Release notify (2.2.36.1 and 2.3.4.1)

Larry Rosenman larryrtx at gmail.com
Tue Feb 5 22:34:51 EET 2019


the patches are already in git master.  I've pulled them into the
mail/dovecot port.

The dovecot guys/gals will release it eventually, but the port works TODAY.


On Tue, Feb 5, 2019 at 2:33 PM Odhiambo Washington <odhiambo at gmail.com>
wrote:

> I have always been able to compile manually, even from RCs so I believe I
> should be able to compile from the tarball as well.
> Something is broken,
>
> On Tue, 5 Feb 2019 at 23:29, Larry Rosenman <larryrtx at gmail.com> wrote:
>
>> pull the patches from the port.....
>>
>>
>> On Tue, Feb 5, 2019 at 2:28 PM Odhiambo Washington via dovecot <
>> dovecot at dovecot.org> wrote:
>>
>>> Oh, so manual compile should NOT work and it's okay or am I missing
>>> something?
>>>
>>> On Tue, 5 Feb 2019 at 23:26, The Doctor <doctor at doctor.nl2k.ab.ca>
>>> wrote:
>>>
>>>> On Tue, Feb 05, 2019 at 11:18:45PM +0300, Odhiambo Washington via
>>>> dovecot wrote:
>>>> > On Tue, 5 Feb 2019 at 20:32, Aki Tuomi via dovecot <
>>>> dovecot at dovecot.org>
>>>> > wrote:
>>>> >
>>>> > > Due to DMARC issues some people have failed to receive the latest
>>>> security
>>>> > > information, so here it is repeated for both releases:
>>>> > >
>>>> > > 2.3.4.1
>>>> > >
>>>> > > https://dovecot.org/releases/2.3/dovecot-2.3.4.1.tar.gz
>>>> > > https://dovecot.org/releases/2.3/dovecot-2.3.4.1.tar.gz.sig
>>>> > > <https://dovecot.org/releases/2.3/dovecot-2.3.2.tar.gz.sig>
>>>> > > Binary packages in https://repo.dovecot.org/
>>>> > >
>>>> > >     * CVE-2019-3814: If imap/pop3/managesieve/submission client has
>>>> > >       trusted certificate with missing username field
>>>> > >       (ssl_cert_username_field), under some configurations Dovecot
>>>> > >       mistakenly trusts the username provided via authentication
>>>> instead
>>>> > >       of failing.
>>>> > >     * ssl_cert_username_field setting was ignored with external
>>>> SMTP AUTH,
>>>> > >       because none of the MTAs (Postfix, Exim) currently send the
>>>> > >       cert_username field. This may have allowed users with trusted
>>>> > >       certificate to specify any username in the authentication.
>>>> This bug
>>>> > >       didn't affect Dovecot's Submission service.
>>>> > >
>>>> >
>>>> > FreeBSD-11.2 (amd64):
>>>> >
>>>> > gmake[2]: Entering directory
>>>> > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master'
>>>> > gcc -DHAVE_CONFIG_H -I. -I../..  -I../../src/lib -I../../src/lib-dns
>>>> > -I../../src/lib-test -I../../src/lib-settings
>>>> -I../../src/lib-ssl-iostream
>>>> > -DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\"
>>>> > -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\"
>>>> > -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\"
>>>> > -DBINDIR=\""/opt/dovecot2.3/bin"\"   -std=gnu99 -g -O2
>>>> > -fstack-protector-strong -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall
>>>> -W
>>>> > -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith
>>>> > -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime
>>>> > -Wstrict-aliasing=2 -I/usr/local/include   -MT test-event-stats.o -MD
>>>> -MP
>>>> > -MF .deps/test-event-stats.Tpo -c -o test-event-stats.o
>>>> test-event-stats.c
>>>> > test-event-stats.c: In function 'kill_stats_child':
>>>> > test-event-stats.c:101:2: warning: implicit declaration of function
>>>> 'kill'
>>>> > [-Wimplicit-function-declaration]
>>>> >   (void)kill(stats_pid, SIGKILL);
>>>> >   ^
>>>> > test-event-stats.c:101:24: error: 'SIGKILL' undeclared (first use in
>>>> this
>>>> > function)
>>>> >   (void)kill(stats_pid, SIGKILL);
>>>> >                         ^
>>>> > test-event-stats.c:101:24: note: each undeclared identifier is
>>>> reported
>>>> > only once for each function it appears in
>>>> > gmake[2]: *** [Makefile:638: test-event-stats.o] Error 1
>>>> > gmake[2]: Leaving directory
>>>> > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master'
>>>> > gmake[1]: *** [Makefile:565: install-recursive] Error 1
>>>> > gmake[1]: Leaving directory
>>>> > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src'
>>>> > gmake: *** [Makefile:683: install-recursive] Error 1
>>>> >
>>>> >
>>>>
>>>>
>>>> Ports wokred for me.
>>>>
>>>> >
>>>> >
>>>> > FreeBSD-9.3:
>>>> >
>>>> > gmake[3]: Entering directory
>>>> > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master'
>>>> > gcc -DHAVE_CONFIG_H -I. -I../..  -I../../src/lib -I../../src/lib-dns
>>>> > -I../../src/lib-test -I../../src/lib-settings
>>>> -I../../src/lib-ssl-iostream
>>>> > -DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\"
>>>> > -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\"
>>>> > -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\"
>>>> > -DBINDIR=\""/opt/dovecot2.3/bin"\"   -std=gnu99 -g -O2
>>>> -fstack-protector
>>>> > -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes
>>>> > -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2
>>>> > -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2
>>>> > -I/usr/local/include   -MT test-event-stats.o -MD -MP -MF
>>>> > .deps/test-event-stats.Tpo -c -o test-event-stats.o test-event-stats.c
>>>> > test-event-stats.c: In function 'kill_stats_child':
>>>> > test-event-stats.c:101: warning: implicit declaration of function
>>>> 'kill'
>>>> > test-event-stats.c:101: error: 'SIGKILL' undeclared (first use in this
>>>> > function)
>>>> > test-event-stats.c:101: error: (Each undeclared identifier is
>>>> reported only
>>>> > once
>>>> > test-event-stats.c:101: error: for each function it appears in.)
>>>> > test-event-stats.c: In function 'test_no_merging2':
>>>> > test-event-stats.c:361: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 2 has type 'uint64_t'
>>>> > test-event-stats.c: In function 'test_no_merging3':
>>>> > test-event-stats.c:387: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 2 has type 'uint64_t'
>>>> > test-event-stats.c:387: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 4 has type 'uint64_t'
>>>> > test-event-stats.c:387: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 6 has type 'uint64_t'
>>>> > test-event-stats.c: In function 'test_merge_events2':
>>>> > test-event-stats.c:452: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 2 has type 'uint64_t'
>>>> > test-event-stats.c: In function 'test_skip_parents':
>>>> > test-event-stats.c:484: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 2 has type 'uint64_t'
>>>> > test-event-stats.c:484: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 4 has type 'uint64_t'
>>>> > test-event-stats.c:484: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 6 has type 'uint64_t'
>>>> > test-event-stats.c: In function 'test_merge_events_skip_parents':
>>>> > test-event-stats.c:526: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 2 has type 'uint64_t'
>>>> > test-event-stats.c:526: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 4 has type 'uint64_t'
>>>> > test-event-stats.c:526: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 6 has type 'uint64_t'
>>>> > Makefile:638: recipe for target 'test-event-stats.o' failed
>>>> > gmake[3]: *** [test-event-stats.o] Error 1
>>>> > gmake[3]: Leaving directory
>>>> > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master'
>>>> > Makefile:565: recipe for target 'all-recursive' failed
>>>> > gmake[2]: *** [all-recursive] Error 1
>>>> > gmake[2]: Leaving directory
>>>> > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src'
>>>> > Makefile:683: recipe for target 'all-recursive' failed
>>>> > gmake[1]: *** [all-recursive] Error 1
>>>> > gmake[1]: Leaving directory
>>>> > '/usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1'
>>>> > Makefile:527: recipe for target 'all' failed
>>>> > gmake: *** [all] Error 2
>>>> > [wash at gw ~/Tools/Dovecot/2.3/dovecot-2.3.4.1]$
>>>> >
>>>> >
>>>> >
>>>> >
>>>> > FreeBSD-8.4:
>>>> >
>>>> > Making all in lib-master
>>>> > source='test-event-stats.c' object='test-event-stats.o' libtool=no
>>>> > DEPDIR=.deps depmode=none /bin/bash ../../depcomp  gcc
>>>> -DHAVE_CONFIG_H -I.
>>>> > -I../..  -I../../src/lib  -I../../src/lib-dns  -I../../src/lib-test
>>>> > -I../../src/lib-settings  -I../../src/lib-ssl-iostream
>>>> > -DPKG_RUNDIR=\""/opt/dovecot2.3/var/run/dovecot"\"
>>>> > -DPKG_STATEDIR=\""/opt/dovecot2.3/var/lib/dovecot"\"
>>>> > -DSYSCONFDIR=\""/opt/dovecot2.3/etc/dovecot"\"
>>>> > -DBINDIR=\""/opt/dovecot2.3/bin"\"    -std=gnu99 -g -O2
>>>> -fstack-protector
>>>> > -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes
>>>> > -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2
>>>> > -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2
>>>> > -I/usr/local/include -c -o test-event-stats.o test-event-stats.c
>>>> > test-event-stats.c: In function 'kill_stats_child':
>>>> > test-event-stats.c:101: warning: implicit declaration of function
>>>> 'kill'
>>>> > test-event-stats.c:101: error: 'SIGKILL' undeclared (first use in this
>>>> > function)
>>>> > test-event-stats.c:101: error: (Each undeclared identifier is
>>>> reported only
>>>> > once
>>>> > test-event-stats.c:101: error: for each function it appears in.)
>>>> > test-event-stats.c: In function 'test_no_merging2':
>>>> > test-event-stats.c:361: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 2 has type 'uint64_t'
>>>> > test-event-stats.c: In function 'test_no_merging3':
>>>> > test-event-stats.c:387: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 2 has type 'uint64_t'
>>>> > test-event-stats.c:387: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 4 has type 'uint64_t'
>>>> > test-event-stats.c:387: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 6 has type 'uint64_t'
>>>> > test-event-stats.c: In function 'test_merge_events2':
>>>> > test-event-stats.c:452: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 2 has type 'uint64_t'
>>>> > test-event-stats.c: In function 'test_skip_parents':
>>>> > test-event-stats.c:484: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 2 has type 'uint64_t'
>>>> > test-event-stats.c:484: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 4 has type 'uint64_t'
>>>> > test-event-stats.c:484: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 6 has type 'uint64_t'
>>>> > test-event-stats.c: In function 'test_merge_events_skip_parents':
>>>> > test-event-stats.c:526: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 2 has type 'uint64_t'
>>>> > test-event-stats.c:526: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 4 has type 'uint64_t'
>>>> > test-event-stats.c:526: warning: format '%lu' expects type 'long
>>>> unsigned
>>>> > int', but argument 6 has type 'uint64_t'
>>>> > *** Error code 1
>>>> >
>>>> > Stop.
>>>> > make: stopped in
>>>> > /usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src/lib-master
>>>> > *** Error code 1
>>>> >
>>>> > Stop.
>>>> > make: stopped in /usr/home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1/src
>>>> > *** Error code 1
>>>> >
>>>> > Stop.
>>>> > make: stopped in /home/wash/Tools/Dovecot/2.3/dovecot-2.3.4.1
>>>> > Makefile:527: recipe for target 'all' failed
>>>> > gmake: *** [all] Error 1
>>>> > (23:18:46 <~/Tools/Dovecot/2.3/dovecot-2.3.4.1>) 0 $
>>>> >
>>>> >
>>>> >
>>>> > --
>>>> > Best regards,
>>>> > Odhiambo WASHINGTON,
>>>> > Nairobi,KE
>>>> > +254 7 3200 0004/+254 7 2274 3223
>>>> > "Oh, the cruft.", grep ^[^#] :-)
>>>>
>>>> --
>>>> Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@
>>>> nl2k.ab.ca
>>>> Yahweh, Queen & country!Never Satan President Republic!Beware
>>>> AntiChrist rising!
>>>> https://www.empire.kred/ROOTNK?t=94a1f39b  Look at Psalms 14 and 53 on
>>>> Atheism
>>>> Anonymity is the truest expression of altruism.  -Eric Gibson
>>>>
>>>
>>>
>>> --
>>> Best regards,
>>> Odhiambo WASHINGTON,
>>> Nairobi,KE
>>> +254 7 3200 0004/+254 7 2274 3223
>>> "Oh, the cruft.", grep ^[^#] :-)
>>>
>>
>>
>> --
>> Larry Rosenman                     http://www.lerctr.org/~ler
>> Phone: +1 214-642-9640 (c)     E-Mail: larryrtx at gmail.com
>> US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106
>>
>
>
> --
> Best regards,
> Odhiambo WASHINGTON,
> Nairobi,KE
> +254 7 3200 0004/+254 7 2274 3223
> "Oh, the cruft.", grep ^[^#] :-)
>


-- 
Larry Rosenman                     http://www.lerctr.org/~ler
Phone: +1 214-642-9640 (c)     E-Mail: larryrtx at gmail.com
US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://dovecot.org/pipermail/dovecot/attachments/20190205/c60a552b/attachment-0001.html>


More information about the dovecot mailing list