg1-1ubuntu1.1
updates main 1:2.3.13+dfsg1-1ubuntu1.1
updates universe 1:2.3.13+dfsg1-1ubuntu1.1

Packages in group

Deleted packages are displayed in grey.


Version: 1:2.3.13+dfsg1-1ubuntu1.1 2021-06-21 15:06:44 UTC

  dovecot (1:2.3.13+dfsg1-1ubuntu1.1) hirsute-security; urgency=medium

  * SECURITY UPDATE: incorrectly escapes kid and azp fields in JWT tokens
    - debian/patches/CVE-2021-29157.patch: improve escaping in
      src/lib-dict-extra/dict-fs.c, src/lib-oauth2/oauth2-jwt.c,
    - CVE-2021-29157
  * SECURITY UPDATE: plaintext command injection before STARTTLS
    - debian/patches/CVE-2021-33515.patch: properly handle command queue in
    - CVE-2021-33515

 -- Marc Deslauriers <email address hidden> Wed, 16 Jun 2021 09:02:15 -0400

CVE-2021-29157 oauth2 JWT local validation path traversal
CVE-2021-33515 SMTP Submission service STARTTLS injection

About   -   Send Feedback to @ubuntu_updates