Comment 3 for bug 1771524

Revision history for this message
Christian Ehrhardt  (paelzer) wrote : Re: Merge newer dovecot for Cosmic

Since 2.3.1 is still in experimental (see Debian bug) I moved the lp1771524/new/debian tag to that manually.

passed all Dovecot bugs of the last 2 years to clear out or consider on the merge.

Reconstruct, Deconstruct and Logical prepared in git merge workflow.

Checked CVE patches to exist in 2.3.1
- CVE-2017-15132 is already included
- CVE-2017-15130 is already included
- CVE-2017-14461 is already included

There were some conf-breaking changes in 2.3, so I consider it even more important to make it available early on Cosmic cycle as well as in the long run towards 20.04.

Note for mail-stack delivery:
- only a few breaks replaces will remain according to case #11 on https://wiki.debian.org/PackageTransition until after 20.04
- we will not rm-conffile the modifications it had made since it did modify "its own" but dovecots config, therefore removing would be an unwanted modification of a users configuration

All that said ready to rebase and drop a lot this time ...