You're welcome. (From your friendly FreeBSD Dovecot maintainer). On Tue, Feb 5, 2019 at 2:26 PM The Doctor via dovecot wrote:

On Tue, Feb 05, 2019 at 11:18:45PM +0300, Odhiambo Washington via dovecot wrote:

...

On Tue, 5 Feb 2019 at 20:32, Aki Tuomi via dovecot wrote:

...

Due to DMARC issues some people have failed to receive the latest security information, so here it is repeated for both releases:

2.3.4.1

https://dovecot.org/releases/2.3/dovecot-2.3.4.1.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.4.1.tar.gz.sig https://dovecot.org/releases/2.3/dovecot-2.3.2.tar.gz.sig Binary packages in https://repo.dovecot.org/

* CVE-2019-3814: If imap/pop3/managesieve/submission client has trusted certificate with missing username field (ssl_cert_username_field), under some configurations Dovecot mistakenly trusts the username provided via authentication instead of failing. * ssl_cert_username_field setting was ignored with external SMTP AUTH, because none of the MTAs (Postfix, Exim) currently send the cert_username field. This may have allowed users with trusted certificate to specify any username in the authentication. This bug didn't affect Dovecot's Submission service.

FreeBSD-11.2 (amd64):

gmake[2]: Entering directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-dns -I../../src/lib-test -I../../src/lib-settings -I../../src/lib-ssl-iostream -DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\" -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\" -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\" -DBINDIR=\""/opt/dovecot2.3/bin"\" -std=gnu99 -g -O2 -fstack-protector-strong -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/local/include -MT test-event-stats.o -MD -MP -MF .deps/test-event-stats.Tpo -c -o test-event-stats.o test-event-stats.c test-event-stats.c: In function 'kill_stats_child': test-event-stats.c:101:2: warning: implicit declaration of function 'kill' [-Wimplicit-function-declaration] (void)kill(stats_pid, SIGKILL); ^ test-event-stats.c:101:24: error: 'SIGKILL' undeclared (first use in this function) (void)kill(stats_pid, SIGKILL); ^ test-event-stats.c:101:24: note: each undeclared identifier is reported only once for each function it appears in gmake[2]: *** [Makefile:638: test-event-stats.o] Error 1 gmake[2]: Leaving directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' gmake[1]: *** [Makefile:565: install-recursive] Error 1 gmake[1]: Leaving directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src' gmake: *** [Makefile:683: install-recursive] Error 1

Ports wokred for me.

...

FreeBSD-9.3:

gmake[3]: Entering directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-dns -I../../src/lib-test -I../../src/lib-settings

-I../../src/lib-ssl-iostream

...

-DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\" -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\" -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\" -DBINDIR=\""/opt/dovecot2.3/bin"\" -std=gnu99 -g -O2 -fstack-protector -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/local/include -MT test-event-stats.o -MD -MP -MF .deps/test-event-stats.Tpo -c -o test-event-stats.o test-event-stats.c test-event-stats.c: In function 'kill_stats_child': test-event-stats.c:101: warning: implicit declaration of function 'kill' test-event-stats.c:101: error: 'SIGKILL' undeclared (first use in this function) test-event-stats.c:101: error: (Each undeclared identifier is reported only once test-event-stats.c:101: error: for each function it appears in.) test-event-stats.c: In function 'test_no_merging2': test-event-stats.c:361: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c: In function 'test_no_merging3': test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned int', but argument 4 has type 'uint64_t' test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned int', but argument 6 has type 'uint64_t' test-event-stats.c: In function 'test_merge_events2': test-event-stats.c:452: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c: In function 'test_skip_parents': test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned int', but argument 4 has type 'uint64_t' test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned int', but argument 6 has type 'uint64_t' test-event-stats.c: In function 'test_merge_events_skip_parents': test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned int', but argument 4 has type 'uint64_t' test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned int', but argument 6 has type 'uint64_t' Makefile:638: recipe for target 'test-event-stats.o' failed gmake[3]: *** [test-event-stats.o] Error 1 gmake[3]: Leaving directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' Makefile:565: recipe for target 'all-recursive' failed gmake[2]: *** [all-recursive] Error 1 gmake[2]: Leaving directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src' Makefile:683: recipe for target 'all-recursive' failed gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1' Makefile:527: recipe for target 'all' failed gmake: *** [all] Error 2 [wash@gw ~/Tools/Dovecot/2.3/dovecot-2.3.4.1]$

FreeBSD-8.4:

Making all in lib-master source='test-event-stats.c' object='test-event-stats.o' libtool=no DEPDIR=.deps depmode=none /bin/bash ../../depcomp gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-dns -I../../src/lib-test -I../../src/lib-settings -I../../src/lib-ssl-iostream -DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\" -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\" -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\" -DBINDIR=\""/opt/dovecot2.3/bin"\" -std=gnu99 -g -O2 -fstack-protector -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/local/include -c -o test-event-stats.o test-event-stats.c test-event-stats.c: In function 'kill_stats_child': test-event-stats.c:101: warning: implicit declaration of function 'kill' test-event-stats.c:101: error: 'SIGKILL' undeclared (first use in this function) test-event-stats.c:101: error: (Each undeclared identifier is reported only once test-event-stats.c:101: error: for each function it appears in.) test-event-stats.c: In function 'test_no_merging2': test-event-stats.c:361: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c: In function 'test_no_merging3': test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned int', but argument 4 has type 'uint64_t' test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned int', but argument 6 has type 'uint64_t' test-event-stats.c: In function 'test_merge_events2': test-event-stats.c:452: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c: In function 'test_skip_parents': test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned int', but argument 4 has type 'uint64_t' test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned int', but argument 6 has type 'uint64_t' test-event-stats.c: In function 'test_merge_events_skip_parents': test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned int', but argument 4 has type 'uint64_t' test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned int', but argument 6 has type 'uint64_t' *** Error code 1

Stop. make: stopped in /usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master *** Error code 1

Stop. make: stopped in /usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src *** Error code 1

Stop. make: stopped in /home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1 Makefile:527: recipe for target 'all' failed gmake: *** [all] Error 1 (23:18:46 <~/Tools/Dovecot/2.3/dovecot-2.3.4.1>) 0 $

-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", grep ^[^#] :-)

-- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@ nl2k.ab.ca Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising! https://www.empire.kred/ROOTNK?t=94a1f39b Look at Psalms 14 and 53 on Atheism Anonymity is the truest expression of altruism. -Eric Gibson

-- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx@gmail.com US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106

pull the patches from the port..... On Tue, Feb 5, 2019 at 2:28 PM Odhiambo Washington via dovecot < dovecot@dovecot.org> wrote:

Oh, so manual compile should NOT work and it's okay or am I missing something?

On Tue, 5 Feb 2019 at 23:26, The Doctor wrote:

...

...

On Tue, 5 Feb 2019 at 20:32, Aki Tuomi via dovecot

wrote:

...

Due to DMARC issues some people have failed to receive the latest security information, so here it is repeated for both releases:

2.3.4.1

https://dovecot.org/releases/2.3/dovecot-2.3.4.1.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.4.1.tar.gz.sig https://dovecot.org/releases/2.3/dovecot-2.3.2.tar.gz.sig Binary packages in https://repo.dovecot.org/

* CVE-2019-3814: If imap/pop3/managesieve/submission client has trusted certificate with missing username field (ssl_cert_username_field), under some configurations Dovecot mistakenly trusts the username provided via authentication instead of failing. * ssl_cert_username_field setting was ignored with external SMTP AUTH, because none of the MTAs (Postfix, Exim) currently send the cert_username field. This may have allowed users with trusted certificate to specify any username in the authentication. This bug didn't affect Dovecot's Submission service.

FreeBSD-11.2 (amd64):

gmake[2]: Entering directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-dns -I../../src/lib-test -I../../src/lib-settings -I../../src/lib-ssl-iostream -DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\" -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\" -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\" -DBINDIR=\""/opt/dovecot2.3/bin"\" -std=gnu99 -g -O2 -fstack-protector-strong -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/local/include -MT test-event-stats.o -MD -MP -MF .deps/test-event-stats.Tpo -c -o test-event-stats.o test-event-stats.c test-event-stats.c: In function 'kill_stats_child': test-event-stats.c:101:2: warning: implicit declaration of function 'kill' [-Wimplicit-function-declaration] (void)kill(stats_pid, SIGKILL); ^ test-event-stats.c:101:24: error: 'SIGKILL' undeclared (first use in

On Tue, Feb 05, 2019 at 11:18:45PM +0300, Odhiambo Washington via dovecot wrote: this

...

function) (void)kill(stats_pid, SIGKILL); ^ test-event-stats.c:101:24: note: each undeclared identifier is reported only once for each function it appears in gmake[2]: *** [Makefile:638: test-event-stats.o] Error 1 gmake[2]: Leaving directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' gmake[1]: *** [Makefile:565: install-recursive] Error 1 gmake[1]: Leaving directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src' gmake: *** [Makefile:683: install-recursive] Error 1

Ports wokred for me.

...

FreeBSD-9.3:

gmake[3]: Entering directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-dns -I../../src/lib-test -I../../src/lib-settings

-I../../src/lib-ssl-iostream

...

-DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\" -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\" -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\" -DBINDIR=\""/opt/dovecot2.3/bin"\" -std=gnu99 -g -O2 -fstack-protector -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/local/include -MT test-event-stats.o -MD -MP -MF .deps/test-event-stats.Tpo -c -o test-event-stats.o test-event-stats.c test-event-stats.c: In function 'kill_stats_child': test-event-stats.c:101: warning: implicit declaration of function 'kill' test-event-stats.c:101: error: 'SIGKILL' undeclared (first use in this function) test-event-stats.c:101: error: (Each undeclared identifier is reported only once test-event-stats.c:101: error: for each function it appears in.) test-event-stats.c: In function 'test_no_merging2': test-event-stats.c:361: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c: In function 'test_no_merging3': test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned int', but argument 4 has type 'uint64_t' test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned int', but argument 6 has type 'uint64_t' test-event-stats.c: In function 'test_merge_events2': test-event-stats.c:452: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c: In function 'test_skip_parents': test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned int', but argument 4 has type 'uint64_t' test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned int', but argument 6 has type 'uint64_t' test-event-stats.c: In function 'test_merge_events_skip_parents': test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned int', but argument 4 has type 'uint64_t' test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned int', but argument 6 has type 'uint64_t' Makefile:638: recipe for target 'test-event-stats.o' failed gmake[3]: *** [test-event-stats.o] Error 1 gmake[3]: Leaving directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' Makefile:565: recipe for target 'all-recursive' failed gmake[2]: *** [all-recursive] Error 1 gmake[2]: Leaving directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src' Makefile:683: recipe for target 'all-recursive' failed gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1' Makefile:527: recipe for target 'all' failed gmake: *** [all] Error 2 [wash@gw ~/Tools/Dovecot/2.3/dovecot-2.3.4.1]$

FreeBSD-8.4:

Making all in lib-master source='test-event-stats.c' object='test-event-stats.o' libtool=no DEPDIR=.deps depmode=none /bin/bash ../../depcomp gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-dns -I../../src/lib-test -I../../src/lib-settings -I../../src/lib-ssl-iostream -DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\" -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\" -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\" -DBINDIR=\""/opt/dovecot2.3/bin"\" -std=gnu99 -g -O2 -fstack-protector -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/local/include -c -o test-event-stats.o test-event-stats.c test-event-stats.c: In function 'kill_stats_child': test-event-stats.c:101: warning: implicit declaration of function 'kill' test-event-stats.c:101: error: 'SIGKILL' undeclared (first use in this function) test-event-stats.c:101: error: (Each undeclared identifier is reported only once test-event-stats.c:101: error: for each function it appears in.) test-event-stats.c: In function 'test_no_merging2': test-event-stats.c:361: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c: In function 'test_no_merging3': test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned int', but argument 4 has type 'uint64_t' test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned int', but argument 6 has type 'uint64_t' test-event-stats.c: In function 'test_merge_events2': test-event-stats.c:452: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c: In function 'test_skip_parents': test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned int', but argument 4 has type 'uint64_t' test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned int', but argument 6 has type 'uint64_t' test-event-stats.c: In function 'test_merge_events_skip_parents': test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned int', but argument 4 has type 'uint64_t' test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned int', but argument 6 has type 'uint64_t' *** Error code 1

Stop. make: stopped in /usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master *** Error code 1

Stop. make: stopped in /usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src *** Error code 1

Stop. make: stopped in /home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1 Makefile:527: recipe for target 'all' failed gmake: *** [all] Error 1 (23:18:46 <~/Tools/Dovecot/2.3/dovecot-2.3.4.1>) 0 $

-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", grep ^[^#] :-)

-- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@ nl2k.ab.ca Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising! https://www.empire.kred/ROOTNK?t=94a1f39b Look at Psalms 14 and 53 on Atheism Anonymity is the truest expression of altruism. -Eric Gibson

-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", grep ^[^#] :-)

-- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx@gmail.com US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106

the patches are already in git master. I've pulled them into the mail/dovecot port. The dovecot guys/gals will release it eventually, but the port works TODAY. On Tue, Feb 5, 2019 at 2:33 PM Odhiambo Washington wrote:

I have always been able to compile manually, even from RCs so I believe I should be able to compile from the tarball as well. Something is broken,

On Tue, 5 Feb 2019 at 23:29, Larry Rosenman wrote:

...

pull the patches from the port.....

On Tue, Feb 5, 2019 at 2:28 PM Odhiambo Washington via dovecot < dovecot@dovecot.org> wrote:

...

Oh, so manual compile should NOT work and it's okay or am I missing something?

On Tue, 5 Feb 2019 at 23:26, The Doctor wrote:

...

...

On Tue, 5 Feb 2019 at 20:32, Aki Tuomi via dovecot < dovecot@dovecot.org> wrote:

...

Due to DMARC issues some people have failed to receive the latest security information, so here it is repeated for both releases:

2.3.4.1

https://dovecot.org/releases/2.3/dovecot-2.3.4.1.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.4.1.tar.gz.sig https://dovecot.org/releases/2.3/dovecot-2.3.2.tar.gz.sig Binary packages in https://repo.dovecot.org/

* CVE-2019-3814: If imap/pop3/managesieve/submission client has trusted certificate with missing username field (ssl_cert_username_field), under some configurations Dovecot mistakenly trusts the username provided via authentication instead of failing. * ssl_cert_username_field setting was ignored with external SMTP AUTH, because none of the MTAs (Postfix, Exim) currently send the cert_username field. This may have allowed users with trusted certificate to specify any username in the authentication. This bug didn't affect Dovecot's Submission service.

FreeBSD-11.2 (amd64):

gmake[2]: Entering directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-dns -I../../src/lib-test -I../../src/lib-settings -I../../src/lib-ssl-iostream -DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\" -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\" -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\" -DBINDIR=\""/opt/dovecot2.3/bin"\" -std=gnu99 -g -O2 -fstack-protector-strong -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/local/include -MT test-event-stats.o -MD -MP -MF .deps/test-event-stats.Tpo -c -o test-event-stats.o test-event-stats.c test-event-stats.c: In function 'kill_stats_child': test-event-stats.c:101:2: warning: implicit declaration of function 'kill' [-Wimplicit-function-declaration] (void)kill(stats_pid, SIGKILL); ^ test-event-stats.c:101:24: error: 'SIGKILL' undeclared (first use in

On Tue, Feb 05, 2019 at 11:18:45PM +0300, Odhiambo Washington via dovecot wrote: this

...

function) (void)kill(stats_pid, SIGKILL); ^ test-event-stats.c:101:24: note: each undeclared identifier is reported only once for each function it appears in gmake[2]: *** [Makefile:638: test-event-stats.o] Error 1 gmake[2]: Leaving directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' gmake[1]: *** [Makefile:565: install-recursive] Error 1 gmake[1]: Leaving directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src' gmake: *** [Makefile:683: install-recursive] Error 1

Ports wokred for me.

...

FreeBSD-9.3:

gmake[3]: Entering directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-dns -I../../src/lib-test -I../../src/lib-settings

-I../../src/lib-ssl-iostream

...

-DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\" -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\" -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\" -DBINDIR=\""/opt/dovecot2.3/bin"\" -std=gnu99 -g -O2 -fstack-protector -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/local/include -MT test-event-stats.o -MD -MP -MF .deps/test-event-stats.Tpo -c -o test-event-stats.o test-event-stats.c test-event-stats.c: In function 'kill_stats_child': test-event-stats.c:101: warning: implicit declaration of function 'kill' test-event-stats.c:101: error: 'SIGKILL' undeclared (first use in this function) test-event-stats.c:101: error: (Each undeclared identifier is reported only once test-event-stats.c:101: error: for each function it appears in.) test-event-stats.c: In function 'test_no_merging2': test-event-stats.c:361: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c: In function 'test_no_merging3': test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned int', but argument 4 has type 'uint64_t' test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned int', but argument 6 has type 'uint64_t' test-event-stats.c: In function 'test_merge_events2': test-event-stats.c:452: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c: In function 'test_skip_parents': test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned int', but argument 4 has type 'uint64_t' test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned int', but argument 6 has type 'uint64_t' test-event-stats.c: In function 'test_merge_events_skip_parents': test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned int', but argument 4 has type 'uint64_t' test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned int', but argument 6 has type 'uint64_t' Makefile:638: recipe for target 'test-event-stats.o' failed gmake[3]: *** [test-event-stats.o] Error 1 gmake[3]: Leaving directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' Makefile:565: recipe for target 'all-recursive' failed gmake[2]: *** [all-recursive] Error 1 gmake[2]: Leaving directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src' Makefile:683: recipe for target 'all-recursive' failed gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1' Makefile:527: recipe for target 'all' failed gmake: *** [all] Error 2 [wash@gw ~/Tools/Dovecot/2.3/dovecot-2.3.4.1]$

FreeBSD-8.4:

Making all in lib-master source='test-event-stats.c' object='test-event-stats.o' libtool=no DEPDIR=.deps depmode=none /bin/bash ../../depcomp gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-dns -I../../src/lib-test -I../../src/lib-settings -I../../src/lib-ssl-iostream -DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\" -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\" -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\" -DBINDIR=\""/opt/dovecot2.3/bin"\" -std=gnu99 -g -O2 -fstack-protector -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/usr/local/include -c -o test-event-stats.o test-event-stats.c test-event-stats.c: In function 'kill_stats_child': test-event-stats.c:101: warning: implicit declaration of function 'kill' test-event-stats.c:101: error: 'SIGKILL' undeclared (first use in this function) test-event-stats.c:101: error: (Each undeclared identifier is reported only once test-event-stats.c:101: error: for each function it appears in.) test-event-stats.c: In function 'test_no_merging2': test-event-stats.c:361: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c: In function 'test_no_merging3': test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned int', but argument 4 has type 'uint64_t' test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned int', but argument 6 has type 'uint64_t' test-event-stats.c: In function 'test_merge_events2': test-event-stats.c:452: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c: In function 'test_skip_parents': test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned int', but argument 4 has type 'uint64_t' test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned int', but argument 6 has type 'uint64_t' test-event-stats.c: In function 'test_merge_events_skip_parents': test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'uint64_t' test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned int', but argument 4 has type 'uint64_t' test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned int', but argument 6 has type 'uint64_t' *** Error code 1

Stop. make: stopped in /usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master *** Error code 1

Stop. make: stopped in /usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src *** Error code 1

Stop. make: stopped in /home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1 Makefile:527: recipe for target 'all' failed gmake: *** [all] Error 1 (23:18:46 <~/Tools/Dovecot/2.3/dovecot-2.3.4.1>) 0 $

-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", grep ^[^#] :-)

-- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@ nl2k.ab.ca Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising! https://www.empire.kred/ROOTNK?t=94a1f39b Look at Psalms 14 and 53 on Atheism Anonymity is the truest expression of altruism. -Eric Gibson

-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", grep ^[^#] :-)

-- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx@gmail.com US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106

-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", grep ^[^#] :-)

-- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx@gmail.com US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106

2.3.4 had the same compile issues.... On Tue, Feb 5, 2019 at 2:44 PM Odhiambo Washington wrote:

Noted.

I will wait for dovecot-2.3.4.2 tarball then.

In all the servers I listed (+2 more), I never use the mail/dovecot port.

I rely on mail/dovecot port on my own prototype (FreeBSD 12) which I have built in preparation for the upgrade of all the servers I currently have (except the 11.2). So for now, they have to run with 2.3.4, because of that reason - I am not using the port. And yes, I know about DESTDIR :-)

On Tue, 5 Feb 2019 at 23:35, Larry Rosenman wrote:

...

the patches are already in git master. I've pulled them into the mail/dovecot port.

The dovecot guys/gals will release it eventually, but the port works TODAY.

On Tue, Feb 5, 2019 at 2:33 PM Odhiambo Washington wrote:

...

I have always been able to compile manually, even from RCs so I believe I should be able to compile from the tarball as well. Something is broken,

On Tue, 5 Feb 2019 at 23:29, Larry Rosenman wrote:

...

pull the patches from the port.....

On Tue, Feb 5, 2019 at 2:28 PM Odhiambo Washington via dovecot < dovecot@dovecot.org> wrote:

...

Oh, so manual compile should NOT work and it's okay or am I missing something?

On Tue, 5 Feb 2019 at 23:26, The Doctor wrote:

...

On Tue, Feb 05, 2019 at 11:18:45PM +0300, Odhiambo Washington via dovecot wrote: > On Tue, 5 Feb 2019 at 20:32, Aki Tuomi via dovecot < dovecot@dovecot.org> > wrote: > > > Due to DMARC issues some people have failed to receive the latest security > > information, so here it is repeated for both releases: > > > > 2.3.4.1 > > > > https://dovecot.org/releases/2.3/dovecot-2.3.4.1.tar.gz > > https://dovecot.org/releases/2.3/dovecot-2.3.4.1.tar.gz.sig > > https://dovecot.org/releases/2.3/dovecot-2.3.2.tar.gz.sig > > Binary packages in https://repo.dovecot.org/ > > > > * CVE-2019-3814: If imap/pop3/managesieve/submission client has > > trusted certificate with missing username field > > (ssl_cert_username_field), under some configurations Dovecot > > mistakenly trusts the username provided via authentication instead > > of failing. > > * ssl_cert_username_field setting was ignored with external SMTP AUTH, > > because none of the MTAs (Postfix, Exim) currently send the > > cert_username field. This may have allowed users with trusted > > certificate to specify any username in the authentication. This bug > > didn't affect Dovecot's Submission service. > > > > FreeBSD-11.2 (amd64): > > gmake[2]: Entering directory > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' > gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-dns > -I../../src/lib-test -I../../src/lib-settings -I../../src/lib-ssl-iostream > -DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\" > -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\" > -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\" > -DBINDIR=\""/opt/dovecot2.3/bin"\" -std=gnu99 -g -O2 > -fstack-protector-strong -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W > -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith > -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime > -Wstrict-aliasing=2 -I/usr/local/include -MT test-event-stats.o -MD -MP > -MF .deps/test-event-stats.Tpo -c -o test-event-stats.o test-event-stats.c > test-event-stats.c: In function 'kill_stats_child': > test-event-stats.c:101:2: warning: implicit declaration of function 'kill' > [-Wimplicit-function-declaration] > (void)kill(stats_pid, SIGKILL); > ^ > test-event-stats.c:101:24: error: 'SIGKILL' undeclared (first use in this > function) > (void)kill(stats_pid, SIGKILL); > ^ > test-event-stats.c:101:24: note: each undeclared identifier is reported > only once for each function it appears in > gmake[2]: *** [Makefile:638: test-event-stats.o] Error 1 > gmake[2]: Leaving directory > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' > gmake[1]: *** [Makefile:565: install-recursive] Error 1 > gmake[1]: Leaving directory > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src' > gmake: *** [Makefile:683: install-recursive] Error 1 > >

Ports wokred for me.

> > > FreeBSD-9.3: > > gmake[3]: Entering directory > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' > gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-dns > -I../../src/lib-test -I../../src/lib-settings -I../../src/lib-ssl-iostream > -DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\" > -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\" > -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\" > -DBINDIR=\""/opt/dovecot2.3/bin"\" -std=gnu99 -g -O2 -fstack-protector > -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes > -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 > -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 > -I/usr/local/include -MT test-event-stats.o -MD -MP -MF > .deps/test-event-stats.Tpo -c -o test-event-stats.o test-event-stats.c > test-event-stats.c: In function 'kill_stats_child': > test-event-stats.c:101: warning: implicit declaration of function 'kill' > test-event-stats.c:101: error: 'SIGKILL' undeclared (first use in this > function) > test-event-stats.c:101: error: (Each undeclared identifier is reported only > once > test-event-stats.c:101: error: for each function it appears in.) > test-event-stats.c: In function 'test_no_merging2': > test-event-stats.c:361: warning: format '%lu' expects type 'long unsigned > int', but argument 2 has type 'uint64_t' > test-event-stats.c: In function 'test_no_merging3': > test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned > int', but argument 2 has type 'uint64_t' > test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned > int', but argument 4 has type 'uint64_t' > test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned > int', but argument 6 has type 'uint64_t' > test-event-stats.c: In function 'test_merge_events2': > test-event-stats.c:452: warning: format '%lu' expects type 'long unsigned > int', but argument 2 has type 'uint64_t' > test-event-stats.c: In function 'test_skip_parents': > test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned > int', but argument 2 has type 'uint64_t' > test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned > int', but argument 4 has type 'uint64_t' > test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned > int', but argument 6 has type 'uint64_t' > test-event-stats.c: In function 'test_merge_events_skip_parents': > test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned > int', but argument 2 has type 'uint64_t' > test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned > int', but argument 4 has type 'uint64_t' > test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned > int', but argument 6 has type 'uint64_t' > Makefile:638: recipe for target 'test-event-stats.o' failed > gmake[3]: *** [test-event-stats.o] Error 1 > gmake[3]: Leaving directory > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' > Makefile:565: recipe for target 'all-recursive' failed > gmake[2]: *** [all-recursive] Error 1 > gmake[2]: Leaving directory > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src' > Makefile:683: recipe for target 'all-recursive' failed > gmake[1]: *** [all-recursive] Error 1 > gmake[1]: Leaving directory > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1' > Makefile:527: recipe for target 'all' failed > gmake: *** [all] Error 2 > [wash@gw ~/Tools/Dovecot/2.3/dovecot-2.3.4.1]$ > > > > > FreeBSD-8.4: > > Making all in lib-master > source='test-event-stats.c' object='test-event-stats.o' libtool=no > DEPDIR=.deps depmode=none /bin/bash ../../depcomp gcc -DHAVE_CONFIG_H -I. > -I../.. -I../../src/lib -I../../src/lib-dns -I../../src/lib-test > -I../../src/lib-settings -I../../src/lib-ssl-iostream > -DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\" > -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\" > -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\" > -DBINDIR=\""/opt/dovecot2.3/bin"\" -std=gnu99 -g -O2 -fstack-protector > -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes > -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 > -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 > -I/usr/local/include -c -o test-event-stats.o test-event-stats.c > test-event-stats.c: In function 'kill_stats_child': > test-event-stats.c:101: warning: implicit declaration of function 'kill' > test-event-stats.c:101: error: 'SIGKILL' undeclared (first use in this > function) > test-event-stats.c:101: error: (Each undeclared identifier is reported only > once > test-event-stats.c:101: error: for each function it appears in.) > test-event-stats.c: In function 'test_no_merging2': > test-event-stats.c:361: warning: format '%lu' expects type 'long unsigned > int', but argument 2 has type 'uint64_t' > test-event-stats.c: In function 'test_no_merging3': > test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned > int', but argument 2 has type 'uint64_t' > test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned > int', but argument 4 has type 'uint64_t' > test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned > int', but argument 6 has type 'uint64_t' > test-event-stats.c: In function 'test_merge_events2': > test-event-stats.c:452: warning: format '%lu' expects type 'long unsigned > int', but argument 2 has type 'uint64_t' > test-event-stats.c: In function 'test_skip_parents': > test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned > int', but argument 2 has type 'uint64_t' > test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned > int', but argument 4 has type 'uint64_t' > test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned > int', but argument 6 has type 'uint64_t' > test-event-stats.c: In function 'test_merge_events_skip_parents': > test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned > int', but argument 2 has type 'uint64_t' > test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned > int', but argument 4 has type 'uint64_t' > test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned > int', but argument 6 has type 'uint64_t' > *** Error code 1 > > Stop. > make: stopped in > /usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master > *** Error code 1 > > Stop. > make: stopped in /usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src > *** Error code 1 > > Stop. > make: stopped in /home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1 > Makefile:527: recipe for target 'all' failed > gmake: *** [all] Error 1 > (23:18:46 <~/Tools/Dovecot/2.3/dovecot-2.3.4.1>) 0 $ > > > > -- > Best regards, > Odhiambo WASHINGTON, > Nairobi,KE > +254 7 3200 0004/+254 7 2274 3223 > "Oh, the cruft.", grep ^[^#] :-)

-- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@ @nl2k.ab.ca Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising! https://www.empire.kred/ROOTNK?t=94a1f39b Look at Psalms 14 and 53 on Atheism Anonymity is the truest expression of altruism. -Eric Gibson

-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", grep ^[^#] :-)

-- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx@gmail.com US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106

-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", grep ^[^#] :-)

-- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx@gmail.com US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106

-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", grep ^[^#] :-)

-- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx@gmail.com US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106

that was a MySQL issue and mmokhi fixed it in Ports. I really do try to be conscientious about making sure it works (I use it for my mailserver). I really don't understand your hangup about using ports/pkg/poudriere/etc to build the ports and install them. On Tue, Feb 5, 2019 at 2:53 PM Odhiambo Washington wrote:

Bueno.

I don't even remember well.

Wasn't that issue about mysql-8.0.12 to 8.0.13??

On Tue, 5 Feb 2019 at 23:46, Larry Rosenman wrote:

...

2.3.4 had the same compile issues....

On Tue, Feb 5, 2019 at 2:44 PM Odhiambo Washington wrote:

...

Noted.

I will wait for dovecot-2.3.4.2 tarball then.

In all the servers I listed (+2 more), I never use the mail/dovecot port.

I rely on mail/dovecot port on my own prototype (FreeBSD 12) which I have built in preparation for the upgrade of all the servers I currently have (except the 11.2). So for now, they have to run with 2.3.4, because of that reason - I am not using the port. And yes, I know about DESTDIR :-)

On Tue, 5 Feb 2019 at 23:35, Larry Rosenman wrote:

...

the patches are already in git master. I've pulled them into the mail/dovecot port.

The dovecot guys/gals will release it eventually, but the port works TODAY.

On Tue, Feb 5, 2019 at 2:33 PM Odhiambo Washington wrote:

...

I have always been able to compile manually, even from RCs so I believe I should be able to compile from the tarball as well. Something is broken,

On Tue, 5 Feb 2019 at 23:29, Larry Rosenman wrote:

...

pull the patches from the port.....

On Tue, Feb 5, 2019 at 2:28 PM Odhiambo Washington via dovecot < dovecot@dovecot.org> wrote:

> Oh, so manual compile should NOT work and it's okay or am I missing > something? > > On Tue, 5 Feb 2019 at 23:26, The Doctor > wrote: > >> On Tue, Feb 05, 2019 at 11:18:45PM +0300, Odhiambo Washington via >> dovecot wrote: >> > On Tue, 5 Feb 2019 at 20:32, Aki Tuomi via dovecot < >> dovecot@dovecot.org> >> > wrote: >> > >> > > Due to DMARC issues some people have failed to receive the >> latest security >> > > information, so here it is repeated for both releases: >> > > >> > > 2.3.4.1 >> > > >> > > https://dovecot.org/releases/2.3/dovecot-2.3.4.1.tar.gz >> > > https://dovecot.org/releases/2.3/dovecot-2.3.4.1.tar.gz.sig >> > > https://dovecot.org/releases/2.3/dovecot-2.3.2.tar.gz.sig >> > > Binary packages in https://repo.dovecot.org/ >> > > >> > > * CVE-2019-3814: If imap/pop3/managesieve/submission client >> has >> > > trusted certificate with missing username field >> > > (ssl_cert_username_field), under some configurations >> Dovecot >> > > mistakenly trusts the username provided via >> authentication instead >> > > of failing. >> > > * ssl_cert_username_field setting was ignored with external >> SMTP AUTH, >> > > because none of the MTAs (Postfix, Exim) currently send >> the >> > > cert_username field. This may have allowed users with >> trusted >> > > certificate to specify any username in the >> authentication. This bug >> > > didn't affect Dovecot's Submission service. >> > > >> > >> > FreeBSD-11.2 (amd64): >> > >> > gmake[2]: Entering directory >> > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' >> > gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib >> -I../../src/lib-dns >> > -I../../src/lib-test -I../../src/lib-settings >> -I../../src/lib-ssl-iostream >> > -DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\" >> > -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\" >> > -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\" >> > -DBINDIR=\""/opt/dovecot2.3/bin"\" -std=gnu99 -g -O2 >> > -fstack-protector-strong -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 >> -Wall -W >> > -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith >> > -Wchar-subscripts -Wformat=2 -Wbad-function-cast >> -fno-builtin-strftime >> > -Wstrict-aliasing=2 -I/usr/local/include -MT test-event-stats.o >> -MD -MP >> > -MF .deps/test-event-stats.Tpo -c -o test-event-stats.o >> test-event-stats.c >> > test-event-stats.c: In function 'kill_stats_child': >> > test-event-stats.c:101:2: warning: implicit declaration of >> function 'kill' >> > [-Wimplicit-function-declaration] >> > (void)kill(stats_pid, SIGKILL); >> > ^ >> > test-event-stats.c:101:24: error: 'SIGKILL' undeclared (first use >> in this >> > function) >> > (void)kill(stats_pid, SIGKILL); >> > ^ >> > test-event-stats.c:101:24: note: each undeclared identifier is >> reported >> > only once for each function it appears in >> > gmake[2]: *** [Makefile:638: test-event-stats.o] Error 1 >> > gmake[2]: Leaving directory >> > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' >> > gmake[1]: *** [Makefile:565: install-recursive] Error 1 >> > gmake[1]: Leaving directory >> > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src' >> > gmake: *** [Makefile:683: install-recursive] Error 1 >> > >> > >> >> >> Ports wokred for me. >> >> > >> > >> > FreeBSD-9.3: >> > >> > gmake[3]: Entering directory >> > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' >> > gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib >> -I../../src/lib-dns >> > -I../../src/lib-test -I../../src/lib-settings >> -I../../src/lib-ssl-iostream >> > -DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\" >> > -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\" >> > -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\" >> > -DBINDIR=\""/opt/dovecot2.3/bin"\" -std=gnu99 -g -O2 >> -fstack-protector >> > -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W >> -Wmissing-prototypes >> > -Wmissing-declarations -Wpointer-arith -Wchar-subscripts >> -Wformat=2 >> > -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 >> > -I/usr/local/include -MT test-event-stats.o -MD -MP -MF >> > .deps/test-event-stats.Tpo -c -o test-event-stats.o >> test-event-stats.c >> > test-event-stats.c: In function 'kill_stats_child': >> > test-event-stats.c:101: warning: implicit declaration of function >> 'kill' >> > test-event-stats.c:101: error: 'SIGKILL' undeclared (first use in >> this >> > function) >> > test-event-stats.c:101: error: (Each undeclared identifier is >> reported only >> > once >> > test-event-stats.c:101: error: for each function it appears in.) >> > test-event-stats.c: In function 'test_no_merging2': >> > test-event-stats.c:361: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 2 has type 'uint64_t' >> > test-event-stats.c: In function 'test_no_merging3': >> > test-event-stats.c:387: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 2 has type 'uint64_t' >> > test-event-stats.c:387: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 4 has type 'uint64_t' >> > test-event-stats.c:387: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 6 has type 'uint64_t' >> > test-event-stats.c: In function 'test_merge_events2': >> > test-event-stats.c:452: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 2 has type 'uint64_t' >> > test-event-stats.c: In function 'test_skip_parents': >> > test-event-stats.c:484: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 2 has type 'uint64_t' >> > test-event-stats.c:484: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 4 has type 'uint64_t' >> > test-event-stats.c:484: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 6 has type 'uint64_t' >> > test-event-stats.c: In function 'test_merge_events_skip_parents': >> > test-event-stats.c:526: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 2 has type 'uint64_t' >> > test-event-stats.c:526: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 4 has type 'uint64_t' >> > test-event-stats.c:526: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 6 has type 'uint64_t' >> > Makefile:638: recipe for target 'test-event-stats.o' failed >> > gmake[3]: *** [test-event-stats.o] Error 1 >> > gmake[3]: Leaving directory >> > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master' >> > Makefile:565: recipe for target 'all-recursive' failed >> > gmake[2]: *** [all-recursive] Error 1 >> > gmake[2]: Leaving directory >> > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src' >> > Makefile:683: recipe for target 'all-recursive' failed >> > gmake[1]: *** [all-recursive] Error 1 >> > gmake[1]: Leaving directory >> > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1' >> > Makefile:527: recipe for target 'all' failed >> > gmake: *** [all] Error 2 >> > [wash@gw ~/Tools/Dovecot/2.3/dovecot-2.3.4.1]$ >> > >> > >> > >> > >> > FreeBSD-8.4: >> > >> > Making all in lib-master >> > source='test-event-stats.c' object='test-event-stats.o' libtool=no >> > DEPDIR=.deps depmode=none /bin/bash ../../depcomp gcc >> -DHAVE_CONFIG_H -I. >> > -I../.. -I../../src/lib -I../../src/lib-dns >> -I../../src/lib-test >> > -I../../src/lib-settings -I../../src/lib-ssl-iostream >> > -DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\" >> > -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\" >> > -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\" >> > -DBINDIR=\""/opt/dovecot2.3/bin"\" -std=gnu99 -g -O2 >> -fstack-protector >> > -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W >> -Wmissing-prototypes >> > -Wmissing-declarations -Wpointer-arith -Wchar-subscripts >> -Wformat=2 >> > -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 >> > -I/usr/local/include -c -o test-event-stats.o test-event-stats.c >> > test-event-stats.c: In function 'kill_stats_child': >> > test-event-stats.c:101: warning: implicit declaration of function >> 'kill' >> > test-event-stats.c:101: error: 'SIGKILL' undeclared (first use in >> this >> > function) >> > test-event-stats.c:101: error: (Each undeclared identifier is >> reported only >> > once >> > test-event-stats.c:101: error: for each function it appears in.) >> > test-event-stats.c: In function 'test_no_merging2': >> > test-event-stats.c:361: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 2 has type 'uint64_t' >> > test-event-stats.c: In function 'test_no_merging3': >> > test-event-stats.c:387: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 2 has type 'uint64_t' >> > test-event-stats.c:387: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 4 has type 'uint64_t' >> > test-event-stats.c:387: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 6 has type 'uint64_t' >> > test-event-stats.c: In function 'test_merge_events2': >> > test-event-stats.c:452: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 2 has type 'uint64_t' >> > test-event-stats.c: In function 'test_skip_parents': >> > test-event-stats.c:484: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 2 has type 'uint64_t' >> > test-event-stats.c:484: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 4 has type 'uint64_t' >> > test-event-stats.c:484: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 6 has type 'uint64_t' >> > test-event-stats.c: In function 'test_merge_events_skip_parents': >> > test-event-stats.c:526: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 2 has type 'uint64_t' >> > test-event-stats.c:526: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 4 has type 'uint64_t' >> > test-event-stats.c:526: warning: format '%lu' expects type 'long >> unsigned >> > int', but argument 6 has type 'uint64_t' >> > *** Error code 1 >> > >> > Stop. >> > make: stopped in >> > /usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master >> > *** Error code 1 >> > >> > Stop. >> > make: stopped in >> /usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src >> > *** Error code 1 >> > >> > Stop. >> > make: stopped in /home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1 >> > Makefile:527: recipe for target 'all' failed >> > gmake: *** [all] Error 1 >> > (23:18:46 <~/Tools/Dovecot/2.3/dovecot-2.3.4.1>) 0 $ >> > >> > >> > >> > -- >> > Best regards, >> > Odhiambo WASHINGTON, >> > Nairobi,KE >> > +254 7 3200 0004/+254 7 2274 3223 >> > "Oh, the cruft.", grep ^[^#] :-) >> >> -- >> Member - Liberal International This is doctor@@nl2k.ab.ca Ici >> doctor@@nl2k.ab.ca >> Yahweh, Queen & country!Never Satan President Republic!Beware >> AntiChrist rising! >> https://www.empire.kred/ROOTNK?t=94a1f39b Look at Psalms 14 and >> 53 on Atheism >> Anonymity is the truest expression of altruism. -Eric Gibson >> > > > -- > Best regards, > Odhiambo WASHINGTON, > Nairobi,KE > +254 7 3200 0004/+254 7 2274 3223 > "Oh, the cruft.", grep ^[^#] :-) >

-- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx@gmail.com US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106

-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", grep ^[^#] :-)

-- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx@gmail.com US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106

-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", grep ^[^#] :-)

-- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx@gmail.com US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106

-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", grep ^[^#] :-)

-- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx@gmail.com US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106