ff7b3d5db3
Dovecot 2.3.21.1
- CVE-2024-23184: A large number of address headers in email resulted
in excessive CPU usage. [boo#1229184]
- CVE-2024-23185: Abnormally large email headers are now truncated or
discarded, with a limit of 10MB on a single header and 50MB for all
the headers of all the parts of an email. [boo#1229183]
- oauth2: Dovecot would send client_id and client_secret as POST parameters
to introspection server. These need to be optionally in Basic auth
instead as required by OIDC specification.
- oauth2: JWT key type check was too strict.
- oauth2: JWT token audience was not validated against client_id as
required by OIDC specification.
- oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out
protocol specific error message on all errors. This broke OIDC discovery.
- oauth2: JWT aud validation was not performed if aud was missing
from token, but was configured on Dovecot.
OBS-URL: https://build.opensuse.org/package/show/server:mail/dovecot23?expand=0&rev=121
32 lines
1.1 KiB
Plaintext
32 lines
1.1 KiB
Plaintext
/etc/dovecot/README
|
|
/etc/dovecot/conf.d/10-auth.conf
|
|
/etc/dovecot/conf.d/10-director.conf
|
|
/etc/dovecot/conf.d/10-logging.conf
|
|
/etc/dovecot/conf.d/10-mail.conf
|
|
/etc/dovecot/conf.d/10-master.conf
|
|
/etc/dovecot/conf.d/10-ssl.conf
|
|
/etc/dovecot/conf.d/15-lda.conf
|
|
/etc/dovecot/conf.d/15-mailboxes.conf
|
|
/etc/dovecot/conf.d/20-imap.conf
|
|
/etc/dovecot/conf.d/20-lmtp.conf
|
|
/etc/dovecot/conf.d/20-pop3.conf
|
|
/etc/dovecot/conf.d/90-acl.conf
|
|
/etc/dovecot/conf.d/90-plugin.conf
|
|
/etc/dovecot/conf.d/90-quota.conf
|
|
/etc/dovecot/conf.d/auth-checkpassword.conf.ext
|
|
/etc/dovecot/conf.d/auth-deny.conf.ext
|
|
/etc/dovecot/conf.d/auth-dict.conf.ext
|
|
/etc/dovecot/conf.d/auth-ldap.conf.ext
|
|
/etc/dovecot/conf.d/auth-master.conf.ext
|
|
/etc/dovecot/conf.d/auth-passwdfile.conf.ext
|
|
/etc/dovecot/conf.d/auth-sql.conf.ext
|
|
/etc/dovecot/conf.d/auth-static.conf.ext
|
|
/etc/dovecot/conf.d/auth-system.conf.ext
|
|
/etc/dovecot/conf.d/auth-vpopmail.conf.ext
|
|
/etc/dovecot/dovecot-db.conf.ext
|
|
/etc/dovecot/dovecot-dict-auth.conf.ext
|
|
/etc/dovecot/dovecot-dict-sql.conf.ext
|
|
/etc/dovecot/dovecot-ldap.conf.ext
|
|
/etc/dovecot/dovecot-sql.conf.ext
|
|
/etc/dovecot/dovecot.conf
|