[ubuntu/focal-security] dovecot 1:2.3.7.2-1ubuntu3.4 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Mon Jun 21 13:45:33 UTC 2021


dovecot (1:2.3.7.2-1ubuntu3.4) focal-security; urgency=medium

  * SECURITY UPDATE: plaintext command injection before STARTTLS
    - debian/patches/CVE-2021-33515.patch: properly handle command queue in
      src/lib-smtp/smtp-server-cmd-starttls.c,
      src/lib-smtp/smtp-server-connection.c.
    - CVE-2021-33515

Date: 2021-06-16 18:02:09.860693+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/dovecot/1:2.3.7.2-1ubuntu3.4
-------------- next part --------------
Sorry, changesfile not available.


More information about the Focal-changes mailing list