buildroot/package/dovecot, branch 2018.02.1

package/dovecot: security bump to version 2.3.4

2018-03-01T20:37:38+00:00

Fixes CVE-2017-15130, CVE-2017-14461 & CVE-2017-15132: https://www.dovecot.org/list/dovecot-news/2018-February/000370.html Removed patch applied upstream: https://github.com/dovecot/core/commit/a008617e811673064fd657acf517dc4a12493d29 Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

dovecot: add upstream security fix for CVE-2017-15132

2018-01-29T08:48:08+00:00

A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results in a memory leak in dovecot's auth client used by login processes. The leak has impact in high performance configuration where same login processes are reused and can cause the process to crash due to memory exhaustion. For more details, see: http://www.openwall.com/lists/oss-security/2018/01/25/4 Signed-off-by: Peter Korsgaard

Merge branch 'next'

2017-12-01T20:56:44+00:00

This merges the next branch accumulated during the 2017.11 release cycle back into the master branch. A few conflicts had to be resolved: - In the DEVELOPERS file, because Fabrice Fontaine was added as a developer for libupnp in master, and for libupnp18 in next. Resolution is simple: add him for both. - linux/Config.in, because we updated the 4.13.x release used by default in master, while we moved to 4.14 in next. Resolution: use 4.14. - package/libupnp/libupnp.hash: a hash for the license file was added in master, while the package was bumped into next. Resolution: keep the hash for the license file, and keep the hash for the newest version of libupnp. - package/linux-headers/Config.in.host: default version of the kernel headers for 4.13 was bumped to the latest 4.13.x in master, but was changed to 4.14 in next. Resolution: use 4.14. - package/samba4/: samba was bumped to 4.6.11 in master for security reasons, but was bumped to 4.7.3 in next. Resolution: keep 4.7.3. Signed-off-by: Thomas Petazzoni

dovecot: add applicable licenses

2017-11-24T08:13:52+00:00

List all code licenses mentioned in COPYING. Cc: Bernd Kuhls Signed-off-by: Baruch Siach Signed-off-by: Thomas Petazzoni

package/dovecot: bump version to 2.2.33.2

2017-11-23T20:53:51+00:00

Added license hashes. Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

package/dovecot: bump version to 2.2.31

2017-06-28T21:28:12+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

package/dovecot: bump version to 2.2.30.2

2017-06-06T20:15:03+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

package/dovecot: bump version to 2.30.1

2017-06-04T07:45:57+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

package/dovecot: bump version to 2.2.30

2017-05-31T06:51:44+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

package/d*/Config.in: fix help text wrapping

2017-05-11T21:29:21+00:00

The check-package script when ran gives warnings on text wrapping on all of these Config files. This patch cleans up all warnings related to the text wrapping for the Config files starting with the letter d in the package directory. The appropriate indentation is: <2 spaces><62 chars> See http://nightly.buildroot.org/#writing-rules-config-in for more information. Signed-off-by: Adam Duskett Signed-off-by: Thomas Petazzoni