Johnny Vestergaard wrote:
See attached file, updates 4.2 port of dovecot 1.0.2 to 10.0.13. A
security issue was fixed today in Dovecot stable:
http://www.dovecot.org/list/dovecot-news/2008-March/000065.html
Thanks. Attached is a simple patch for the trunk (cvs -rHEAD).
Updates dovecot from 1.0.10 to 10.0.13.
I'm running the mysql flavor without issue (so far). Reading the
release notes linked above though I'm not sure if this is patch is
critical is it says
> The main problem here is when specifyin "skip_password_check"
> introduced in v1.0.11....
As 4.2 is dovecot v1.0.2 and HEAD is v1.0.10 and the main problem
was "introduced" in v1.0.11, is this even an issue???
Thanks again,
--
http://myutil.com/
diff -uNr --exclude=CVS dovecot.orig/Makefile dovecot/Makefile
--- dovecot.orig/Makefile Mon Dec 31 03:31:11 2007
+++ dovecot/Makefile Sun Mar 9 13:41:26 2008
@@ -6,7 +6,7 @@
COMMENT-sieve= sieve mail filtering for Dovecot
V_MAJOR= 1.0
-V_DOVECOT= 1.0.10
+V_DOVECOT= 1.0.13
V_SIEVE= 1.0.2
PKGNAME= dovecot-${V_DOVECOT}
diff -uNr --exclude=CVS dovecot.orig/distinfo dovecot/distinfo
--- dovecot.orig/distinfo Mon Dec 31 03:31:11 2007
+++ dovecot/distinfo Sun Mar 9 13:42:06 2008
@@ -1,10 +1,10 @@
-MD5 (dovecot-1.0.10.tar.gz) = wFD6Kn2uiYTUMllePoGD4Q==
+MD5 (dovecot-1.0.13.tar.gz) = KBvZ3ujWwWdJdyV6zIDOZA==
MD5 (dovecot-sieve-1.0.2.tar.gz) = UIkm/J/44PbhNQbiN9SRaw==
-RMD160 (dovecot-1.0.10.tar.gz) = bVEg5xc/OZWQ2l0/Xu43UhJfqjM=
+RMD160 (dovecot-1.0.13.tar.gz) = G6LGsU5BybxNNsEuqQoPrQJECds=
RMD160 (dovecot-sieve-1.0.2.tar.gz) = i+0oOuZyqvphJx8VTx9Y0gC9T18=
-SHA1 (dovecot-1.0.10.tar.gz) = dpO1vjaeGz+c4T68KcPLLKgUCH4=
+SHA1 (dovecot-1.0.13.tar.gz) = hpCyfQHopo7e9e0WJoHHn0B0ycE=
SHA1 (dovecot-sieve-1.0.2.tar.gz) = cLQj6ubke8OPgfqjZQMijBqKVVA=
-SHA256 (dovecot-1.0.10.tar.gz) = 33rKbnvnSOAhSLzAcXOhn81fR3exAuP0m2D0kfhrD9M=
+SHA256 (dovecot-1.0.13.tar.gz) = FtopsrwI0BeKCTI78Hh6Kg6VMHVlVWantLaxSMh6wl8=
SHA256 (dovecot-sieve-1.0.2.tar.gz) =
kELq9tEjdXemerOqIzlT1kD2KilsX/qq7XX/JbZXZCo=
-SIZE (dovecot-1.0.10.tar.gz) = 1797790
+SIZE (dovecot-1.0.13.tar.gz) = 1774025
SIZE (dovecot-sieve-1.0.2.tar.gz) = 451753