linux/meta-openembedded.git/meta-networking/recipes-support/dovecot, branch master

dovecot: upgrade 2.4.3 -> 2.4.4

2026-05-21T04:18:32+00:00

Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

dovecot: Fix checksum mismatch

2026-04-11T00:25:50+00:00

Update the sha256sum to match the current upstream archive. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

dovecot: ignore already fixed CVEs

2026-04-06T16:46:30+00:00

The following CVEs are fixed in the current version already, however they are tracked without version info. Upstream has confirmed[1] that these vulnerabilities are fixed, and Debian has also identified the relevant commits: CVE-2025-30189: https://security-tracker.debian.org/tracker/CVE-2025-30189 CVE-2026-0394: https://security-tracker.debian.org/tracker/CVE-2026-0394 CVE-2026-24031: https://security-tracker.debian.org/tracker/CVE-2026-24031 CVE-2026-27855: https://security-tracker.debian.org/tracker/CVE-2026-27855 CVE-2026-27860: https://security-tracker.debian.org/tracker/CVE-2026-27860 [1]: https://seclists.org/fulldisclosure/2026/Mar/13 Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj

dovecot: upgrade 2.4.2 -> 2.4.3

2026-04-01T20:16:40+00:00

Drop patch which is included in this release, and add a patch that adapts a lua api call to the lua version that is used in OE. License-Change: the unicode license text has been updated, there should be no material change. However while examining these changes, I noticed that some parts of the code are covered by licenses not mentined in the recipe. It should reflect all licenses now. Tis version contains fixes fox CVE-2025-59028, CVE-2025-59031, CVE-2026-24031, CVE-2026-27859, CVE-2026-27860, CVE-2026-27857, CVE-2026-27856 and CVE-2026-27855 Changelog: https://github.com/dovecot/core/blob/main/NEWS Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj

dovecot: upgrade 2.4.1-4 -> 2.4.2

2025-12-23T02:20:58+00:00

Contains fix for CVE-2025-30189 Changelog: https://github.com/dovecot/core/releases/tag/2.4.2 Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj

dovecot: Fix service start error

2025-10-31T15:55:36+00:00

1.Fix following dovecot.service starting error. dovecot[364]: doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf line 48: cert_file: open(/etc/dovecot/ssl-cert.pem) failed: No such file or directory systemd[1]: dovecot.service: Main process exited, code=exited, status=89/n/a systemd[1]: dovecot.service: Failed with result 'exit-code'. 2. There is no need to do "touch ${D}/etc/dovecot/dovecot.conf" as it was created by dovecot after dovecot was upgraded to 2.4.1-4. Signed-off-by: Liu Yiding Signed-off-by: Khem Raj

dovecot: ignore CVE-2016-4983 (again)

2025-10-14T06:47:40+00:00

I removed the CVE_STATUS setting for CVE-2016-4983 when this recipe was updated to 2.4.1-4 - but that was a mistake, the CVE database considers (incorrectly) even the latest version as vulnerable. Revert that mistake by adding back the correct CVE_STATUS to the recipe. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj

dovecot: upgrade 2.3.21.1 -> 2.4.1-4

2025-10-06T21:14:37+00:00

Remove obsolete CVE_STATUS variable: CVE-2016-4983 is marked for v2.3. Drop 0001-not-check-pandoc.patch because it became obsolete, pandoc is not used anymore. Drop 1ccd5b54a408d12fce0c94ab0bbaedbb5ef69830.patch, because it is included in this release. Add a backported patch to fix compiling with musl. Changelog: 2.4: https://github.com/dovecot/core/releases/tag/2.4.0 2.4.1: https://github.com/dovecot/core/releases/tag/2.4.1 Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj

dovecot: Upgrade to 2.3.21.1

2024-11-23T17:00:14+00:00

Fix build with icu-76.x while here Signed-off-by: Khem Raj

devecot: set dovecot.conf file mode with chmod

2024-06-28T18:22:06+00:00

The touch command doesn't support file mode setting. Set it with chmod. Signed-off-by: Yi Zhao Signed-off-by: Khem Raj