661b89a69a
v2.3.4.1 2019-02-05 Aki Tuomi <aki.tuomi@open-xchange.com> * CVE-2019-3814: If imap/pop3/managesieve/submission client has trusted certificate with missing username field (ssl_cert_username_field), under some configurations Dovecot mistakenly trusts the username provided via authentication instead of failing. * ssl_cert_username_field setting was ignored with external SMTP AUTH, because none of the MTAs (Postfix, Exim) currently send the cert_username field. This may have allowed users with trusted certificate to specify any username in the authentication. This bug didn't affect Dovecot's Submission service.
15 lines
1 KiB
Text
15 lines
1 KiB
Text
$NetBSD: distinfo,v 1.88 2019/02/06 01:41:28 taca Exp $
|
|
|
|
SHA1 (dovecot-2.3.4.1.tar.gz) = 742c8d3c043723c5da9e07944214068689a89556
|
|
RMD160 (dovecot-2.3.4.1.tar.gz) = 59101ddb58e6458b3581efb104426d9f4adb93ec
|
|
SHA512 (dovecot-2.3.4.1.tar.gz) = ff21aa0f0cae17dfa66617291688856727412defa48bad2b6be057cb509fbec1c2e134afbfee69929d06b8692a0fcbd8451671ba02860e1673ae1c9483c2c17e
|
|
Size (dovecot-2.3.4.1.tar.gz) = 6925073 bytes
|
|
SHA1 (patch-aa) = ea185011f0c1ee3aa1ff528e61f6f356fe385666
|
|
SHA1 (patch-ab) = 9db15fd853ba47ef4bf04f2adc9ab24f71ee4d1e
|
|
SHA1 (patch-ae) = c795585df9f415ceabb28eec1ff691ee26168d3b
|
|
SHA1 (patch-af) = c066e94dd6593d16eec3e66f5f4d26f021918498
|
|
SHA1 (patch-src_imap_imap-client.h) = 1a2bf95ab6af57d88862a1512624bf263f4c2ce7
|
|
SHA1 (patch-src_lib-ldap_ldap-private.h) = 2d5ce32330ad4164cc75f8d209ba499d37ed01fc
|
|
SHA1 (patch-src_lib-master_test-event-stats.c) = b86c1314739bc0156e6c07ea3509191fd8c51416
|
|
SHA1 (patch-src_lib_connection.h) = c147511f4ff50e4b5a048c3a363f0af90ee4c6ad
|
|
SHA1 (patch-src_old-stats_mail-stats.h) = 0d40c618445c089af2646a6864c3e909812282af
|