Wed Feb 12 14:01:59 2020 UTC ()
mail/dovecot2: update to 2.3.9.3

Update dovecot2 to 2.3.9.3, security release.

v2.3.9.3 2019-02-12  Aki Tuomi <aki.tuomi@open-xchange.com>

	* CVE-2020-7046: Truncated UTF-8 can be used to DoS
	  submission-login and lmtp processes.
	* CVE-2020-7957: Specially crafted mail can crash snippet generation.


(taca)
diff -r1.102 -r1.103 pkgsrc/mail/dovecot2/Makefile
diff -r1.37 -r1.38 pkgsrc/mail/dovecot2/Makefile.common
diff -r1.101 -r1.102 pkgsrc/mail/dovecot2/distinfo
diff -r1.5 -r1.6 pkgsrc/mail/dovecot2-ldap/Makefile
cvs diff -r1.102 -r1.103 pkgsrc/mail/dovecot2/Makefile (expand / switch to unified diff)

--- pkgsrc/mail/dovecot2/Makefile 2020/01/18 21:48:14 1.102
+++ pkgsrc/mail/dovecot2/Makefile 2020/02/12 14:01:59 1.103
@@ -1,16 +1,15 @@ @@ -1,16 +1,15 @@
1# $NetBSD: Makefile,v 1.102 2020/01/18 21:48:14 jperkin Exp $ 1# $NetBSD: Makefile,v 1.103 2020/02/12 14:01:59 taca Exp $
2 2
3PKGREVISION= 1 
4.include "../../mail/dovecot2/Makefile.common" 3.include "../../mail/dovecot2/Makefile.common"
5 4
6RCD_SCRIPTS= dovecot 5RCD_SCRIPTS= dovecot
7SMF_NAME= dovecot 6SMF_NAME= dovecot
8 7
9DOVECOT_USER?= dovecot 8DOVECOT_USER?= dovecot
10DOVECOT_GROUP?= dovecot 9DOVECOT_GROUP?= dovecot
11DOVENULL_USER?= dovenull 10DOVENULL_USER?= dovenull
12DOVENULL_GROUP?= dovenull 11DOVENULL_GROUP?= dovenull
13PKG_GROUPS= ${DOVECOT_GROUP} ${DOVENULL_GROUP} 12PKG_GROUPS= ${DOVECOT_GROUP} ${DOVENULL_GROUP}
14PKG_USERS= ${DOVECOT_USER}:${DOVECOT_GROUP} \ 13PKG_USERS= ${DOVECOT_USER}:${DOVECOT_GROUP} \
15 ${DOVENULL_USER}:${DOVENULL_GROUP} 14 ${DOVENULL_USER}:${DOVENULL_GROUP}
16PKG_GROUPS_VARS= DOVECOT_GROUP DOVENULL_GROUP 15PKG_GROUPS_VARS= DOVECOT_GROUP DOVENULL_GROUP
cvs diff -r1.37 -r1.38 pkgsrc/mail/dovecot2/Makefile.common (expand / switch to unified diff)

--- pkgsrc/mail/dovecot2/Makefile.common 2019/12/13 15:32:15 1.37
+++ pkgsrc/mail/dovecot2/Makefile.common 2020/02/12 14:01:59 1.38
@@ -1,27 +1,27 @@ @@ -1,27 +1,27 @@
1# $NetBSD: Makefile.common,v 1.37 2019/12/13 15:32:15 taca Exp $ 1# $NetBSD: Makefile.common,v 1.38 2020/02/12 14:01:59 taca Exp $
2# 2#
3# when updating to a new release, update ABI depends in 3# when updating to a new release, update ABI depends in
4# the buildlink3.mk file as well, since the plugins' version 4# the buildlink3.mk file as well, since the plugins' version
5# must match (see PR 49563). 5# must match (see PR 49563).
6# 6#
7# used by mail/dovecot2/Makefile 7# used by mail/dovecot2/Makefile
8# used by mail/dovecot2-gssapi/Makefile 8# used by mail/dovecot2-gssapi/Makefile
9# used by mail/dovecot2-ldap/Makefile 9# used by mail/dovecot2-ldap/Makefile
10# used by mail/dovecot2-mysql/Makefile 10# used by mail/dovecot2-mysql/Makefile
11# used by mail/dovecot2-pgsql/Makefile 11# used by mail/dovecot2-pgsql/Makefile
12# used by mail/dovecot2-sqlite/Makefile 12# used by mail/dovecot2-sqlite/Makefile
13 13
14DISTNAME= dovecot-2.3.9.2 14DISTNAME= dovecot-2.3.9.3
15CATEGORIES= mail 15CATEGORIES= mail
16MASTER_SITES= https://dovecot.org/releases/${PKGVERSION_NOREV:R:R}/ 16MASTER_SITES= https://dovecot.org/releases/${PKGVERSION_NOREV:R:R}/
17 17
18MAINTAINER= adam@NetBSD.org 18MAINTAINER= adam@NetBSD.org
19HOMEPAGE= https://www.dovecot.org/ 19HOMEPAGE= https://www.dovecot.org/
20COMMENT= Secure IMAP and POP3 server 20COMMENT= Secure IMAP and POP3 server
21LICENSE= mit AND gnu-lgpl-v2.1 AND modified-bsd 21LICENSE= mit AND gnu-lgpl-v2.1 AND modified-bsd
22 22
23DISTINFO_FILE= ${.CURDIR}/../../mail/dovecot2/distinfo 23DISTINFO_FILE= ${.CURDIR}/../../mail/dovecot2/distinfo
24PATCHDIR= ${.CURDIR}/../../mail/dovecot2/patches 24PATCHDIR= ${.CURDIR}/../../mail/dovecot2/patches
25 25
26USE_LIBTOOL= yes 26USE_LIBTOOL= yes
27USE_TOOLS+= gmake pkg-config rpcgen bash:run 27USE_TOOLS+= gmake pkg-config rpcgen bash:run
cvs diff -r1.101 -r1.102 pkgsrc/mail/dovecot2/distinfo (expand / switch to unified diff)

--- pkgsrc/mail/dovecot2/distinfo 2019/12/13 15:32:15 1.101
+++ pkgsrc/mail/dovecot2/distinfo 2020/02/12 14:01:59 1.102
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1$NetBSD: distinfo,v 1.101 2019/12/13 15:32:15 taca Exp $ 1$NetBSD: distinfo,v 1.102 2020/02/12 14:01:59 taca Exp $
2 2
3SHA1 (dovecot-2.3.9.2.tar.gz) = 6b240aa941ba19f6b8b943603414adfc51a44cfa 3SHA1 (dovecot-2.3.9.3.tar.gz) = b1ab4fc2dcb6f4854b6f0cab535e35ac0bb977f5
4RMD160 (dovecot-2.3.9.2.tar.gz) = 2be8d3ce58c173bc5d9e9adf1f5be0edb8a61e08 4RMD160 (dovecot-2.3.9.3.tar.gz) = 970d17c225e1cd480b9cf7ab0420cd12f44852a5
5SHA512 (dovecot-2.3.9.2.tar.gz) = 36e8270bfa33e2bd6aa89017e65c7d1650c494c79ff297759a4b01c026aebcfdf5b1b542d4357e1f9dc2bb8169ef67064f0699b17ca36d658deb70b4c800b253 5SHA512 (dovecot-2.3.9.3.tar.gz) = e39dc825a03f009928b67d01747bb70487fbec155e6be5109037db67b78301aa761db432f7355e96d927abf30c68f0116a5f2cf518b9eebf7f5c7806ac00ae41
6Size (dovecot-2.3.9.2.tar.gz) = 7182306 bytes 6Size (dovecot-2.3.9.3.tar.gz) = 7181682 bytes
7SHA1 (patch-aa) = 3af01aa4a8cea1a3fb840b6243a744de77069611 7SHA1 (patch-aa) = 3af01aa4a8cea1a3fb840b6243a744de77069611
8SHA1 (patch-ab) = 9db15fd853ba47ef4bf04f2adc9ab24f71ee4d1e 8SHA1 (patch-ab) = 9db15fd853ba47ef4bf04f2adc9ab24f71ee4d1e
9SHA1 (patch-ae) = c795585df9f415ceabb28eec1ff691ee26168d3b 9SHA1 (patch-ae) = c795585df9f415ceabb28eec1ff691ee26168d3b
10SHA1 (patch-af) = c066e94dd6593d16eec3e66f5f4d26f021918498 10SHA1 (patch-af) = c066e94dd6593d16eec3e66f5f4d26f021918498
11SHA1 (patch-src_imap_imap-client.h) = 1a2bf95ab6af57d88862a1512624bf263f4c2ce7 11SHA1 (patch-src_imap_imap-client.h) = 1a2bf95ab6af57d88862a1512624bf263f4c2ce7
12SHA1 (patch-src_lib-ldap_ldap-private.h) = 2d5ce32330ad4164cc75f8d209ba499d37ed01fc 12SHA1 (patch-src_lib-ldap_ldap-private.h) = 2d5ce32330ad4164cc75f8d209ba499d37ed01fc
13SHA1 (patch-src_lib_connection.h) = c147511f4ff50e4b5a048c3a363f0af90ee4c6ad 13SHA1 (patch-src_lib_connection.h) = c147511f4ff50e4b5a048c3a363f0af90ee4c6ad
14SHA1 (patch-src_old-stats_mail-stats.h) = 0d40c618445c089af2646a6864c3e909812282af 14SHA1 (patch-src_old-stats_mail-stats.h) = 0d40c618445c089af2646a6864c3e909812282af
cvs diff -r1.5 -r1.6 pkgsrc/mail/dovecot2-ldap/Makefile (expand / switch to unified diff)

--- pkgsrc/mail/dovecot2-ldap/Makefile 2020/01/18 21:49:48 1.5
+++ pkgsrc/mail/dovecot2-ldap/Makefile 2020/02/12 14:01:59 1.6
@@ -1,16 +1,15 @@ @@ -1,16 +1,15 @@
1# $NetBSD: Makefile,v 1.5 2020/01/18 21:49:48 jperkin Exp $ 1# $NetBSD: Makefile,v 1.6 2020/02/12 14:01:59 taca Exp $
2 2
3PKGREVISION= 1 
4.include "../../mail/dovecot2/Makefile.common" 3.include "../../mail/dovecot2/Makefile.common"
5 4
6PKGNAME= ${DISTNAME:S/dovecot/dovecot-ldap/} 5PKGNAME= ${DISTNAME:S/dovecot/dovecot-ldap/}
7COMMENT+= (LDAP plugin) 6COMMENT+= (LDAP plugin)
8 7
9CONFIGURE_ARGS+= --with-ldap=plugin 8CONFIGURE_ARGS+= --with-ldap=plugin
10 9
11INSTALLATION_DIRS+= include/dovecot \ 10INSTALLATION_DIRS+= include/dovecot \
12 lib/dovecot/auth lib/dovecot/dict 11 lib/dovecot/auth lib/dovecot/dict
13 12
14do-install: 13do-install:
15 cd ${WRKSRC} && \ 14 cd ${WRKSRC} && \
16 ${LIBTOOL} --mode=install ${INSTALL_LIB} \ 15 ${LIBTOOL} --mode=install ${INSTALL_LIB} \