buildroot/package/dovecot, branch 2017.02.2

dovecot: bump version to 2.2.29.1 (security)

2017-04-24T13:44:34+00:00

Security fix: passdb/userdb dict: Don't double-expand %variables in keys. If dict was used as the authentication passdb, using specially crafted %variables in the username could be used to cause DoS (CVE-2017-2669) Full ChangeLog 2.2.29 (including CVE fix): https://www.dovecot.org/list/dovecot-news/2017-April/000341.html Full ChangeLog 2.2.29.1 (some fixes forgotten in the 2.2.29 release): https://www.dovecot.org/list/dovecot-news/2017-April/000344.html Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni (cherry picked from commit a1a1f484a9a47f121c071d345fae4472b56bac81) Signed-off-by: Peter Korsgaard

package/dovecot: bump version to 2.2.28

2017-04-24T13:44:25+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni (cherry picked from commit 87b60b2586b44f81ada7e57768ca5dded612ffdc) Signed-off-by: Peter Korsgaard

package/dovecot: needs OpenSSL

2016-12-12T11:02:24+00:00

The latest version bump to 2.27 introduced a bug in the configure script which occurs when OpenSSL support is missing: http://lists.busybox.net/pipermail/buildroot/2016-December/179397.html This patch makes OpenSSL mandatory following the upstream advice: http://www.dovecot.org/list/dovecot/2016-December/106346.html "Nobody really should be building without OpenSSL nowadays anyway" Fixes http://autobuild.buildroot.net/results/85f/85f2f176c108ab36520f02d975f27c27cddce84b/ [Peter: drop legacy handling] Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

dovecot: bump version to 2.2.27 (security)

2016-12-09T17:13:52+00:00

Fixes CVE-2016-8652 : http://www.securityfocus.com/bid/94639/ Release notes: http://www.dovecot.org/list/dovecot-news/2016-December/000333.html Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

package/dovecot: bump version to 2.2.25

2016-07-03T09:17:08+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

package/dovecot: bump version to 2.2.24

2016-04-27T20:15:59+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

package/dovecot: bump version to 2.2.23

2016-03-31T01:47:03+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

package/dovecot: bump version to 2.2.22

2016-03-20T13:57:03+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

package/dovecot: add optional support for lz4

2016-02-16T22:07:01+00:00

When lz4 was compiled before, dovecot will use it as optional dependency: $ output/host/usr/bin/i586-buildroot-linux-uclibc-readelf -a output/target/usr/lib/dovecot/lib30_imap_zlib_plugin.so | grep NEEDED 0x00000001 (NEEDED) Shared library: [libz.so.1] 0x00000001 (NEEDED) Shared library: [liblzma.so.5] 0x00000001 (NEEDED) Shared library: [liblz4.so.1] 0x00000001 (NEEDED) Shared library: [libc.so.1] Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

package/dovecot: add optional support for xz

2016-02-16T22:06:55+00:00

When xz was compiled before, dovecot will use it as optional dependency: $ output/host/usr/bin/i586-buildroot-linux-uclibc-readelf -a output/target/usr/lib/dovecot/lib30_imap_zlib_plugin.so | grep NEEDED 0x00000001 (NEEDED) Shared library: [libz.so.1] 0x00000001 (NEEDED) Shared library: [liblzma.so.5] 0x00000001 (NEEDED) Shared library: [liblz4.so.1] 0x00000001 (NEEDED) Shared library: [libc.so.1] (lz4 support will be added with the next patch of this series) Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni