Opened 7 years ago

Closed 7 years ago

Last modified 7 years ago

#43436 closed enhancement (fixed)

dovecot2: build only dynamic libraries

Reported by: neverpanic (Clemens Lang) Owned by: pixilla (Bradley Giesbrecht)
Priority: Normal Milestone:
Component: ports Version: 2.2.1
Keywords: Cc:
Port: dovecot2


Consider changing the dovecot2 port so it builds dynamic loadable modules instead of pulling in OpenSSL statically to avoid Heartbleed going by unnoticed and unpatched in dovecot2 for more than a week the next time a similar security bug is found in OpenSSL. I'm attaching a patch the the dovecot2 Portfile that does that.

See also:

Attachments (1)

dovecot2-dynamic-only.diff (691 bytes) - added by neverpanic (Clemens Lang) 7 years ago.

Download all attachments as: .zip

Change History (3)

Changed 7 years ago by neverpanic (Clemens Lang)

Attachment: dovecot2-dynamic-only.diff added

comment:1 Changed 7 years ago by pixilla (Bradley Giesbrecht)

Thank you. See r119250

comment:2 Changed 7 years ago by pixilla (Bradley Giesbrecht)

Resolution: fixed
Status: newclosed
Version 0, edited 7 years ago by pixilla (Bradley Giesbrecht) (next)
Note: See TracTickets for help on using tickets.