-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-20692 2013-11-05 19:32:46 --------------------------------------------------------------------------------
Name : dovecot Product : Fedora 20 Version : 2.2.7 Release : 2.fc20 URL : http://www.dovecot.org/ Summary : Secure imap and pop3 server Description : Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages. -------------------------------------------------------------------------------- Update Information: * Some usage of passdb checkpassword could have been exploitable by local users. You may need to modify your setup to keep it working. See http://wiki2.dovecot.org/AuthDatabase/CheckPassword#Security * auth: Added ability to truncate values logged by auth_verbose_passwords (see 10-logging.conf comment) * mdbox: Added "mdbox_deleted" storage, which can be used to access messages with refcount=0. For example: doveadm import mdbox_deleted:~/mdbox "" mailbox inbox subject oops * ssl-params: Added ssl_dh_parameters_length setting. * master process was doing a hostname.domain lookup for each created process, which may have caused a lot of unnecessary DNS lookups. * dsync: Syncing over 100 messages at once caused problems in some situations, causing messages to get new UIDs. * fts-solr: Different Solr hosts for different users didn't work. -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update dovecot' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/package-announce
