SHA256
1
0
forked from pool/dovecot23
dovecot23/dovecot-2.3.6.tar.gz.sig

18 lines
866 B
Standard ML
Raw Normal View History

- update to 2.3.6: (boo#1133624 boo#1133625) * CVE-2019-11494: Submission-login crashed with signal 11 due to null pointer access when authentication was aborted by disconnecting. * CVE-2019-11499: Submission-login crashed when authentication was started over TLS secured channel and invalid authentication message was sent. * auth: Support password grant with passdb oauth2. + Use system default CAs for outbound TLS connections. + Simplify array handling with new helper macros. + fts_solr: Enable configuring batch_size and soft_commit features. - lmtp/submission: Fixed various bugs in XCLIENT handling, including a hang when XCLIENT commands were sent infinitely to the remote server. - lmtp/submission: Forwarded multi-line replies were erroneously sent as two replies to the client. - lib-smtp: client: Message was not guaranteed to contain CRLF consistently when CHUNKING was used. - fts_solr: Plugin was no longer compatible with Solr 7. - Make it possible to disable certificate checking without setting ssl_client_ca_* settings. - pop3c: SSL support was broken. - mysql: Closing connection twice lead to crash on some systems. - auth: Multiple oauth2 passdbs crashed auth process on deinit. - HTTP client connection errors infrequently triggered a segmentation fault when the connection was idle and not used for a particular client instance. - drop https://github.com/dovecot/core/commit/3c5101ffd.patch OBS-URL: https://build.opensuse.org/package/show/server:mail/dovecot23?expand=0&rev=46
2019-04-30 15:41:27 +02:00
-----BEGIN PGP SIGNATURE-----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=UAEA
-----END PGP SIGNATURE-----