On 28/03/2026 11:03 EET Washington Odhiambo via dovecot
<[1][email protected]> wrote:
On Fri, Mar 27, 2026 at 11:26AM Aki Tuomi via dovecot
<[2][email protected]>
wrote:
Hi!
We are happy to publish version 2.4.3 of Dovecot and Pigeonhole. These
contain several CVEs, discovered by external researches. The majority
of
these have been discovered with help of automated code analysis tools
like
claude code security, which is why some of these are rather old,
missed
bugs.
No new supported distros have been added or old removed, no new
dependencies have been added.
Note that there are experimental features in 2.4, one is enabled with
`--enable-experimental-mail-utf8`, and another with
`--enable-experimental-imap4rev2`, and you also need to set
mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them in
config.
[3]https://dovecot.org/releases/2.4/dovecot-2.4.3.tar.gz
[4]https://dovecot.org/releases/2.4/dovecot-2.4.3.tar.gz.sig
[5]https://pigeonhole.dovecot.org/releases/2.4/dovecot-pigeonhole-2.4.3.tar.gz
[6]https://pigeonhole.dovecot.org/releases/2.4/dovecot-pigeonhole-2.4.3.tar.gz.sig
Binary packages in [7]https://repo.dovecot.org/
Docker images in [8]https://hub.docker.com/r/dovecot/dovecot
Using the same configure options I used for dovecot-2.4.2, I end up with
a
compile failure for 2.4.3:
./configure --enable-maintainer-mode \
--with-sql=yes \
--with-mysql \
--with-pgsql \
--with-zlib \
--with-bzlib \
--with-ssl=openssl \
--enable-experimental-mail-utf8 \
--enable-experimental-imap4rev2 \
--with-pcre2
make
Hi,
unfortunately lua dependency crept in. Fix is already in review. I'll post
the link once it's merged.
Aki
References
Visible links
1. mailto:[email protected]
2. mailto:[email protected]
3. https://dovecot.org/releases/2.4/dovecot-2.4.3.tar.gz
4. https://dovecot.org/releases/2.4/dovecot-2.4.3.tar.gz.sig
5.
https://pigeonhole.dovecot.org/releases/2.4/dovecot-pigeonhole-2.4.3.tar.gz
6.
https://pigeonhole.dovecot.org/releases/2.4/dovecot-pigeonhole-2.4.3.tar.gz.sig
7. https://repo.dovecot.org/
8. https://hub.docker.com/r/dovecot/dovecot
_______________________________________________
dovecot mailing list -- [email protected]
To unsubscribe send an email to [email protected]
