Opened 11 years ago

Closed 11 years ago

Last modified 11 years ago

#43436 closed enhancement (fixed)

dovecot2: build only dynamic libraries

Reported by: neverpanic (Clemens Lang) Owned by: pixilla (Bradley Giesbrecht)
Priority: Normal Milestone:
Component: ports Version: 2.2.1
Keywords: Cc:
Port: dovecot2

Description

Consider changing the dovecot2 port so it builds dynamic loadable modules instead of pulling in OpenSSL statically to avoid Heartbleed going by unnoticed and unpatched in dovecot2 for more than a week the next time a similar security bug is found in OpenSSL. I'm attaching a patch the the dovecot2 Portfile that does that.

See also: ​https://lists.macosforge.org/pipermail/macports-users/2014-April/035239.html.

Attachments (1)

dovecot2-dynamic-only.diff​ (691 bytes) - added by neverpanic (Clemens Lang) 11 years ago.

Download all attachments as: .zip

Change History (3)

Changed 11 years ago by neverpanic (Clemens Lang)

Attachment: dovecot2-dynamic-only.diff​ added

comment:1 Changed 11 years ago by pixilla (Bradley Giesbrecht)

Thank you. See r119250

comment:2 Changed 11 years ago by pixilla (Bradley Giesbrecht)

Resolution: → fixed
Status: new → closed

See r119250

Last edited 11 years ago by pixilla (Bradley Giesbrecht) (previous) (diff)
Note: See TracTickets for help on using tickets.