diff options
| author | taca <taca@pkgsrc.org> | 2019-08-29 01:05:20 +0000 |
|---|---|---|
| committer | taca <taca@pkgsrc.org> | 2019-08-29 01:05:20 +0000 |
| commit | 1c5ff004e4614f10f16c16bb6ed5feaf95a47897 (patch) | |
| tree | 1ef70c513f33d1823206c67dc4629c682b20ff81 | |
| parent | 8372b1b8854139e00a95605e87b9da7be03bfecb (diff) | |
| download | pkgsrc-1c5ff004e4614f10f16c16bb6ed5feaf95a47897.tar.gz | |
mail/dovecot2: update to 2.3.7.2
Update dovecot2 and related packages to 2.3.7.2.
Changes
-------
* CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
when scanning data in quoted strings, leading to out of bounds heap
memory writes. Found by Nick Roessler and Rafi Rubin.
| -rw-r--r-- | mail/dovecot2/Makefile.common | 4 | ||||
| -rw-r--r-- | mail/dovecot2/distinfo | 10 |
2 files changed, 7 insertions, 7 deletions
diff --git a/mail/dovecot2/Makefile.common b/mail/dovecot2/Makefile.common index f89b8742e49..a590563b6ef 100644 --- a/mail/dovecot2/Makefile.common +++ b/mail/dovecot2/Makefile.common @@ -1,4 +1,4 @@ -# $NetBSD: Makefile.common,v 1.32 2019/07/23 15:11:24 taca Exp $ +# $NetBSD: Makefile.common,v 1.33 2019/08/29 01:05:20 taca Exp $ # # when updating to a new release, update ABI depends in # the buildlink3.mk file as well, since the plugins' version @@ -11,7 +11,7 @@ # used by mail/dovecot2-pgsql/Makefile # used by mail/dovecot2-sqlite/Makefile -DISTNAME= dovecot-2.3.7.1 +DISTNAME= dovecot-2.3.7.2 CATEGORIES= mail MASTER_SITES= https://dovecot.org/releases/${PKGVERSION_NOREV:R:R}/ diff --git a/mail/dovecot2/distinfo b/mail/dovecot2/distinfo index 60eb1cbe92d..6bab6234240 100644 --- a/mail/dovecot2/distinfo +++ b/mail/dovecot2/distinfo @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.96 2019/07/23 15:11:24 taca Exp $ +$NetBSD: distinfo,v 1.97 2019/08/29 01:05:20 taca Exp $ -SHA1 (dovecot-2.3.7.1.tar.gz) = ebd6aefa6db3930d8b3af030b1ed2b88b230d4c9 -RMD160 (dovecot-2.3.7.1.tar.gz) = b2bb6c5f754d1d9b5565a20473bb4a7b5a2fa422 -SHA512 (dovecot-2.3.7.1.tar.gz) = 9addfe2be9ae745ac9164e1658e6638df96bd611d45f172e2cd1cb2c6596e4ce534674e9eea3c1d17f497555061031916e0fb9a9fbc6de0eb6034e2fd0bed3b9 -Size (dovecot-2.3.7.1.tar.gz) = 7076500 bytes +SHA1 (dovecot-2.3.7.2.tar.gz) = cceb5ec832c73275423ec2fe16381073aa798b0c +RMD160 (dovecot-2.3.7.2.tar.gz) = 22b84d79fa580fc73d9fc810ad4b1328471e942c +SHA512 (dovecot-2.3.7.2.tar.gz) = 172f7f0edb884259e4c050607510aee67a35c3a20b7dd147e7c8a25a04921c18f7d6b5c85af2c69ae8c4d53791550970e471b033dbfae94253e331053b6a317d +Size (dovecot-2.3.7.2.tar.gz) = 7076231 bytes SHA1 (patch-aa) = 3af01aa4a8cea1a3fb840b6243a744de77069611 SHA1 (patch-ab) = 9db15fd853ba47ef4bf04f2adc9ab24f71ee4d1e SHA1 (patch-ae) = c795585df9f415ceabb28eec1ff691ee26168d3b |