From 1084eb99ee62fa243dc5bcb552757df73b8c09bf Mon Sep 17 00:00:00 2001 From: ghen Date: Sun, 9 Mar 2008 11:58:17 +0000 Subject: Update to Dovecot 1.0.13. Note that the changes for the security hole fix were quite large. I tested with several auth configurations myself and they seemed to work, but it's possible I left a bug somewhere in there breaking someone's configuration. So make sure to test that it works after upgrading. Of course it would be really nice if Dovecot had a proper test suite where testing all configurations could be automated and run before each release. I've already started this with my imaptest tool (http://imapwiki.org/ImapTest), but it only does IMAP tests and a lot of things are still missing. Some help would be nice here. * Fixed a security hole in blocking passdbs (MySQL always. PAM, passwd and shadow if blocking=yes) where user could specify extra fields in the password. The main problem here is when specifying "skip_password_check" introduced in v1.0.11 for fixing master user logins, allowing the user to log in as anyone without a valid password. - mail_privileged_group was broken in some systems (OS X, Solaris?) - IMAP THREAD: Fixed some correctness problems --- mail/dovecot/Makefile | 4 ++-- mail/dovecot/distinfo | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) (limited to 'mail/dovecot') diff --git a/mail/dovecot/Makefile b/mail/dovecot/Makefile index 173d229e799..6ea278bd846 100644 --- a/mail/dovecot/Makefile +++ b/mail/dovecot/Makefile @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.114 2008/03/05 08:23:37 ghen Exp $ +# $NetBSD: Makefile,v 1.115 2008/03/09 11:58:17 ghen Exp $ -DISTNAME= dovecot-1.0.12 +DISTNAME= dovecot-1.0.13 CATEGORIES= mail MASTER_SITES= http://www.dovecot.org/releases/1.0/ diff --git a/mail/dovecot/distinfo b/mail/dovecot/distinfo index 1e318f3b61d..95ab2da6460 100644 --- a/mail/dovecot/distinfo +++ b/mail/dovecot/distinfo @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.79 2008/03/05 08:23:37 ghen Exp $ +$NetBSD: distinfo,v 1.80 2008/03/09 11:58:17 ghen Exp $ -SHA1 (dovecot-1.0.12.tar.gz) = 421e0bcab996ce00cfeb0e69df626d53c3203d5a -RMD160 (dovecot-1.0.12.tar.gz) = fffada77f69d6fcc794f8dc576a6f9e6675a247c -Size (dovecot-1.0.12.tar.gz) = 1772998 bytes +SHA1 (dovecot-1.0.13.tar.gz) = 8690b27d01e8a68edef5ed162681c79f4074c9c1 +RMD160 (dovecot-1.0.13.tar.gz) = 1ba2c6b14e41c9bc4d36c12ea90a0fad024409db +Size (dovecot-1.0.13.tar.gz) = 1774025 bytes SHA1 (patch-aa) = 6258057d49add91f06d4dd51ded72e42f6774354 SHA1 (patch-ab) = 5d45a1617dd5ee7ce07fe89b526a6fb273057bb5 SHA1 (patch-ac) = 377da4719b5dca91a0b2fa7b3e11170cd2ea8d59 -- cgit v1.2.3