Re: Dovecot v2.3.21.1 released

2024-09-06 Thread Peter via dovecot
On 15/08/24 00:07, Marc via dovecot via dovecot wrote: we are releasing a CVE patch release 2.3.21.1. https://dovecot.org/releases/2.3/dovecot-2.3.21.1.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.21.1.tar.gz.sig Binary packages in https://repo.dovecot.org/ Docker images in https://hub.d

Re: Dovecot v2.3.21.1 released

2024-09-06 Thread Peter via dovecot
On 14/08/24 23:25, Aki Tuomi via dovecot wrote: Hi all, we are releasing a CVE patch release 2.3.21.1. https://dovecot.org/releases/2.3/dovecot-2.3.21.1.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.21.1.tar.gz.sig Binary packages in https://repo.dovecot.org/ Docker images in https://hub.

RE: Dovecot v2.3.21.1 released

2024-09-06 Thread Marc via dovecot
> On 14/08/24 23:25, Aki Tuomi via dovecot wrote: > > Hi all, > > > > we are releasing a CVE patch release 2.3.21.1. > > > > https://dovecot.org/releases/2.3/dovecot-2.3.21.1.tar.gz > > https://dovecot.org/releases/2.3/dovecot-2.3.21.1.tar.gz.sig > > Binary packages in https://repo.dovecot.org/ > >

Re: Dovecot v2.3.21.1 released

2024-09-06 Thread Peter via dovecot
On 7/09/24 00:55, Marc via dovecot wrote: On 14/08/24 23:25, Aki Tuomi via dovecot wrote: Hi all, we are releasing a CVE patch release 2.3.21.1. https://dovecot.org/releases/2.3/dovecot-2.3.21.1.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.21.1.tar.gz.sig Binary packages in https://repo

Re: Dovecot v2.3.21.1 released

2024-09-06 Thread Timo Sirainen via dovecot
On 2. Sep 2024, at 15.44, Guilhem Moulin via dovecot wrote: > > Hi Aki, > >> we are releasing a CVE patch release 2.3.21.1. > > Your message to the oss-security list [0] says both 2.2 and 2.3 versions > are vulnerable to CVE-2024-23184. Using the following test message as > reproducer > >