nixpkgs/pkgs/servers/mail/dovecot
Andreas Rammhold 58c7d3ff17
dovecot: 2.3.11.3 -> 2.3.13
This fixes CVE_2020-24386, CVE-2020-25725 and a bunch of regular bugs
[1].

* CVE-2020-24386: Specially crafted command can cause IMAP hibernate to
	  allow logged in user to access other people's emails and filesystem
	  information.

* CVE-2020-25275: Mail delivery / parsing crashed when the 10 000th MIME part was
  message/rfc822 (or if parent was multipart/digest). This happened
  due to earlier MIME parsing changes for CVE-2020-12100.

[1] https://raw.githubusercontent.com/dovecot/core/2.3.13/NEWS
2021-01-04 17:37:32 +01:00
..
plugins Unmaintain a few packages 2020-09-24 21:12:32 +02:00
2.3.x-module_dir.patch dovecot: 2.3.8 -> 2.3.9.2 2019-12-15 20:11:01 +01:00
default.nix dovecot: 2.3.11.3 -> 2.3.13 2021-01-04 17:37:32 +01:00