[ubuntu/cosmic-security] dovecot 1:2.3.2.1-1ubuntu3.4 (Accepted)

[Marc Deslauriers]

dovecot (1:2.3.2.1-1ubuntu3.4) cosmic-security; urgency=medium

  * SECURITY UPDATE: submission-login denial of service issues
    - debian/patches/CVE-2019-1149x-1.patch: remove unused
      client->pending_starttls in src/submission-login/client.h.
    - debian/patches/CVE-2019-1149x-2.patch: fix crash occurring when
      client disconnects during authentication in
      src/submission-login/client-authenticate.c,
      src/submission-login/client.c.
    - debian/patches/CVE-2019-1149x-3.patch: fix AUTH response error
      handling so that it stops reading more input in
      src/lib-smtp/smtp-server-cmd-auth.c.
    - CVE-2019-11494
    - CVE-2019-11499

Date: 2019-04-29 12:47:13.058953+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/dovecot/1:2.3.2.1-1ubuntu3.4
-------------- next part --------------
Sorry, changesfile not available.