SHA256
1
0
forked from pool/dovecot23
Commit Graph

4 Commits

Author SHA256 Message Date
4aa711e725 Accepting request 901209 from home:stroeder:network
- update to 2.3.15 and pigeonhole to 0.5.15:
  * security fixes for CVE-2021-29157, CVE-2021-33515, and CVE-2020-28200

FWIW: It seems to work for me on Tumbleweed x64_64.

OBS-URL: https://build.opensuse.org/request/show/901209
OBS-URL: https://build.opensuse.org/package/show/server:mail/dovecot23?expand=0&rev=96
2021-06-21 17:08:49 +00:00
8b548c1efa Accepting request 779407 from home:dimstar:Factory
- Update dovecot-2.3.0-dont_use_etc_ssl_certs.patch: since we
  change CERTDIR to /etc/ssl/private, it is rather evil to then err
  out claiming /etc/ssl/certs would not exist. The error message
  should mention the directory it tested for.

OBS-URL: https://build.opensuse.org/request/show/779407
OBS-URL: https://build.opensuse.org/package/show/server:mail/dovecot23?expand=0&rev=65
2020-02-26 13:41:24 +00:00
2cb5006e53 - update to 2.3.7.2
* CVE-2019-11500: IMAP protocol parser does not properly handle
    NUL byte when scanning data in quoted strings, leading to out
    of bounds heap memory writes. Found by Nick Roessler and Rafi
    Rubin.
- update pigeonhole to 0.5.7.2
  * CVE-2019-11500: ManageSieve protocol parser does not properly
    handle NUL byte when scanning data in quoted strings, leading
    to out of bounds heap memory writes. Found by Nick Roessler and
    Rafi Rubin.
- refreshed patches to apply cleanly again:
  dovecot-2.3.0-better_ssl_defaults.patch
  dovecot-2.3.0-dont_use_etc_ssl_certs.patch

OBS-URL: https://build.opensuse.org/package/show/server:mail/dovecot23?expand=0&rev=52
2019-08-28 17:07:06 +00:00
0235820ac5 Accepting request 559675 from home:darix:playground
new package of 2.3.0

OBS-URL: https://build.opensuse.org/request/show/559675
OBS-URL: https://build.opensuse.org/package/show/server:mail/dovecot23?expand=0&rev=1
2017-12-24 02:20:56 +00:00