Comparing 00e2d87780...5b0bd60465 - rpms/dovecot - Fedora Forge

rpms/dovecot

Sign in to create a new pull request.

Author	SHA1	Message	Date
Michal Hlavinka	5b0bd60465	Merge branch 'rawhide' into f33	2021-11-02 22:16:31 +01:00
Michal Hlavinka	994bf0c2d8	dovecot updated to 2.3.16, pigeonhole to 0.5.16 fixes several regressions	2021-08-24 23:42:07 +02:00
Michal Hlavinka	62f55e3981	fix spec file condition	2021-06-23 12:05:35 +02:00
Michal Hlavinka	d6eb12601e	dovecot updated to 2.3.15, pigeonhole updated to 0.5.15 CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in JWT tokens. This may be used to supply attacker controlled keys to validate tokens, if attacker has local access. CVE-2021-33515: On-path attacker could have injected plaintext commands before STARTTLS negotiation that would be executed after STARTTLS finished with the client. Add TSLv1.3 support to min_protocols. Allow configuring ssl_cipher_suites. (for TLSv1.3+)	2021-06-23 10:30:42 +02:00
Michal Hlavinka	0c1d257072	dovecot updated to 2.3.14, pigeonhole to 0.5.14 use OpenSSL's implementation of HMAC Remove autocreate, expire, snarf and mail-filter plugins. Remove cydir storage driver. Remove XZ/LZMA write support. Read support will be removed in future release.	2021-03-22 21:36:59 +01:00
Michal Hlavinka	d2cea2b433	fix rundir location	2021-01-07 18:32:33 +01:00
Michal Hlavinka	9542ae20e7	fix release number	2021-01-06 14:02:13 +01:00
Michal Hlavinka	c3eb39bd49	dovecot updated to 2.3.13, pigeonhole to 0.5.13 CVE-2020-24386: Specially crafted command can cause IMAP hibernate to allow logged in user to access other people's emails and filesystem information. Metric filter and global event filter variable syntax changed to a SQL-like format. auth: Added new aliases for %{variables}. Usage of the old ones is possible, but discouraged. auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth mechanism and related password schemes. auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail. auth: Removed postfix postmap socket	2021-01-06 12:32:23 +01:00
Michal Hlavinka	e4d8956b4c	dovecot updated to 2.3.13, pigeonhole to 0.5.13 CVE-2020-24386: Specially crafted command can cause IMAP hibernate to allow logged in user to access other people's emails and filesystem information. Metric filter and global event filter variable syntax changed to a SQL-like format. auth: Added new aliases for %{variables}. Usage of the old ones is possible, but discouraged. auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth mechanism and related password schemes. auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail. auth: Removed postfix postmap socket	2021-01-04 22:04:49 +01:00
Michal Hlavinka	059c475b82	fix gssapi issue	2020-09-02 12:26:14 +02:00
Michal Hlavinka	8c92cd2702	fix FTBFS on 32bit systems	2020-08-26 19:29:24 +02:00
Jeff Law	474f7da7ae	Disable LTO for now	2020-08-17 14:55:06 -06:00
Michal Hlavinka	87c212dd5f	CVE-2020-12100: Parsing mails with a large number of MIME parts could have resulted in excessive CPU usage or a crash due to running out of stack memory. CVE-2020-12673: Dovecot's NTLM implementation does not correctly check message buffer size, which leads to reading past allocation which can lead to crash. CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an address that has the empty quoted string as local-part causes the lmtp service to crash. CVE-2020-12674: Dovecot's RPA mechanism implementation accepts zero-length message, which leads to assert-crash later on.	2020-08-15 19:53:27 +02:00

Diff content is not available