Accepted dovecot 1:2.2.27-3+deb9u5 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 25 Aug 2019 15:29:44 +0200
Source: dovecot
Architecture: source
Version: 1:2.2.27-3+deb9u5
Distribution: stretch-security
Urgency: high
Maintainer: Dovecot Maintainers <jaldhar-dovecot@debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
dovecot (1:2.2.27-3+deb9u5) stretch-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Fix CVE-2019-11500
- lib-imap: Don't accept strings with NULs
- lib-imap: Make sure str_unescape() won't be writing past allocated
memory
- lib-managesieve: Don't accept strings with NULs
- lib-managesieve: Make sure str_unescape() won't be writing past
allocated memory
Checksums-Sha1:
652a57f9fc38ffe4677ddfbc122c4a463a9b200a 3571 dovecot_2.2.27-3+deb9u5.dsc
836aa3c195188a94881853b067211990b8a80e90 865648 dovecot_2.2.27-3+deb9u5.debian.tar.xz
Checksums-Sha256:
db3c26de0a58ff10c2a96cb2d687830f38a294c37993b97c8fed7b2f853345a8 3571 dovecot_2.2.27-3+deb9u5.dsc
7dfcd32d31613364f8da60f6f94e48c50cc1cf9673eb17d96df2dd88746a8f14 865648 dovecot_2.2.27-3+deb9u5.debian.tar.xz
Files:
9b79fc8232396d6f6adb6044b3310760 3571 mail optional dovecot_2.2.27-3+deb9u5.dsc
aa5152a02cc32087597395ab4df0edc4 865648 mail optional dovecot_2.2.27-3+deb9u5.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=V/GW
-----END PGP SIGNATURE-----