dovecot: Update to version 2.2.36.4

- Fix CVE-2019-11500
- Download tarball from HTTPS instead of HTTP

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

diff --git a/mail/dovecot/Makefile b/mail/dovecot/Makefile
index 7ac52d8aff75fb178e5acc48ffc8e0ba02a41e2e..137652d2336745fc959b80a432de80dd52f6e243 100644 (file)
--- a/mail/dovecot/Makefile
+++ b/mail/dovecot/Makefile
@@ -8,12 +8,12 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=dovecot
-PKG_VERSION:=2.2.36.3
+PKG_VERSION:=2.2.36.4
 PKG_RELEASE:=1
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
-PKG_SOURCE_URL:=http://www.dovecot.org/releases/2.2
-PKG_HASH:=992521305fa1d61f4726aac2619ccc65094a3cc2e5c80644455199764305863e
+PKG_SOURCE_URL:=https://www.dovecot.org/releases/2.2
+PKG_HASH:=777c61e264869e9b288b8d6603f4ed3ac3aac9ec573908067353f51269dce2fe
 PKG_LICENSE:=LGPL-2.1 MIT BSD-3-Clause Unique
 PKG_LICENSE_FILES:=COPYING COPYING.LGPL COPYING.MIT
 PKG_MAINTAINER:=Lucian Cristian <lucian.cristian@gmail.com>