Re: CVE-2016-8652 in dovecot

2016-12-03 Thread Aki Tuomi
> On December 3, 2016 at 11:00 PM "Jeremiah C. Foster" > wrote: > > > On Sat, 2016-12-03 at 21:25 +0200, Aki Tuomi wrote: > > > On December 3, 2016 at 9:11 PM "Jeremiah C. Foster" > > iahfoster.com> wrote: > > > > > > On Sat, 2016-12-03 at 12:23

Re: CVE-2016-8652 in dovecot

2016-12-03 Thread Jeremiah C. Foster
On Sat, 2016-12-03 at 21:25 +0200, Aki Tuomi wrote: > > On December 3, 2016 at 9:11 PM "Jeremiah C. Foster" > iahfoster.com> wrote: > > > > On Sat, 2016-12-03 at 12:23 +1000, Noel Butler wrote: > > > On 03/12/2016 12:08, Jeremiah C. Foster wrote: > > > > > > > On Fri,

Re: CVE-2016-8652 in dovecot

2016-12-03 Thread Aki Tuomi
> On December 3, 2016 at 9:11 PM "Jeremiah C. Foster" > wrote: > > > On Sat, 2016-12-03 at 12:23 +1000, Noel Butler wrote: > > On 03/12/2016 12:08, Jeremiah C. Foster wrote: > > > > > On Fri, 2016-12-02 at 10:48 +0200, Aki Tuomi wrote: > > > On 02.12.2016 10:45,

Re: CVE-2016-8652 in dovecot

2016-12-03 Thread Jeremiah C. Foster
On Sat, 2016-12-03 at 12:23 +1000, Noel Butler wrote: > On 03/12/2016 12:08, Jeremiah C. Foster wrote: > > > On Fri, 2016-12-02 at 10:48 +0200, Aki Tuomi wrote:  > > On 02.12.2016 10:45, Jonas Wielicki wrote: On Freitag, 2. Dezember > > 2016 09:00:58 CET Aki Tuomi wrote: We are sorry to report

Re: CVE-2016-8652 in dovecot

2016-12-02 Thread Noel Butler
On 03/12/2016 12:08, Jeremiah C. Foster wrote: > On Fri, 2016-12-02 at 10:48 +0200, Aki Tuomi wrote: > On 02.12.2016 10:45, Jonas Wielicki wrote: On Freitag, 2. Dezember 2016 > 09:00:58 CET Aki Tuomi wrote: We are sorry to report that we have a bug in > dovecot, which > merits a > CVE. See

Re: CVE-2016-8652 in dovecot

2016-12-02 Thread Jeremiah C. Foster
On Fri, 2016-12-02 at 10:48 +0200, Aki Tuomi wrote: > > On 02.12.2016 10:45, Jonas Wielicki wrote: > > On Freitag, 2. Dezember 2016 09:00:58 CET Aki Tuomi wrote: > > > We are sorry to report that we have a bug in dovecot, which > > > merits a > > > CVE. See details below. If you haven't

Re: CVE-2016-8652 in dovecot

2016-12-02 Thread Aki Tuomi
On 02.12.2016 10:45, Jonas Wielicki wrote: > On Freitag, 2. Dezember 2016 09:00:58 CET Aki Tuomi wrote: >> We are sorry to report that we have a bug in dovecot, which merits a >> CVE. See details below. If you haven't configured any auth_policy_* >> settings you are ok. This is fixed with >>