Go to:
Gentoo Home
Documentation
Forums
Lists
Bugs
Planet
Store
Wiki
Get Gentoo!
Gentoo's Bugzilla – Attachment 249608 Details for
Bug 339776
net-mail/dovecot: Multiple Vulnerabilities (CVE-2010-{3706,3707})
Home
|
New
–
[Ex]
|
Browse
|
Search
|
Privacy Policy
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
dovecot-1.2.15.ebuild
dovecot-1.2.15.ebuild (text/plain), 8.53 KB, created by
Eray Aslan
on 2010-10-05 07:31:38 UTC
(
hide
)
Description:
dovecot-1.2.15.ebuild
Filename:
MIME Type:
Creator:
Eray Aslan
Created:
2010-10-05 07:31:38 UTC
Size:
8.53 KB
patch
obsolete
># Copyright 1999-2010 Gentoo Foundation ># Distributed under the terms of the GNU General Public License v2 ># $Header: $ > >EAPI="3" > >inherit eutils versionator ssl-cert > >major_minor="$( get_version_component_range 1-2 )" >sieve_version="0.1.18" >managesieve_version="0.11.12" >SRC_URI="http://dovecot.org/releases/${major_minor}/${P}.tar.gz > sieve? ( http://www.rename-it.nl/dovecot/${major_minor}/dovecot-${major_minor}-sieve-${sieve_version}.tar.gz ) > managesieve? ( > http://www.rename-it.nl/dovecot/${major_minor}/dovecot-${PV}-managesieve-${managesieve_version}.diff.gz > http://www.rename-it.nl/dovecot/${major_minor}/dovecot-${major_minor}-managesieve-${managesieve_version}.tar.gz > http://www.rename-it.nl/dovecot/${major_minor}/dovecot-${major_minor}-sieve-${sieve_version}.tar.gz > )" >DESCRIPTION="An IMAP and POP3 server written with security primarily in mind" >HOMEPAGE="http://www.dovecot.org/" > >SLOT="0" >LICENSE="LGPL-2.1 MIT" >KEYWORDS="~alpha ~amd64 ~arm ~ppc ~sparc ~x86" > >IUSE="berkdb caps cydir dbox doc ipv6 kerberos ldap +maildir managesieve mbox mysql pam postgres sieve sqlite +ssl suid vpopmail zlib" > >DEPEND="berkdb? ( sys-libs/db ) > caps? ( sys-libs/libcap ) > kerberos? ( virtual/krb5 ) > ldap? ( net-nds/openldap ) > mysql? ( virtual/mysql ) > pam? ( virtual/pam ) > postgres? ( dev-db/postgresql-base ) > sqlite? ( dev-db/sqlite ) > ssl? ( dev-libs/openssl ) > vpopmail? ( net-mail/vpopmail )" > >RDEPEND="${DEPEND} > >=net-mail/mailbase-0.00-r8" > >pkg_setup() { > if use managesieve && ! use sieve; then > ewarn "managesieve USE flag selected but sieve USE flag unselected" > ewarn "sieve USE flag will be turned on" > fi > > if use dbox && ! use maildir; then > ewarn "dbox USE flag selected but maildir USE flag unselected" > ewarn "maildir USE flag will be turned on" > fi > > # Add user and group for login process (same as for fedora/redhat) > enewgroup dovecot 97 > enewuser dovecot 97 -1 /dev/null dovecot > # add "mail" group for suid'ing. Better security isolation. > if use suid; then > enewgroup mail > fi >} > >src_prepare() { > use managesieve && epatch "${WORKDIR}"/dovecot-${PV}-managesieve-${managesieve_version}.diff >} > >src_configure() { > local conf="" > > if use postgres || use mysql || use sqlite; then > conf="${conf} --with-sql" > fi > > local storages="" > for storage in cydir dbox maildir mbox; do > use ${storage} && storages="${storage} ${storages}" > done > if use dbox && ! use maildir; then > storages="${storages/dbox/dbox maildir}" > fi > [ "${storages}" ] || storages="maildir" > > econf \ > --sysconfdir="${EPREFIX}/etc/dovecot" \ > --localstatedir="${EPREFIX}/var" \ > --with-moduledir="${EPREFIX}/usr/$(get_libdir)/dovecot" \ > $( use_with berkdb db ) \ > $( use_with caps libcap ) \ > $( use_with kerberos gssapi ) \ > $( use_with ldap ) \ > $( use_with mysql ) \ > $( use_with pam ) \ > $( use_with postgres pgsql ) \ > $( use_with sqlite ) \ > $( use_with ssl ) \ > $( use_with vpopmail ) \ > $( use_with zlib ) \ > $( use_with ldap) \ > --with-storages="${storages}" \ > --with-pic \ > --enable-header-install \ > ${conf} > > if use sieve || use managesieve; then > # The sieve plugin needs this file to be build to determine the plugin > # directory and the list of libraries to link to. > emake dovecot-config || die "emake dovecot-config failed" > cd "../dovecot-${major_minor}-sieve-${sieve_version}" > econf --with-dovecot="${S}" > > if use managesieve; then > cd "../dovecot-${major_minor}-managesieve-${managesieve_version}" > econf --with-dovecot="${S}" --with-dovecot-sieve="../dovecot-${major_minor}-sieve-${sieve_version}" > fi > fi >} > >src_compile() { > emake CC="$(tc-getCC)" CFLAGS="${CFLAGS}" || die "make failed" > > if use sieve || use managesieve; then > cd "../dovecot-${major_minor}-sieve-${sieve_version}" > emake CC="$(tc-getCC)" CFLAGS="${CFLAGS}" || die "make failed" > > if use managesieve; then > cd "../dovecot-${major_minor}-managesieve-${managesieve_version}" > emake CC="$(tc-getCC)" CFLAGS="${CFLAGS}" || die "make failed" > fi > fi >} > >src_install () { > emake DESTDIR="${ED}" install || die "make install failed" > > # insecure: > #use suid && fperms u+s /usr/libexec/dovecot/deliver > #better: > if use suid; then > einfo "Changing perms to allow deliver to be suided" > fowners root:mail /usr/libexec/dovecot/deliver > fperms 4750 /usr/libexec/dovecot/deliver > fi > > rm -f "${ED}"/etc/dovecot/dovecot-{ldap,sql}-example.conf > > newinitd "${FILESDIR}"/dovecot-1.2.init dovecot > > rm -rf "${ED}"/usr/share/doc/dovecot > > if use ssl; then > sed -i -e 's,^CERTDIR=.*,CERTDIR=\$SSLDIR/dovecot,' \ > -e 's,^KEYDIR=.*,KEYDIR=\$SSLDIR/dovecot,' \ > -e 's,^CERTFILE=.*,CERTFILE=\$CERTDIR/server.pem,' \ > -e 's,^KEYFILE=.*,KEYFILE=\$KEYDIR/server.key,' \ > doc/mkcert.sh || die "failed to update SSL settings in mkcert.sh" > fi > > dodoc AUTHORS NEWS README TODO dovecot-example.conf || die "basic dodoc failed" > dodoc doc/*.{txt,cnf,xml,sh} || die "dodoc doc/ failed" > docinto wiki > dodoc doc/wiki/* || die "dodoc doc/wiki/ failed" > > # Create the dovecot.conf file from the dovecot-example.conf file that > # the dovecot folks nicely left for us.... > local conf="${ED}/etc/dovecot/dovecot.conf" > mv "${ED}"/etc/dovecot/dovecot-example.conf "${ED}"/etc/dovecot/dovecot.conf > > # .maildir is the Gentoo default, but we need to support mbox too > local mail_location="maildir:~/.maildir" > if use mbox; then > mail_location="mbox:/var/spool/mail/%u:INDEX=/var/dovecot/%u" > keepdir /var/dovecot > sed -i -e 's|#mail_privileged_group =|mail_privileged_group = mail|' "${conf}" > fi > sed -i -e \ > "s|#mail_location =|mail_location = ${mail_location}|" "${conf}" \ > || die "failed to update mail location settings in dovecot.conf" > > # We're using pam files (imap and pop3) provided by mailbase > if use pam; then > sed -i -e '/passdb pam/, /^[ \t]*}/ s|#args = dovecot|args = "\*"|' \ > "${conf}" || die "failed to update PAM settings in dovecot.conf" > # mailbase does not provide a sieve pam file > use managesieve && dosym imap /etc/pam.d/sieve > fi > > # Listen on ipv6 and ipv4 > if use ipv6; then > sed -i -e 's/^#listen = \*/listen = \*, \[::\]/g' "${conf}" \ > || die "failed to update listen settings in dovecot.conf" > fi > > # Update ssl cert locations > if use ssl; then > sed -i -e 's,^#ssl_cert_file =.*,ssl_cert_file = /etc/ssl/dovecot/server.pem,' \ > -e 's,^#ssl_key_file =.*,ssl_key_file = /etc/ssl/dovecot/server.key,' \ > "${conf}" || die "failed to update SSL settings in dovecot.conf" > fi > > # Install SQL configuration > if use mysql || use postgres; then > cp doc/dovecot-sql-example.conf "${ED}"/etc/dovecot/dovecot-sql.conf > fperms 600 /etc/dovecot/dovecot-sql.conf > sed -i -e '/db sql/,/args/ s|=|= /etc/dovecot-sql.conf|' "${conf}" \ > || die "failed to update SQL settings in dovecot-sql.conf" > dodoc doc/dovecot-sql-example.conf > fi > > # Install LDAP configuration > if use ldap; then > cp doc/dovecot-ldap-example.conf "${ED}"/etc/dovecot/dovecot-ldap.conf > fperms 600 /etc/dovecot/dovecot-ldap.conf > sed -i -e '/db ldap/,/args/ s|=|= /etc/dovecot-ldap.conf|' "${conf}" \ > || die "failed to update LDAP settings in dovecot-ldap.conf" > dodoc doc/dovecot-ldap-example.conf > fi > > if use sieve || use managesieve; then > cd "../dovecot-${major_minor}-sieve-${sieve_version}" > emake DESTDIR="${ED}" install || die "make install failed (sieve)" > > if use managesieve; then > cd "../dovecot-${major_minor}-managesieve-${managesieve_version}" > emake DESTDIR="${ED}" install || die "make install failed (managesieve)" > fi > fi > > dodir /var/run/dovecot > fowners root:root /var/run/dovecot > fperms 0755 /var/run/dovecot > fowners root:dovecot /var/run/dovecot/login > fperms 0750 /var/run/dovecot/login > > ewarn "If you are upgrading from Dovecot 1.1, read " > ewarn " http://wiki.dovecot.org/Upgrading/1.2" > if use sieve || use managesieve; then > ewarn " http://wiki.dovecot.org/LDA/Sieve/Dovecot#Migration_from_CMUSieve" > ewarn " In particular, do not forget to change cmusieve to sieve" > fi >} > >pkg_postinst() { > if use ssl; then > # Let's not make a new certificate if we already have one > if ! [[ -e "${EROOT}"/etc/ssl/dovecot/server.pem && \ > -e "${EROOT}"/etc/ssl/dovecot/server.key ]]; then > einfo "Creating SSL certificate" > SSL_ORGANIZATION="${SSL_ORGANIZATION:-Dovecot IMAP Server}" > install_cert /etc/ssl/dovecot/server > chown dovecot:mail "${EROOT}"/etc/ssl/dovecot/server.{key,pem} > fi > fi > > if grep -q '^ssl_key_password' "${EROOT}"/etc/dovecot/dovecot.conf; then > echo > ewarn "You have set ssl_key_password in dovecot.conf!" > ewarn "You are URGED to read the advice in the current" > ewarn "dovecot.conf regarding sensible handling of that" > ewarn "password, as it might be readable by any user" > ewarn "on your system who can access that file!" > fi >}
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 339776
: 249608