Date: Thu, 09 Feb 2017 09:53:14 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-ports-bugs@FreeBSD.org Subject: [Bug 216932] [PATCH] mail/postfixadmin Update to 3.0.2 (security fix) Message-ID: <bug-216932-13@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D216932 Bug ID: 216932 Summary: [PATCH] mail/postfixadmin Update to 3.0.2 (security fix) Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Keywords: patch Severity: Affects Only Me Priority: --- Component: Individual Port(s) Assignee: freebsd-ports-bugs@FreeBSD.org Reporter: lukasz@wasikowski.net CC: ports.maintainer@evilphi.com Flags: maintainer-feedback?(ports.maintainer@evilphi.com) Keywords: patch CC: ports.maintainer@evilphi.com Created attachment 179790 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D179790&action= =3Dedit Patch to version 3.0.2 Update to 3.0.2. Message from developer: The most important reason for the release was a SECURITY FIX: don't allow to delete protected aliases (CVE-2017-5930, PR#23). Thanks to Janfred @github = for the report and the pull request! Besides that, the following non-security bugs were fixed: - fix VacationHandler for PostgreSQL - AliasHandler: restrict mailbox subquery to allowed and specified domains = to improve performance on setups with lots of mailboxes - allow switching between dovecot: password schemes while still accepting passwords hashed using the previous dovecot: scheme - FetchmailHandler: use a valid date as default for 'date' - fix date formatting in non-english languages when using PostgreSQL - debian packaging: improve dependencies, remove old templates_c/ files - various small fixes Updates from 3.0 should be boring, you don't even need to run setup.php. --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-216932-13>