dovecot 1:2.3.11.3+dfsg1-1 source package in Debian

Changelog

dovecot (1:2.3.11.3+dfsg1-1) unstable; urgency=high

  * New upstream release fixes security issues (Closes: #968302)
    - CVE-2020-12100 - Receiving mail with deeply nested MIME parts leads to
      resource exhaustion as Dovecot attempts to parse it.
    - CVE-2020-12673 - Dovecot's NTLM implementation does not correctly check
      message buffer size, which leads to reading past allocation which can
      lead to crash.
    - CVE-2020-12674 - Dovecot's RPA mechanism implementation accepts
      zero-length message, which leads to assert-crash later on.
  * Add libcap-dev to build-dependencies to support dropping linux
    capabilities.

 -- Noah Meyerhans <email address hidden>  Thu, 13 Aug 2020 16:21:24 -0700

Upload details

Uploaded by:
Dovecot Maintainers
Uploaded to:
Sid
Original maintainer:
Dovecot Maintainers
Architectures:
any
Section:
mail
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Downloads

File Size SHA-256 Checksum
dovecot_2.3.11.3+dfsg1-1.dsc 3.9 KiB 84df09ca5b96968daf4b0e3df31c2c5a2e0733f27b2c25b83d2708dcf346878d
dovecot_2.3.11.3+dfsg1.orig-pigeonhole.tar.gz 1.5 MiB 73ffc0cff40b768f8dcf772957b58f3fe8b4a740ffe6fb6e9e66093aec41bc1c
dovecot_2.3.11.3+dfsg1.orig.tar.gz 7.0 MiB d3d9ea9010277f57eb5b9f4166a5d2ba539b172bd6d5a2b2529a6db524baafdc
dovecot_2.3.11.3+dfsg1.orig.tar.gz.asc 866 bytes fd73852972032af5e9b25992d94736d18460938ed21b9b6b10c9f77b5468ff89
dovecot_2.3.11.3+dfsg1-1.debian.tar.xz 59.0 KiB 9e3c79b6f5555491bb9708eaa8596ee7d26da42ee7c6cca113b3fb18c4f61a1e

No changes file available.

Binary packages built by this source