Merge dovecot from Debian unstable for mantic

Bug #2018068 reported by Bryce Harrington
18
This bug affects 2 people
Affects Status Importance Assigned to Milestone
dovecot (Ubuntu)
Fix Released
Undecided
Bryce Harrington

Bug Description

Upstream: tbd
Debian: 1:2.3.19.1+dfsg1-2.1
Ubuntu: 1:2.3.19.1+dfsg1-2ubuntu4

Debian does new releases regularly, so it's likely there will be newer versions available before FF that we can pick up if this merge is done later in the cycle.

If it turns out this needs a sync rather than a merge, please change the tag 'needs-merge' to 'needs-sync', and (optionally) update the title as desired.

### New Debian Changes ###

dovecot (1:2.3.19.1+dfsg1-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * [b02ebc9] Don't use deprecated crypt module.
    (closes: #1028513)

 -- Bas Couwenberg <email address hidden> Fri, 20 Jan 2023 07:01:26 +0100

dovecot (1:2.3.19.1+dfsg1-2) unstable; urgency=medium

  [ Christian Göttsche ]
  * [281fb2c] d/patches: cherry-pick fix for CVE-2022-30550 (Closes: #1016351)
  * [9c58e71] d/patches: fix uninitialized read in doveadm-oldstats
  * [a76a24d] d/control: bump to standards version 4.6.1 (no further changes)
  * [4aaaa8b] Update Lintian overrides

 -- Noah Meyerhans <email address hidden> Fri, 29 Jul 2022 19:58:28 -0700

dovecot (1:2.3.19.1+dfsg1-1) unstable; urgency=medium

  [ Christian Göttsche ]
  * [e40f93f] d/patches: avoid usage of PATH_MAX not available on hurd
  * [19e00cd] d/rules: enable backtrace generation
  * [5bf1c43] d/patches: debug flaky unit test

  [ Noah Meyerhans ]
  * [b73422f] New upstream version 2.3.19.1+dfsg1
  * [c88bfc0] Update changelog for 1:2.3.19.1+dfsg1-1 release
  * [ca59548] Update lintian overrides
  * [d6406c2] d/copyright: update declarations for current maintainers

 -- Noah Meyerhans <email address hidden> Wed, 22 Jun 2022 09:27:01 -0700

dovecot (1:2.3.19+dfsg1-1) unstable; urgency=medium

  [ Christian Göttsche ]
  * [0d29e45] d/rules: enable LTO via DEB_BUILD_MAINT_OPTIONS instead of custom flags
  * [560cceb] d/source/lintian-overrides: update very-long-line-length-in-source-file overrides
  * [b99d09e] d/copyright: update years
  * [9ee8271] d/dovecot-core.prerm: drop as superseded by debhelper
  * [907f85c] d/maintscripts: update
  * [2b38240] d/dovecot-core.postinst: drop support for version skips
  * [dcb76d1] d/dovecot-core.postinst: only link certs if existent (Closes: #1009872)
  * [d223bbd] d/patches: add patch to support openssl 3.0 (Closes: #996273)

  [ Noah Meyerhans ]
  * [9f3175e] New upstream version 2.3.19+dfsg1

 -- Noah Meyerhans <email address hidden> Sun, 05 Jun 2022 18:29:18 +0000

dovecot (1:2.3.18+dfsg1-1) unstable; urgency=medium

  [ Noah Meyerhans ]
  * [36966c8] New upstream version 2.3.18+dfsg1
  * [042bda4] Refresh patches for 1:2.3.18+dfsg1-1

 -- 'Noah Meyerhans' <email address hidden> Thu, 10 Feb 2022 20:05:50 +0000

dovecot (1:2.3.17.1+dfsg1-1) unstable; urgency=medium

  [ Christian Göttsche ]
  * [40b0010] New upstream version 2.3.17+dfsg1
  * [3c377e0] New upstream version 2.3.17.1+dfsg1
  * [e2f1ce2] d/patches: rebase and drop upstream applied ones
  * [533b7ad] d/control: bump to standards version 4.6.0 (no further changes)
  * [02ed6cf] debian: reduce Lintian issues
  * [bb3ae48] d/salsa-ci.yml: skip cross build and do not fail on Lintian
    warnings
  * [bcda7e4] d/control: build against Lua 5.4
  * [9eed0dd] d/control: enable libunwind support on available archs
  * [1990699] d/patches: cherry-pick memory leak commit
  * [426df46] d/patches: cherry-pick imapsieve fix
  * [e3d0747] d/patches: add patch for LTO by avoiding unaligned access
    (Closes: #997513)

 -- Noah Meyerhans <email address hidden> Tue, 14 Dec 2021 09:24:23 -0800

dovecot (1:2.3.16+dfsg1-3) unstable; urgency=medium

  * [7b858b6] Fix FTBFS on mips(64)el. Stacktrace generation on these
    architectures requires -funwind-tables, as with 32-bit arm.

 -- Noah Meyerhans <email address hidden> Thu, 16 Sep 2021 08:41:27 -0700

dovecot (1:2.3.16+dfsg1-2) unstable; urgency=medium

  [ Christian Göttsche ]
  * [e1e9ece] d/patches: rework backtrace test patch
  * [be404bf] d/patches: add big-endian patch

 -- Noah Meyerhans <email address hidden> Fri, 10 Sep 2021 16:10:50 -0700

dovecot (1:2.3.16+dfsg1-1) unstable; urgency=medium

  [ Christian Göttsche ]
  * [ff4a227] New upstream version 2.3.14+dfsg1
  * [963fa3b] New upstream version 2.3.15+dfsg1 (Closes: #991323, #983510)
  * [5e0c898] d/watch: adjust dversionmangle for dfsg suffix
  * [9ffb0f5] d/patches: update
  * [850e1d6] New upstream version 2.3.16+dfsg1

### Old Ubuntu Delta ###

dovecot (1:2.3.19.1+dfsg1-2ubuntu4) lunar; urgency=medium

  * Rebuild against latest icu

 -- Jeremy Bicha <email address hidden> Mon, 06 Feb 2023 07:33:52 -0500

dovecot (1:2.3.19.1+dfsg1-2ubuntu3) lunar; urgency=medium

  * No-change rebuild against libldap-2

 -- Steve Langasek <email address hidden> Thu, 15 Dec 2022 19:46:57 +0000

dovecot (1:2.3.19.1+dfsg1-2ubuntu2) kinetic; urgency=medium

  * d/control: Build against Lua 5.3 rather than 5.4 for kinetic

 -- Bryce Harrington <email address hidden> Fri, 12 Aug 2022 01:08:37 +0000

dovecot (1:2.3.19.1+dfsg1-2ubuntu1) kinetic; urgency=medium

  * Merge with Debian unstable (LP: #1971273). Remaining changes:
    - d/rules: Package references hidden symbols during an LTO link.
      This needs further investigation. Until then, disable LTO.
      Disable Debian's recent enablement of LTO as well,
      as it FTBFS when building with gcc 11.
      (LP #1951325)
  * Dropped:
    - d/p/OpenSSL3.patch: Workaround to fix EC key handling when building
      with OpenSSL 3.0.
      (LP: #1945763)
      [Fixed in Debian release 1:2.3.19+dfsg1-1]
    - privilege escalation via multiple passdbs
      + d/p/CVE-2022-30550.patch: fix handling passdbs with
        identical driver/args but different mechanisms/username_filter in
        src/auth/auth-request.c, src/auth/auth.c, src/auth/auth.h,
        src/auth/passdb.c, src/auth/passdb.h.
      [Fixed in Debian release 1:2.3.19.1+dfsg1-2]

 -- Bryce Harrington <email address hidden> Tue, 09 Aug 2022 23:02:29 -0700

Related branches

Bryce Harrington (bryce)
Changed in dovecot (Ubuntu):
milestone: none → ubuntu-23.07
Bryce Harrington (bryce)
Changed in dovecot (Ubuntu):
assignee: nobody → Bryce Harrington (bryce)
Bryce Harrington (bryce)
Changed in dovecot (Ubuntu):
milestone: ubuntu-23.07 → ubuntu-23.05
Bryce Harrington (bryce)
Changed in dovecot (Ubuntu):
status: New → In Progress
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package dovecot - 1:2.3.19.1+dfsg1-2.1ubuntu1

---------------
dovecot (1:2.3.19.1+dfsg1-2.1ubuntu1) mantic; urgency=medium

  * Merge with Debian unstable (LP: #2018068). Remaining changes:
    - d/control: Build against Lua 5.3 rather than 5.4.
      (LP #1909665)
  * Dropped:
    - d/rules: Package references hidden symbols during an LTO link.
      This needs further investigation. Until then, disable LTO.
      Disable Debian's recent enablement of LTO as well,
      as it FTBFS when building with gcc 11.
      (LP #1951325)
      [Fixed in upstream commit f0c1cf42]

 -- Bryce Harrington <email address hidden> Fri, 19 May 2023 01:47:09 +0000

Changed in dovecot (Ubuntu):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.