diff options
| author | Vicente Olivert Riera <Vincent.Riera@imgtec.com> | 2017-04-12 16:56:47 +0100 |
|---|---|---|
| committer | Peter Korsgaard <peter@korsgaard.com> | 2017-04-24 15:44:34 +0200 |
| commit | 5a339aac731992d433facfee35cdf2dca1a27309 (patch) | |
| tree | 92e5c1a20796c882789b917d09b73f4bdd1a77f8 /package | |
| parent | b937e29052b8a8519e62d96a5d787c003bb32b6c (diff) | |
| download | buildroot-5a339aac731992d433facfee35cdf2dca1a27309.tar.gz buildroot-5a339aac731992d433facfee35cdf2dca1a27309.zip | |
dovecot: bump version to 2.2.29.1 (security)
Security fix:
passdb/userdb dict: Don't double-expand %variables in keys. If dict
was used as the authentication passdb, using specially crafted
%variables in the username could be used to cause DoS (CVE-2017-2669)
Full ChangeLog 2.2.29 (including CVE fix):
https://www.dovecot.org/list/dovecot-news/2017-April/000341.html
Full ChangeLog 2.2.29.1 (some fixes forgotten in the 2.2.29 release):
https://www.dovecot.org/list/dovecot-news/2017-April/000344.html
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
(cherry picked from commit a1a1f484a9a47f121c071d345fae4472b56bac81)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'package')
| -rw-r--r-- | package/dovecot/dovecot.hash | 2 | ||||
| -rw-r--r-- | package/dovecot/dovecot.mk | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/package/dovecot/dovecot.hash b/package/dovecot/dovecot.hash index b52ea8dc01..46e7c5aa8a 100644 --- a/package/dovecot/dovecot.hash +++ b/package/dovecot/dovecot.hash @@ -1,2 +1,2 @@ # Locally computed after checking signature -sha256 e0288f59e326ab87cb3881fdabadafe542f4dc7ab9996db13863a439ebbc1f25 dovecot-2.2.28.tar.gz +sha256 ccfa9ffb7eb91e9e87c21c108324b911250c9ffa838bffb64b1caafadcb0f388 dovecot-2.2.29.1.tar.gz diff --git a/package/dovecot/dovecot.mk b/package/dovecot/dovecot.mk index caa6bbaeef..36a6494895 100644 --- a/package/dovecot/dovecot.mk +++ b/package/dovecot/dovecot.mk @@ -5,7 +5,7 @@ ################################################################################ DOVECOT_VERSION_MAJOR = 2.2 -DOVECOT_VERSION = $(DOVECOT_VERSION_MAJOR).28 +DOVECOT_VERSION = $(DOVECOT_VERSION_MAJOR).29.1 DOVECOT_SITE = http://www.dovecot.org/releases/$(DOVECOT_VERSION_MAJOR) DOVECOT_INSTALL_STAGING = YES DOVECOT_LICENSE = LGPLv2.1 |
