Accepted: dovecot 1:1.0.10-1ubuntu3 (source)
Kees Cook
kees at ubuntu.com
Mon Mar 24 23:15:23 GMT 2008
Accepted:
OK: dovecot_1.0.10.orig.tar.gz
OK: dovecot_1.0.10-1ubuntu3.diff.gz
OK: dovecot_1.0.10-1ubuntu3.dsc
-> Component: main Section: mail
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Mon, 24 Mar 2008 14:26:07 -0700
Source: dovecot
Binary: dovecot-common dovecot-dev dovecot-imapd dovecot-pop3d
Architecture: source
Version: 1:1.0.10-1ubuntu3
Distribution: hardy
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Kees Cook <kees at ubuntu.com>
Description:
dovecot-common - secure mail server that supports mbox and maildir mailboxes
dovecot-dev - header files for the dovecot mail server
dovecot-imapd - secure IMAP server that supports mbox and maildir mailboxes
dovecot-pop3d - secure POP3 server that supports mbox and maildir mailboxes
Changes:
dovecot (1:1.0.10-1ubuntu3) hardy; urgency=low
.
* SECURITY UPDATE: mailboxes of other users could be read via symlinks.
* Add upstream-mail-group-fixes.dpatch: upstream fixes (CVE-2008-1199).
* Add upstream-invalid-password-fixes.dpatch: proactive upstream fixes
to avoid future issues in underlying passdb (CVE-2008-1218).
* References
http://dovecot.org/list/dovecot-news/2008-March/000060.html
http://dovecot.org/list/dovecot-news/2008-March/000064.html
Files:
88e9dca8e4727ca24738fd5d453704f1 1283 mail optional dovecot_1.0.10-1ubuntu3.dsc
3a36c0a3ec4fa61314133eed09a74b39 408790 mail optional dovecot_1.0.10-1ubuntu3.diff.gz
Original-Maintainer: Dovecot Maintainers <jaldhar-dovecot at debian.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFH6DXVH/9LqRcGPm0RAjK2AJ454M1WQYXFdZaHmvnHDh2Wwx2/WQCgheYj
KKDZMk815eEXtlpUwDX/Mz4=
=ExGu
-----END PGP SIGNATURE-----
More information about the Hardy-changes
mailing list