- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects

• Files Changed
• Browse Source

- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to 2.3.1
- update pigeonhole to 0.5.1

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Fix License tag.

• Files Changed
• Browse Source

- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch

• Files Changed
• Browse Source

- update license to SPDX-3

• Files Changed
• Browse Source

add bugnumbers

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch

• Files Changed
• Browse Source

- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch

• Files Changed
• Browse Source

- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames.
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process.
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

initialized devel package after accepting 559875

• Files Changed
• Browse Source

- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.

• Files Changed
• Browse Source

- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve

• Files Changed
• Browse Source

new package of 2.3.0

• Browse Source