[ubuntu/oneiric-security] dovecot 1:2.0.13-1ubuntu3.2 (Accepted)

[Marc Deslauriers]

dovecot (1:2.0.13-1ubuntu3.2) oneiric-security; urgency=low

  * SECURITY UPDATE: Incorrect cert Common Name verification when proxying
    - debian/patches/CVE-2011-4318.patch: correctly validate Common Name
      when a hostname is specified in src/login-common/{login-proxy.c,
      ssl-proxy.*,ssl-proxy-openssl.c}.
    - CVE-2011-4318

Date: Tue, 29 Nov 2011 11:00:23 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/oneiric/+source/dovecot/1:2.0.13-1ubuntu3.2
-------------- next part --------------
Format: 1.8
Date: Tue, 29 Nov 2011 11:00:23 -0500
Source: dovecot
Binary: dovecot-common dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-dbg mail-stack-delivery dovecot-postfix
Architecture: source
Version: 1:2.0.13-1ubuntu3.2
Distribution: oneiric-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 dovecot-common - secure mail server that supports mbox, maildir, dbox and mdbox ma
 dovecot-dbg - debug symbols for Dovecot
 dovecot-dev - header files for the dovecot mail server
 dovecot-gssapi - GSSAPI authentication support for Dovecot
 dovecot-imapd - secure IMAP server that supports mbox, maildir, dbox and mdbox ma
 dovecot-ldap - LDAP support for Dovecot
 dovecot-lmtpd - secure LMTP server for Dovecot
 dovecot-managesieved - secure ManageSieve server for Dovecot
 dovecot-mysql - MySQL support for Dovecot
 dovecot-pgsql - PostgreSQL support for Dovecot
 dovecot-pop3d - secure POP3 server that supports mbox, maildir, dbox and mdbox ma
 dovecot-postfix - mail server delivery agent stack provided by Ubuntu server team
 dovecot-sieve - sieve filters support for Dovecot
 dovecot-sqlite - SQLite support for Dovecot
 mail-stack-delivery - mail server delivery agent stack provided by Ubuntu server team
Changes: 
 dovecot (1:2.0.13-1ubuntu3.2) oneiric-security; urgency=low
 .
   * SECURITY UPDATE: Incorrect cert Common Name verification when proxying
     - debian/patches/CVE-2011-4318.patch: correctly validate Common Name
       when a hostname is specified in src/login-common/{login-proxy.c,
       ssl-proxy.*,ssl-proxy-openssl.c}.
     - CVE-2011-4318
Checksums-Sha1: 
 ae36782e78e148691c4bd1da378debcb506a87fb 2506 dovecot_2.0.13-1ubuntu3.2.dsc
 b2236a2486e581de2fc9c76403917101caceb42e 1002737 dovecot_2.0.13-1ubuntu3.2.debian.tar.gz
Checksums-Sha256: 
 c09089d96ab4975bf86ad9106438ae327958cf9d73dd8a20cbb545dc1e4365cd 2506 dovecot_2.0.13-1ubuntu3.2.dsc
 f373827f5abea33cb09aece655244c43d581d8f09d5d4b98d8cf80582091979c 1002737 dovecot_2.0.13-1ubuntu3.2.debian.tar.gz
Files: 
 d487290c969e4f2f3fc1517128c3940b 2506 mail optional dovecot_2.0.13-1ubuntu3.2.dsc
 890ec75623b0043175a7043e4218d974 1002737 mail optional dovecot_2.0.13-1ubuntu3.2.debian.tar.gz
Original-Maintainer: Dovecot Maintainers <jaldhar-dovecot at debian.org>