Commit Graph

  • b44c98a49d Accepting request 639470 from server:mail Dominique Leuenberger 2018-10-02 17:49:09 +0000
  • b79e7ee68f Accepting request 639469 from home:darix:playground Marcus Rueckert 2018-10-01 23:03:57 +0000
  • 3dca93b4fd Accepting request 624423 from server:mail Dominique Leuenberger 2018-07-22 21:05:43 +0000
  • 00a2ea2380 Accepting request 622786 from home:wrosenauer:devel Marcus Rueckert 2018-07-14 12:55:30 +0000
  • 7469ea6825 - added 4ff4bd024a.patch Marcus Rueckert 2018-07-13 21:27:39 +0000
  • 94d8025801 Accepting request 622091 from server:mail Dominique Leuenberger 2018-07-13 08:21:03 +0000
  • 05ca6d7f03 - update to 2.3.2.1 - SSL/TLS servers may have crashed during client disconnection - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have sometimes assert-crashed. - v2.3.2: "make check" may have crashed with 32bit systems Marcus Rueckert 2018-07-11 14:24:36 +0000
  • 0a7a9287b4 Accepting request 621463 from server:mail Dominique Leuenberger 2018-07-09 11:29:33 +0000
  • 2e1370b609 - update to 2.3.2 and pigeonhole to 0.5.2 Marcus Rueckert 2018-06-30 20:12:10 +0000
  • cc65a367ef Accepting request 612867 from server:mail Dominique Leuenberger 2018-05-29 14:53:33 +0000
  • b58afc96cb Accepting request 611852 from home:kbabioch:branches:server:mail Marcus Rueckert 2018-05-29 12:51:15 +0000
  • 0d4e201210 - added 847790d5aab84df38256a6f9b4849af0eb408419.patch: Fix crash for over quota users Marcus Rueckert 2018-05-27 10:51:16 +0000
  • 75e913fc0f Accepting request 595501 from server:mail Yuchen Lin 2018-04-11 12:03:30 +0000
  • 7dc58a5a76 - bnc#1088911 - dovecot23 can not build ond s390 add: 35497604d80090a02619024aeec069b32568e4b4.diff add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff Peter Varkoly 2018-04-10 15:49:53 +0000
  • a3927deb17 Accepting request 591874 from server:mail Dominique Leuenberger 2018-03-29 09:57:08 +0000
  • 319672653d - update to 2.3.1 - update pigeonhole to 0.5.1 Marcus Rueckert 2018-03-28 09:15:55 +0000
  • bf8d1cd095 Accepting request 586348 from server:mail Dominique Leuenberger 2018-03-14 18:39:48 +0000
  • 8c7fb8e145 Accepting request 586345 from home:dimstar:Factory Marcus Rueckert 2018-03-13 10:46:07 +0000
  • c8f004f09f - added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch Marcus Rueckert 2018-03-07 12:30:33 +0000
  • 36e64eaff2 - update license to SPDX-3 Marcus Rueckert 2018-03-07 12:11:05 +0000
  • 655f47397d add bugnumbers Marcus Rueckert 2018-03-07 12:01:48 +0000
  • d81026e707 Accepting request 583681 from server:mail Dominique Leuenberger 2018-03-07 09:39:34 +0000
  • 611d2263be - update pigeonhole to 0.5.0.1 - imap4flags extension: Fix binary corruption occurring when setflag/addflag/removeflag flag-list is a variable. - sieve-extprograms plugin: Fix segfault occurring when used in IMAPSieve context. - drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch Marcus Rueckert 2018-03-06 19:34:39 +0000
  • 572e38fe4f - pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch Marcus Rueckert 2018-03-06 18:03:27 +0000
  • 355adda1ff - update to 2.3.0.1 * CVE-2017-15130: TLS SNI config lookups may lead to excessive memory usage, causing imap-login/pop3-login VSZ limit to be reached and the process restarted. This happens only if Dovecot config has local_name { } or local { } configuration blocks and attacker uses randomly generated SNI servernames. * CVE-2017-14461: Parsing invalid email addresses may cause a crash or leak memory contents to attacker. For example, these memory contents might contain parts of an email from another user if the same imap process is reused for multiple users. First discovered by Aleksandar Nikolic of Cisco Talos. Independently also discovered by "flxflndy" via HackerOne. * CVE-2017-15132: Aborted SASL authentication leaks memory in login process. * Linux: Core dumping is no longer enabled by default via PR_SET_DUMPABLE, because this may allow attackers to bypass chroot/group restrictions. Found by cPanel Security Team. Nowadays core dumps can be safely enabled by using "sysctl -w fs.suid_dumpable=2". If the old behaviour is wanted, it can still be enabled by setting: import_environment=$import_environment PR_SET_DUMPABLE=1 - imap-login with SSL/TLS connections may end up in infinite loop Marcus Rueckert 2018-03-06 13:53:55 +0000
  • 1f49286ed7 Accepting request 562901 from server:mail Dominique Leuenberger 2018-01-10 22:35:42 +0000
  • 4ea5f55590 Accepting request 559954 from home:jengelh:branches:server:mail Dirk Mueller 2018-01-09 13:47:47 +0000
  • 61e5cd10da Accepting request 559875 from server:mail Dominique Leuenberger 2018-01-09 13:51:34 +0000
  • c8ae08e7fc - backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch fixes crash with imap sieve Marcus Rueckert 2017-12-25 18:51:39 +0000
  • 0235820ac5 Accepting request 559675 from home:darix:playground Marcus Rueckert 2017-12-24 02:20:56 +0000