CVS commit: pkgsrc/mail/dovecot2

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Thu Aug 29 01:05:20 UTC 2019

Modified Files:
        pkgsrc/mail/dovecot2: Makefile.common distinfo

Log Message:
mail/dovecot2: update to 2.3.7.2

Update dovecot2 and related packages to 2.3.7.2.

Changes
-------
* CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes. Found by Nick Roessler and Rafi Rubin.


To generate a diff of this commit:
cvs rdiff -u -r1.32 -r1.33 pkgsrc/mail/dovecot2/Makefile.common
cvs rdiff -u -r1.96 -r1.97 pkgsrc/mail/dovecot2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/dovecot2/Makefile.common
diff -u pkgsrc/mail/dovecot2/Makefile.common:1.32 pkgsrc/mail/dovecot2/Makefile.common:1.33
--- pkgsrc/mail/dovecot2/Makefile.common:1.32   Tue Jul 23 15:11:24 2019
+++ pkgsrc/mail/dovecot2/Makefile.common        Thu Aug 29 01:05:20 2019
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.32 2019/07/23 15:11:24 taca Exp $
+# $NetBSD: Makefile.common,v 1.33 2019/08/29 01:05:20 taca Exp $
 #
 # when updating to a new release, update ABI depends in
 # the buildlink3.mk file as well, since the plugins' version
@@ -11,7 +11,7 @@
 # used by mail/dovecot2-pgsql/Makefile
 # used by mail/dovecot2-sqlite/Makefile
 
-DISTNAME=      dovecot-2.3.7.1
+DISTNAME=      dovecot-2.3.7.2
 CATEGORIES=    mail
 MASTER_SITES=  https://dovecot.org/releases/${PKGVERSION_NOREV:R:R}/
 

Index: pkgsrc/mail/dovecot2/distinfo
diff -u pkgsrc/mail/dovecot2/distinfo:1.96 pkgsrc/mail/dovecot2/distinfo:1.97
--- pkgsrc/mail/dovecot2/distinfo:1.96  Tue Jul 23 15:11:24 2019
+++ pkgsrc/mail/dovecot2/distinfo       Thu Aug 29 01:05:20 2019
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.96 2019/07/23 15:11:24 taca Exp $
+$NetBSD: distinfo,v 1.97 2019/08/29 01:05:20 taca Exp $
 
-SHA1 (dovecot-2.3.7.1.tar.gz) = ebd6aefa6db3930d8b3af030b1ed2b88b230d4c9
-RMD160 (dovecot-2.3.7.1.tar.gz) = b2bb6c5f754d1d9b5565a20473bb4a7b5a2fa422
-SHA512 (dovecot-2.3.7.1.tar.gz) = 9addfe2be9ae745ac9164e1658e6638df96bd611d45f172e2cd1cb2c6596e4ce534674e9eea3c1d17f497555061031916e0fb9a9fbc6de0eb6034e2fd0bed3b9
-Size (dovecot-2.3.7.1.tar.gz) = 7076500 bytes
+SHA1 (dovecot-2.3.7.2.tar.gz) = cceb5ec832c73275423ec2fe16381073aa798b0c
+RMD160 (dovecot-2.3.7.2.tar.gz) = 22b84d79fa580fc73d9fc810ad4b1328471e942c
+SHA512 (dovecot-2.3.7.2.tar.gz) = 172f7f0edb884259e4c050607510aee67a35c3a20b7dd147e7c8a25a04921c18f7d6b5c85af2c69ae8c4d53791550970e471b033dbfae94253e331053b6a317d
+Size (dovecot-2.3.7.2.tar.gz) = 7076231 bytes
 SHA1 (patch-aa) = 3af01aa4a8cea1a3fb840b6243a744de77069611
 SHA1 (patch-ab) = 9db15fd853ba47ef4bf04f2adc9ab24f71ee4d1e
 SHA1 (patch-ae) = c795585df9f415ceabb28eec1ff691ee26168d3b