~ubuntu-branches/ubuntu/feisty/dovecot/feisty-updates

• Changes
• Files

~ubuntu-branches/ubuntu/feisty/dovecot/feisty-updates » Changes from revision 23

From Revision 23 to 4

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
23		* SECURITY UPDATE: mailboxes of other users could be read vi... * SECURITY UPDATE: mailboxes of other users could be read via symlinks. * Add upstream-mail-group-fixes.dpatch: upstream fixes (CVE-2008-1199). * Add upstream-invalid-password-fixes.dpatch: proactive upstream fixes   to avoid future issues in underlying passdb (CVE-2008-1218). * References   http://dovecot.org/list/dovecot-news/2008-March/000060.html   http://dovecot.org/list/dovecot-news/2008-March/000064.html	Kees Cook	1.0.rc17-1ubuntu2.3	16 years ago
22		* SECURITY UPDATE: LDAP-authenticated users may accidentally... * SECURITY UPDATE: LDAP-authenticated users may accidentally shared   cached login when they have the same password. * Add ldap_auth_cache.dpatch: upstream fixes, thanks to Fabio Tranchitella. * References   http://dovecot.org/list/dovecot-news/2007-December/000057.html   CVE-2007-6598	Kees Cook	1.0.rc17-1ubuntu2.2	16 years ago
21		* SECURITY UPDATE: path traversal in shared spool configurat... * SECURITY UPDATE: path traversal in shared spool configurations. * Add debian/patches/compressed-folders.dpatch: upstream fix. * References   CVE-2007-2231	Kees Cook	1.0.rc17-1ubuntu2.1	16 years ago
20		[ Martin Pitt, edited lightly by Ian Jackson: ] [ Martin Pitt, edited lightly by Ian Jackson: ] Add debian/tests/: autopkgtest control file plus our current package-tests test suite for security QA.	Ian Jackson	1.0.rc17-1ubuntu2	17 years ago
19		* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes:   - snakeoil ssl   - Remove stop script symlinks from rc0 and rc6	Matthias Klose	1.0.rc17-1ubuntu1	17 years ago
18		* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes:   - snakeoil ssl   - Remove stop script symlinks from rc0 and rc6	Michael Vogt	1.0.rc15-2ubuntu1	17 years ago
17		* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes:   - snakeoil ssl   - Remove stop script symlinks from rc0 and rc6	Michael Vogt	1.0.rc15-1ubuntu1	17 years ago
16		* Remove stop script symlinks from rc0 and rc6. * Remove stop script symlinks from rc0 and rc6. * Remove dependency on linux-kernel-headers.	Scott James Remnant	1.0.rc2-1ubuntu2	17 years ago
15		Merge from debian unstable. Merge from debian unstable.	Martin Pitt	1.0.rc2-1ubuntu1	17 years ago
14		Merge from debian unstable. Merge from debian unstable.	Martin Pitt	1.0.rc1-1ubuntu1	17 years ago
13		* Merge from debian unstable, resolved minor conflicts. * Merge from debian unstable, resolved minor conflicts. * debian/control: Removed unnecessary build dependency ssl-cert, add it as   dovecot-common dependency. * Remove debian/patches/prohibit_.._mbox_mask.dpatch, upstream now.	Martin Pitt	1.0.beta9-1ubuntu1	17 years ago
12		* debian/dovecot-common.postinst: * debian/dovecot-common.postinst:   - Do not chmod/chown an already existing SSL certificate. This will leave     permissions of the snakeoil SSL key intact. Closes: LP#45207	Martin Pitt	1.0.beta3-3ubuntu5	17 years ago
11		* Add debian/patches/prohibit_.._mbox_mask.dpatch: * Add debian/patches/prohibit_.._mbox_mask.dpatch:   - Fix information disclosure due to path traversal: Do not allow '.' and     '..' as valid list masks.   - This regression was introduced in some 1.0beta version, so 0.99.x are     not affected.   - Patch taken from upstream:     http://dovecot.org/list/dovecot-cvs/2006-May/005563.html   - Closes: LP#44364	Martin Pitt	1.0.beta3-3ubuntu4	17 years ago
10		Create /var/run/dovecot on boot. Create /var/run/dovecot on boot.	Scott James Remnant	1.0.beta3-3ubuntu3	18 years ago
9		Rebuild against the new libmysqlclient15off with correct sym... Rebuild against the new libmysqlclient15off with correct symbols.	Adam Conrad	1.0.beta3-3ubuntu2	18 years ago
8		* Synchronize to Debian, UVF exception approved by mdz. Clos... * Synchronize to Debian, UVF exception approved by mdz. Closes: LP#30314 * Removed auth_crashfix.dpatch, login-crashfixes.dpatch: Fixed upstream.	Martin Pitt	1.0.beta3-3ubuntu1	18 years ago
7		* SECURITY UPDATE: Multiple remote DoS. * SECURITY UPDATE: Multiple remote DoS. * Add debian/patches/auth_crashfix.dpatch:   - src/auth/auth-request-handler.c: Fix crash if authentication client     disconnected while it still had pending requests.   - Patch taken from upstream CVS (from 1.0beta3 release). * Add debian/patches/login-crashfixes.dpatch:   - imap-login/client-authenticate.c pop3-login/client-authenticate.c:     Fix crash if client disconnected while we were trying to send     authentication continuation to it.   - Patch taken from upstream CVS (from 1.0beta3 release). * CVE-2006-0730 (just one for both vulns) * debian/patches/ssl-cert-snakeoil.dpatch: Also change the internal defaults   in src/master/master-settings.c, to make the snakeoil cert actually work   OOTB.	Martin Pitt	1.0.alpha5-1ubuntu3	18 years ago
6		* Switch default config to use ssl-cert-snakeoil certificate... * Switch default config to use ssl-cert-snakeoil certificates. * Add Depends on ssl-cert. * Make postinst use a more generic grep for SSL_* otherwise it just doesn't   work.	Fabio M. Di Nitto	1.0.alpha5-1ubuntu2	18 years ago
5		Build against libmysqlclient15. Build against libmysqlclient15.	Martin Pitt	1.0.alpha5-1ubuntu1	18 years ago
4		[Fabio Tranchitella] [Fabio Tranchitella] * New upstream release. * Compile dovecot with Kerberos support. (Closes: #338384) * Fixed a small typo in mbox specification. (Closes: #339789) * Added man page for maildirmake.dovecot, thanks to Henry Precheur.   (Closes: #340498) * Use /usr/lib/dovecot/modules as basedir for dynamic modules.   Upstream suggests /usr/lib/dovecot, but we already use it as    libexec directory.	Fabio Tranchitella	1.0.alpha5-1	18 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1