Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[19.03] dovecot: 2.3.5.7 -> 2.3.7.2, pigeonhole: 0.5.5 -> 0.5.7.2 #67698

Merged
merged 9 commits into from Aug 29, 2019
Merged

[19.03] dovecot: 2.3.5.7 -> 2.3.7.2, pigeonhole: 0.5.5 -> 0.5.7.2 #67698

merged 9 commits into from Aug 29, 2019

Conversation

tokudan
Copy link
Contributor

@tokudan tokudan commented Aug 29, 2019

Motivation for this change

Dovecot minor versions should be upgradeable without any incompatibilities, so picking just the security patches risks missing some commits that are by themselves not security fixes, but are required for later security fixes. Moving to the current supported version also eases support.

Things done
  • Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
  • Built on platform(s)
    • NixOS
    • macOS
    • other Linux distributions
  • Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
  • Tested compilation of all pkgs that depend on this change using nix-shell -p nix-review --run "nix-review wip"
  • Tested execution of all binary files (usually in ./result/bin/)
  • Determined the impact on package closure size (by running nix path-info -S before and after)
  • Ensured that relevant documentation is up to date
  • Fits CONTRIBUTING.md.
Notify maintainers

cc @andir @peti @rickynils @fpletz

Robert Schütz and others added 9 commits August 29, 2019 09:56
@tokudan
dovecot: 2.3.5.2 -> 2.3.6
118370d 
fixes CVE-2019-11494 and CVE-2019-11499
https://dovecot.org/pipermail/dovecot-news/2019-April/000408.html

(cherry picked from commit 427dfad)
@r-ryantm @tokudan
dovecot: 2.3.6 -> 2.3.7
85a60c4 
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/dovecot/versions

(cherry picked from commit 5eb5740)
@Izorkin @tokudan
dovecot: 2.3.7 > 2.3.7.1
be0fe08 
(cherry picked from commit e217309)
@tokudan
dovecot: 2.3.7.1 -> 2.3.7.2 (CVE-2019-11500)
bfdac93 
(cherry picked from commit d7582c9)
@tokudan
dovecot: remove cve patches, as the latest released version includes …
c246d3e 
…them all
@tokudan
dovecot_pigeonhole: 0.5.5 -> 0.5.6
ea3989f 
https://dovecot.org/pipermail/dovecot-news/2019-April/000411.html
(cherry picked from commit c38b485)
@Izorkin @tokudan
dovecot_pigeonhole: 0.5.6 > 0.5.7.1
5e20bbe 
(cherry picked from commit 4f38967)
@andir @tokudan
dovecot-pigeonhole: 0.5.7.1 -> 0.5.7.2 (CVE-2019-11500)
c4d1c9c 
This is a followup on NixOS#67623

(cherry picked from commit 46ff96c)
@tokudan
pigeonhole: remove cve patches, as the latest released version includ…
ef97ff2 
…es them all
@tokudan
Copy link
Contributor Author

tokudan commented Aug 29, 2019 •
edited

@GrahamcOfBorg build dovecot dovecot_pigeonhole

@tokudan
Copy link
Contributor Author

tokudan commented Aug 29, 2019

@GrahamcOfBorg test dovecot

andir
andir approved these changes Aug 29, 2019
View reviewed changes
Copy link
Member

@andir andir left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good. Tests passed locally.

@ofborg ofborg bot requested review from peti, rickynils and fpletz August 29, 2019 15:17
@WilliButz WilliButz merged commit 95e7d97 into NixOS:release-19.03 Aug 29, 2019
@tokudan tokudan deleted the 1903/dovecot-major branch August 29, 2019 22:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@fpletz fpletz fpletz approved these changes

@andir andir andir approved these changes

@WilliButz WilliButz WilliButz approved these changes

@peti peti Awaiting requested review from peti

@rickynils rickynils Awaiting requested review from rickynils

Assignees
No one assigned
Labels
10.rebuild-darwin: 1-10 10.rebuild-linux: 1-10
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
6 participants
@tokudan @fpletz @andir @WilliButz @r-ryantm @Izorkin