Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
Commit | Credits | Log message |
0.5.21.1 17 Aug 2024 19:14:06 |
Vladimir Druzenko (vvd) Author: Älven |
mail/dovecot-pigeonhole: update 0.5.21 → 0.5.21.1
- sieve: When saving to local storage failed after a successful action
in sieve (e.g. redirect, vacation), the mail was reported as
successfully delivered, although it was lost locally.
https://raw.githubusercontent.com/dovecot/pigeonhole/0.5.21.1/NEWS
Also:
- replace http with https in MASTER_SITES
- upstream changed official site to https://pigeonhole.dovecot.org
- add LICENSE_FILE
- sort pkg-plist
PR: 280877
Approved by: ler (maintainer)
MFH: 2024Q3 |
0.5.21_3 16 Aug 2024 23:03:13 |
Vladimir Druzenko (vvd) |
mail/dovecot-*: bump after update mail/dovecot as described in Makefile
mail/dovecot updated in 72dd8d2ee676.
While here:
- remove GNU_CONFIGURE_MANPREFIX;
- replace PORTVERSION on DISTVERSION.
PR: 280866
Approved by: ler (maintainer)
MFH: 2024Q3 |
0.5.21_2 03 Mar 2024 01:41:39 |
Yasuhiro Kimura (yasu) |
mail/dovecot-pigeonhole: Move manapges to share/man
PR: 277402
Approved by: portmgr (blanket) |
0.5.21_1 24 Jan 2024 21:41:05 |
Larry Rosenman (ler) |
mail/dovecot-pigeonhole: add an EXAMPLES option
- install the example scripts from the tarball
Requested by: mwl |
0.5.21 04 Oct 2023 07:47:57 |
Yasuhiro Kimura (yasu) |
mail/{dovecot,dovecot-pigeonhole}: Update to latest stable releases
* Update mail/dovecot to 2.3.21.
* Update mail/dovecot-pigeonhole to 0.5.21.
* Bump PORTREVISION of dependencies.
ReleaseNotes: https://dovecot.org/mailman3/archives/list/dovecot-news@dovecot.org/thread/Y5SJWAIAVEAQ2KKSWJM7VSJUUFRMFAH5/
PR: 273946
Approved by: maintainer timeout |
0.5.20 08 Feb 2023 10:53:56 |
Muhammad Moinur Rahman (bofh) |
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap
Convert the USE_LDAP=yes to USES=ldap and adds the following features:
- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features
Reviewed by: delphij
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D38233 |
0.5.20 23 Dec 2022 03:10:22 |
Larry Rosenman (ler) |
mail/dovecot: update to 2.3.20
mail/dovecot-pigeonhole: bump to 0.5.20
mail/dovecot-fts-*, mail/dovecot-coi: bump portrevision
mail/dovecot: ChanggLog:
+ Add dsync_features=no-header-hashes. When this setting is enabled and
one dsync side doesn't support mail GUIDs (i.e. imapc), there is no
fallback to using header hashes. Instead, dsync assumes that all mails
with identical IMAP UIDs contains the same mail contents. This can
significantly improve dsync performance with some IMAP servers that
don't support caching Date/Message-ID headers.
+ lua: HTTP client has more settings now, see
https://doc.dovecot.org/admin_manual/lua/#dovecot.http.client
+ replicator: "doveadm replicator status" command now outputs when the (Only the first 15 lines of the commit message are shown above ) |
07 Sep 2022 21:58:51 |
Stefan Eßer (se) |
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner) |
0.5.19 07 Sep 2022 21:10:59 |
Stefan Eßer (se) |
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above ) |
0.5.19 20 Jul 2022 14:22:19 |
Tobias C. Berner (tcberner) |
mail: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ashish@FreeBSD.org>
* Aaron Dalton <aaron@FreeBSD.org>
* Adam David <adam@FreeBSD.org>
* Adam McDougall <mcdouga9@egr.msu.edu>
* Adam Weinberger <adamw@FreeBSD.org>
* Ade Lovett <ade@FreeBSD.org>
* Akinori MUSHA aka knu <knu@idaemons.org>
* Alex Deiter <tiamat@komi.mts.ru>
* Alex Dupre <ale@FreeBSD.org>
* Alex Dupre <sysadmin@alexdupre.com>
* Alex Perel <veers@disturbed.net> (Only the first 15 lines of the commit message are shown above ) |
0.5.19 10 May 2022 22:31:21 |
Larry Rosenman (ler) |
mail/dovecot, mail/dovecot-pigeonhole: Upgrade to 2.3.19, 0.5.19
Dovecot Changelog:
+ Added mail_user_session_finished event, which is emitted when the mail
user session is finished (e.g. imap, pop3, lmtp). It also includes
fields with some process statistics information.
See https://doc.dovecot.org/admin_manual/list_of_events/ for more
information.
+ Added process_shutdown_filter setting. When an event matches the filter,
the process will be shutdown after the current connection(s) have
finished. This is intended to reduce memory usage of long-running imap
processes that keep a lot of memory allocated instead of freeing it to
the OS.
+ auth: Add cache hit indicator to auth passdb/userdb finished events.
See https://doc.dovecot.org/admin_manual/list_of_events/ for more (Only the first 15 lines of the commit message are shown above ) |
0.5.18 04 Feb 2022 04:50:05 |
Larry Rosenman (ler) |
mail/dovecot, mail/dovecot-pigeonhole: update to 2.3.18, 0.5.18 respectively
Dovecot ChangeLog:
* Removed mail_cache_lookup_finished event. This event wasn't especially
useful, but it increased CPU usage significantly.
* fts: Don't index inline base64 encoded content in FTS indexes using
the generic tokenizer. This reduces the FTS index sizes by removing
input that is very unlikely to be searched for. See
https://doc.dovecot.org/configuration_manual/fts/tokenization for
details on how base64 is detected. Only applies when using libfts.
* lmtp: Session IDs are now preserved through proxied connections, so
LMTP sessions can be tracked. This slightly changes the LMTP session
ID format by appending ":Tn" (transaction), ":Pn" (proxy connection)
and ":Rn" (recipient) counters after the session ID prefix.
+ Events now have "reason_code" field, which can provide a list of (Only the first 15 lines of the commit message are shown above ) |
0.5.17 28 Oct 2021 15:33:27 |
Larry Rosenman (ler) |
mail/dovecot: mail/dovecot-pigeonhole: upgrade to 2.3.17, 0.5.17
ChangeLogs:
dovecot:
* Dovecot now logs a warning if time seems to jump forward at least
100 milliseconds.
* dict: Lines logged by the dict process now contain the dict name as
the prefix.
* lib-index: mail_cache_fields, mail_always_cache_fields and
mail_never_cache_fields now verifies that the listed header names are
valid. Especially the UTF8 "–" character has sometimes been wrongly
used instead of the ASCII "-".
+ *-login: Added login_proxy_rawlog_dir setting to capture
rawlogs between proxy and backend.
+ dict: The server process now keeps the last 10 idle dict backends (Only the first 15 lines of the commit message are shown above ) |
0.5.16 03 Oct 2021 21:36:13 |
Larry Rosenman (ler) |
mail/dovecot: update to 2.3.16
mail/dovecot-pigeonhole: update to 0.5.16
ChangeLogs:
https://dovecot.org/pipermail/dovecot-news/2021-August/000463.html
https://dovecot.org/pipermail/dovecot-news/2021-August/000464.html |
0.5.15 03 Jul 2021 10:09:08 |
Kurt Jaeger (pi) Author: Juraj Lutter |
mail/dovecot-*: update 2.3.13 -> 2.3.15 and related ports
PR: 256860
Approved by: fluffy (ports-secteam)
Submitted by: otis
Relnotes: https://dovecot.org/pipermail/dovecot-news/2021-June/000457.html
https://dovecot.org/pipermail/dovecot-news/2021-March/000455.html
https://dovecot.org/pipermail/dovecot-news/2021-March/000456.html
https://dovecot.org/pipermail/dovecot-news/2021-June/000458.html
Security: CVE-2021-29157, CVE-2021-33515, CVE-2020-28200
Differential Revision: https://reviews.freebsd.org/D30866
MFH: 2021Q3 |
0.5.13 06 Apr 2021 14:31:07 |
Mathieu Arnold (mat) |
Remove # $FreeBSD$ from Makefiles. |
0.5.13 06 Jan 2021 14:58:35 |
pi |
mail/dovecot: update 2.3.11.3 -> 2.3.13, fix CVE in non-default config
mail/dovecot-pigeonhole: update 0.5.11 -> 0.5.13
- please note: option VPOPMAIl was removed from upstream
PR: 252415
Submitted by: Evilham <contact@evilham.com>
Reviewed by: fluffy
Approved by: ler (maintainer)
MFH: 2021Q1
Relnotes: https://dovecot.org/pipermail/dovecot-news/2021-January/000448.html
https://dovecot.org/pipermail/dovecot-news/2021-January/000449.html
Security: CVE-2020-24386, CVE-2020-25275 |
0.5.11 14 Aug 2020 00:27:43 |
ler |
mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.11.3 and 0.5.11,
repectively.
dovecot changelog:
* CVE-2020-12100: Parsing mails with a large number of MIME parts could
have resulted in excessive CPU usage or a crash due to running out of
stack memory.
* CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
message buffer size, which leads to reading past allocation which can
lead to crash.
* CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
address that has the empty quoted string as local-part causes the lmtp
service to crash.
* CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
zero-length message, which leads to assert-crash later on.
* Events: Fix inconsistency in events. See event documentation in (Only the first 15 lines of the commit message are shown above ) |
0.5.10 09 Mar 2020 18:16:21 |
ler |
mail/dovecot-pigeonhole: upgrade to 0.5.10.
- just to keep version numbers consistent
- fix some issues caused by a recent commit. |
0.5.9_2 06 Mar 2020 19:16:54 |
ler |
mail/dovecot: update to 2.3.10.
ChangeLog:
* Disable retpoline migitations by default. These can cause severe
performance regressions, so they should be only enabled when
applicable.
* IMAP MOVE now commits transactions in batches of 1000 mails. This
helps especially with lazy_expunge when moving a lot of mails. It
mainly avoids situations where multiple IMAP sessions are running the
same MOVE command and duplicating the mails in the lazy_expunge folder.
With this change there can still be some duplication, but the MOVE
always progresses forward. Also if the MOVE fails at some point, the
changes up to the last 1000 mails are still committed instead of
rolled back. Note that the COPY command behavior hasn't changed,
because it is required by IMAP standard to be an atomic operation. (Only the first 15 lines of the commit message are shown above ) |
0.5.9_1 13 Dec 2019 15:02:25 |
ler |
mail/dovecot: upgrade to 2.3.9.2,
* CVE-2019-19722: Mails with group addresses in From or To fields caused
crash in push notification drivers.
- additional fix for blank headers
PORTREVISION bump for mail/dovecot-pigeonhole, mail/dovecot-fts-xapian
*NOT* requesting MFH as 2.3.9 is not in 2019Q4.
Security: b7dc4dde-2e48-43f9-967a-c68461537cf2
Security: CVS-2019-19722 |
0.5.9 04 Dec 2019 17:59:41 |
ler |
mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.9, 0.5.9 respectively.
Bump PORTREVISION of mail/dovecot-fts-xapian for version change of dovecot.
Changelog:
Dovecot:
* Changed several event field names for consistency and to avoid
conflicts in parent-child event relationships:
* SMTP server command events: Renamed "name" to "cmd_name"
* Events inheriting from a mailbox: Renamed "name" to "mailbox"
* Server connection events have only "remote_ip", "remote_port",
"local_ip" and "local_port".
* Removed duplicate "client_ip", "ip" and "port".
* Mail storage events: Removed "service" field.
Use "service:<name>" category instead. (Only the first 15 lines of the commit message are shown above ) |
0.5.8 08 Oct 2019 21:56:52 |
ler |
mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.8 and 0.5.8 respectively.
release notes:
dovecot:
Changes
+ Added mail_delivery_started and mail_delivery_finished events, see
https://doc.dovecot.org/admin_manual/list_of_events/ for details.
+ dsync-replication: Don't replicate users who have "noreplicate" extra
field in userdb.
+ doveadm service status: Show total number of processes created.
+ When logging to syslog, use instance_name setting's value for the
ident. This commonly is added as a log prefix.
+ Base64 encoding/decoding code was rewritten with additional features.
It shouldn't cause any user visible changes. (Only the first 15 lines of the commit message are shown above ) |
0.5.7.2 28 Aug 2019 15:59:59 |
ler |
mail/dovecot,mail/dovecot-pigeonhole: fix CVE-2019-11500
Changes
-------
* CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
when scanning data in quoted strings, leading to out of bounds heap
memory writes. Found by Nick Roessler and Rafi Rubin.
MFH: 2019Q3
Security: CVE-2019-11500 |
0.5.7.1_1 13 Aug 2019 22:29:43 |
mat |
onvert to UCL & cleanup pkg-message (categories l-m) |
0.5.7.1_1 26 Jul 2019 20:46:57 |
gerald |
Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.
PR: 238330 |
0.5.7.1 23 Jul 2019 14:26:56 |
ler |
mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.7.1 and 0.5.7.1
respectively.
These releases fix the reported regressions in v2.3.7 & v0.5.7.
Dovecot core:
- Fix TCP_NODELAY errors being logged on non-Linux OSes
- lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
- Remove wrongly added checks in namespace prefix checking
Pigeonhole:
- dsync: Sieve script syncing failed if mailbox attributes weren't
enabled. |
0.5.7 12 Jul 2019 13:20:30 |
ler |
mail/dovecot, mail/dovecot-pigeonhole: Update to 2.3.7 and 0.5.7 respectively.
dovecot changelog:
* fts-solr: Removed break-imap-search parameter
+ Added more events for the new statistics, see
https://doc.dovecot.org/admin_manual/list_of_events/
+ mail-lua: Add IMAP metadata accessors, see
https://doc.dovecot.org/admin_manual/lua/
+ Add event exporters that allow exporting raw events to log files and
external systems, see
https://doc.dovecot.org/configuration_manual/event_export/
+ SNIPPET is now PREVIEW and size has been increased to 200 characters.
+ Add body option to fts_enforced. This triggers building FTS index only
on body search, and an error using FTS index fails the search rather
than reads through all the mails. (Only the first 15 lines of the commit message are shown above ) |
0.5.6 30 Apr 2019 21:33:30 |
ler |
mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.6, 0.5.6 respectively.
Dovecot changelog:
* CVE-2019-11494: Submission-login crashed with signal 11 due to null pointer
access when authentication was aborted by disconnecting.
* CVE-2019-11499: Submission-login crashed when authentication was started over
TLS secured channel and invalid authentication message was sent.
* auth: Support password grant with passdb oauth2.
+ Use system default CAs for outbound TLS connections.
+ Simplify array handling with new helper macros.
+ fts_solr: Enable configuring batch_size and soft_commit features.
- lmtp/submission: Fixed various bugs in XCLIENT handling, including a hang when
XCLIENT commands were sent infinitely to the remote server.
- lmtp/submission: Forwarded multi-line replies were erroneously sent as two
replies to the client.
- lib-smtp: client: Message was not guaranteed to contain CRLF consistently when
CHUNKING was used.
- fts_solr: Plugin was no longer compatible with Solr 7.
- Make it possible to disable certificate checking without setting
ssl_client_ca_* settings.
- pop3c: SSL support was broken. (Only the first 15 lines of the commit message are shown above ) |
0.5.5 05 Mar 2019 23:34:13 |
ler |
mail/dovecot and mail/dovecot-pigeonhole upgrade to 2.3.5 and 0.5.5 respectively
dovecot changelog:
+ Lua push notification driver: mail keywords and flags are provided in
MessageNew and MessageAppend events.
+ submission: Implement support for plugins.
+ auth: When auth_policy_log_only=yes, only log what the policy server response
would do without actually doing it.
+ auth: Always log policy server decisions with auth_verbose=yes
- v2.3.[34]: doveadm log errors: Output was missing user/session
- lda: Debug log lines could have shown slightly corrupted
- login proxy: Login processes may have crashed in various ways when
login_proxy_max_disconnect_delay was set.
- imap: Fix crash with Maildir+zlib if client disconnects during APPEND
- lmtp proxy: Fix potential assert-crash
- lmtp/submission: Fix crash when SMTP client transaction times out
- submission: Split large XCLIENT commands to 512 bytes per command, so Postfix
accepts them.
- submission: Fix crash when client sends invalid BURL command (Only the first 15 lines of the commit message are shown above ) |
0.5.4_1 12 Dec 2018 01:35:36 |
gerald |
Bump PORTREVISION for ports depending on the canonical version of GCC
defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t
GCC 8.2 under most circumstances.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.
PR: 231590 |
0.5.4 23 Nov 2018 15:12:44 |
ler |
mail/dovecot update to 2.3.4, mail/dovecot-pigeonhole to 0.5.4
dovecot change log:
* The default postmaster_address is now "postmaster@<user domain or
server hostname>". If username contains the @domain part, that's
used. If not, then the server's hostname is used.
* "doveadm stats dump" now returns two decimals for the "avg" field.
+ Added push notification driver that uses a Lua script
+ Added new SQL, DNS and connection events.
See https://wiki2.dovecot.org/Events
+ Added "doveadm mailbox cache purge" command.
+ Added events API support for Lua scripts
+ doveadm force-resync -f parameter performs "index fsck" while opening
the index. This may be useful to fix some types of broken index files. (Only the first 15 lines of the commit message are shown above ) |
0.5.3 01 Oct 2018 23:18:30 |
ler |
mail/dovecot upgrade to 2.3.3, mail/dovecot-pigeonhole upgrade to 0.5.3.
dovecot changelog:
* doveconf hides more secrets now in the default output.
* ssl_dh setting is no longer enforced at startup. If it's not set and
non-ECC DH key exchange happens, error is logged and client is
disconnected.
+ Added log_debug=<filter> setting.
+ Added log_core_filter=<log filter> setting.
+ quota-clone: Write to dict asynchronously
+ --enable-hardening attempts to use retpoline Spectre 2 mitigations
+ lmtp proxy: Support source_ip passdb extra field.
+ doveadm stats dump: Support more fields and output stddev by default.
+ push-notification: Add SSL support for OX backend. (Only the first 15 lines of the commit message are shown above ) |
0.5.2_3 29 Jul 2018 22:18:46 |
gerald |
Bump PORTREVISION for ports depending on the canonical version of GCC
in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which
has now moved from GCC 6 to GCC 7 by default.
This includes ports
- featuring USE_GCC=yes or USE_GCC=any,
- featuring USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and those
- with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.
PR: 222542 |
0.5.2_2 29 Jun 2018 19:05:16 |
ler |
mail/dovecot-pigeonhole: bump PORTREVISION. |
0.5.2_1 29 Jun 2018 19:03:59 |
ler |
mail/dovecot-pigeonhole: add imap_filter_sieve.txt to Makefile(s) |
0.5.2_1 29 Jun 2018 18:44:50 |
ler |
mail/dovecot-pigeonhole: add missing doc file
Obtained from: upstream github |
0.5.2 29 Jun 2018 16:36:04 |
ler |
mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.2 and 0.5.2 respectively
dovecot changelog:
v2.3.2 is mainly a bugfix release. It contains all the changes in v2.2.36, as
well as a bunch of other fixes (mainly for v2.3-only bugs). Binary packages are
already in https://repo.dovecot.org/
* old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE while
opening /proc/self/io. This may still cause security problems if the
process is ptrace()d at the same time. Instead, open it while still
running as root.
+ doveadm: Added mailbox cache decision&remove commands. See
doveadm-mailbox(1) man page for details.
+ doveadm: Added rebuild attachments command for rebuilding
$HasAttachment or $HasNoAttachment flags for matching mails. See
doveadm-rebuild(1) man page for details.
+ cassandra: Use fallback_consistency on more types of errors (Only the first 15 lines of the commit message are shown above ) |
0.5.1 22 Apr 2018 21:35:38 |
dbaio |
Add mail/dovecot22 (v2.2.35) and mail/dovecot-pigeonhole04 (v0.4.23)
This brings back Dovecot 2.2.35 to the tree because there is an issue
with version 2.3.1 and replication in some scenarios [1].
Keep this version until this problem gets fixed upstream.
1 - https://www.dovecot.org/list/dovecot/2018-April/111477.html
Approved by: adamw (maintainer of mail/dovecot)
Approved by: ler (maintainer of mail/dovecot-pigeonhole) |
0.5.1 01 Apr 2018 17:10:31 |
adamw |
Update dovecot to 2.3.1, and dovecot-pigeonhole to 0.5.1
This is a very large update, and it WILL require manually
updating existing conf files, though the changes to do so
are not extensive. Updating instructions are here:
https://wiki2.dovecot.org/Upgrading/2.3
Additionally there are various cleanups to the dovecot rc(8)
script, and support for a LUA scripting interface for dovecot.
The decision was made not to import the 2.3.0 or 2.3.0.1 releases
here, due to the number of existing bugs. ler and I have been
dogfooding it for months now, and all of the bugs I've encountered
are fixed in this 2.3.1 release.
This update is the result of many, many hours of collborative work
between ler and me, and the input of many people on the freebsd-ports
list. |
0.4.23 20 Mar 2018 00:25:28 |
ler |
mail/dovecot-pigeonhole: upgrade to 0.4.23:
- editheader extension: Corrected the stream position calculations
performed while making the modified message available as a stream.
Pigeonhole Sieve crashed in LMTP with an assertion panic when the
Sieve editheader extension was used before the message was redirected.
Experiments indicate that the problem occurred only with LMTP and that
LDA is not affected.
- fileinto extension: Fix assert panic occurring when fileinto is used
without being listed in the require line, while the copy extension is
listed there. This is a very old bug.
- imapsieve plugin: Do not log an error for messages that disappear
concurrently while applying Sieve scripts. This is a further
improvement on the imapsieve fix in the previous release (which fixed
a panic). This event is now logged as a debug message. |
0.4.22_1 19 Mar 2018 15:06:05 |
adamw |
Update dovecot to 2.2.35, and bump pigeonhole
- charset_alias: compile fails with Solaris Studio, reported by
John Woods.
- Fix local name handling in v2.2.34 SNI code, bug found by cPanel.
- imapc: Don't try to add mails to index if they already exist there.
- imapc: If email is modified in istream_opened hook, mail size isn't
updated.
- lib-dcrypt: When reading encrypted data, more data would not be
read if buffer was not consumed causing panic or hang.
- notify: When notify plugin is used and transaction commit fails in
dsync, crash occurs.
- sdbox: When delivering to a mailbox that is over quota, temp files
are not cleaned up when saving or copying fails. |
0.4.22 02 Mar 2018 18:05:18 |
ler |
mail/dovecot-pigeonhole: upgrade to v0.4.22.
Changelog:
- Fixed filesystem path handling problem: sieve plugin could have
assert-crashed with specific path lengths with: "Panic: file
realpath.c: line 86 (path_normalize): assertion failed: (npath_pos +
1 < npath + asize)".
- Sieve extprograms plugin: Large output from "execute" command crashed
delivery. Fixed buffering issue in code that handles output from the
external program.
- editheader extension: Extensively reworked the low-level
implementation of adding and removing headers. This solves a few
integer arithmetic problems reported by Clang runtime checks, but also
improves code structure and reliability in general.
- imapsieve: Fix assert crash occurring when selected messages are
expunged concurrently by the time Sieve filter is to be applied.
- imap4flags extension: Fix binary byte-code corruption occurring when
the setflag, addflag, or removeflag command's flag-list is a variable.
- enotify extension: mailto method: Fixed parsing of mailto URI with
only a header part.
- enotify extension: mailto method: Make sure "From:" header is set to a
usable address and not "(null)".
- Fixed writing address headers to outgoing messages. It sometimes
erroneously applied another layer of MIME header encoding. |
0.4.21_2 28 Feb 2018 23:12:44 |
adamw |
Update dovecot to 2.2.34, and bump pigeonhole.
* CVE-2017-15130: TLS SNI config lookups may lead to excessive
memory usage, causing imap-login/pop3-login VSZ limit to be reached
and the process restarted. This happens only if Dovecot config has
local_name { } or local { } configuration blocks and attacker uses
randomly generated SNI servernames.
* CVE-2017-14461: Parsing invalid email addresses may cause a crash or
leak memory contents to attacker. For example, these memory contents
might contain parts of an email from another user if the same imap
process is reused for multiple users. First discovered by Aleksandar
Nikolic of Cisco Talos. Independently also discovered by "flxflndy"
via HackerOne.
* CVE-2017-15132: Aborted SASL authentication leaks memory in login
process. (Only the first 15 lines of the commit message are shown above ) |
0.4.21_1 20 Oct 2017 15:00:36 |
ler |
mail/dovecot: update to 2.2.33.2.
One more patch release with some fixes:
- doveadm: Fix crash in proxying (or dsync replication) if remote is
running older than v2.2.33
- auth: Fix memory leak in %{ldap_dn}
- dict-sql: Fix data types to work correctly with Cassandra
bump dovecot-pigeonhole PORTREVISION as well. |
0.4.21 12 Oct 2017 21:16:04 |
ler |
mail/dovecot-pigeonhole: update to 0.4.21.
Changelog v0.4.21:
* redirect action: Always set the X-Sieve-Redirected-From header to
sieve_user_email if configured. Before, it would use the envelope
recipient instead if available, which makes no sense if the primary
e-mail address is available.
+ vacation extension: Allow ignoring the envelope sender while composing
the "To:" header for the reply. Normally, the "To:" header is composed
from the address found in the "Sender", "Resent-From" or "From"
headers that is equal to the envelope sender. If none is then found,
the bare envelope sender is used. This change adds a new setting
"sieve_vacation_to_header_ignore_envelope". With this setting enabled,
the "To:" header is always composed from those headers in the source (Only the first 15 lines of the commit message are shown above ) |
0.4.20_3 11 Oct 2017 17:15:52 |
ler |
mail/dovecot: upgrade to 2.2.33.1.
- dovecot-lda was logging to stderr instead of to the log file. |
0.4.20_2 10 Oct 2017 15:45:35 |
adamw |
Update dovecot to 2.2.33, and bump pigeonhole.
* doveadm director commands wait for the changes to be visible in the
whole ring before they return. This is especially useful in testing.
* Environments listed in import_environment setting are now set or
preserved when executing standalone commands (e.g. doveadm)
+ doveadm proxy: Support proxying logs. Previously the logs were
visible only in the backend's logs.
+ Added %{if}, see https://wiki2.dovecot.org/Variables#Conditionals
+ Added a new notify_status plugin, which can be used to update dict
with current status of a mailbox when it changes. See
https://wiki2.dovecot.org/Plugins/NotifyStatus
+ Mailbox list index can be disabled for a namespace by appending
":LISTINDEX=" to location setting. (Only the first 15 lines of the commit message are shown above ) |
0.4.20_1 10 Sep 2017 20:55:39 |
gerald |
Bump PORTREVISION for ports depending on the canonical version of GCC
(via Mk/bsd.default-versions.mk and lang/gcc) which has moved from
GCC 5.4 to GCC 6.4 under most circumstances.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c++11-lib, c++11-lang,
c++14-lang, c++0x, c11, or gcc-c++11-lib.
PR: 219275 |
0.4.20 27 Aug 2017 14:34:22 |
ler |
mail/dovecot-pigeonhole: upgrade to 0.4.20.
Changelog v0.4.20:
+ Made the retention period for redirect duplicate identifiers
configurable. For accounts that perform many redirects, the lda-dupes
database could grow to impractical sizes. Changed the default
retention period from 24 to 12 hours.
- sieve-filter: Fixed memory leak: forgot to clean up script binary at
end of execution. Normally, this would merely be an inconsequential
memory leak. However, when the script comes from an LDAP storage, this
would cause io leak warnings.
- managesieve-login: Fixed handling of AUTHENTICATE command. A second
authenticate command would be parsed wrong. This problem was caused by
changes in the previous release.
- LDA Sieve plugin: Fixed minor memory leak caused by not cleaning up
the sieve_discard script. |
0.4.19_2 24 Aug 2017 16:49:23 |
adamw |
Update dovecot to 2.2.32, and bump pigeonhole.
* imapc: Info-level line is logged every time when successfully
connected to the remote server. This includes local/remote IP/port,
which can be useful for matching against external logs.
* config: Log a warning if plugin { key=no } is used explicitly.
v2.3 will support "no" properly in plugin settings, but for now
any value at all for a boolean plugin setting is treated as "yes",
even if it's written as explicit "no". This change will now warn
that it most likely won't work as intended.
+ Various optimizations to avoid accessing files/directories when it's
not necessary. Especially avoid accessing mail root directories when
INDEX directories point to a different filesystem.
+ mail_location can now include ITERINDEX parameter. This tells Dovecot (Only the first 15 lines of the commit message are shown above ) |
0.4.19_1 07 Aug 2017 21:44:01 |
adamw |
Rename dovecot2/dovecot2-pigeonhole to dovecot/dovecot-pigeonhole.
It might be necessary to manually remove and reinstall the package under
the new name.
Discussed with: ler |