Re: CVE-2019-11500: Critical vulnerability in Dovecot and Pigeonhole

2019-09-03 Thread Christian Balzer via dovecot
2540 0.0 \_ dovecot/stats [17 connections] 4725 ?S 0:00 0 356 87703 8048 0.1 \_ dovecot/auth [0 wait, 0 passdb, 0 userdb] --- Regards, Christian On Sat, 31 Aug 2019 11:30:12 +0900 Christian Balzer via dovecot wrote: > Daniel, > > thanks so much for the de

Re: CVE-2019-11500: Critical vulnerability in Dovecot and Pigeonhole

2019-08-30 Thread Christian Balzer via dovecot
at to work. Regards, Christian On Fri, 30 Aug 2019 17:44:23 +0200 Daniel Lange via dovecot wrote: > Am 30.08.19 um 17:38 schrieb Daniel Lange via dovecot: > > Am 30.08.19 um 10:00 schrieb Christian Balzer via dovecot: > >> When upgrading on Debian Stretch with the security f

Re: CVE-2019-11500: Critical vulnerability in Dovecot and Pigeonhole

2019-08-30 Thread Christian Balzer via dovecot
Hello, Cc'ing Apollon in hopes he might have some insight here. When upgrading on Debian Stretch with the security fix packages all dovecot processes get killed and then restarted despite having "shutdown_clients = no" set. My guess would be a flaw in the upgrade procedure and/or unit files

Re: Anyone using object storage ceph?

2019-05-15 Thread Christian Balzer via dovecot
No, not for lack of interest though. The former feels abandoned and has design issues IMHO. The later is a Dovecot Pro thing and when I talked with Timo 2(?) years ago he felt that Ceph with S3 or Swift wasn't a good fit and we didn't really want to go with Scality and simply can't do out of

Re: Push Notification clarification (MessageNew w/o LMTP or LDA)

2019-05-09 Thread Christian Balzer via dovecot
Hello, On Thu, 9 May 2019 09:14:13 +0300 Aki Tuomi via dovecot wrote: > On 9.5.2019 9.01, Christian Balzer via dovecot wrote: > > Hello, > > > > Both the examples on the Push Notification wiki page and the XAPS plugin > > docs seem to suggest or stat

Push Notification clarification (MessageNew w/o LMTP or LDA)

2019-05-09 Thread Christian Balzer via dovecot
Hello, Both the examples on the Push Notification wiki page and the XAPS plugin docs seem to suggest or state that LMTP/LDA is required. However IMAP IDLE notifications work without either of these (please no religious discussion of why Dovecot LMTP is the best thing since sliced bread and