* [Buildroot] [PATCH 1/2] dovecot: bump version to 2.2.27 (security)
@ 2016-12-09 15:10 Vicente Olivert Riera
2016-12-09 15:10 ` [Buildroot] [PATCH 2/2] dovecot-pigeonhole: bump version to 0.4.16 Vicente Olivert Riera
` (2 more replies)
0 siblings, 3 replies; 6+ messages in thread
From: Vicente Olivert Riera @ 2016-12-09 15:10 UTC (permalink / raw)
To: buildroot
Fixes CVE-2016-8652 : http://www.securityfocus.com/bid/94639/
Release notes:
http://www.dovecot.org/list/dovecot-news/2016-December/000333.html
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
---
package/dovecot/dovecot.hash | 4 ++--
package/dovecot/dovecot.mk | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/package/dovecot/dovecot.hash b/package/dovecot/dovecot.hash
index 0f67f0e..e7b9c33 100644
--- a/package/dovecot/dovecot.hash
+++ b/package/dovecot/dovecot.hash
@@ -1,2 +1,2 @@
-# Locally computed
-sha256 d8d9f32c846397f7c22749a84c5cf6f59c55ff7ded3dc9f07749a255182f9667 dovecot-2.2.25.tar.gz
+# Locally computed after checking signature
+sha256 897f92a87cda4b27b243f8149ce0ba7b7e71a2be8fb7994eb0a025e54cde18e9 dovecot-2.2.27.tar.gz
diff --git a/package/dovecot/dovecot.mk b/package/dovecot/dovecot.mk
index 31c62d3..3dd231a 100644
--- a/package/dovecot/dovecot.mk
+++ b/package/dovecot/dovecot.mk
@@ -5,7 +5,7 @@
################################################################################
DOVECOT_VERSION_MAJOR = 2.2
-DOVECOT_VERSION = $(DOVECOT_VERSION_MAJOR).25
+DOVECOT_VERSION = $(DOVECOT_VERSION_MAJOR).27
DOVECOT_SITE = http://www.dovecot.org/releases/$(DOVECOT_VERSION_MAJOR)
DOVECOT_INSTALL_STAGING = YES
DOVECOT_LICENSE = LGPLv2.1
--
2.10.1
^ permalink raw reply related [flat|nested] 6+ messages in thread* [Buildroot] [PATCH 2/2] dovecot-pigeonhole: bump version to 0.4.16
2016-12-09 15:10 [Buildroot] [PATCH 1/2] dovecot: bump version to 2.2.27 (security) Vicente Olivert Riera
@ 2016-12-09 15:10 ` Vicente Olivert Riera
2016-12-09 17:14 ` Peter Korsgaard
2016-12-09 17:14 ` [Buildroot] [PATCH 1/2] dovecot: bump version to 2.2.27 (security) Peter Korsgaard
2016-12-10 14:23 ` Thomas Petazzoni
2 siblings, 1 reply; 6+ messages in thread
From: Vicente Olivert Riera @ 2016-12-09 15:10 UTC (permalink / raw)
To: buildroot
Release notes:
http://www.dovecot.org/list/dovecot-news/2016-October/000330.html
Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
---
package/dovecot-pigeonhole/dovecot-pigeonhole.hash | 4 ++--
package/dovecot-pigeonhole/dovecot-pigeonhole.mk | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/package/dovecot-pigeonhole/dovecot-pigeonhole.hash b/package/dovecot-pigeonhole/dovecot-pigeonhole.hash
index f598825..95325a9 100644
--- a/package/dovecot-pigeonhole/dovecot-pigeonhole.hash
+++ b/package/dovecot-pigeonhole/dovecot-pigeonhole.hash
@@ -1,2 +1,2 @@
-# Locally computed
-sha256 c99ace6ead310c6c3b639922da618f90d846307da4fe252d994e5e51bf8a3de3 dovecot-2.2-pigeonhole-0.4.15.tar.gz
+# Locally computed after checking signature
+sha256 8f0b98f18062d6e241eef74ebe16cc167cd246361cbe6657d94f0ecc5d7d3234 dovecot-2.2-pigeonhole-0.4.16.tar.gz
diff --git a/package/dovecot-pigeonhole/dovecot-pigeonhole.mk b/package/dovecot-pigeonhole/dovecot-pigeonhole.mk
index 7c0a14c..846e7f9 100644
--- a/package/dovecot-pigeonhole/dovecot-pigeonhole.mk
+++ b/package/dovecot-pigeonhole/dovecot-pigeonhole.mk
@@ -4,7 +4,7 @@
#
################################################################################
-DOVECOT_PIGEONHOLE_VERSION = 0.4.15
+DOVECOT_PIGEONHOLE_VERSION = 0.4.16
DOVECOT_PIGEONHOLE_SOURCE = dovecot-2.2-pigeonhole-$(DOVECOT_PIGEONHOLE_VERSION).tar.gz
DOVECOT_PIGEONHOLE_SITE = http://pigeonhole.dovecot.org/releases/2.2
DOVECOT_PIGEONHOLE_LICENSE = LGPLv2.1
--
2.10.1
^ permalink raw reply related [flat|nested] 6+ messages in thread
* [Buildroot] [PATCH 1/2] dovecot: bump version to 2.2.27 (security)
2016-12-09 15:10 [Buildroot] [PATCH 1/2] dovecot: bump version to 2.2.27 (security) Vicente Olivert Riera
2016-12-09 15:10 ` [Buildroot] [PATCH 2/2] dovecot-pigeonhole: bump version to 0.4.16 Vicente Olivert Riera
@ 2016-12-09 17:14 ` Peter Korsgaard
2016-12-10 14:23 ` Thomas Petazzoni
2 siblings, 0 replies; 6+ messages in thread
From: Peter Korsgaard @ 2016-12-09 17:14 UTC (permalink / raw)
To: buildroot
>>>>> "Vicente" == Vicente Olivert Riera <Vincent.Riera@imgtec.com> writes:
> Fixes CVE-2016-8652 : http://www.securityfocus.com/bid/94639/
> Release notes:
> http://www.dovecot.org/list/dovecot-news/2016-December/000333.html
> Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Committed, thanks.
--
Bye, Peter Korsgaard
^ permalink raw reply [flat|nested] 6+ messages in thread
* [Buildroot] [PATCH 1/2] dovecot: bump version to 2.2.27 (security)
2016-12-09 15:10 [Buildroot] [PATCH 1/2] dovecot: bump version to 2.2.27 (security) Vicente Olivert Riera
2016-12-09 15:10 ` [Buildroot] [PATCH 2/2] dovecot-pigeonhole: bump version to 0.4.16 Vicente Olivert Riera
2016-12-09 17:14 ` [Buildroot] [PATCH 1/2] dovecot: bump version to 2.2.27 (security) Peter Korsgaard
@ 2016-12-10 14:23 ` Thomas Petazzoni
2016-12-10 14:23 ` Thomas Petazzoni
2 siblings, 1 reply; 6+ messages in thread
From: Thomas Petazzoni @ 2016-12-10 14:23 UTC (permalink / raw)
To: buildroot
Hello,
Adding Bernd in Cc.
On Fri, 9 Dec 2016 15:10:02 +0000, Vicente Olivert Riera wrote:
> Fixes CVE-2016-8652 : http://www.securityfocus.com/bid/94639/
>
> Release notes:
> http://www.dovecot.org/list/dovecot-news/2016-December/000333.html
>
> Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
This update causes a large number of build failures:
http://autobuild.buildroot.net/?reason=dovecot-2.2.27
Basically, dovecot no longer builds without OpenSSL support. The
configure error can be fixed by adding the attached patch (+ a
host-gettext dependency + autoreconf + creating m4). But then, the
build fails with:
In file included from test-http-client.c:12:0:
../../src/lib-ssl-iostream/iostream-openssl.h:6:25: fatal error: openssl/ssl.h: No such file or directory
#include <openssl/ssl.h>
And http://www.mail-archive.com/dovecot at dovecot.org/msg67930.html is
not very encouraging in terms of supporting the build of Dovecot
without OpenSSL.
So could you submit a patch that either fixes the build of Dovecot
without OpenSSL, or makes OpenSSL support mandatory?
Thanks,
Thomas
--
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux and Kernel engineering
http://free-electrons.com
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2016-12-10 14:23 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2016-12-09 15:10 [Buildroot] [PATCH 1/2] dovecot: bump version to 2.2.27 (security) Vicente Olivert Riera
2016-12-09 15:10 ` [Buildroot] [PATCH 2/2] dovecot-pigeonhole: bump version to 0.4.16 Vicente Olivert Riera
2016-12-09 17:14 ` Peter Korsgaard
2016-12-09 17:14 ` [Buildroot] [PATCH 1/2] dovecot: bump version to 2.2.27 (security) Peter Korsgaard
2016-12-10 14:23 ` Thomas Petazzoni
2016-12-10 14:23 ` Thomas Petazzoni
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox