Changelog for dovecot12-1.2.17-1.3.1.i586.rpm :
Fri May 20 14:00:00 2011 alexandreAATTexatati.com.br
- Update sieve version to 0.1.19:
- Enotify extension: fixed inappropriate return type in mailto URI
parse function, also fixing ARM compiler warning.
- Vacation extension: fixed handling of sendmail errors. It produced
an additional confusing success message in case of error.
- Removed header MIME-decoding to fix erroneous address parsing.
Applies to address test and vacation command.
- Update managesieve patches to match the release:
old: dovecot-1.2-managesieve-0.11.12.tar.bz2
new: dovecot-1.2-managesieve-0.11.13.tar.bz2
old: dovecot-1.2.16-managesieve-0.11.12.diff.bz2
new: dovecot-1.2.17-managesieve-0.11.13.diff.bz2
- ManageSieve: fixed bug in UTF-8 checking of string values.

Wed May 11 14:00:00 2011 alexandreAATTexatati.com.br
- Update to 1.2.17:
- Fixed potential crashes and other problems when parsing header names
that contained NUL characters. (bnc#694778)
- IMAP: Fixed a memory leak with ESEARCH command handling
- Quota warnings could have been executed at incorrect times with
some configs.

Mon Nov 15 13:00:00 2010 alexandreAATTexatati.com.br
- Update managesieve patch to match the release:
old: dovecot-1.2.15-managesieve-0.11.12.diff.bz2
new: dovecot-1.2.16-managesieve-0.11.12.diff.bz2

Tue Nov 9 13:00:00 2010 alexandreAATTexatati.com.br
- Update to 1.2.16:
- imap: Fixed SELECT QRESYNC not to crash on mailbox close if a lot
of changes were being sent.
- pop3: Fixed a potential hang
- mbox: Creating new mailboxes should base permissions on mail root
dir, not always use 0600.
- auth: Disable auth caching entirely for master users
- Add IMAP, POP3 and SIEVE services for SuSEfirewall2 (bnc#635447).

Mon Oct 25 14:00:00 2010 mrueckertAATTsuse.de
- Fixing 2 small ACL related security bug (bnc#643715)
- added dovecot-1.2.x_CVE-2010-3706.patch
If admin wanted to remove some rights from mailboxes in user\'s
private namespace (e.g. symlinked shared mailboxes), they may
not have gotten removed.
- added dovecot-1.2.x_CVE-2010-3707.patch
When mixing up multiple ACL entries, such as groups/users the
more specific entry may not have replaced the previous entry
(e.g. group-override may not have worked as expected).

Mon Oct 4 14:00:00 2010 alexandreAATTexatati.com.br
- set PIC/PIE globally so we dont have to regenerate the
configure.
the patches are still left in as documentation
- update sieve version to 0.1.18:
- Imap4flags: fixed segfault bug occuring in multiscript context.
Occured in specific situations when a script using imap4flags was
followed in the sequence by scripts not using imap4flags.
- Imap4flags: fixed bug in setflag command; when parameter was a
stringlist, only the last item was actually set.
- Prevented assertion failure due to currupt binary string
representation. If the string were missing a final \\0 character an
assertion was produced in stead of a binary corruption error.
- Multiscript: fixed duplicate implicit keep caused by erroneous
execution state update.
- Fixed Sieve script name checking to properly handle length limit
and added 0x00ff as invalid character.
- Removed spurious old stdio.h (top) includes; these caused compile
issues on specific systems.
- Fixed default Sieve capability (as reported by ManageSieve): extra
extensions spamtest, spamtestplus and virustest were enabled by
default. These should, however, only be enabled when properly
configured and there is no default configuration.
- Variables extension: fixed :length set modifier to recognize utf8
characters in stead of octets.
- Fixed unnecessary reporting of dummy extensions in ManageSieve
SIEVE capability; the comparator-i;octet and
comparator-i;ascii-numeric \'extensions\' were reported explicitly.
- LDA Sieve plugin: added _version symbol to enable Dovecot\'s plugin
version check. Without this check, people can forget to recompile
the plugin, which can lead to unexpected effects.
- update managesieve patches to match the release:
old: dovecot-1.2-managesieve-0.11.11.tar.bz2
new: dovecot-1.2-managesieve-0.11.12.tar.bz2
old: dovecot-1.2.14-managesieve-0.11.11.diff.bz2
new: dovecot-1.2.15-managesieve-0.11.12.diff.bz2
- Fixed error handling of PUTSCRIPT commmand; save commit errors
would not make the command fail.
- Fixed PUTSCRIPT bug causing it to hang when given an empty script
name.

Fri Sep 17 14:00:00 2010 mrueckertAATTsuse.de
- added dovecot12-1.2.13_dont_copy_acl_from_inbox.patch:
If a user create acls on the inbox dont copy it to the children.
(bnc#640005) CVE-2010-3304

Sun May 2 14:00:00 2010 ajAATTsuse.de
- Handle /var/run on tmpfs

Fri Apr 30 14:00:00 2010 alexandreAATTexatati.com.br
- update sieve version to 0.1.16:

* Finished implementation of spamtest, spamtestplus and virustest
extensions. These are not enabled by default and need to be
activated with the sieve_extensions setting. Documentation available
in doc/spamtest-virustest.txt
+ Vacation extension: the from address of the generated reply is now
by default equal to whatever known recipient alias matched the
headers of the message. If it is one of the aliases specified with
:addresses, it is used in stead of the envelope recipient address
that was used before.
+ Restructured and optimized the lexical scanner.
+ Added --with-docs configure option to allow disabling installation
of documentation.
- Accidentally omitted \'extern\' in two declarations of global
variables in header files, causing compile failures on certain
systems.
- Deprecated imapflags extension: fixed implicit assignment of flags.
Turns out this never really worked, but the effect of this bug was
obscured by the removeflag bug fixed in the previous release.
- Fixed various memset argument mixups in enotify extension. This
caused warnings on certain systems, but luckily no adverse effects
at runtime.
- Removed dovecot-1.2-sieve-0.1.15_memset.patch, changes merged on
upstream code;
- Updated dovecot-1.2-sieve-0.1.16_pie.patch;
- Spec file cleaned with spec-cleaner.

Thu Mar 18 13:00:00 2010 alexandreAATTexatati.com.br
- ManageSieve patch refreshed for 1.2.11.

Tue Mar 9 13:00:00 2010 mrueckertAATTsuse.de
- package solr schema

Mon Mar 8 13:00:00 2010 mrueckertAATTsuse.de
- update to version 1.2.11
- mbox: Message header reading was unnecessarily slow. Fetching a
huge header could have resulted in Dovecot eating a lot of CPU.
Also searching messages was much slower than necessary.
- mbox, dbox, cydir: Mail root directory was created with 0770
permissions, instead of 0700.
- maildir: Reading uidlist could have ended up in an infinite
loop.
- IMAP IDLE: v1.2.7+ caused extra load by checking changes every
0.5 seconds after a change had occurred in mailbox
- added dovecot-1.2-sieve-0.1.15_memset.patch:
fix order of memset arguments

Mon Mar 8 13:00:00 2010 mrueckertAATTsuse.de
- enable solr backend for full text search
adds 2 new dependencies: curl and expat

Mon Jan 25 13:00:00 2010 alexandreAATTexatati.com.br
- update sieve version to 0.1.15:

* Enotify extension:
- Adjusted notify method API for addition of new notification
methods.
- Set default importance level to \'normal\' (was \'high\').

* Include extension: updated implementation towards most recent
specification (all should be backwards compatible):
- Implemented global variables namespace.
- Global command may now appear anywhere in a script.
- Implemented script name checking using the requirements specified
in the ManageSieve draft.
- One issue remains: ManageSieve currently requires included scripts
to be uploaded first, which is not according to specification.

* Changed envelope path parser to allow to and from envelope addresses
that have no domain part.
+ Added preliminary support for Sieve plugins and added support for
installing Sieve development headers.
+ Started work on the implementation of the spamtest, spamtestplus and
virustest extensions (unfinished).
+ Deprecated notify extension: implemented denotify command.
+ Variables extension: added support for variable namespaces.
+ Added configurable script size limit. Compiler will refuse to
compile files larger than sieve_max_script_size.
+ Testsuite changes:
- Added support for changing and testing an extension\'s
configuration.
- Added a command line parameter for copying errors to stderr.
- Fixed a bug in the i;ascii-numeric comparator. If one of the
strings started with a non-digit character, the comparator would
always yield less-than.
- Imap4flags extension: fixed bug in removeflag: removing a single
flag failed due to off-by-one error (bug report by Julian Cowley).
- Improved EACCES error messages for stat() and lstat() syscalls and
slightly improved error messages that may uccur when saving a
binary.
- Vacation extension: fixed typo in runtime log message (patch by
Julian Cowley).
- Fixed use of minus \'-\' in man pages; it is now properly escaped.
- Fixed parser recovery. In particular cases it would trigger spurious
errors after an initial valid error and sometimes additional errors
were inappropriately ignored.
- update managesieve patches to match the release:
old: dovecot-1.2-managesieve-0.11.10.tar.bz2
new: dovecot-1.2-managesieve-0.11.11.tar.bz2
old: dovecot-1.2.9-managesieve-0.11.10.diff.bz2
new: dovecot-1.2.10-managesieve-0.11.11.diff.bz2

* This release contains adjustments to match changes in the Sieve API.
This means that this release will only compile against Pigeonhole
Sieve v0.1.15.
+ Implemented ManageSieve QUOTA enforcement.
+ Added MAXREDIRECTS capability after login.
+ Implemented new script name rules specified in most recent
ManageSieve draft.
- Fixed assertion failure occuring with challenge-response SASL
mechanisms.
- Made configure complain about trying to compile against installed
Dovecot headers alone.
- Fixed compile warning for compilation against CMUSieve.
- update managesieve pie patch to match release:
old: dovecot-1.2-managesieve-0.11.10_pie.patch
new: dovecot-1.2-managesieve-0.11.11_pie.patch
- update sieve pie patch to match release:
old: dovecot-1.2-sieve-0.1.14_pie.patch
new: dovecot-1.2-sieve-0.1.15_pie.patch
- update to version 1.2.10
+ %variables now support %{host}, %{pid} and %{env:ENVIRONMENT_NAME}
everywhere.
+ LIST-STATUS capability is now advertised
- maildir: Fixed several assert-crashes.
- imap: LIST \"\" inbox shouldn\'t crash when using namespace with
\"INBOX.\" prefix.
- lazy_expunge now ignores non-private namespaces.

Sat Dec 19 13:00:00 2009 alexandreAATTexatati.com.br
- update sieve version to 0.1.14:

* Made the imposed limits on the number of redirects and the number
of actions configurable. The settings are called sieve_max_actions
and sieve_max_redirects.

* Did a major rework of extension handling, making sure that no global
state is maintained. This change was triggered by problems that
global state info would cause for Dovecot v2.0, but it is also
important for v1.2 as it significantly cleans up the library
implementation.
+ Made LDA Sieve plugin recognize the deliver_log_format setting.
+ Message headers produced from user-supplied data are now
RFC2047-encoded if necessary for outgoing messages. This is for
example important for the :subject argument of the vacation action.
+ Added support for the $text$ substitution in the deprecated notify
extension.
+ The subaddress extension now also accepts recipient_delimiter
setting as an alias for sieve_subaddress_sep setting. This
anticipates the recipient_delimiter setting in v2.0.
- Fixed logging of mailbox names. It logged the converted mUTF7
version in stead of the original UTF8 version supplied by the user.
- Fixed a minor memory leak in the multiscript support.
- Fixed a bug in the recompilation of Sieve scripts. Made sure that
scripts are only recompiled when the script file - or the symlink
pointing to it - is strictly newer.
- update managesieve patches to match the release:
old: dovecot-1.2-managesieve-0.11.9.tar.bz2
new: dovecot-1.2-managesieve-0.11.10.tar.bz2
old: dovecot-1.2.8-managesieve-0.11.9.diff.bz2
new: dovecot-1.2.9-managesieve-0.11.10.diff.bz2

* This release contains adjustments to match changes in the Sieve API.
This means that this release will only compile against Pigeonhole
Sieve v0.1.14.
- Fixed compilation of ManageSieve against CMUSieve.
- update managesieve pie patch to match release:
old: dovecot-1.2-managesieve-0.11.9_pie.patch
new: dovecot-1.2-managesieve-0.11.10_pie.patch
- update sieve pie patch to match release:
old: dovecot-1.2-sieve-0.1.13_pie.patch
new: dovecot-1.2-sieve-0.1.14_pie.patch

Fri Dec 18 13:00:00 2009 alexandreAATTexatati.com.br
- update to version 1.2.9

* maildir: When saving, filenames now always contain ,S=.
Previously this was done only when quota plugin was loaded. It\'s
required for zlib plugin and may be useful for other things too.
+ lazy-expunge: Support a single-namespace configuration. If a mailbox
is deleted, its messages are merged with its old expunged messages
(if there were any).
+ expire: Settings now support spaces in mailbox names by using
quoted strings.
- maildir: v1.2.7 and v1.2.8 caused assert-crashes in
maildir_uidlist_records_drop_expunges()
- maildir_copy_preserve_filename=yes could have caused crashes.
- Maildir++ quota: % limits weren\'t updated when limits were read
from maildirsize.
- virtual: v1.2.8 didn\'t fully fix the \"lots of mailboxes\" bug
- virtual: Fixed updating virtual mailbox based on flag changes.
- fts-squat: Fixed searching multi-byte characters.

Mon Nov 23 13:00:00 2009 alexandreAATTexatati.com.br
- update managesieve patch to match the release:
old: dovecot-1.2.7-managesieve-0.11.9.diff.bz2
new: dovecot-1.2.8-managesieve-0.11.9.diff.bz2

Fri Nov 20 13:00:00 2009 alexandreAATTexatati.com.br
- update to version 1.2.8

* Dovecot v1.2.x had been creating base_dir (and its parents if
necessary) with 0777 permissions. The base_dir\'s permissions get
changed to 0755 automatically at startup, but you may need to
chmod the parent directories manually.
- acl: If user has rights from more than one group, merge them instead
of choosing one group\'s rights and ignoring others.
- virtual: When using a lot of mailboxes, the virtual mailbox\'s header
could have grown over 32 kB and caused \"out of memory\" crashes. Also
over 64 kB headers couldn\'t even be updated with existing transaction
log records. Added a new record type that gets used with >=64 kB
headers. Older Dovecot versions don\'t understand this header and
will log errors if they see it.
- FETCH BODYSTRUCTURE didn\'t return RFC 2231 \"key
*\" fields correctly

Sat Nov 14 13:00:00 2009 alexandreAATTexatati.com.br
- update to version 1.2.7

* IMAP: IDLE now sends \"Still here\" notifications to same user\'s
connections at the same time. This hopefully reduces power usage
of some mobile clients that use multiple IDLEing connections.

* IMAP: If imap_capability is set, show it in the login banner.
+ IMAP: Implemented SORT=DISPLAY extension.
- Login process creation could have sometimes failed with epoll_ctl()
errors or without epoll probably some other strange things could
have happened.
- Maildir: Fixed some performance issues
- Maildir: Fixed crash when using a lot of keywords.
- Several fixes to QRESYNC extension and modseq handling
- mbox: Make sure failed saves get rolled back with NFS.
- dbox: Several fixes.
- update managesieve patch to match the release:
old: dovecot-1.2.6-managesieve-0.11.9.diff.bz2
new: dovecot-1.2.7-managesieve-0.11.9.diff.bz2

Mon Oct 19 14:00:00 2009 alexandreAATTexatati.com.br
- update sieve version to 0.1.13
+ Body extension: implemented proper handling of the :raw transform
and added various new tests to the test suite. However, :content
\"multipart\" and :content \"message/rfc822\" are still not working.
+ Fixed race condition occuring when multiple instances are saving the
same binary (patch by Timo Sirainen).
+ Test suite: added support for testing multiscript execution.
- Made compiler more lenient towars missing CRLF at the end of the
script in a hash comment.
- Body extension: don\'t give SKIP_BODY_BLOCK flag to message parser,
we want the body! (patch by Timo Sirainen).
- Fixed handling of implicit side effects for multiscript execution.
- Fixed bugs in multiscript support; subsequent keep actions were not
always merged correctly and implicit side effects were not always
handled correctly.
- Fixed a segfault bug in the sieve-test tool occuring when compile
fails.
- Fixed segfault bug in action procesing. It was triggered while
merging side effects in duplicate actions.
- Fixed bug in the Sieve plugin that caused it to try to stat() a NULL
path, yielding a \'Bad address\' error.
- update sieve pie patch to match release:
old: dovecot-1.2-sieve-0.1.12_pie.patch
new: dovecot-1.2-sieve-0.1.13_pie.patch

Thu Oct 8 14:00:00 2009 mrueckertAATTsuse.de
- fix obsoletes/provides/conflicts

Tue Oct 6 14:00:00 2009 alexandreAATTexatati.com.br
- update to version 1.2.6

* Upgraded to Unicode 5.2.0
+ Added authtest utility for doing passdb and userdb lookups.
+ login: ssl_security string now also shows the used compression.
- quota: Don\'t crash with non-Maildir++ quota backend.
- imap proxy: Fixed crashing with some specific password characters.
- dovecot --exec-mail was broken.
- Avoid assert-crashing when two processes try to create index at the
same time.
- update managesieve patch to match the release:
old: dovecot-1.2.4-managesieve-0.11.9.diff.bz2
new: dovecot-1.2.6-managesieve-0.11.9.diff.bz2

Mon Sep 14 14:00:00 2009 alexandreAATTexatati.com.br
- update to version 1.2.5

* Authentication: DIGEST-MD5 and RPA mechanisms no longer require
user\'s login realm to be listed in auth_realms. It only made
configuration more difficult without really providing extra security.

* zlib plugin: Don\'t allow clients to save compressed data directly.
This prevents users from exploiting (most of the) potential security
holes in zlib/bzlib.
+ Added pop3_save_uidl setting.
+ dict quota: When updating quota and user isn\'t already in dict,
recalculate and save the quota.
- file_set_size() was broken with OSes that didn\'t support
posix_fallocate() (almost everyone except Linux), causing all kinds
of index file errors.
- v1.2.4 index file handling could have caused an assert-crash
- IMAP: Fixes to QRESYNC extension.
- virtual plugin: Crashfix
- deliver: Don\'t send rejects to any messages that have Auto-Submitted
header. This avoids emails loops.
- Maildir: Performance fixes, especially with maildir_very_dirty_syncs.
- Maildir++ quota: Limits weren\'t read early enough from maildirsize
file (when quota limits not enforced by Dovecot)
- Message decoding fixes (mainly for IMAP SEARCH, Sieve).

Thu Aug 27 14:00:00 2009 alexandreAATTexatati.com.br
- update to version 1.2.4

* acl: When looking up ACL defaults, use global/local default files
if they exist. So it\'s now possible to set default ACLs by creating
dovecot-acl file to the mail root directory.
+ imap/pop3 proxy: If proxy destination is known to be down,
fail connections to it immediately.
+ imap/pop3 proxy: Added proxy_timeout passdb extra field to specify
proxy\'s connect timeout.
- Fixed a crash in index file handling.
- Fixed a crash in saving messages where message contained a CR
character that wasn\'t followed by LF (and the CR happened to be the
last character in an internal buffer).
- v1.2.3 crashed when listing shared namespace prefix.
- listescape plugin: Several fixes.
- autocreate plugin: Fixed autosubscribing to mailboxes in
subscriptions=no namespaces.
- aditional changes from 1.2.3

* Mailbox names with control characters can\'t be created anymore.
Existing mailboxes can still be accessed though.
+ Allow namespace prefix to be opened as mailbox, if a mailbox
already exists in the root dir.
- Maildir: dovecot-uidlist was being recreated every time a mailbox
was accessed, even if nothing changed.
- listescape plugin was somewhat broken
- Compiling fixes for non-Linux/BSDs
- imap: tb-extra-mailbox-sep workaround was broken.
- ldap: Fixed hang when >128 requests were sent at once.
- fts_squat: Fixed crashing when searching virtual mailbox.
- imap: Fixed THREAD .. INTHREAD crashing.
- aditional changes from 1.2.2

* GSSAPI: More changes to authentication. Hopefully good now.

* lazy_expunge plugin: Drop \\Deleted flag when moving message.
+ dovecot -n/-a now outputs also lda settings.
+ dovecot.conf !include now supports globs (e.g.
!include /etc/dovecot/
*.conf). Based on patch by Thomas Guthmann.
+ acl: Support spaces in user/group identifiers.
+ shared mailboxes: If only %%n is specified in prefix, default to
current user\'s domain.
- Dovecot master process could hang if it received signals too rapidly.
- Fixed \"corrupted index cache file\" errors (and perhaps others) caused
by e.g. IMAP\'s FETCH BODY[] command.
- IMAP: When QRESYNC is enabled, don\'t crash when a new mail is
received while IDLEing.
- IMAP: FETCH X-
* parameters weren\'t working.
- Maildir++ quota: Quota was sometimes updated wrong when it was
being recalculated.
- Searching quoted-printable message body internally converted \"_\"
characters to spaces and didn\'t match search keys with \"_\".
- Messages in year\'s first/last day may have had broken timezones
with OSes not having struct tm->tm_gmtoff (e.g. Solaris).
- virtual plugin: If another session adds a new mailbox to index,
don\'t crash.
- update sieve pacthes to match the release:
old: dovecot-1.2-sieve-0.1.8.tar.bz2
new: dovecot-1.2-sieve-0.1.12.tar.bz2
+ Testsuite: added support for testing binaries stored on disk.
+ Implemented the new date extension. This allows matching
against date values in header fields and the current date at
the time of script evaluation.
- update managesieve patches to match the release:
old: dovecot-1.2-managesieve-0.11.7.tar.bz2
new: dovecot-1.2-managesieve-0.11.9.tar.bz
old: dovecot-1.2.1-managesieve-0.11.7.diff.bz2
new: dovecot-1.2.4-managesieve-0.11.9.diff.bz2

* Adjusted to changes in the Dovecot login proxy API. This
release therefore depends on Dovecot v1.2.4.
+ Reintroduced ability to abort SASL with \"
*\" response. Latest
ManageSieve specification includes it.

Wed Jul 15 14:00:00 2009 mrueckertAATTsuse.de
- initial package of the 1.2 series