Re: Dovecot release v2.3.6

2019-04-30 Thread @lbutlr via dovecot
On 30 Apr 2019, at 12:11, Aki Tuomi via dovecot wrote: > On 30 April 2019 21:06 @lbutlr via dovecot < dovecot@dovecot.org> wrote: >> >> dovecot-2.3.5.1 is vulnerable: >> dovecot -- json encoder crash >> CVE: CVE-2019-10691 > > We don't usually mention fixes for previous releases again. Ah, I

Re: Dovecot release v2.3.6

2019-04-30 Thread Michael Slusarz via dovecot
> On April 30, 2019 at 12:06 PM "@lbutlr via dovecot" > wrote: > > pkg adult shows the following, not mentioned in the changes: > > dovecot-2.3.5.1 is vulnerable: > dovecot -- json encoder crash > CVE: CVE-2019-10691 > WWW: >

Re: Dovecot release v2.3.6

2019-04-30 Thread Aki Tuomi via dovecot
On 30 April 2019 21:06 @lbutlr via dovecot < dovecot@dovecot.org> wrote: On 30 Apr 2019, at 07:21, Aki Tuomi via dovecot < dovecot@dovecot.org> wrote: We are pleased to release Dovecot v2.3.6.

Re: Dovecot release v2.3.6

2019-04-30 Thread @lbutlr via dovecot
On 30 Apr 2019, at 07:21, Aki Tuomi via dovecot wrote: > We are pleased to release Dovecot v2.3.6. pkg adult shows the following, not mentioned in the changes: dovecot-2.3.5.1 is vulnerable: dovecot -- json encoder crash CVE: CVE-2019-10691 WWW:

Re: Dovecot release v2.3.6

2019-04-30 Thread Aki Tuomi via dovecot
> On 30 April 2019 17:20 James via dovecot wrote: > > > On 30/04/2019 14:21, Aki Tuomi via dovecot wrote: > > > https://dovecot.org/releases/2.3/dovecot-2.3.6.tar.gz > > Trivial but... > > "mail-index-transaction-update.c", line 198: void function cannot return > value > > > Thanks.

Re: Dovecot release v2.3.6

2019-04-30 Thread James via dovecot
On 30/04/2019 14:21, Aki Tuomi via dovecot wrote: https://dovecot.org/releases/2.3/dovecot-2.3.6.tar.gz Trivial but... "mail-index-transaction-update.c", line 198: void function cannot return value Thanks. --- ../original/src/lib-index/mail-index-transaction-update.c 2019-04-30

Dovecot release v2.3.6

2019-04-30 Thread Aki Tuomi via dovecot
Hi! We are pleased to release Dovecot v2.3.6. Tarball is available at https://dovecot.org/releases/2.3/dovecot-2.3.6.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.6.tar.gz.sig Binary packages are available at https://repo.dovecot.org/ Changes --- * CVE-2019-11494: Submission-login

[Dovecot-news] Dovecot release v2.3.6

2019-04-30 Thread Aki Tuomi via Dovecot-news
Hi! We are pleased to release Dovecot v2.3.6. Tarball is available at https://dovecot.org/releases/2.3/dovecot-2.3.6.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.6.tar.gz.sig Binary packages are available at https://repo.dovecot.org/ Changes --- * CVE-2019-11494: Submission-login