So this is the second release with CVE's you are doing nothing about in the CE 2.3 why have you not announced it is EOL, since you no longer seem to care about your users stuck on it, you should EOL it so we know to consider our options, this is really poor treatment,fair enough if you don't want look after those users, but tell them!
On Sat, Aug 29, 2026 at 6:17 PM Aki Tuomi <aki.tuomi@open-xchange.com> wrote:
Hi!
We are not planning to do a 2.3 CE release.
Aki
On 29/08/2026 09:49 EEST Laura Steynes via dovecot <dovecot@dovecot.org> wrote:
Since CVE includes CE 2.3.21.1 will you release new CE version, i see you did pro 2.3 but not CE
On Sat, Aug 29, 2026 at 8:38 AM Patrick Cernko via dovecot < dovecot@dovecot.org> wrote:
Hi Aki,
On 2026-08-28 12:07:23, Aki Tuomi via Dovecot-news wrote:
- Resolute Raccoon (Ubuntu 26.04) has been added to repo.dovecot.org
I'm following the instructions to add the Debian repo for Ubuntu 26.04. On
apt updateI get this error:W: No Hash entry in Release file
/var/lib/apt/lists/partial/repo.dovecot.org_ce-2.4-latest_ubuntu_resolute_dists_resolute_InRelease
which is considered strong enough for security purposes
E: The repository 'https://repo.dovecot.org/ce-2.4-latest/ubuntu/resolute resolute InRelease' provides only weak security information.
As far as I can tell, the InRelease and the Release files are missing SHA256 and SHA5132 checksums. Apparently they are required on 26.04 now according to the error message.
Could you please add them to make installation possible?
Best regards,
Patrick Cernko <pcernko@mpi-klsb.mpg.de> +49 681 9325 5815 <+49%20681%2093255815> <+49%20681%2093255815> Joint Scientific IT and Technical Service Max-Planck-Institute für Informatik & Softwaresysteme
dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-leave@dovecot.org
Since CVE includes CE 2.3.21.1 will you release new CE version, i see you did pro 2.3 but not CE On Sat, Aug 29, 2026 at 8:38AM Patrick Cernko via dovecot <[1]dovecot@dovecot.org> wrote:
Hi Aki,
On 2026-08-28 12:07:23, Aki Tuomi via Dovecot-news wrote:
- Resolute Raccoon (Ubuntu 26.04) has been added to
[2]repo.dovecot.org
I'm following the instructions to add the Debian repo for Ubuntu 26.04. On
apt updateI get this error:W: No Hash entry in Release file
/var/lib/apt/lists/partial/repo.dovecot.org_ce-2.4-latest_ubuntu_resolute_dists_resolute_InRelease which is considered strong enough for security purposes
E: The repository '[3]https://repo.dovecot.org/ce-2.4-latest/ubuntu/resolute resolute InRelease' provides only weak security information.
As far as I can tell, the InRelease and the Release files are missing SHA256 and SHA5132 checksums. Apparently they are required on 26.04 now according to the error message.
Could you please add them to make installation possible?
Best regards,
Patrick Cernko <[4]pcernko@mpi-klsb.mpg.de> [5]+49 681 9325 5815 <+49%20681%2093255815> Joint Scientific IT and Technical Service Max-Planck-Institute fuer Informatik & Softwaresysteme
dovecot mailing list -- [6]dovecot@dovecot.org To unsubscribe send an email to [7]dovecot-leave@dovecot.org
References
Visible links
- mailto:dovecot@dovecot.org
- http://repo.dovecot.org/
- https://repo.dovecot.org/ce-2.4-latest/ubuntu/resolute
- mailto:pcernko@mpi-klsb.mpg.de
- file:///tmp/tmp_ex4krg9/tel:+49%20681%2093255815
- mailto:dovecot@dovecot.org
- mailto:dovecot-leave@dovecot.org
dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-leave@dovecot.org
So this is the second release with CVE's you are doing nothing about in the CE 2.3 why have you not announced it is EOL, since you no longer seem to care about your users stuck on it, you should EOL it so we know to consider our options, this is really poor treatment,fair enough if you don't want look after those users, but tell them! On Sat, Aug 29, 2026 at 6:17PM Aki Tuomi <[1]aki.tuomi@open-xchange.com> wrote:
Hi!
We are not planning to do a 2.3 CE release.
Aki
On 29/08/2026 09:49 EEST Laura Steynes via dovecot
<[2]dovecot@dovecot.org> wrote:
Since CVE includes CE 2.3.21.1 will you release new CE version, i see
you
did pro 2.3 but not CE
On Sat, Aug 29, 2026 at 8:38AM Patrick Cernko via dovecot <
[3]dovecot@dovecot.org> wrote:
Hi Aki,
On 2026-08-28 12:07:23, Aki Tuomi via Dovecot-news wrote:
>
> - Resolute Raccoon (Ubuntu 26.04) has been added to
[4]repo.dovecot.org
>
I'm following the instructions to add the Debian repo for Ubuntu
26.04.
On `apt update` I get this error:
> W: No Hash entry in Release file
/var/lib/apt/lists/partial/repo.dovecot.org_ce-2.4-latest_ubuntu_resolute_dists_resolute_InRelease
which is considered strong enough for security purposes
> E: The repository
'[5]https://repo.dovecot.org/ce-2.4-latest/ubuntu/resolute resolute
InRelease' provides only weak security information.
As far as I can tell, the InRelease and the Release files are
missing
SHA256 and SHA5132 checksums. Apparently they are required on 26.04
now
according to the error message.
Could you please add them to make installation possible?
Best regards,
--
Patrick Cernko <[6]pcernko@mpi-klsb.mpg.de> [7]+49 681 9325 5815
<+49%20681%2093255815>
Joint Scientific IT and Technical Service
Max-Planck-Institute fuer Informatik & Softwaresysteme
_______________________________________________
dovecot mailing list -- [8]dovecot@dovecot.org
To unsubscribe send an email to [9]dovecot-leave@dovecot.org
Since CVE includes CE 2.3.21.1 will you release new CE version, i see
you
did pro 2.3 but not CE
On Sat, Aug 29, 2026 at 8:38AM Patrick Cernko via dovecot
<[1][10]dovecot@dovecot.org> wrote:
Hi Aki,
On 2026-08-28 12:07:23, Aki Tuomi via Dovecot-news wrote:
>
> - Resolute Raccoon (Ubuntu 26.04) has been added to
[2][11]repo.dovecot.org
>
I'm following the instructions to add the Debian repo for Ubuntu
26.04.
On `apt update` I get this error:
> W: No Hash entry in Release file
/var/lib/apt/lists/partial/repo.dovecot.org_ce-2.4-latest_ubuntu_resolute_dists_resolute_InRelease
which is considered strong enough for security purposes
> E: The repository
'[3][12]https://repo.dovecot.org/ce-2.4-latest/ubuntu/resolute
resolute
InRelease' provides only weak security information.
As far as I can tell, the InRelease and the Release files are missing
SHA256 and SHA5132 checksums. Apparently they are required on 26.04
now
according to the error message.
Could you please add them to make installation possible?
Best regards,
--
Patrick Cernko <[4][13]pcernko@mpi-klsb.mpg.de> [5][14]+49 681 9325
5815
Joint Scientific IT and Technical Service
Max-Planck-Institute fuer Informatik & Softwaresysteme
_______________________________________________
dovecot mailing list -- [6][15]dovecot@dovecot.org
To unsubscribe send an email to [7][16]dovecot-leave@dovecot.org
References
Visible links
1. mailto:[17]dovecot@dovecot.org
2. [18]http://repo.dovecot.org/
3. [19]https://repo.dovecot.org/ce-2.4-latest/ubuntu/resolute
4. mailto:[20]pcernko@mpi-klsb.mpg.de
5. file:///tmp/tmp_ex4krg9/tel:+49%20681%2093255815
6. mailto:[21]dovecot@dovecot.org
7. mailto:[22]dovecot-leave@dovecot.org
_______________________________________________
dovecot mailing list -- [23]dovecot@dovecot.org
To unsubscribe send an email to [24]dovecot-leave@dovecot.orgReferences
Visible links
- mailto:aki.tuomi@open-xchange.com
- mailto:dovecot@dovecot.org
- mailto:dovecot@dovecot.org
- http://repo.dovecot.org/
- https://repo.dovecot.org/ce-2.4-latest/ubuntu/resolute
- mailto:pcernko@mpi-klsb.mpg.de
- file:///tmp/tmpn25i50gt/tel:+49%20681%2093255815
- mailto:dovecot@dovecot.org
- mailto:dovecot-leave@dovecot.org
- mailto:dovecot@dovecot.org
- http://repo.dovecot.org/
- https://repo.dovecot.org/ce-2.4-latest/ubuntu/resolute
- mailto:pcernko@mpi-klsb.mpg.de
- file:///tmp/tmpn25i50gt/tel:+49%20681%2093255815
- mailto:dovecot@dovecot.org
- mailto:dovecot-leave@dovecot.org
- mailto:dovecot@dovecot.org
- http://repo.dovecot.org/
- https://repo.dovecot.org/ce-2.4-latest/ubuntu/resolute
- mailto:pcernko@mpi-klsb.mpg.de
- mailto:dovecot@dovecot.org
- mailto:dovecot-leave@dovecot.org
- mailto:dovecot@dovecot.org
- mailto:dovecot-leave@dovecot.org