Hello community, here is the log from the commit of package dovecot23 for openSUSE:Factory checked in at 2020-09-15 16:34:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/dovecot23 (Old) and /work/SRC/openSUSE:Factory/.dovecot23.new.4249 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "dovecot23" Tue Sep 15 16:34:45 2020 rev:33 rq:834633 version:2.3.11.3 Changes: -------- --- /work/SRC/openSUSE:Factory/dovecot23/dovecot23.changes 2020-09-08 22:49:20.903575387 +0200 +++ /work/SRC/openSUSE:Factory/.dovecot23.new.4249/dovecot23.changes 2020-09-15 16:35:47.863028051 +0200 @@ -1,0 +2,8 @@ +Tue Sep 15 10:26:44 UTC 2020 - Arjen de Korte <suse+bu...@de-korte.org> + +- add dovecot-2.3.11.3-gssapi-nul.patch: + Fix for bug introduced in v2.3.11.3. It appears GSSAPI can contain NUL. + + https://github.com/dovecot/core/pull/133 + +------------------------------------------------------------------- New: ---- dovecot-2.3.11.3-gssapi-nul.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dovecot23.spec ++++++ --- /var/tmp/diff_new_pack.0XuuRQ/_old 2020-09-15 16:35:49.887029988 +0200 +++ /var/tmp/diff_new_pack.0XuuRQ/_new 2020-09-15 16:35:49.891029992 +0200 @@ -149,6 +149,8 @@ Patch1: dovecot-2.3.0-better_ssl_defaults.patch # https://github.com/dovecot/core/pull/126 Patch2: allow-tls1.3-only.patch +# https://github.com/dovecot/core/pull/133 +Patch3: dovecot-2.3.11.3-gssapi-nul.patch Summary: IMAP and POP3 Server Written Primarily with Security in Mind License: BSD-3-Clause AND LGPL-2.1-or-later AND MIT Group: Productivity/Networking/Email/Servers @@ -329,6 +331,7 @@ %patch -p1 %patch1 -p1 %patch2 -p1 +%patch3 -p1 gzip -9v ChangeLog # Fix plugins dir. sed -i 's|#mail_plugin_dir = /usr/lib/dovecot|mail_plugin_dir = %{_libdir}/dovecot/modules|' doc/example-config/conf.d/10-mail.conf ++++++ dovecot-2.3.11.3-gssapi-nul.patch ++++++ >From aae316881127017af2ba20e478251132a05f7dc0 Mon Sep 17 00:00:00 2001 From: "Paul G. Banks" <w...@paulbanks.org> Date: Sun, 16 Aug 2020 10:57:36 +0100 Subject: [PATCH] Fix: GSSAPI can contain NUL. --- src/auth/mech-gssapi.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/auth/mech-gssapi.c b/src/auth/mech-gssapi.c index f29e48da88..966273d388 100644 --- a/src/auth/mech-gssapi.c +++ b/src/auth/mech-gssapi.c @@ -735,7 +735,7 @@ mech_gssapi_auth_free(struct auth_request *request) const struct mech_module mech_gssapi = { "GSSAPI", - .flags = 0, + .flags = MECH_SEC_ALLOW_NULS, .passdb_need = MECH_PASSDB_NEED_NOTHING, mech_gssapi_auth_new,
