Dovecot v2.3.10 Released

Stuart Henderson stu at spacehopper.org
Sat Mar 7 14:45:56 EET 2020


On 2020-03-06, Aki Tuomi <aki.tuomi at dovecot.fi> wrote:
> + Add tool for generating sysreport called dovecot-sysreport.
>=C2=A0 This generates a bundle of information usually needed for support
>=C2=A0 requests.

This goes to some lengths to remove passwords in dovecot config files, but
it includes userdb/passdb files in the archive which can include passwords
(possibly hashed, possibly not, either way still sensitive).

(Also it relies on GNU extensions to grep and tar - would it be worth
converting those parts to perl/python instead, because it already relies on
them in order to actually hide the passwords?)




More information about the dovecot mailing list