./mail/dovecot2, Secure IMAP and POP3 server

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2018Q4, Version: 2.3.4.1, Package name: dovecot-2.3.4.1, Maintainer: adam

Dovecot is an open source IMAP and POP3 server for Linux/UNIX-like systems,
written with security primarily in mind. Dovecot is an excellent choice for both
small and large installations. It's fast, simple to set up, requires no special
administration and it uses very little memory.


Required to run:
[archivers/lz4]

Required to build:
[pkgtools/cwrappers]

Package options: kqueue, pam, ssl, tcpwrappers

Master sites:

SHA1: 742c8d3c043723c5da9e07944214068689a89556
RMD160: 59101ddb58e6458b3581efb104426d9f4adb93ec
Filesize: 6762.767 KB

Version history: (Expand)

CVS history: (Expand)


   2019-02-18 15:50:56 by Benny Siegert | Files touched by this commit (3) | Package updated
Log message:
Pullup ticket #5915 - requested by taca
mail-dovecot2: security fix

Revisions pulled up:
- mail/dovecot2-sqlite/Makefile                                 1.17
- mail/dovecot2/Makefile.common                                 1.24
- mail/dovecot2/distinfo                                        1.88

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Feb  6 01:41:28 UTC 2019

   Modified Files:
   	pkgsrc/mail/dovecot2: Makefile.common distinfo

   Log message:
   mail/dovecot2: update to 2.3.4.1

   v2.3.4.1 2019-02-05  Aki Tuomi <aki.tuomi@open-xchange.com>

   	* CVE-2019-3814: If imap/pop3/managesieve/submission client has
   	  trusted certificate with missing username field
   	  (ssl_cert_username_field), under some configurations Dovecot
   	  mistakenly trusts the username provided via authentication instead
   	  of failing.
   	* ssl_cert_username_field setting was ignored with external SMTP AUTH,
   	  because none of the MTAs (Postfix, Exim) currently send the
   	  cert_username field. This may have allowed users with trusted
   	  certificate to specify any username in the authentication. This bug
   	  didn't affect Dovecot's Submission service.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Feb  6 01:42:16 UTC 2019

   Modified Files:
   	pkgsrc/mail/dovecot2-sqlite: Makefile

   Log message:
   mail/dovecot2-sqlite: reset PKGREVISION

   Reset PKGREVISION with update to 2.3.4.1.