Accepted dovecot 1:2.2.13-12~deb8u3 (source) into proposed-updates->stable-new, proposed-updates

Salvatore Bonaccorso Sat, 22 Apr 2017 06:47:50 -0700
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 11 Apr 2017 09:25:59 +0200
Source: dovecot
Binary: dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd 
dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap 
dovecot-gssapi dovecot-sieve dovecot-solr dovecot-lucene dovecot-dbg
Architecture: source
Version: 1:2.2.13-12~deb8u3
Distribution: jessie-security
Urgency: high
Maintainer: Dovecot Maintainers <jaldhar-dove...@debian.org>
Changed-By: Salvatore Bonaccorso <car...@debian.org>
Description: 
 dovecot-core - secure POP3/IMAP server - core files
 dovecot-dbg - secure POP3/IMAP server - debug symbols
 dovecot-dev - secure POP3/IMAP server - header files
 dovecot-gssapi - secure POP3/IMAP server - GSSAPI support
 dovecot-imapd - secure POP3/IMAP server - IMAP daemon
 dovecot-ldap - secure POP3/IMAP server - LDAP support
 dovecot-lmtpd - secure POP3/IMAP server - LMTP server
 dovecot-lucene - secure POP3/IMAP server - Lucene support
 dovecot-managesieved - secure POP3/IMAP server - ManageSieve server
 dovecot-mysql - secure POP3/IMAP server - MySQL support
 dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support
 dovecot-pop3d - secure POP3/IMAP server - POP3 daemon
 dovecot-sieve - secure POP3/IMAP server - Sieve filters support
 dovecot-solr - secure POP3/IMAP server - Solr support
 dovecot-sqlite - secure POP3/IMAP server - SQLite support
Changes:
 dovecot (1:2.2.13-12~deb8u3) jessie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Revert "auth: Do not double-expand key in passdb dict when authenticating
     (CVE-2017-2669)"
     This reverts the applied patch which resulted in no longer interpreting
     placeholders in the keys even once with dict-based userdb or passdb.
     The actual vulnerability was introduced later with "auth-db-dict: Allow
     key name expansion" in 2.2.26.
     Thanks to Nick Thomas <m...@ur.gs> and Aki Tuomi <aki.tu...@dovecot.fi>
Checksums-Sha1: 
 45108e602e9713602357dfba443c211fa55e0386 3430 dovecot_2.2.13-12~deb8u3.dsc
 c473447a3eb4b9d49596be6a4aa79fd4d142893b 735944 
dovecot_2.2.13-12~deb8u3.debian.tar.xz
Checksums-Sha256: 
 f2e11d0735258596e3adee992eaf98709a3f95b135f0513ae6d8bab9e55e97c6 3430 
dovecot_2.2.13-12~deb8u3.dsc
 180a9a609771e91132e319c17bab612983104158ba5d378e418b1f21634331e9 735944 
dovecot_2.2.13-12~deb8u3.debian.tar.xz
Files: 
 56dd04921e48c53685a967bfdbe9676e 3430 mail optional 
dovecot_2.2.13-12~deb8u3.dsc
 957fcd3bf56cd414d3484a4f70889013 735944 mail optional 
dovecot_2.2.13-12~deb8u3.debian.tar.xz
Accepted dovecot 1:2.2.13-12~deb8u3 (source) into proposed-updates->stable-new, proposed-updates

Reply via email to
