~ubuntu-branches/ubuntu/wily/dovecot/wily-proposed : changes

~ubuntu-branches/ubuntu/wily/dovecot/wily-proposed » Changes to src/lib-dict from revision 103

From Revision 103

Rev	Summary	Authors	Tags	Date
47	* SECURITY UPDATE: denial of service via malformed headers. * SECURITY UPDATE: denial of service via malformed headers. - debian/patches/fix-message-parser.dpatch: Parsing an invalid message address like "From: (" caused an assert-crash. (LP: #290901). - CVE-2008-4907	Mathias Gug	1:1.1.4-0ubuntu1.2	15 years ago
12	* debian/dovecot-common.postinst: * debian/dovecot-common.postinst: - Do not chmod/chown an already existing SSL certificate. This will leave permissions of the snakeoil SSL key intact. Closes: LP#45207	Martin Pitt	1.0.beta3-3ubuntu5	18 years ago
11	* Add debian/patches/prohibit_.._mbox_mask.dpatch: * Add debian/patches/prohibit_.._mbox_mask.dpatch: - Fix information disclosure due to path traversal: Do not allow '.' and '..' as valid list masks. - This regression was introduced in some 1.0beta version, so 0.99.x are not affected. - Patch taken from upstream: http://dovecot.org/list/dovecot-cvs/2006-May/005563.html - Closes: LP#44364	Martin Pitt	1.0.beta3-3ubuntu4	18 years ago
10	Create /var/run/dovecot on boot. Create /var/run/dovecot on boot.	Scott James Remnant	1.0.beta3-3ubuntu3	18 years ago
9	Rebuild against the new libmysqlclient15off with correct sym... Rebuild against the new libmysqlclient15off with correct symbols.	Adam Conrad	1.0.beta3-3ubuntu2	18 years ago
8	* Synchronize to Debian, UVF exception approved by mdz. Clos... * Synchronize to Debian, UVF exception approved by mdz. Closes: LP#30314 * Removed auth_crashfix.dpatch, login-crashfixes.dpatch: Fixed upstream.	Martin Pitt	1.0.beta3-3ubuntu1	18 years ago
7	* SECURITY UPDATE: Multiple remote DoS. * SECURITY UPDATE: Multiple remote DoS. * Add debian/patches/auth_crashfix.dpatch: - src/auth/auth-request-handler.c: Fix crash if authentication client disconnected while it still had pending requests. - Patch taken from upstream CVS (from 1.0beta3 release). * Add debian/patches/login-crashfixes.dpatch: - imap-login/client-authenticate.c pop3-login/client-authenticate.c: Fix crash if client disconnected while we were trying to send authentication continuation to it. - Patch taken from upstream CVS (from 1.0beta3 release). * CVE-2006-0730 (just one for both vulns) * debian/patches/ssl-cert-snakeoil.dpatch: Also change the internal defaults in src/master/master-settings.c, to make the snakeoil cert actually work OOTB.	Martin Pitt	1.0.alpha5-1ubuntu3	18 years ago
6	* Switch default config to use ssl-cert-snakeoil certificate... * Switch default config to use ssl-cert-snakeoil certificates. * Add Depends on ssl-cert. * Make postinst use a more generic grep for SSL_* otherwise it just doesn't work.	Fabio M. Di Nitto	1.0.alpha5-1ubuntu2	18 years ago
5	Build against libmysqlclient15. Build against libmysqlclient15.	Martin Pitt	1.0.alpha5-1ubuntu1	18 years ago
4	[Fabio Tranchitella] [Fabio Tranchitella] * New upstream release. * Compile dovecot with Kerberos support. (Closes: #338384) * Fixed a small typo in mbox specification. (Closes: #339789) * Added man page for maildirmake.dovecot, thanks to Henry Precheur. (Closes: #340498) * Use /usr/lib/dovecot/modules as basedir for dynamic modules. Upstream suggests /usr/lib/dovecot, but we already use it as libexec directory.	Fabio Tranchitella	1.0.alpha5-1	18 years ago