-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 25 Aug 2019 15:29:44 +0200 Source: dovecot Architecture: source Version: 1:2.2.27-3+deb9u5 Distribution: stretch-security Urgency: high Maintainer: Dovecot Maintainers <jaldhar-dovecot@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Changes: dovecot (1:2.2.27-3+deb9u5) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix CVE-2019-11500 - lib-imap: Don't accept strings with NULs - lib-imap: Make sure str_unescape() won't be writing past allocated memory - lib-managesieve: Don't accept strings with NULs - lib-managesieve: Make sure str_unescape() won't be writing past allocated memory Checksums-Sha1: 652a57f9fc38ffe4677ddfbc122c4a463a9b200a 3571 dovecot_2.2.27-3+deb9u5.dsc 836aa3c195188a94881853b067211990b8a80e90 865648 dovecot_2.2.27-3+deb9u5.debian.tar.xz Checksums-Sha256: db3c26de0a58ff10c2a96cb2d687830f38a294c37993b97c8fed7b2f853345a8 3571 dovecot_2.2.27-3+deb9u5.dsc 7dfcd32d31613364f8da60f6f94e48c50cc1cf9673eb17d96df2dd88746a8f14 865648 dovecot_2.2.27-3+deb9u5.debian.tar.xz Files: 9b79fc8232396d6f6adb6044b3310760 3571 mail optional dovecot_2.2.27-3+deb9u5.dsc aa5152a02cc32087597395ab4df0edc4 865648 mail optional dovecot_2.2.27-3+deb9u5.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl1joBNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EWNMP/13MfFLHQjeUUiR/fw2kPK+C/tCJvE2K LaqfvIMybfv5i3QaGcoSC8JK01zGqHF1yG8mkxFldZqMsnp9OL2DOS7DiIAJudpO aJfO8coxvsc8BXMt3giGHPaibLXdkrGXgO72ft0LizlrAeKalXpz1vTYHwK9hQwZ Ix6bC9roLQSm5tzu1dBw6o9v9pAOi2nxSpJA+XJq6ns0bjkwICWIexB/0c7sAcHg +3tdc9RA0acy9Bw6KNxOpbrjZ60PAUockhe5dBAxr+hYb2s+y04lZcRT6tUqF0bY 2SJEDmUGRZE3K77ClYbTB4nEEvTLWdrHLdlHvqludeBVCSbuGfu/F549oL72YAaT A3+0xqQkWYje9uaIHalMMBwC5ufz5BOdrHqgNQ6qb0jwZj+iLsSgrzeITnQbIpaY 0NrzkOuw95hv1rsAW0OCZWjnzlgMjNB+Fx0b6JWD7Ov7l1Z5jO7/qF1315++hIRT MIUZ4KxhOvm85ZLXZzoRqYoAqw32ZIh/fShkAWl5/PpddkzG8nGHu4gmttapztzG LcKLJgeA1aOBoFSXex9OzM+cIDmWnWoUp8uusUlZHFVVvRBv0xa5Ft2XfmZjx57b UINc/2hGCPpQn7ShWFe4rsEihP36qYBDYJhix5UJu7G2NSEXCJmml71Gc3xiS9xU qjVE/L1FUdjG =V/GW -----END PGP SIGNATURE-----