[ubuntu/kinetic-proposed] dovecot 1:2.3.16+dfsg1-3ubuntu4 (Accepted)

[Marc Deslauriers]

dovecot (1:2.3.16+dfsg1-3ubuntu4) kinetic; urgency=medium

  * SECURITY UPDATE: privilege escalation via multiple passdbs
    - debian/patches/CVE-2022-30550.patch: fix handling passdbs with
      identical driver/args but different mechanisms/username_filter in
      src/auth/auth-request.c, src/auth/auth.c, src/auth/auth.h,
      src/auth/passdb.c, src/auth/passdb.h.
    - CVE-2022-30550

Date: Mon, 11 Jul 2022 10:21:41 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/dovecot/1:2.3.16+dfsg1-3ubuntu4
-------------- next part --------------
Format: 1.8
Date: Mon, 11 Jul 2022 10:21:41 -0400
Source: dovecot
Built-For-Profiles: noudeb
Architecture: source
Version: 1:2.3.16+dfsg1-3ubuntu4
Distribution: kinetic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 dovecot (1:2.3.16+dfsg1-3ubuntu4) kinetic; urgency=medium
 .
   * SECURITY UPDATE: privilege escalation via multiple passdbs
     - debian/patches/CVE-2022-30550.patch: fix handling passdbs with
       identical driver/args but different mechanisms/username_filter in
       src/auth/auth-request.c, src/auth/auth.c, src/auth/auth.h,
       src/auth/passdb.c, src/auth/passdb.h.
     - CVE-2022-30550
Checksums-Sha1:
 132e338610b37385073bfb3702ae10c816f05228 3836 dovecot_2.3.16+dfsg1-3ubuntu4.dsc
 80194badf9e1cd03de4eb05099acfa3e96e36fec 68448 dovecot_2.3.16+dfsg1-3ubuntu4.debian.tar.xz
 dead90d0b77dac669b1a4376a38e3a35688a75ba 8908 dovecot_2.3.16+dfsg1-3ubuntu4_source.buildinfo
Checksums-Sha256:
 970fb1514f6d0920d57edfc11a51bba7edde72cfc4b994170ad689a8e909e9b8 3836 dovecot_2.3.16+dfsg1-3ubuntu4.dsc
 8297382fb58e1bceebc4b7bb5a30dfbee3f17bccfafec252882b50ae944197dc 68448 dovecot_2.3.16+dfsg1-3ubuntu4.debian.tar.xz
 394a7d2675d72dde2fe6d3f357995ee9e2f10ff827997c924567bf7940a4d8c6 8908 dovecot_2.3.16+dfsg1-3ubuntu4_source.buildinfo
Files:
 c3117f85537b8a208295a147efa81132 3836 mail optional dovecot_2.3.16+dfsg1-3ubuntu4.dsc
 94a0579105e4261ae52012e3dfb30c8f 68448 mail optional dovecot_2.3.16+dfsg1-3ubuntu4.debian.tar.xz
 1a5634a24adca440d5503bd8e08d3343 8908 mail optional dovecot_2.3.16+dfsg1-3ubuntu4_source.buildinfo
Original-Maintainer: Dovecot Maintainers <dovecot at packages.debian.org>