[ubuntu/disco-updates] dovecot 1:2.3.4.1-1ubuntu2.2 (Accepted)

[Ubuntu Archive Robot]

dovecot (1:2.3.4.1-1ubuntu2.2) disco-security; urgency=medium

  * SECURITY UPDATE: submission-login denial of service issues
    - debian/patches/CVE-2019-1149x-1.patch: remove unused
      client->pending_starttls in src/submission-login/client.h.
    - debian/patches/CVE-2019-1149x-2.patch: fix crash occurring when
      client disconnects during authentication in
      src/submission-login/client-authenticate.c,
      src/submission-login/client.c.
    - debian/patches/CVE-2019-1149x-3.patch: fix AUTH response error
      handling so that it stops reading more input in
      src/lib-smtp/smtp-server-cmd-auth.c.
    - CVE-2019-11494
    - CVE-2019-11499

Date: 2019-04-29 12:19:12.800365+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/dovecot/1:2.3.4.1-1ubuntu2.2
-------------- next part --------------
Sorry, changesfile not available.