Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-1.9.git;a=commitdiff;h=e5b2f29c9284e97dcb5eb8d53862cc37248103dc
commit e5b2f29c9284e97dcb5eb8d53862cc37248103dc Author: kikadf <[email protected]> Date: Thu May 15 20:12:25 2014 +0200 dovecot-2.1.8-3arcturus1-x86_64 * Fix CVE-2014-3430 diff --git a/source/network-extra/dovecot/CVE-2014-3430.patch b/source/network-extra/dovecot/CVE-2014-3430.patch new file mode 100644 index 0000000..4692b91 --- /dev/null +++ b/source/network-extra/dovecot/CVE-2014-3430.patch @@ -0,0 +1,54 @@ + +# HG changeset patch +# User Timo Sirainen <[email protected]> +# Date 1399472781 -10800 +# Node ID b7ac23b4d3390367a06d3de498747d3dedd2475b +# Parent b20b4071a282bc64bcc665b67ab5a8449bde36f4 +*-login: SSL connections didn't get closed when the client got destroyed. + +Index: dovecot-2.1.7/src/login-common/client-common.c +=================================================================== +--- dovecot-2.1.7.orig/src/login-common/client-common.c 2014-05-14 13:17:08.902158922 -0400 ++++ dovecot-2.1.7/src/login-common/client-common.c 2014-05-14 13:17:08.898158922 -0400 +@@ -141,6 +141,8 @@ + last_client = client->prev; + DLLIST_REMOVE(&clients, client); + ++ if (!client->login_success && client->ssl_proxy != NULL) ++ ssl_proxy_destroy(client->ssl_proxy); + if (client->input != NULL) + i_stream_close(client->input); + if (client->output != NULL) +Index: dovecot-2.1.7/src/login-common/ssl-proxy-openssl.c +=================================================================== +--- dovecot-2.1.7.orig/src/login-common/ssl-proxy-openssl.c 2014-05-14 13:17:08.902158922 -0400 ++++ dovecot-2.1.7/src/login-common/ssl-proxy-openssl.c 2014-05-14 13:17:08.898158922 -0400 +@@ -108,7 +108,6 @@ + static void ssl_read(struct ssl_proxy *proxy); + static void ssl_write(struct ssl_proxy *proxy); + static void ssl_step(struct ssl_proxy *proxy); +-static void ssl_proxy_destroy(struct ssl_proxy *proxy); + static void ssl_proxy_unref(struct ssl_proxy *proxy); + + static struct ssl_server_context * +@@ -782,7 +781,7 @@ + i_free(proxy); + } + +-static void ssl_proxy_destroy(struct ssl_proxy *proxy) ++void ssl_proxy_destroy(struct ssl_proxy *proxy) + { + if (proxy->destroyed) + return; +Index: dovecot-2.1.7/src/login-common/ssl-proxy.h +=================================================================== +--- dovecot-2.1.7.orig/src/login-common/ssl-proxy.h 2014-05-14 13:17:08.902158922 -0400 ++++ dovecot-2.1.7/src/login-common/ssl-proxy.h 2014-05-14 13:17:08.898158922 -0400 +@@ -31,6 +31,7 @@ + const char *ssl_proxy_get_security_string(struct ssl_proxy *proxy); + const char *ssl_proxy_get_compression(struct ssl_proxy *proxy); + const char *ssl_proxy_get_cert_error(struct ssl_proxy *proxy); ++void ssl_proxy_destroy(struct ssl_proxy *proxy); + void ssl_proxy_free(struct ssl_proxy **proxy); + + /* Return number of active SSL proxies */ diff --git a/source/network-extra/dovecot/FrugalBuild b/source/network-extra/dovecot/FrugalBuild index 321afaf..43ec4f5 100644 --- a/source/network-extra/dovecot/FrugalBuild +++ b/source/network-extra/dovecot/FrugalBuild @@ -3,7 +3,7 @@ pkgname=dovecot pkgver=2.1.8 -pkgrel=2 +pkgrel=3arcturus1 mainver=${pkgver%.*} pkgdesc="An open source IMAP and POP3 server, written with security primarily in mind." url="http://www.dovecot.org"; @@ -19,6 +19,11 @@ _F_systemd_scriptlet="$pkgname.install" _F_systemd_units=(dovecot=) Finclude systemd +# FSA fix *** +source=(${source[@]} CVE-2014-3430.patch) +sha1sums=(${sha1sums[@]} '48877c85bb77b29d313ddc5679d10bd9bad4793e') +# *********** + build() { Fbuild --with-mysql \ _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
