[Bug 970782] Re: [FFe] Please upgrade dovecot to version 2.0.19

Launchpad Bug Tracker 970782 at bugs.launchpad.net
Sat Apr 7 22:57:31 UTC 2012


This bug was fixed in the package dovecot - 1:2.0.19-0ubuntu1

---------------
dovecot (1:2.0.19-0ubuntu1) precise; urgency=low

  * New upstream release (LP: #970782).
  * Merge from Debian testing, remaining changes:
    + Add mail-stack-delivery package:
      - Update d/rules
      - d/control: convert existing dovecot-postfix package to a dummy
        package and add new mail-stack-delivery package.
      - Update maintainer scripts.
      - Rename d/dovecot-postfix.* to debian/mail-stack-delivery.*
      - d/mail-stack-delivery.preinst: Move previously installed backups and
        config files to a new package namespace.
      - d/mail-stack-delivery.prerm: Added to handle downgrades.
    + Use Snakeoil SSL certificates by default:
      - d/control: Depend on ssl-cert.
      - d/dovecot-core.postinst: Relax grep for SSL_* a bit.
    + Add autopkgtest to debian/tests/*.
    + Add ufw integration:
      - d/dovecot-core.ufw.profile: new ufw profile.
      - d/rules: install profile in dovecot-core.
      - d/control: dovecot-core - suggest ufw.
    + d/{control,rules}: enable PIE hardening.
    + d/dovecot-core.dirs: Added usr/share/doc/dovecot-core
    + Add apport hook:
      - d/rules, d/source_dovecot.py
    + Add upstart job:
      - d/rules, d/dovecot-core.dovecot.upstart, d/control,
        d/dovecot-core.dirs, dovecot-imapd.{postrm, postinst, prerm},
        d/dovecot-pop3d.{postinst, postrm, prerm}.
        d/mail-stack-deliver.postinst:
        Convert init script to upstart.
    + d/patches/fix-racey-restart.patch: Backported patch from current
      development release which ensures all child processes terminate prior
      to the main dovecot process.
    + debian/patches/CVE-2011-4318.patch: Dropped - applied upstream
    + d/control: Added Pre-Depends: dpkg (>= 1.15.6) to dovecot-dbg to support
      xz compression in Ubuntu.
    + d/control: Demote dovecot-common Recommends: to Suggests: to prevent
      install of extra packages on upgrade.
  * d/patches/dovecot-drac.patch: Updated with version for dovecot >= 2.0.0.

dovecot (1:2.0.18-1) unstable; urgency=low

  * [85ae320] Imported Upstream version 2.0.18
  * [9cfd1da] Upped standards version to 3.9.3
  * [afb4164] Patch to dovecot-core/postinst so that permissions of symlinked
    certificates aren't modified. (Closes: #646508)
    Thanks Michael Kuhn.
  * [bf642ee] Patch to enable hardened build flags.  (Closes: #653530)
    Thanks Moritz Muehlenhoff.
  * [00b0d0c] Updated pigeonhole to 0.2.6
 -- James Page <james.page at ubuntu.com>   Wed, 04 Apr 2012 14:56:38 +0100

** Changed in: dovecot (Ubuntu Precise)
       Status: Triaged => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-4318

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to dovecot in Ubuntu.
https://bugs.launchpad.net/bugs/970782

Title:
  [FFe] Please upgrade dovecot to version 2.0.19

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/970782/+subscriptions



More information about the Ubuntu-server-bugs mailing list