diff options
| author | ghen <ghen> | 2008-03-09 11:58:17 +0000 |
|---|---|---|
| committer | ghen <ghen> | 2008-03-09 11:58:17 +0000 |
| commit | ecd9ef0ed03f079ccfa0f802da5f93af1222eff4 (patch) | |
| tree | 070c311755f68c5502eeb49eebf0f3632ae210d0 /mail | |
| parent | 4125cc05c3fb5946136930ea28ba2cbb2e961ee6 (diff) | |
| download | pkgsrc-ecd9ef0ed03f079ccfa0f802da5f93af1222eff4.tar.gz | |
Update to Dovecot 1.0.13.
Note that the changes for the security hole fix were quite large. I tested with
several auth configurations myself and they seemed to work, but it's possible I
left a bug somewhere in there breaking someone's configuration. So make sure to
test that it works after upgrading.
Of course it would be really nice if Dovecot had a proper test suite where
testing all configurations could be automated and run before each release. I've
already started this with my imaptest tool (http://imapwiki.org/ImapTest), but
it only does IMAP tests and a lot of things are still missing. Some help would
be nice here.
* Fixed a security hole in blocking passdbs (MySQL always. PAM, passwd
and shadow if blocking=yes) where user could specify extra fields
in the password. The main problem here is when specifying
"skip_password_check" introduced in v1.0.11 for fixing master user
logins, allowing the user to log in as anyone without a valid
password.
- mail_privileged_group was broken in some systems (OS X, Solaris?)
- IMAP THREAD: Fixed some correctness problems
Diffstat (limited to 'mail')
| -rw-r--r-- | mail/dovecot/Makefile | 4 | ||||
| -rw-r--r-- | mail/dovecot/distinfo | 8 |
2 files changed, 6 insertions, 6 deletions
diff --git a/mail/dovecot/Makefile b/mail/dovecot/Makefile index 173d229e799..6ea278bd846 100644 --- a/mail/dovecot/Makefile +++ b/mail/dovecot/Makefile @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.114 2008/03/05 08:23:37 ghen Exp $ +# $NetBSD: Makefile,v 1.115 2008/03/09 11:58:17 ghen Exp $ -DISTNAME= dovecot-1.0.12 +DISTNAME= dovecot-1.0.13 CATEGORIES= mail MASTER_SITES= http://www.dovecot.org/releases/1.0/ diff --git a/mail/dovecot/distinfo b/mail/dovecot/distinfo index 1e318f3b61d..95ab2da6460 100644 --- a/mail/dovecot/distinfo +++ b/mail/dovecot/distinfo @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.79 2008/03/05 08:23:37 ghen Exp $ +$NetBSD: distinfo,v 1.80 2008/03/09 11:58:17 ghen Exp $ -SHA1 (dovecot-1.0.12.tar.gz) = 421e0bcab996ce00cfeb0e69df626d53c3203d5a -RMD160 (dovecot-1.0.12.tar.gz) = fffada77f69d6fcc794f8dc576a6f9e6675a247c -Size (dovecot-1.0.12.tar.gz) = 1772998 bytes +SHA1 (dovecot-1.0.13.tar.gz) = 8690b27d01e8a68edef5ed162681c79f4074c9c1 +RMD160 (dovecot-1.0.13.tar.gz) = 1ba2c6b14e41c9bc4d36c12ea90a0fad024409db +Size (dovecot-1.0.13.tar.gz) = 1774025 bytes SHA1 (patch-aa) = 6258057d49add91f06d4dd51ded72e42f6774354 SHA1 (patch-ab) = 5d45a1617dd5ee7ce07fe89b526a6fb273057bb5 SHA1 (patch-ac) = 377da4719b5dca91a0b2fa7b3e11170cd2ea8d59 |