Re: Dovecot and Pigeonhole v2.4.3 released (unexpected Lua dependency)

Fixed in main with https://github.com/dovecot/core/compare/dfe1a7293879dbce25b3b471bdb8ef17ec2af3ba%5E...474dc7cb44b7e0e02bea43a1ee7b27ba15c8bda8.patch

Aki

> On 28/03/2026 11:45 EET Aki Tuomi via dovecot <[email protected]> wrote:
> 
>  
> On 28/03/2026 11:03 EET Washington Odhiambo via dovecot
>      <[1][email protected]> wrote:
> 
> 
>      On Fri, Mar 27, 2026 at 11:26AM Aki Tuomi via dovecot
>      <[2][email protected]>
>      wrote:
> 
> 
>        Hi!
> 
>        We are happy to publish version 2.4.3 of Dovecot and Pigeonhole. These
>        contain several CVEs, discovered by external researches. The majority
>        of
>        these have been discovered with help of automated code analysis tools
>        like
>        claude code security, which is why some of these are rather old,
>        missed
>        bugs.
> 
>        No new supported distros have been added or old removed, no new
>        dependencies have been added.
> 
>        Note that there are experimental features in 2.4, one is enabled with
>        `--enable-experimental-mail-utf8`, and another with
>        `--enable-experimental-imap4rev2`, and you also need to set
>        mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them in
>        config.
> 
>        [3]https://dovecot.org/releases/2.4/dovecot-2.4.3.tar.gz
>        [4]https://dovecot.org/releases/2.4/dovecot-2.4.3.tar.gz.sig
>        [5]https://pigeonhole.dovecot.org/releases/2.4/dovecot-pigeonhole-2.4.3.tar.gz
> 
>        [6]https://pigeonhole.dovecot.org/releases/2.4/dovecot-pigeonhole-2.4.3.tar.gz.sig
> 
>        Binary packages in [7]https://repo.dovecot.org/
>        Docker images in [8]https://hub.docker.com/r/dovecot/dovecot
> 
> 
> 
>      Using the same configure options I used for dovecot-2.4.2, I end up with
>      a
>      compile failure for 2.4.3:
> 
>      ./configure --enable-maintainer-mode \
>      --with-sql=yes \
>      --with-mysql \
>      --with-pgsql \
>      --with-zlib \
>      --with-bzlib \
>      --with-ssl=openssl \
>      --enable-experimental-mail-utf8 \
>      --enable-experimental-imap4rev2 \
>      --with-pcre2
>      make
> 
> 
> 
> 
>    Hi,
> 
>    unfortunately lua dependency crept in. Fix is already in review. I'll post
>    the link once it's merged.
> 
>    Aki
> 
> References
> 
>    Visible links
>    1. mailto:[email protected]
>    2. mailto:[email protected]
>    3. https://dovecot.org/releases/2.4/dovecot-2.4.3.tar.gz
>    4. https://dovecot.org/releases/2.4/dovecot-2.4.3.tar.gz.sig
>    5. https://pigeonhole.dovecot.org/releases/2.4/dovecot-pigeonhole-2.4.3.tar.gz
>    6. https://pigeonhole.dovecot.org/releases/2.4/dovecot-pigeonhole-2.4.3.tar.gz.sig
>    7. https://repo.dovecot.org/
>    8. https://hub.docker.com/r/dovecot/dovecot
> _______________________________________________
> dovecot mailing list -- [email protected]
> To unsubscribe send an email to [email protected]

_______________________________________________
dovecot mailing list -- [email protected]
To unsubscribe send an email to [email protected]