./mail/dovecot2-sqlite, Secure IMAP and POP3 server (SQLite plugin)

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2018Q4, Version: 2.3.4.1, Package name: dovecot-sqlite-2.3.4.1, Maintainer: adam

Dovecot is an open source IMAP and POP3 server for Linux/UNIX-like systems,
written with security primarily in mind. This package contains the SQLite
backend plugins.


Required to run:
[archivers/lz4] [mail/dovecot2]

Required to build:
[pkgtools/cwrappers]

Package options: kqueue, pam, ssl, tcpwrappers

Master sites:

SHA1: 742c8d3c043723c5da9e07944214068689a89556
RMD160: 59101ddb58e6458b3581efb104426d9f4adb93ec
Filesize: 6762.767 KB

Version history: (Expand)

CVS history: (Expand)


   2019-02-18 15:50:56 by Benny Siegert | Files touched by this commit (3) | Package updated
Log message:
Pullup ticket #5915 - requested by taca
mail-dovecot2: security fix

Revisions pulled up:
- mail/dovecot2-sqlite/Makefile                                 1.17
- mail/dovecot2/Makefile.common                                 1.24
- mail/dovecot2/distinfo                                        1.88

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Feb  6 01:41:28 UTC 2019

   Modified Files:
   	pkgsrc/mail/dovecot2: Makefile.common distinfo

   Log message:
   mail/dovecot2: update to 2.3.4.1

   v2.3.4.1 2019-02-05  Aki Tuomi <aki.tuomi@open-xchange.com>

   	* CVE-2019-3814: If imap/pop3/managesieve/submission client has
   	  trusted certificate with missing username field
   	  (ssl_cert_username_field), under some configurations Dovecot
   	  mistakenly trusts the username provided via authentication instead
   	  of failing.
   	* ssl_cert_username_field setting was ignored with external SMTP AUTH,
   	  because none of the MTAs (Postfix, Exim) currently send the
   	  cert_username field. This may have allowed users with trusted
   	  certificate to specify any username in the authentication. This bug
   	  didn't affect Dovecot's Submission service.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Feb  6 01:42:16 UTC 2019

   Modified Files:
   	pkgsrc/mail/dovecot2-sqlite: Makefile

   Log message:
   mail/dovecot2-sqlite: reset PKGREVISION

   Reset PKGREVISION with update to 2.3.4.1.