dovecot: CVE-2017-14461: rfc822_parse_domain information leak vulnerability

Related Vulnerabilities: CVE-2017-14461   CVE-2017-15130   CVE-2017-15132  

Debian Bug report logs - #891819
dovecot: CVE-2017-14461: rfc822_parse_domain information leak vulnerability

version graph

Reported by: Salvatore Bonaccorso <carnil@debian.org>

Date: Thu, 1 Mar 2018 07:33:02 UTC

Severity: grave

Tags: security, upstream

Found in version dovecot/1:2.2.13-11

Fixed in versions dovecot/1:2.2.34-1, dovecot/1:2.2.27-3+deb9u2, dovecot/1:2.2.13-12~deb8u4

Done: Apollon Oikonomopoulos <apoikos@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, carnil@debian.org, team@security.debian.org, team@security.debian.org, Dovecot Maintainers <jaldhar-dovecot@debian.org>:
Bug#891819; Package src:dovecot. (Thu, 01 Mar 2018 07:33:05 GMT) (full text, mbox, link).


Acknowledgement sent to Salvatore Bonaccorso <carnil@debian.org>:
New Bug report received and forwarded. Copy sent to carnil@debian.org, team@security.debian.org, team@security.debian.org, Dovecot Maintainers <jaldhar-dovecot@debian.org>. (Thu, 01 Mar 2018 07:33:05 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: dovecot: CVE-2017-14461: rfc822_parse_domain information leak vulnerability
Date: Thu, 01 Mar 2018 08:28:52 +0100
Source: dovecot
Version: 1:2.2.13-11
Severity: grave
Tags: security upstream

Hi,

the following vulnerability was published for dovecot.

CVE-2017-14461[0]:
rfc822_parse_domain information leak vulnerability

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2017-14461
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14461

Regards,
Salvatore



Reply sent to Apollon Oikonomopoulos <apoikos@debian.org>:
You have taken responsibility. (Thu, 01 Mar 2018 09:54:05 GMT) (full text, mbox, link).


Notification sent to Salvatore Bonaccorso <carnil@debian.org>:
Bug acknowledged by developer. (Thu, 01 Mar 2018 09:54:05 GMT) (full text, mbox, link).


Message #10 received at 891819-close@bugs.debian.org (full text, mbox, reply):

From: Apollon Oikonomopoulos <apoikos@debian.org>
To: 891819-close@bugs.debian.org
Subject: Bug#891819: fixed in dovecot 1:2.2.34-1
Date: Thu, 01 Mar 2018 09:50:15 +0000
Source: dovecot
Source-Version: 1:2.2.34-1

We believe that the bug you reported is fixed in the latest version of
dovecot, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 891819@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Apollon Oikonomopoulos <apoikos@debian.org> (supplier of updated dovecot package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 01 Mar 2018 10:55:49 +0200
Source: dovecot
Binary: dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-solr dovecot-lucene
Architecture: source amd64
Version: 1:2.2.34-1
Distribution: unstable
Urgency: medium
Maintainer: Dovecot Maintainers <jaldhar-dovecot@debian.org>
Changed-By: Apollon Oikonomopoulos <apoikos@debian.org>
Description:
 dovecot-core - secure POP3/IMAP server - core files
 dovecot-dev - secure POP3/IMAP server - header files
 dovecot-gssapi - secure POP3/IMAP server - GSSAPI support
 dovecot-imapd - secure POP3/IMAP server - IMAP daemon
 dovecot-ldap - secure POP3/IMAP server - LDAP support
 dovecot-lmtpd - secure POP3/IMAP server - LMTP server
 dovecot-lucene - secure POP3/IMAP server - Lucene support
 dovecot-managesieved - secure POP3/IMAP server - ManageSieve server
 dovecot-mysql - secure POP3/IMAP server - MySQL support
 dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support
 dovecot-pop3d - secure POP3/IMAP server - POP3 daemon
 dovecot-sieve - secure POP3/IMAP server - Sieve filters support
 dovecot-solr - secure POP3/IMAP server - Solr support
 dovecot-sqlite - secure POP3/IMAP server - SQLite support
Closes: 888432 891819 891820
Changes:
 dovecot (1:2.2.34-1) unstable; urgency=medium
 .
   * [f53dc9a] New upstream version 2.2.34
     Fixes the following security issues:
      + CVE-2017-15130: TLS SNI config lookups may lead to excessive memory
        usage (Closes: #891820)
      + CVE-2017-14461: rfc822_parse_domain information leak vulnerability
        (Closes: #891819)
      + CVE-2017-15132: auth client leaks memory if SASL authentication is
        aborted (Closes: #888432)
   * [0dc98c6] Do not patch all-settings.c; regenerate it at build time
     instead. Thanks to Aki Tuomi!
   * [e678e3b] Bump dh compat to 11
      + B-D on debhelper (>= 11~)
      + Use dh_installsystemd instead of dh_systemd_enable
   * [271b290] Bump Standards-Version to 4.1.3; no changes needed
   * [3cd6715] d/copyright: bump upstream and debian years
   * [380d1ac] Drop the ENABLED flag from /etc/default/dovecot (but let the
     initscript handle it if it exists)
   * [97d6fae] d/watch: switch upstream URL to https://
Checksums-Sha1:
 b77048eda2dd397cba70688ce8b6c0f43d615bd3 3164 dovecot_2.2.34-1.dsc
 4b1c016d0d3ec4b06a2eb26e7cbbf83e70ac16f9 6181270 dovecot_2.2.34.orig.tar.gz
 9b42445eef114e7ed8f19d291b480a8bedf8622a 879184 dovecot_2.2.34-1.debian.tar.xz
 7635662c616a30336ac8c4c0d1a774b506218d39 10214516 dovecot-core-dbgsym_2.2.34-1_amd64.deb
 9993e696a04f4f4cf1d46e44a1c71af338813919 3587692 dovecot-core_2.2.34-1_amd64.deb
 f36a8d6a5ee79c6214dd86fbd23d0d054ff57322 1126556 dovecot-dev_2.2.34-1_amd64.deb
 343e937152c327cd1847b473cb6b1fcd9b22158a 18912 dovecot-gssapi-dbgsym_2.2.34-1_amd64.deb
 ca3bfd4c67c9ddca88c0fa4734b1d15584adb9b4 829248 dovecot-gssapi_2.2.34-1_amd64.deb
 0d6c765ea6cc28a5c889754167746bca78243061 708128 dovecot-imapd-dbgsym_2.2.34-1_amd64.deb
 325b2130122d56bacc40c4a340a1ccd09c48636f 972196 dovecot-imapd_2.2.34-1_amd64.deb
 8c3c9106e9c22961779e9c694e9c7f9576f181cd 597272 dovecot-ldap-dbgsym_2.2.34-1_amd64.deb
 ed7441e6ec303af0beed201bf535c245bf9670e9 1041068 dovecot-ldap_2.2.34-1_amd64.deb
 b6b5fe69e5bcd9abe76e813d06a6501d8d00bc2a 84452 dovecot-lmtpd-dbgsym_2.2.34-1_amd64.deb
 2a43aed8b82d383c2f741875e8f5297e019cc4f0 843764 dovecot-lmtpd_2.2.34-1_amd64.deb
 942dbc6904cb41bb9fb297dae7e1a77de61825aa 136500 dovecot-lucene-dbgsym_2.2.34-1_amd64.deb
 7f940d2f677dea39bb607920ff7ef6379541bfc4 848236 dovecot-lucene_2.2.34-1_amd64.deb
 9b1e4501973d1f246710bb7082f0a42b280910c6 134620 dovecot-managesieved-dbgsym_2.2.34-1_amd64.deb
 6c52687f794459562cab1dad82922add09225f3f 860468 dovecot-managesieved_2.2.34-1_amd64.deb
 41828d18a6b2a29e6604f3cbd5523396e857d2da 19528 dovecot-mysql-dbgsym_2.2.34-1_amd64.deb
 0b3f3260c028ebe7df4c4baef15bbc43825e76a5 830172 dovecot-mysql_2.2.34-1_amd64.deb
 205c2dd7887d7c45b2e2f8a9811141e7c953323a 24260 dovecot-pgsql-dbgsym_2.2.34-1_amd64.deb
 f3d2993f5b755031ffa703b3095fd7b74c27caf5 833072 dovecot-pgsql_2.2.34-1_amd64.deb
 34d0598c72d488e322c3085748d2cb02fc49bbdb 81268 dovecot-pop3d-dbgsym_2.2.34-1_amd64.deb
 3290d7da9c25e7a221f75b5c822a524a9f8d784d 850912 dovecot-pop3d_2.2.34-1_amd64.deb
 7f560d3d1b66ce36c5b7267d58a0341056992fbe 1654948 dovecot-sieve-dbgsym_2.2.34-1_amd64.deb
 3589f7aaf2842270bd6dff63e230b54010ab4f05 1129152 dovecot-sieve_2.2.34-1_amd64.deb
 341a06ea99fd04c047149116f9c67eece5e02e21 91600 dovecot-solr-dbgsym_2.2.34-1_amd64.deb
 1931c3dcd59ee3d246231dc699c9c58a6e9bb55c 841088 dovecot-solr_2.2.34-1_amd64.deb
 6ae096a49ecb6029d9c9c1233b6b4964692d93e5 12672 dovecot-sqlite-dbgsym_2.2.34-1_amd64.deb
 218156ad769c62165568cb5c7408158bce6edb6e 828148 dovecot-sqlite_2.2.34-1_amd64.deb
 881af6cbf6c736246fe338659c96bf6a55aaef29 15004 dovecot_2.2.34-1_amd64.buildinfo
Checksums-Sha256:
 602be3064c6a872b8a5c4f70ba548d529e9da2aaa7b4d83c45e91ac21b898638 3164 dovecot_2.2.34-1.dsc
 5e92a4325409e66b343f6aaa67174b8921ce83d0df792c6eeb0b7b7e2c808353 6181270 dovecot_2.2.34.orig.tar.gz
 ed45d14ec501d06e5542fd653aec00d8744558d4d6316939410858b60a2864b8 879184 dovecot_2.2.34-1.debian.tar.xz
 9d6330e24ea825050a79ddf2541bc87272690f0754a34b2923ea5ce8336aa971 10214516 dovecot-core-dbgsym_2.2.34-1_amd64.deb
 8ed56652c14a9d7e24d57288438d04fdac2fb7e2fb15e65c69c2512853c082b2 3587692 dovecot-core_2.2.34-1_amd64.deb
 fd0e10f084f604d4851e29760087493d9778c2e6e73b9016f1a0ff2d5ddbe35f 1126556 dovecot-dev_2.2.34-1_amd64.deb
 8f76bd970320757624015acbe64f883eb9e793b571932b31812e531c43d4ed59 18912 dovecot-gssapi-dbgsym_2.2.34-1_amd64.deb
 88746ec16980a6bd28f34508acfd63ed95fa7ef3f11c70938a7e2a0f05ce95fc 829248 dovecot-gssapi_2.2.34-1_amd64.deb
 7d9375aa4b6f1d07b9e9e1c3cc54f26278169ad8b7c514ebbf40cf900a342116 708128 dovecot-imapd-dbgsym_2.2.34-1_amd64.deb
 f27257f60f3dc01ce1e2781c4dcf5c6c2aa58563b993a23041c909828f14aaba 972196 dovecot-imapd_2.2.34-1_amd64.deb
 493510b96256097fd3287492671457e0577d0fc84e3f8b7e8de91744981d631a 597272 dovecot-ldap-dbgsym_2.2.34-1_amd64.deb
 add3acf71af14817469f027a5010f542cc01adc4f972922210c3d479f73c10a9 1041068 dovecot-ldap_2.2.34-1_amd64.deb
 f087f42d8d06e1522d02e46ba0eb2bbc5113f53b58815abf1038ec13f66005d1 84452 dovecot-lmtpd-dbgsym_2.2.34-1_amd64.deb
 4d7d408d5cdf8701b314aa273c78fb317f6c0d225698dd922927e086213ca660 843764 dovecot-lmtpd_2.2.34-1_amd64.deb
 9ea2698dd6f28d92344454728dfa197b0980805e5dc0d2bcf276649b01b26e31 136500 dovecot-lucene-dbgsym_2.2.34-1_amd64.deb
 95d17ac2334817a5eea8aeb705a85656f7c24ab25b56dd9a700fb439ef76e272 848236 dovecot-lucene_2.2.34-1_amd64.deb
 77256f6898db95cb07297d114b65f769523e2e7fe0e239bc562e3cae2ead180f 134620 dovecot-managesieved-dbgsym_2.2.34-1_amd64.deb
 a9efac573dba61cbf239983cd7eb79860206aa3c61132ee17d0a9965c25410df 860468 dovecot-managesieved_2.2.34-1_amd64.deb
 d57dc5f7b47c6c871c2de30ae1907a2bf416d58eb5c2940bd788a67196604ad8 19528 dovecot-mysql-dbgsym_2.2.34-1_amd64.deb
 71636b823aca2e40e877958ec74b477b24e3b8ba2dcb43a3e26d49113f8480c8 830172 dovecot-mysql_2.2.34-1_amd64.deb
 d6fc7290e59bd3a28c78c6a1b9bab7984f07d8dd600a961c3b567ae2e3d014f1 24260 dovecot-pgsql-dbgsym_2.2.34-1_amd64.deb
 20da36e5bd3b710fd2387e5208e15740272416f9a2a72d8b1e3b7a365b3269fd 833072 dovecot-pgsql_2.2.34-1_amd64.deb
 f23237dbe26c1456b4acdde244e6b83018cdb518c86424a9bda6e0edfcc8fd5d 81268 dovecot-pop3d-dbgsym_2.2.34-1_amd64.deb
 766bb61f1d8319794cdba05ca0c5589111962b6ac6ff06adbf529a43b6fee527 850912 dovecot-pop3d_2.2.34-1_amd64.deb
 5bce5a8cf6e40484259f971a1c2c4bcf2f8f5570395178f39cc51d02f34f2303 1654948 dovecot-sieve-dbgsym_2.2.34-1_amd64.deb
 efe363ce2c7c57afbd1544079280c43733b9af76ac382225b5cdbdf2b9ed6373 1129152 dovecot-sieve_2.2.34-1_amd64.deb
 ba24ffd6935d357b09ae303bfa94fc991ffb71cf31c13bc1380f329f75e05497 91600 dovecot-solr-dbgsym_2.2.34-1_amd64.deb
 9fd350bcb49f1f36964b494aa6fe05997e94463bdb634e1b753b7256c0db109d 841088 dovecot-solr_2.2.34-1_amd64.deb
 e9301c29e01122be9e1df5cacc3a10805eebb2bd27cf69469e30d2afaef2575a 12672 dovecot-sqlite-dbgsym_2.2.34-1_amd64.deb
 5a7e56b56f3daf48561e9939c6ad0bcd950c5d9e2802ab415094a1b511a41cfc 828148 dovecot-sqlite_2.2.34-1_amd64.deb
 22eda30a7a07fbae534b4685f902f9e874636037991aad37c6408582b858efe6 15004 dovecot_2.2.34-1_amd64.buildinfo
Files:
 5d2ce515c43dfd75957e2ef83a997fe7 3164 mail optional dovecot_2.2.34-1.dsc
 29a2e7812c34e6b35db4f86260fed197 6181270 mail optional dovecot_2.2.34.orig.tar.gz
 759e8d3bb83df7665c38183c4811e4eb 879184 mail optional dovecot_2.2.34-1.debian.tar.xz
 cd833ef3caefd2824e7175911f46dfa3 10214516 debug optional dovecot-core-dbgsym_2.2.34-1_amd64.deb
 8f76cc4ca80990707dc7729d490918a8 3587692 mail optional dovecot-core_2.2.34-1_amd64.deb
 e6994490ba0a26ea7de8be4d3ab34c9e 1126556 mail optional dovecot-dev_2.2.34-1_amd64.deb
 12cfdd9ae7674f8503a5c099a2b593a1 18912 debug optional dovecot-gssapi-dbgsym_2.2.34-1_amd64.deb
 a4a62c74426e79d532e4ba3406ee1444 829248 mail optional dovecot-gssapi_2.2.34-1_amd64.deb
 d9b2d64e91e195a968df1d67104547a5 708128 debug optional dovecot-imapd-dbgsym_2.2.34-1_amd64.deb
 49704f38ec739fbd97ecd34b6f205ac0 972196 mail optional dovecot-imapd_2.2.34-1_amd64.deb
 3e84c0dd370b83d52516ea63f76b0dd6 597272 debug optional dovecot-ldap-dbgsym_2.2.34-1_amd64.deb
 8a7ac1d3f5a605fddb9f35a0bd31c9d9 1041068 mail optional dovecot-ldap_2.2.34-1_amd64.deb
 d3d76bcba12f2de8a7f648cdd86efb6f 84452 debug optional dovecot-lmtpd-dbgsym_2.2.34-1_amd64.deb
 48b141e3851f50b11f56fc4acee12d19 843764 mail optional dovecot-lmtpd_2.2.34-1_amd64.deb
 7a205bb9a2318187e9ef981da4d2354d 136500 debug optional dovecot-lucene-dbgsym_2.2.34-1_amd64.deb
 c694353c79828ecdd244940c3fc27b52 848236 mail optional dovecot-lucene_2.2.34-1_amd64.deb
 c32c33f6df493e2408632cea337026d0 134620 debug optional dovecot-managesieved-dbgsym_2.2.34-1_amd64.deb
 65268a4814d23940b6537d7fec48c552 860468 mail optional dovecot-managesieved_2.2.34-1_amd64.deb
 5af519a0d01f7674ab0bb488b3c64e74 19528 debug optional dovecot-mysql-dbgsym_2.2.34-1_amd64.deb
 de4fc4ca543ffa698a9437a1f82af14f 830172 mail optional dovecot-mysql_2.2.34-1_amd64.deb
 8daa613ed81ca23680d92066ab8ab1f7 24260 debug optional dovecot-pgsql-dbgsym_2.2.34-1_amd64.deb
 8a4c310fcf20fdcda50a301a9886facc 833072 mail optional dovecot-pgsql_2.2.34-1_amd64.deb
 fda95a28b9a92a45eb41bd39814c5e86 81268 debug optional dovecot-pop3d-dbgsym_2.2.34-1_amd64.deb
 697e3a7d8e1e36cb3e9dbdb6f3a53fc9 850912 mail optional dovecot-pop3d_2.2.34-1_amd64.deb
 578744859d1d99c2373c763fabb8eb52 1654948 debug optional dovecot-sieve-dbgsym_2.2.34-1_amd64.deb
 1cd8e96d2e3de5ce2c3a2729b9e5ad5c 1129152 mail optional dovecot-sieve_2.2.34-1_amd64.deb
 63cfc30936be702e413af430f43e5d5a 91600 debug optional dovecot-solr-dbgsym_2.2.34-1_amd64.deb
 63ddfa63cf7f1121b783eed52720f138 841088 mail optional dovecot-solr_2.2.34-1_amd64.deb
 04b8d2c24159001d0aa66b4bfa5f60e8 12672 debug optional dovecot-sqlite-dbgsym_2.2.34-1_amd64.deb
 b1157e2779bf4f51a87e11c3309ae4b9 828148 mail optional dovecot-sqlite_2.2.34-1_amd64.deb
 c6cd2e0235db68fd90a9577cc4ad8049 15004 mail optional dovecot_2.2.34-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=0x20
-----END PGP SIGNATURE-----




Reply sent to Apollon Oikonomopoulos <apoikos@debian.org>:
You have taken responsibility. (Sat, 03 Mar 2018 21:03:17 GMT) (full text, mbox, link).


Notification sent to Salvatore Bonaccorso <carnil@debian.org>:
Bug acknowledged by developer. (Sat, 03 Mar 2018 21:03:17 GMT) (full text, mbox, link).


Message #15 received at 891819-close@bugs.debian.org (full text, mbox, reply):

From: Apollon Oikonomopoulos <apoikos@debian.org>
To: 891819-close@bugs.debian.org
Subject: Bug#891819: fixed in dovecot 1:2.2.27-3+deb9u2
Date: Sat, 03 Mar 2018 21:02:09 +0000
Source: dovecot
Source-Version: 1:2.2.27-3+deb9u2

We believe that the bug you reported is fixed in the latest version of
dovecot, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 891819@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Apollon Oikonomopoulos <apoikos@debian.org> (supplier of updated dovecot package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 01 Mar 2018 15:15:45 +0200
Source: dovecot
Binary: dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-solr dovecot-lucene dovecot-dbg
Architecture: source amd64
Version: 1:2.2.27-3+deb9u2
Distribution: stretch-security
Urgency: high
Maintainer: Dovecot Maintainers <jaldhar-dovecot@debian.org>
Changed-By: Apollon Oikonomopoulos <apoikos@debian.org>
Description:
 dovecot-core - secure POP3/IMAP server - core files
 dovecot-dbg - secure POP3/IMAP server - debug symbols
 dovecot-dev - secure POP3/IMAP server - header files
 dovecot-gssapi - secure POP3/IMAP server - GSSAPI support
 dovecot-imapd - secure POP3/IMAP server - IMAP daemon
 dovecot-ldap - secure POP3/IMAP server - LDAP support
 dovecot-lmtpd - secure POP3/IMAP server - LMTP server
 dovecot-lucene - secure POP3/IMAP server - Lucene support
 dovecot-managesieved - secure POP3/IMAP server - ManageSieve server
 dovecot-mysql - secure POP3/IMAP server - MySQL support
 dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support
 dovecot-pop3d - secure POP3/IMAP server - POP3 daemon
 dovecot-sieve - secure POP3/IMAP server - Sieve filters support
 dovecot-solr - secure POP3/IMAP server - Solr support
 dovecot-sqlite - secure POP3/IMAP server - SQLite support
Closes: 888432 891819 891820
Changes:
 dovecot (1:2.2.27-3+deb9u2) stretch-security; urgency=high
 .
   * [794e743] Fix CVE-2017-14461: rfc822_parse_domain information leak
     vulnerability (Closes: #891819)
   * [530ca6d] Fix CVE-2017-15130: TLS SNI config lookups are inefficient and
     can be used for DoS (Closes: #891820)
      + Use dh-autoreconf, as src/Makefile.in needs to be regenerated. Also
        disable dovecot_name.patch, since it changes dovecot's banner in
        conjunction with dh_autoreconf.
   * [68c2156] Fix CVE-2017-15132: memory leak on aborted SASL auth (Closes:
     #888432)
Checksums-Sha1:
 4cfcc5d55d83674da715edb28218f5c6a5df93d1 3416 dovecot_2.2.27-3+deb9u2.dsc
 e007081c43b06fa2670d556de7a62bbb87fc637c 5794668 dovecot_2.2.27.orig.tar.gz
 7f79a204568dc0a59ac80edb5c9e03c1a4f89f07 862944 dovecot_2.2.27-3+deb9u2.debian.tar.xz
 1271b4fce8a8521c6b36fcc0466ff9882266dd7e 3324024 dovecot-core_2.2.27-3+deb9u2_amd64.deb
 2fc9e8eef25edcdc885c3d517c6f53042d4c89c4 14125794 dovecot-dbg_2.2.27-3+deb9u2_amd64.deb
 146d8dd2723189aa9d3089303b2b3ed0f288cb9b 960708 dovecot-dev_2.2.27-3+deb9u2_amd64.deb
 7ced1fef1d78646966527199c82898c31d283ba8 678084 dovecot-gssapi_2.2.27-3+deb9u2_amd64.deb
 d6ada500d5361dbb438eb2a0c45c66c981a5419c 813812 dovecot-imapd_2.2.27-3+deb9u2_amd64.deb
 429b12ab17eb73651a701072c84e357154a6e4e6 877588 dovecot-ldap_2.2.27-3+deb9u2_amd64.deb
 b58c59e372b93c2f60a54ea776d2d2602714ed11 691994 dovecot-lmtpd_2.2.27-3+deb9u2_amd64.deb
 0b15e80c1287596e573c000b073d1669f47f3945 696544 dovecot-lucene_2.2.27-3+deb9u2_amd64.deb
 cafafe0be05c6d3380dc41d0f0924a4a6cfe3a1f 708036 dovecot-managesieved_2.2.27-3+deb9u2_amd64.deb
 e16458d4dc8dd4ae82fc75964b0b82950ca8efc7 679048 dovecot-mysql_2.2.27-3+deb9u2_amd64.deb
 8a5ca7128582c7f145fd3228edf6165b5b6e9995 681850 dovecot-pgsql_2.2.27-3+deb9u2_amd64.deb
 5ef6389d3ac18ddb9d9c4d42ed52c986ba42f65b 698210 dovecot-pop3d_2.2.27-3+deb9u2_amd64.deb
 3421633da72b26ff9832ee39bb6f9e45c42dde75 970448 dovecot-sieve_2.2.27-3+deb9u2_amd64.deb
 cae8d1006e55acbd6db356e6d372b448c3dc5ca8 689672 dovecot-solr_2.2.27-3+deb9u2_amd64.deb
 9dd14f4906fc3d5e33779c21e33dc82b6dea944f 677076 dovecot-sqlite_2.2.27-3+deb9u2_amd64.deb
 06da7abf15f8ef88ecaae58a62393aceb2d83cf7 12297 dovecot_2.2.27-3+deb9u2_amd64.buildinfo
Checksums-Sha256:
 c17238c824dff83a841e167c9d5f97374d6baade9444b4a95cd31558d392c6f2 3416 dovecot_2.2.27-3+deb9u2.dsc
 897f92a87cda4b27b243f8149ce0ba7b7e71a2be8fb7994eb0a025e54cde18e9 5794668 dovecot_2.2.27.orig.tar.gz
 c7771f0ec59e5fb4f2da546267757e611030a2098bc72e5ece8ddc82bb6e4e84 862944 dovecot_2.2.27-3+deb9u2.debian.tar.xz
 8c9dabd7cc5cc05aa9f3cac4e5ce5f3b3d2c4ae01d55a5abf1130510a974d771 3324024 dovecot-core_2.2.27-3+deb9u2_amd64.deb
 1c06afa8ee752cdab98ebd12bbb46b8a60e2de8a7715225119f2b4888b6e80c5 14125794 dovecot-dbg_2.2.27-3+deb9u2_amd64.deb
 ff0130188b485760a01a7fa0a7aa03320a4a1ee97ed786f5b98a1a796c62f6a6 960708 dovecot-dev_2.2.27-3+deb9u2_amd64.deb
 aa50df96bc6089e0cfc4b6e4a9d0c318336dbc65dabfc8dc2317f74170639154 678084 dovecot-gssapi_2.2.27-3+deb9u2_amd64.deb
 e128e3b973a0cefb81d177ba430638559a85194d614058f68d8a2eafc8af50c3 813812 dovecot-imapd_2.2.27-3+deb9u2_amd64.deb
 8e31176456b25ac1d3abb9ddb5301a895dc196fff808c4a332e78a706d58e244 877588 dovecot-ldap_2.2.27-3+deb9u2_amd64.deb
 f66b131dfa9fbec4474bfa26dc01f43807a2f31651c882b1f79a58adda861c54 691994 dovecot-lmtpd_2.2.27-3+deb9u2_amd64.deb
 9fb6327a2a10a9c3750f1315d374b502cfc99569ea0b36cc31b51f77524401ae 696544 dovecot-lucene_2.2.27-3+deb9u2_amd64.deb
 390b3a9ad8dc4c6d60353cffc9544407d3b4704dc422b9182b3a64ba9e019bf3 708036 dovecot-managesieved_2.2.27-3+deb9u2_amd64.deb
 042d13fe5d60453c02db240085bfc7f3c1f6b492f32cf381a0b4cf22cd66de44 679048 dovecot-mysql_2.2.27-3+deb9u2_amd64.deb
 af321373535c005946df4f8cb5dfff7b625717912f335e95a0950439e87ecf61 681850 dovecot-pgsql_2.2.27-3+deb9u2_amd64.deb
 6cf7a1165b8d8f253eab7661f24ac798805a4144d02312c8918cbb87f5e219d9 698210 dovecot-pop3d_2.2.27-3+deb9u2_amd64.deb
 090b48be85a0ffd091e501eafbabd99b9668fa94cc49f5a9046abc42cd8c5fed 970448 dovecot-sieve_2.2.27-3+deb9u2_amd64.deb
 336f1aa2f9f274efc0124e49ac72be1bf7b81c2a6326a1eac94ab63c3c328dba 689672 dovecot-solr_2.2.27-3+deb9u2_amd64.deb
 0f76da54dbd9b372b15efa910ab6fcd246ae0c4a6d8648186e11431aed024588 677076 dovecot-sqlite_2.2.27-3+deb9u2_amd64.deb
 3d8d68f6133253fcfd841ada1359a4fc4dae368d51700de83fb2100a6df81993 12297 dovecot_2.2.27-3+deb9u2_amd64.buildinfo
Files:
 d6b6a38912936bd44f0d25df9617192f 3416 mail optional dovecot_2.2.27-3+deb9u2.dsc
 20133518f5bc0e64dd07ce55b83df2fb 5794668 mail optional dovecot_2.2.27.orig.tar.gz
 364b4f75215711cd284dd35e66b92706 862944 mail optional dovecot_2.2.27-3+deb9u2.debian.tar.xz
 36e22c74067c74b253079cdf491dbf50 3324024 mail optional dovecot-core_2.2.27-3+deb9u2_amd64.deb
 004afcca0edc57f12c89ce38f894cce6 14125794 debug extra dovecot-dbg_2.2.27-3+deb9u2_amd64.deb
 2b7a2d432ffa4477eabaf852f961a485 960708 mail optional dovecot-dev_2.2.27-3+deb9u2_amd64.deb
 3ef61a16214c3c1f04ff05e414d24403 678084 mail optional dovecot-gssapi_2.2.27-3+deb9u2_amd64.deb
 9a9cc36113b0cef7aba4781af7199661 813812 mail optional dovecot-imapd_2.2.27-3+deb9u2_amd64.deb
 cf941a501e84f5147af89a7702eeb19e 877588 mail optional dovecot-ldap_2.2.27-3+deb9u2_amd64.deb
 ac3bd76d4b0d3a527cf4af0cecc3e0de 691994 mail optional dovecot-lmtpd_2.2.27-3+deb9u2_amd64.deb
 e5d0d70f00ead574584b5afb67d1787c 696544 mail optional dovecot-lucene_2.2.27-3+deb9u2_amd64.deb
 adfe179422205035d17eb2ac1934ad6d 708036 mail optional dovecot-managesieved_2.2.27-3+deb9u2_amd64.deb
 6067f16286eea1d13f7e011da65c7bdb 679048 mail optional dovecot-mysql_2.2.27-3+deb9u2_amd64.deb
 066371236d24501037386e09e8dbd1bf 681850 mail optional dovecot-pgsql_2.2.27-3+deb9u2_amd64.deb
 75333cc60838c70b50d39e308a6e5ca5 698210 mail optional dovecot-pop3d_2.2.27-3+deb9u2_amd64.deb
 a6937604779e029a34249707b9b3dd1d 970448 mail optional dovecot-sieve_2.2.27-3+deb9u2_amd64.deb
 f243339388d83081a6a592f1f5cd6a10 689672 mail optional dovecot-solr_2.2.27-3+deb9u2_amd64.deb
 1bdd01ce24309ccaa6be20e0ca2e2c19 677076 mail optional dovecot-sqlite_2.2.27-3+deb9u2_amd64.deb
 5a4d8ad4922218c51c7e8286bb613f81 12297 mail optional dovecot_2.2.27-3+deb9u2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=ukwA
-----END PGP SIGNATURE-----




Reply sent to Apollon Oikonomopoulos <apoikos@debian.org>:
You have taken responsibility. (Sat, 10 Mar 2018 23:21:47 GMT) (full text, mbox, link).


Notification sent to Salvatore Bonaccorso <carnil@debian.org>:
Bug acknowledged by developer. (Sat, 10 Mar 2018 23:21:47 GMT) (full text, mbox, link).


Message #20 received at 891819-close@bugs.debian.org (full text, mbox, reply):

From: Apollon Oikonomopoulos <apoikos@debian.org>
To: 891819-close@bugs.debian.org
Subject: Bug#891819: fixed in dovecot 1:2.2.13-12~deb8u4
Date: Sat, 10 Mar 2018 23:17:52 +0000
Source: dovecot
Source-Version: 1:2.2.13-12~deb8u4

We believe that the bug you reported is fixed in the latest version of
dovecot, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 891819@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Apollon Oikonomopoulos <apoikos@debian.org> (supplier of updated dovecot package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 01 Mar 2018 19:12:05 +0200
Source: dovecot
Binary: dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-solr dovecot-lucene dovecot-dbg
Architecture: source amd64
Version: 1:2.2.13-12~deb8u4
Distribution: jessie-security
Urgency: high
Maintainer: Dovecot Maintainers <jaldhar-dovecot@debian.org>
Changed-By: Apollon Oikonomopoulos <apoikos@debian.org>
Description:
 dovecot-core - secure POP3/IMAP server - core files
 dovecot-dbg - secure POP3/IMAP server - debug symbols
 dovecot-dev - secure POP3/IMAP server - header files
 dovecot-gssapi - secure POP3/IMAP server - GSSAPI support
 dovecot-imapd - secure POP3/IMAP server - IMAP daemon
 dovecot-ldap - secure POP3/IMAP server - LDAP support
 dovecot-lmtpd - secure POP3/IMAP server - LMTP server
 dovecot-lucene - secure POP3/IMAP server - Lucene support
 dovecot-managesieved - secure POP3/IMAP server - ManageSieve server
 dovecot-mysql - secure POP3/IMAP server - MySQL support
 dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support
 dovecot-pop3d - secure POP3/IMAP server - POP3 daemon
 dovecot-sieve - secure POP3/IMAP server - Sieve filters support
 dovecot-solr - secure POP3/IMAP server - Solr support
 dovecot-sqlite - secure POP3/IMAP server - SQLite support
Closes: 888432 891819 891820
Changes:
 dovecot (1:2.2.13-12~deb8u4) jessie-security; urgency=high
 .
   * [eb6eab8] Fix CVE-2017-14461: rfc822_parse_domain information leak
     (Closes: #891819)
   * [df2ccf9] Fix CVE-2017-15130: TLS SNI config lookups are inefficient and
     can be used for DoS (Closes: #891820)
      + Use dh-autoreconf, as src/Makefile.in needs to be regenerated. Also
        disable dovecot_name.patch, since it changes dovecot's banner in
        conjunction with dh_autoreconf.
   * [292742f] Fix CVE-2017-15132: memory leak on aborted SASL auth
     (Closes: #888432)
   * [3e2ccd1] Add myself to Uploaders
Checksums-Sha1:
 672ac1c717a4b282ddf7a257da44d4449e6b178a 3335 dovecot_2.2.13-12~deb8u4.dsc
 ee8efc77cb9d502dc416ae4fba242adc5f01c163 4613824 dovecot_2.2.13.orig.tar.gz
 3b2c547fbb71013f208d4af025ba7b247f538977 746136 dovecot_2.2.13-12~deb8u4.debian.tar.xz
 48e4c8d80e2210b20aed9d4860d74507449cfd69 2659458 dovecot-core_2.2.13-12~deb8u4_amd64.deb
 9149f367fcca0d2dd588ca171000a0863a4cd7da 750702 dovecot-dev_2.2.13-12~deb8u4_amd64.deb
 f26879470c738195253c70069f5b5c60010a1723 646064 dovecot-imapd_2.2.13-12~deb8u4_amd64.deb
 7a7d63c3c1e072cffeec5979f9fe0a02093d1b7d 550854 dovecot-pop3d_2.2.13-12~deb8u4_amd64.deb
 f98d39a658a309811545fbf0b950e1407017f67e 542652 dovecot-lmtpd_2.2.13-12~deb8u4_amd64.deb
 36e1dcc76139c5d05e4213e61ee412b4472a3c53 569726 dovecot-managesieved_2.2.13-12~deb8u4_amd64.deb
 93f4822b431eb2855aac1b9c67e3f9cf1f83b401 534078 dovecot-pgsql_2.2.13-12~deb8u4_amd64.deb
 32ab8eb4c44023a4a7d4c2e9cbf1581cc0ea6d02 531716 dovecot-mysql_2.2.13-12~deb8u4_amd64.deb
 8435022186ad05c316397eea9eba5d42d76010e0 529862 dovecot-sqlite_2.2.13-12~deb8u4_amd64.deb
 46c75882c19f20dec299d47fc29c70db7d2c6249 545246 dovecot-ldap_2.2.13-12~deb8u4_amd64.deb
 19b78c3b921f4c7af784f3116ab8ac04939df88a 531106 dovecot-gssapi_2.2.13-12~deb8u4_amd64.deb
 217038f0ed1d8e80c486df330f089b5ac9c58bde 765088 dovecot-sieve_2.2.13-12~deb8u4_amd64.deb
 37f3db9eda64c8f96906b6e85b241bbab6d572a9 542112 dovecot-solr_2.2.13-12~deb8u4_amd64.deb
 6344508c4b6ababe59f8f4e8a5e2a1a0b11780f6 549200 dovecot-lucene_2.2.13-12~deb8u4_amd64.deb
 d7855578205ee3e91e96cf5e27e19b0a78b468bc 6647346 dovecot-dbg_2.2.13-12~deb8u4_amd64.deb
Checksums-Sha256:
 6ef74b76d29e5ed81290aa861bf67642a10e35fa033a4c621b959ec947e89240 3335 dovecot_2.2.13-12~deb8u4.dsc
 133cf3d2aa81733f6688ec986c91dbe07602fad81e856ba3d8046ffca85d9dce 4613824 dovecot_2.2.13.orig.tar.gz
 2789570bae0cb0a090679ca7d1ea5943d77fa35629b644c7c36bf5f5aca8133a 746136 dovecot_2.2.13-12~deb8u4.debian.tar.xz
 507072b9f7395ac367858f6e77dc1a0d70f7513f9e55426a944da24d2e776ecc 2659458 dovecot-core_2.2.13-12~deb8u4_amd64.deb
 e3396d64afb413a05c8886361e088b058e08f206f21c6a254482dafbc56be3b7 750702 dovecot-dev_2.2.13-12~deb8u4_amd64.deb
 328e4785178827606b9ca55cb6f37ce24e5131fece87b50270fb95e1280b3ad4 646064 dovecot-imapd_2.2.13-12~deb8u4_amd64.deb
 702eafb22a5df8314bb409c8ce3db4432f05ec2f10a4c35907d069d207608970 550854 dovecot-pop3d_2.2.13-12~deb8u4_amd64.deb
 58cad6c318f600c57ad46483cb288c33c45de634d0e3c4e10af0bf30bd5d1a9d 542652 dovecot-lmtpd_2.2.13-12~deb8u4_amd64.deb
 1b9d3b21735f0757f92d40c0ee99be584d64f1975821274fd3cc8e35ef3a11e5 569726 dovecot-managesieved_2.2.13-12~deb8u4_amd64.deb
 e3bc14c86a8599a565de74810da486e6a7871b63abe60fb6ec5a15e7aa0c48f4 534078 dovecot-pgsql_2.2.13-12~deb8u4_amd64.deb
 a31681f391cf0a1ac26a34a362ddb996dbfd6f68075b27b7a6f978b3484f975a 531716 dovecot-mysql_2.2.13-12~deb8u4_amd64.deb
 ab1c9b14ca2e1b0dbcc5b39482851677892c35a2a352006304ffb30b00eb0a7e 529862 dovecot-sqlite_2.2.13-12~deb8u4_amd64.deb
 4bef583d21a134969753733cd968e1cdcabfbb40266f925d648ee1699ea17778 545246 dovecot-ldap_2.2.13-12~deb8u4_amd64.deb
 39b8dd10e9b49f2c37b973e817c5f1a0c0b0363fc0397fb817f09b25ddaabc14 531106 dovecot-gssapi_2.2.13-12~deb8u4_amd64.deb
 06356a5e03e97b037cc31b010a807fd047b8bea4d5c44c70e6dc8e14ec70642a 765088 dovecot-sieve_2.2.13-12~deb8u4_amd64.deb
 8821ce62cb94cc8b2e51f16cd1ceae9cd2f6840697ecc0e9a36237ca11890dc2 542112 dovecot-solr_2.2.13-12~deb8u4_amd64.deb
 cae36dbe7b9a83af0ef6933bf29df26c7cd51863639c4cadb50ea7c992473b1c 549200 dovecot-lucene_2.2.13-12~deb8u4_amd64.deb
 07e411eea445a5c3757f06be0c41616b7c7f452bc59be35cc1bf573a658b5662 6647346 dovecot-dbg_2.2.13-12~deb8u4_amd64.deb
Files:
 42fe2b7b9c6afb169506c429f8d30cb8 3335 mail optional dovecot_2.2.13-12~deb8u4.dsc
 a3eb1c0b1822c4f2b0fe9247776baa71 4613824 mail optional dovecot_2.2.13.orig.tar.gz
 68d3ec040cd0154bc2efdf2251ad5e33 746136 mail optional dovecot_2.2.13-12~deb8u4.debian.tar.xz
 6eb1113ac92ef493a4e876fd7f7396c7 2659458 mail optional dovecot-core_2.2.13-12~deb8u4_amd64.deb
 9ec8c8336433660d85729d61516e13a5 750702 mail optional dovecot-dev_2.2.13-12~deb8u4_amd64.deb
 c6e884f46c7d9c328dd3671833f6257d 646064 mail optional dovecot-imapd_2.2.13-12~deb8u4_amd64.deb
 cd7fae19b9c2849bf38ae9fd02308cac 550854 mail optional dovecot-pop3d_2.2.13-12~deb8u4_amd64.deb
 61139aaaa6883a0a36c1ed8cc34d74f4 542652 mail optional dovecot-lmtpd_2.2.13-12~deb8u4_amd64.deb
 4e43cff0f03d62dd31c9c0c6e3818dc2 569726 mail optional dovecot-managesieved_2.2.13-12~deb8u4_amd64.deb
 7f7e4c71c170ec195830a70d3f475b38 534078 mail optional dovecot-pgsql_2.2.13-12~deb8u4_amd64.deb
 bbb0e89233db4744b5928f1a22fe164a 531716 mail optional dovecot-mysql_2.2.13-12~deb8u4_amd64.deb
 159c3466a17ca79978063d2e0772500a 529862 mail optional dovecot-sqlite_2.2.13-12~deb8u4_amd64.deb
 47f87696f83f0ad13ee3508d3da665b7 545246 mail optional dovecot-ldap_2.2.13-12~deb8u4_amd64.deb
 df92ab6ee72f337a088eb6a6e61471ed 531106 mail optional dovecot-gssapi_2.2.13-12~deb8u4_amd64.deb
 cf2943c4cdac08ee09e3810a5bd017e1 765088 mail optional dovecot-sieve_2.2.13-12~deb8u4_amd64.deb
 03b601d9cb420b5ace126a763700c55a 542112 mail optional dovecot-solr_2.2.13-12~deb8u4_amd64.deb
 207b8dabe95117caf8ce720f468c4a49 549200 mail optional dovecot-lucene_2.2.13-12~deb8u4_amd64.deb
 a943ad0db1a164a5246778071e99d151 6647346 debug extra dovecot-dbg_2.2.13-12~deb8u4_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=Ac7/
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 08 Apr 2018 07:27:39 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jun 19 13:00:11 2019; Machine Name: beach

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.