Opened 10 years ago

Closed 10 years ago

Last modified 10 years ago

#43436 closed enhancement (fixed)

dovecot2: build only dynamic libraries

Reported by: neverpanic (Clemens Lang) Owned by: pixilla (Bradley Giesbrecht)
Priority: Normal Milestone:
Component: ports Version: 2.2.1
Keywords: Cc:
Port: dovecot2

Description

Consider changing the dovecot2 port so it builds dynamic loadable modules instead of pulling in OpenSSL statically to avoid Heartbleed going by unnoticed and unpatched in dovecot2 for more than a week the next time a similar security bug is found in OpenSSL. I'm attaching a patch the the dovecot2 Portfile that does that.

See also: https://lists.macosforge.org/pipermail/macports-users/2014-April/035239.html.

Attachments (1)

dovecot2-dynamic-only.diff (691 bytes) - added by neverpanic (Clemens Lang) 10 years ago.

Download all attachments as: .zip

Change History (3)

Changed 10 years ago by neverpanic (Clemens Lang)

Attachment: dovecot2-dynamic-only.diff added

comment:1 Changed 10 years ago by pixilla (Bradley Giesbrecht)

Thank you. See r119250

comment:2 Changed 10 years ago by pixilla (Bradley Giesbrecht)

Resolution: fixed
Status: newclosed
Version 0, edited 10 years ago by pixilla (Bradley Giesbrecht) (next)
Note: See TracTickets for help on using tickets.