<div dir="ltr">for some reason Aki's posts are not making it to my GMail account from this list.<div><br></div><div>Any idea why?</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Feb 5, 2019 at 10:04 AM Eric Broch <<a href="mailto:ebroch@whitehorsetc.com">ebroch@whitehorsetc.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div bgcolor="#FFFFFF">
<p>Thank you!<br>
</p>
<div class="gmail-m_-6655601855108177817moz-cite-prefix">On 2/5/2019 8:43 AM, Aki Tuomi wrote:<br>
</div>
<blockquote type="cite">
<div> Hi, </div>
<div> <br>
</div>
<div> as per our EOL statement 2.2.36 receives security and
critical updates. That said, we decided to flush few annoying
bugs with .1 release. </div>
<div> <br>
</div>
<div> You do not need to build releases for 2.2. </div>
<div> <br>
</div>
<div> Aki </div>
<blockquote type="cite">
<div> On 05 February 2019 at 17:36 Eric Broch < <a href="mailto:ebroch@whitehorsetc.com" target="_blank">ebroch@whitehorsetc.com</a>>
wrote: </div>
<div> <br>
</div>
<div> <br>
</div>
<div> Aki, </div>
<div> <br>
</div>
<div> What's the difference between 2.2.x and 2.3.x version of
Dovecot? And </div>
<div> why do you maintain both? </div>
<div> <br>
</div>
<div> I stopped building RPM's of the 2.2.x version and now only
build 2.3.x. </div>
<div> Should I be maintaining both? </div>
<div> <br>
</div>
<div> Eric </div>
<div> <br>
</div>
<div> On 2/5/2019 6:01 AM, Aki Tuomi wrote: </div>
<blockquote type="cite">
<div> <a href="https://dovecot.org/releases/2.2/dovecot-2.2.36.1.tar.gz" rel="noopener" target="_blank">https://dovecot.org/releases/2.2/dovecot-2.2.36.1.tar.gz</a>
</div>
<div> <a href="https://dovecot.org/releases/2.2/dovecot-2.2.36.1.tar.gz.sig" rel="noopener" target="_blank">https://dovecot.org/releases/2.2/dovecot-2.2.36.1.tar.gz.sig</a>
</div>
</blockquote>
<blockquote type="cite">
<div> * CVE-2019-3814: If imap/pop3/managesieve/submission
client has </div>
<div> trusted certificate with missing username field </div>
<div> (ssl_cert_username_field), under some
configurations Dovecot </div>
<div> mistakenly trusts the username provided via
authentication instead </div>
<div> of failing. </div>
<div> * ssl_cert_username_field setting was ignored with
external SMTP AUTH, </div>
<div> because none of the MTAs (Postfix, Exim) currently
send the </div>
<div> cert_username field. This may have allowed users
with trusted </div>
<div> certificate to specify any username in the
authentication. This bug </div>
<div> didn't affect Dovecot's Submission service. </div>
</blockquote>
<blockquote type="cite">
<div> - pop3_no_flag_updates=no: Don't expunge RETRed
messages without QUIT </div>
<div> - director: Kicking a user assert-crashes if login
process is very slow </div>
<div> - lda/lmtp: Fix assert-crash with some Sieve scripts
when </div>
<div>
mail_attachment_detection_options=add-flags-on-save </div>
<div> - fs-compress: Using maybe-gz assert-crashed when
reading 0 sized file </div>
<div> - Snippet generation crashed with invalid
Content-Type:multipart </div>
</blockquote>
<div> > </div>
<blockquote type="cite">
<div> --- </div>
</blockquote>
<blockquote type="cite">
<div> Aki Tuomi </div>
<div> Open-Xchange Oy </div>
</blockquote>
<div> > </div>
<div> -- </div>
<div> Eric Broch </div>
<div> White Horse Technical Consulting (WHTC) </div>
</blockquote>
<div> <br>
</div>
<div class="gmail-m_-6655601855108177817io-ox-signature"> --- <br>
Aki Tuomi </div>
</blockquote>
<pre class="gmail-m_-6655601855108177817moz-signature" cols="72">--
Eric Broch
White Horse Technical Consulting (WHTC)
</pre>
</div>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">Larry Rosenman <a href="http://www.lerctr.org/~ler" target="_blank">http://www.lerctr.org/~ler</a><br><span>Phone: <span title="Call with Google Voice"><span title="Call with Google Voice"><span title="Call with Google Voice">+1 214-642-9640</span></span></span> (c) E-Mail: </span><a href="mailto:larryrtx@gmail.com" target="_blank">larryrtx@gmail.com</a><br>US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106</div></div></div></div></div></div></div></div>