dovecot23/dovecot-rpmlintrc

addFilter("incoherent-init-script-name")
addFilter("spurious-executable-perm.*/usr/share/doc/packages/dovecot/mkcert.sh")
- update to 2.3.21.1 and pigeonhole 0.5.21.1 Dovecot 2.3.21.1 - CVE-2024-23184: A large number of address headers in email resulted in excessive CPU usage. [boo#1229184] - CVE-2024-23185: Abnormally large email headers are now truncated or discarded, with a limit of 10MB on a single header and 50MB for all the headers of all the parts of an email. [boo#1229183] - oauth2: Dovecot would send client_id and client_secret as POST parameters to introspection server. These need to be optionally in Basic auth instead as required by OIDC specification. - oauth2: JWT key type check was too strict. - oauth2: JWT token audience was not validated against client_id as required by OIDC specification. - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol specific error message on all errors. This broke OIDC discovery. - oauth2: JWT aud validation was not performed if aud was missing from token, but was configured on Dovecot. OBS-URL: https://build.opensuse.org/package/show/server:mail/dovecot23?expand=0&rev=121 2024-08-20 12:30:04 +02:00			`addFilter("incoherent-init-script-name")`
			`addFilter("spurious-executable-perm.*/usr/share/doc/packages/dovecot/mkcert.sh")`