mirror of
git://slackware.nl/current.git
synced 2024-12-31 10:28:29 +01:00
5edf138e9c
patches/packages/dovecot-2.3.21.1-x86_64-1_slack15.0.txz: Upgraded.
This update fixes security issues:
A large number of address headers in email resulted in excessive CPU usage.
Abnormally large email headers are now truncated or discarded, with a limit
of 10MB on a single header and 50MB for all the headers of all the parts of
an email.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2024-23184
https://www.cve.org/CVERecord?id=CVE-2024-23185
(* Security fix *)
49 lines
1.3 KiB
Bash
49 lines
1.3 KiB
Bash
config() {
|
|
NEW="$1"
|
|
OLD="$(dirname $NEW)/$(basename $NEW .new)"
|
|
# If there's no config file by that name, mv it over:
|
|
if [ ! -r $OLD ]; then
|
|
mv $NEW $OLD
|
|
elif [ "$(cat $OLD | md5sum)" = "$(cat $NEW | md5sum)" ]; then
|
|
# toss the redundant copy
|
|
rm $NEW
|
|
fi
|
|
# Otherwise, we leave the .new copy for the admin to consider...
|
|
}
|
|
|
|
preserve_perms() {
|
|
NEW="$1"
|
|
OLD="$(dirname $NEW)/$(basename $NEW .new)"
|
|
if [ -e $OLD ]; then
|
|
cp -a $OLD ${NEW}.incoming
|
|
cat $NEW > ${NEW}.incoming
|
|
mv ${NEW}.incoming $NEW
|
|
fi
|
|
config $NEW
|
|
}
|
|
|
|
preserve_perms etc/rc.d/rc.dovecot.new
|
|
|
|
for file in etc/dovecot/*.conf.new etc/dovecot/*.ext.new etc/dovecot/conf.d/*.conf.new etc/dovecot/conf.d/*.ext.new ; do
|
|
config $file
|
|
done
|
|
|
|
if [ -r etc/pam.d/dovecot.new ]; then
|
|
config etc/pam.d/dovecot.new
|
|
fi
|
|
|
|
# Make sure that the dovecot user/group (UID 94, GID 94), and the
|
|
# postdrop user/group (UID 65, GID 95) exist on this system:
|
|
if ! grep -q "^dovecot:" etc/passwd ; then
|
|
echo "dovecot:x:94:94:User for Dovecot processes:/dev/null:/bin/false" >> etc/passwd
|
|
fi
|
|
if ! grep -q "^dovenull:" etc/passwd ; then
|
|
echo "dovenull:x:95:95:User for Dovecot login processing:/dev/null:/bin/false" >> etc/passwd
|
|
fi
|
|
if ! grep -q "^dovecot:" etc/group ; then
|
|
echo "dovecot:x:94:" >> etc/group
|
|
fi
|
|
if ! grep -q "^dovenull:" etc/group ; then
|
|
echo "dovenull:x:95:" >> etc/group
|
|
fi
|
|
|