https://ssltools.websecurity.symantec.com/checker/views/csrCheck.jsp
You have 1 error
Your CSR contains a challenge phrase.
Adding a challenge phrase to a CSR is not a secure practice. Please generate a new CSR that does not contain a challenge phrase.

The problem occure while buying a cert from https://www.ssls.com/
The support reply with:
"Please regenerate it without the passphrase and try to activate the certificate once again."

FS#3830 - Password is not updated in `mysql`.`user` table when read-only database user's password is changed

moved dovecot-lmtpd from install/update to server-plugin to prevented dovecot-errors when using dovecot without dovecot-lmtpd

FS#3526 - Add option to disable BIND zone check (the intention for the feature request was more to hide log-messages and not to disable the named-checkzone-call)

- backported patches

fixes also some misconfiguration under some circonstances