[Buildroot] [PATCH 1/2] dovecot: bump version to 2.2.27 (security)

Thomas Petazzoni thomas.petazzoni at free-electrons.com
Sat Dec 10 14:23:02 UTC 2016


Adding Bernd in Cc.

On Fri, 9 Dec 2016 15:10:02 +0000, Vicente Olivert Riera wrote:
> Fixes CVE-2016-8652 : http://www.securityfocus.com/bid/94639/
> Release notes:
>   http://www.dovecot.org/list/dovecot-news/2016-December/000333.html
> Signed-off-by: Vicente Olivert Riera <Vincent.Riera at imgtec.com>

This update causes a large number of build failures:


Basically, dovecot no longer builds without OpenSSL support. The
configure error can be fixed by adding the attached patch (+ a
host-gettext dependency + autoreconf + creating m4). But then, the
build fails with:

In file included from test-http-client.c:12:0:
../../src/lib-ssl-iostream/iostream-openssl.h:6:25: fatal error: openssl/ssl.h: No such file or directory
 #include <openssl/ssl.h>

And http://www.mail-archive.com/dovecot@dovecot.org/msg67930.html is
not very encouraging in terms of supporting the build of Dovecot
without OpenSSL.

So could you submit a patch that either fixes the build of Dovecot
without OpenSSL, or makes OpenSSL support mandatory?


Thomas Petazzoni, CTO, Free Electrons
Embedded Linux and Kernel engineering

More information about the buildroot mailing list