SHA256
1
0
forked from pool/dovecot23
dovecot23/dovecot-2.3.6.tar.gz.sig
Marcus Rueckert 1f53965469 - update to 2.3.6: (boo#1133624 boo#1133625)
* CVE-2019-11494: Submission-login crashed with signal 11 due to
    null pointer access when authentication was aborted by
    disconnecting.
  * CVE-2019-11499: Submission-login crashed when authentication
    was started over TLS secured channel and invalid authentication
    message was sent.
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling,
    including a hang when XCLIENT commands were sent infinitely to
    the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously
    sent as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a
    segmentation fault when the connection was idle and not used
    for a particular client instance.
- drop https://github.com/dovecot/core/commit/3c5101ffd.patch

OBS-URL: https://build.opensuse.org/package/show/server:mail/dovecot23?expand=0&rev=46
2019-04-30 13:41:27 +00:00

18 lines
866 B
Standard ML

-----BEGIN PGP SIGNATURE-----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=UAEA
-----END PGP SIGNATURE-----