Release notify (2.2.36.1 and 2.3.4.1)
The Doctor
doctor at doctor.nl2k.ab.ca
Tue Feb 5 22:26:18 EET 2019
On Tue, Feb 05, 2019 at 11:18:45PM +0300, Odhiambo Washington via dovecot wrote:
> On Tue, 5 Feb 2019 at 20:32, Aki Tuomi via dovecot <dovecot at dovecot.org>
> wrote:
>
> > Due to DMARC issues some people have failed to receive the latest security
> > information, so here it is repeated for both releases:
> >
> > 2.3.4.1
> >
> > https://dovecot.org/releases/2.3/dovecot-2.3.4.1.tar.gz
> > https://dovecot.org/releases/2.3/dovecot-2.3.4.1.tar.gz.sig
> > <https://dovecot.org/releases/2.3/dovecot-2.3.2.tar.gz.sig>
> > Binary packages in https://repo.dovecot.org/
> >
> > * CVE-2019-3814: If imap/pop3/managesieve/submission client has
> > trusted certificate with missing username field
> > (ssl_cert_username_field), under some configurations Dovecot
> > mistakenly trusts the username provided via authentication instead
> > of failing.
> > * ssl_cert_username_field setting was ignored with external SMTP AUTH,
> > because none of the MTAs (Postfix, Exim) currently send the
> > cert_username field. This may have allowed users with trusted
> > certificate to specify any username in the authentication. This bug
> > didn't affect Dovecot's Submission service.
> >
>
> FreeBSD-11.2 (amd64):
>
> gmake[2]: Entering directory
> '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master'
> gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-dns
> -I../../src/lib-test -I../../src/lib-settings -I../../src/lib-ssl-iostream
> -DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\"
> -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\"
> -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\"
> -DBINDIR=\""/opt/dovecot2.3/bin"\" -std=gnu99 -g -O2
> -fstack-protector-strong -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W
> -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith
> -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime
> -Wstrict-aliasing=2 -I/usr/local/include -MT test-event-stats.o -MD -MP
> -MF .deps/test-event-stats.Tpo -c -o test-event-stats.o test-event-stats.c
> test-event-stats.c: In function 'kill_stats_child':
> test-event-stats.c:101:2: warning: implicit declaration of function 'kill'
> [-Wimplicit-function-declaration]
> (void)kill(stats_pid, SIGKILL);
> ^
> test-event-stats.c:101:24: error: 'SIGKILL' undeclared (first use in this
> function)
> (void)kill(stats_pid, SIGKILL);
> ^
> test-event-stats.c:101:24: note: each undeclared identifier is reported
> only once for each function it appears in
> gmake[2]: *** [Makefile:638: test-event-stats.o] Error 1
> gmake[2]: Leaving directory
> '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master'
> gmake[1]: *** [Makefile:565: install-recursive] Error 1
> gmake[1]: Leaving directory
> '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src'
> gmake: *** [Makefile:683: install-recursive] Error 1
>
>
Ports wokred for me.
>
>
> FreeBSD-9.3:
>
> gmake[3]: Entering directory
> '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master'
> gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-dns
> -I../../src/lib-test -I../../src/lib-settings -I../../src/lib-ssl-iostream
> -DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\"
> -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\"
> -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\"
> -DBINDIR=\""/opt/dovecot2.3/bin"\" -std=gnu99 -g -O2 -fstack-protector
> -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes
> -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2
> -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2
> -I/usr/local/include -MT test-event-stats.o -MD -MP -MF
> .deps/test-event-stats.Tpo -c -o test-event-stats.o test-event-stats.c
> test-event-stats.c: In function 'kill_stats_child':
> test-event-stats.c:101: warning: implicit declaration of function 'kill'
> test-event-stats.c:101: error: 'SIGKILL' undeclared (first use in this
> function)
> test-event-stats.c:101: error: (Each undeclared identifier is reported only
> once
> test-event-stats.c:101: error: for each function it appears in.)
> test-event-stats.c: In function 'test_no_merging2':
> test-event-stats.c:361: warning: format '%lu' expects type 'long unsigned
> int', but argument 2 has type 'uint64_t'
> test-event-stats.c: In function 'test_no_merging3':
> test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned
> int', but argument 2 has type 'uint64_t'
> test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned
> int', but argument 4 has type 'uint64_t'
> test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned
> int', but argument 6 has type 'uint64_t'
> test-event-stats.c: In function 'test_merge_events2':
> test-event-stats.c:452: warning: format '%lu' expects type 'long unsigned
> int', but argument 2 has type 'uint64_t'
> test-event-stats.c: In function 'test_skip_parents':
> test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned
> int', but argument 2 has type 'uint64_t'
> test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned
> int', but argument 4 has type 'uint64_t'
> test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned
> int', but argument 6 has type 'uint64_t'
> test-event-stats.c: In function 'test_merge_events_skip_parents':
> test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned
> int', but argument 2 has type 'uint64_t'
> test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned
> int', but argument 4 has type 'uint64_t'
> test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned
> int', but argument 6 has type 'uint64_t'
> Makefile:638: recipe for target 'test-event-stats.o' failed
> gmake[3]: *** [test-event-stats.o] Error 1
> gmake[3]: Leaving directory
> '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master'
> Makefile:565: recipe for target 'all-recursive' failed
> gmake[2]: *** [all-recursive] Error 1
> gmake[2]: Leaving directory
> '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src'
> Makefile:683: recipe for target 'all-recursive' failed
> gmake[1]: *** [all-recursive] Error 1
> gmake[1]: Leaving directory
> '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1'
> Makefile:527: recipe for target 'all' failed
> gmake: *** [all] Error 2
> [wash at gw ~/Tools/Dovecot/2.3/dovecot-2.3.4.1]$
>
>
>
>
> FreeBSD-8.4:
>
> Making all in lib-master
> source='test-event-stats.c' object='test-event-stats.o' libtool=no
> DEPDIR=.deps depmode=none /bin/bash ../../depcomp gcc -DHAVE_CONFIG_H -I.
> -I../.. -I../../src/lib -I../../src/lib-dns -I../../src/lib-test
> -I../../src/lib-settings -I../../src/lib-ssl-iostream
> -DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\"
> -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\"
> -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\"
> -DBINDIR=\""/opt/dovecot2.3/bin"\" -std=gnu99 -g -O2 -fstack-protector
> -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes
> -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2
> -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2
> -I/usr/local/include -c -o test-event-stats.o test-event-stats.c
> test-event-stats.c: In function 'kill_stats_child':
> test-event-stats.c:101: warning: implicit declaration of function 'kill'
> test-event-stats.c:101: error: 'SIGKILL' undeclared (first use in this
> function)
> test-event-stats.c:101: error: (Each undeclared identifier is reported only
> once
> test-event-stats.c:101: error: for each function it appears in.)
> test-event-stats.c: In function 'test_no_merging2':
> test-event-stats.c:361: warning: format '%lu' expects type 'long unsigned
> int', but argument 2 has type 'uint64_t'
> test-event-stats.c: In function 'test_no_merging3':
> test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned
> int', but argument 2 has type 'uint64_t'
> test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned
> int', but argument 4 has type 'uint64_t'
> test-event-stats.c:387: warning: format '%lu' expects type 'long unsigned
> int', but argument 6 has type 'uint64_t'
> test-event-stats.c: In function 'test_merge_events2':
> test-event-stats.c:452: warning: format '%lu' expects type 'long unsigned
> int', but argument 2 has type 'uint64_t'
> test-event-stats.c: In function 'test_skip_parents':
> test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned
> int', but argument 2 has type 'uint64_t'
> test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned
> int', but argument 4 has type 'uint64_t'
> test-event-stats.c:484: warning: format '%lu' expects type 'long unsigned
> int', but argument 6 has type 'uint64_t'
> test-event-stats.c: In function 'test_merge_events_skip_parents':
> test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned
> int', but argument 2 has type 'uint64_t'
> test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned
> int', but argument 4 has type 'uint64_t'
> test-event-stats.c:526: warning: format '%lu' expects type 'long unsigned
> int', but argument 6 has type 'uint64_t'
> *** Error code 1
>
> Stop.
> make: stopped in
> /usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master
> *** Error code 1
>
> Stop.
> make: stopped in /usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src
> *** Error code 1
>
> Stop.
> make: stopped in /home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1
> Makefile:527: recipe for target 'all' failed
> gmake: *** [all] Error 1
> (23:18:46 <~/Tools/Dovecot/2.3/dovecot-2.3.4.1>) 0 $
>
>
>
> --
> Best regards,
> Odhiambo WASHINGTON,
> Nairobi,KE
> +254 7 3200 0004/+254 7 2274 3223
> "Oh, the cruft.", grep ^[^#] :-)
--
Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca
Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising!
https://www.empire.kred/ROOTNK?t=94a1f39b Look at Psalms 14 and 53 on Atheism
Anonymity is the truest expression of altruism. -Eric Gibson
More information about the dovecot
mailing list