[ol9_appstream] dovecot-pigeonhole-1:2.3.16-8.el9.aarch64

This package provides sieve and managesieve plug-in for dovecot LDA.

Changelog (Show File list) (Show related packages)

• Tue Sep 13 2022 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-8

  - do not run systemd commands during leapp upgrade (#2119385)

• Tue Jul 12 2022 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-7

  - fix possible privilege escalation when similar master and non-master passdbs are used (#2106232)

• Wed Jul 06 2022 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-6

  - fix possible nonzero return value of postinst script(#2053368)

• Tue Jul 05 2022 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-5

  - workaround sysuers macro defficiency (#2095399)

• Tue Jul 05 2022 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-4

  - use systemd-sysusers for user creation (#2095399)

• Wed Nov 03 2021 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-3

  - re-enable LTO build (#1990080)

• Wed Oct 27 2021 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-2

  - set first_valid_uid to 1000 to match system default (#2009716)

• Fri Aug 20 2021 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-1

  - dovecot updated to 2.3.16, pigeonhole to 0.5.16
  - fixes several regressions (#1997583)

• Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 1:2.3.15-2

  - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
    Related: rhbz#1991688

• Wed Jul 21 2021 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.15-1

  - dovecot updated to 2.3.15, pigeonhole updated to 0.5.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access (#1979833)
  - CVE-2021-33515: On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client
  - Add TSLv1.3 support to min_protocols.