Changelog for cyrus-imapd-doc-3.4.9-1.9.noarch.rpm :

* Mon Jul 29 2024 Matthias Fehring - 3.4.9- update to version 3.4.9
* Fixed: httpd crashing on CalDAV (gh#cyrusimap/cyrus-imapd#4903)
* Fixed: LITERAL+ broken in mupdate (gh#cyrusimap/cyrus-imapd#4932)- update patches
* cyrus-imapd-3.4.8-rename.patch to cyrus-imapd-3.4.9-rename.patch
* Tue Jun 18 2024 Matthias Fehring - 3.4.8- add /var/lib/imap/sync directory to the files list
* Tue Jun 18 2024 Matthias Fehring - 3.4.8- use correct sbin and libexec directories: previously all was installed into %%{_libexecdir}/cyrus/bin, now internal used executables are installed into %%{_libexecdir}/cyrus and sbin binaries go into %%{_sbindir}- rename some conflicting binaries and their man pages that are also provided by other packages
* %%{_sbindir}/fetchnews -> %%{_sbindir}/cyr_fetchnews
* %%{_sbindir}/restore -> %%{_sbindir}/cyr_restore
* %%{_sbindir}/quota -> %%{_sbindir}/cyr_quota
* add cyrus-imapd-3.4.8-rename.patch- create more directories in the config diretory and mail partition that would also be created by mkimap tool- use systemd-sysusers to create user cyrus
* add cyrus-user.conf source file- update SUSE specific files to version 3 (cyrus-imapd-rc-3.tar.gz)
* set correct path for backup script- clean up spec file
* dropped package conflicts for
*cyrus-
*-kolab; those packages weren\'t build in a really, really long time, since they were obsoleted with cyrus-imapd 2.4
* Mon Jun 17 2024 Matthias Fehring - 3.4.8- fix linking of per modules: add linking for libcap and libprce2
* update cyrus-imapd-3.4.7-fix-perl-linking.patch to cyrus-imapd-3.4.8-fix-perl-linking.patch
* Wed Jun 05 2024 Matthias Fehring - 3.4.8- update to version 3.4.8
* Fixed: Cyrus-IMAP through 3.8.2 and 3.10.0-beta2 allow authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command. The IMAP protocol allows for command arguments to be LITERALs of negotiated length, and for these the server allocates memory to receive the content before instructing the client to proceed. The allocated memory is released when the whole command has been received and processed. The IMAP protocol has a number commands that specify an unlimited number of arguments, for example SEARCH. Each of these arguments can be a LITERAL, for which memory will be allocated and not released until the entire command has been received and processed. This can run a server out of memory, with varying consequences depending on the server’s OOM policy. Two limits, with corresponding imapd.conf(5) options, have been added to address this: + maxargssize (default: unlimited): limits the overall length of a single IMAP command. Deployments should configure this to a size that suits their system resources and client usage patterns + maxliteral (default: 128K): limits the length of individual IMAP LITERALs Connections sending commands that would exceed these limits will see the command fail, or the connection closed, depending on the specific context. The error message will contain the [TOOBIG] response code. These limits may be set small without affecting message uploads, as the APPEND command’s message literal is limited by maxmessagesize, not by these new options. (CVE-2024-34055)- spec file changes
* remove obsolete dependencies for documentation generation as we are usin the pre built documentation from the release tarball
* remove obsolete cyrus-imapd-3.4.7-fix-newer-sphinx.patch
* Wed Mar 27 2024 Matthias Fehring - 3.4.7- update and rename patch cyrus-imapd-3.3.1-fix-perl-linking.patch to cyrus-imapd-3.4.7-fix-perl-linking.patch
* Sun Mar 17 2024 Matthias Fehring - 3.4.7- spec file changes
* disable Link Time Optimization as it is not supported by Cyrus
* remove unnecessary build requirements + autoconf + automake
* no need to run autoreconf on release tarballs
* Sun Mar 17 2024 Matthias Fehring - 3.4.7- improve rpmlint filters
* Fri Mar 15 2024 Matthias Fehring - 3.4.7- update to version 3.4.7
* Build changes + PCRE2 is now supported and detected with pkg-config (now in use by this package) + Fixed: missing include when ssl unavailable (gh#cyrusimap/cyrus-imapd#4770)
* Bug fixes + Fixed: squat db reindexes are no longer always incremental + Fixed: squat db corruption from unintentional indexing of fields intended to be skipped. Squat search databases may benefit from a full (non-incremental) reindex + Fixed: squat db out of bounds access in incremental reindex docID map (gh#cyrusimap/cyrus-imapd#4660) + Fixed: squat db searches now handle unindexed messages correctly again (gh#cyrusimap/cyrus-imapd#4692) + Fixed: pop3d now avoids splitting \".\\r\
\" across packet boundaries, which can confuse some clients (gh#cyrusimap/cyrus-imapd#4717) + Fixed: potential uninitialized access in extract_convdata (gh#cyrusimap/cyrus-imapd#4756)
* Other changes + Fixed: some man pages were missing from distribution tarballs (gh#cyrusimap/cyrus-imapd#4790)- fix doc generation on Tumbleweed with newer version of Sphinx
* add cyrus-imapd-3.4.7-fix-newer-sphinx.patch- spec file changes
* enable JMAP support by default
* improve build condition dependencies
* use autosetup macro in prep script
* use PCRE2 instead of PCRE- new rpmlint filters
* cyrus-imapd.
* obsolete-not-provided cyrus-imapd-snmp.
*
* cyrus-imapd.
* non-standard-dir-in-var adm
* cyradm.
* bin-sh-syntax-error /usr/bin/cyradm\"
* cyrus-imapd.
* bin-sh-syntax-error /usr/libexec/cyrus/tools/translatesieve
* perl-Cyrus-SIEVE-managesieve.
* bin-sh-syntax-error /usr/bin/installsieve
* cyrus-imapd.
* files-duplicate /etc/pam.d/sieve /etc/pam.d/imap:/etc/pam.d/pop
* Wed Sep 27 2023 Matthias Fehring - 3.4.6- update to version 3.4.6
* Build changes + Fixed: retired custom manpage generator (gh#cyrusimap/cyrus-imapd#4561)
* Bug fixes + Fixed: murder frontends now proxy DAV PUT correctly (gh#cyrusimap/cyrus-imapd#4437) + Fixed: murder frontends now proxy GETMETADATA correctly (gh#cyrusimap/cyrus-imapd#4439) + Fixed: uninitialized value warning from cyradm(8) listmailbox command (gh#cyrusimap/cyrus-imapd#4440) + Fixed: missing calls to mailbox_iter_done() (gh#cyrusimap/cyrus-imapd#4465) + Fixed: incorrect error code used for JMAP invalidResultReference errors (gh#cyrusimap/cyrus-imapd#4309) + Fixed: potential crash in jmap_email_parse (gh#cyrusimap/cyrus-imapd#4574)
* Other changes + Fixed: better cyrusdb / ctl_cyrusdb -r UX (gh#cyrusimap/cyrus-imapd#4558)
* Mon Jun 05 2023 Matthias Fehring - add python3-six to the BuildRequires to fix generating documentation on Tumbleweed
* Mon Feb 13 2023 Matthias Fehring - 3.4.5- update to version 3.4.5
* Build changes + Fixed: iCal GEO property is text in new libical versions + Fixed: docs now build correctly with python3 and Sphinx 3.4
* Bug fixes + Fixed: JMAP Mailbox/get missed shared accounts when altnamespace enabled (gh#cyrusimap/cyrus-imapd#4154) + Fixed: sieveshell segfaults after quit command (gh#cyrusimap/cyrus-imapd#4189) + Fixed: httpd killed by SIGSEGV for calendar request (gh#cyrusimap/cyrus-imapd#4216) + Fixed: jmap_mail: fix typo in HTML to plain extractor (gh#cyrusimap/cyrus-imapd#4285) + Fixed: quota(8) now correctly accepts -n argument (gh#cyrusimap/cyrus-imapd#4162) + Fixed: Seen flag broken on shared mailbox without sharedseen (gh#cyrusimap/cyrus-imapd#3240) + Fixed: various memory leaks (gh#cyrusimap/cyrus-imapd#4257) + Fixed: Sieve enotify implementation bugs (gh#cyrusimap/cyrus-imapd#3917)
* Other Changes + Fixed: testrunner.pl now exits early if binary components missing (gh#cyrusimap/cyrus-imapd#4109) + Fixed: backend_version() now properly parses the remote server\'s version string, and can recognise when it is newer than the local server. This means XFER to a newer backend no longer requires a local software update to recognise the new version number first. (gh#cyrusimap/cyrus-imapd#4380) + Fixed: cassandane.ini: don\'t choke on repeated params (gh#cyrusimap/cyrus-imapd#4199)- require OpenSSL 1.1 for building on Tumbleweed as OpenSSL 3 is not supported yet- remove obsolete patches
* cyrus-imapd-3.2.2-use-python3.patch
* Thu Sep 15 2022 Matthias Fehring - add python3-setuptools to the BuildRequires as it is needed for documentation generation
* Tue Jun 28 2022 Matthias Fehring - update to version 3.4.4
* Bug fixes + assertion failures when using twoskip for subscriptions databases (gh#cyrusimap/cyrus-imapd#3318)
* sieve implicit keep causing duplicates when include statement used (gh#cyrusimap/cyrus-imapd#3941)
* XS Perl modules failed to compile against Perl 5.36 (gh#cyrusimap/cyrus-imapd#4123)
* Other changes + ctl_cyrusdb -r and reconstruct now ensure the \"uniqueid\" field is present in and synchronised between mailboxes.db and cyrus.header (gh#cyrusimap/cyrus-imapd#4100) + Cassandane can now read configuration options from the environment
* Wed Feb 02 2022 Matthias Fehring - update to version 3.4.3
* Build changes + Fixed: miscellaneous build warnings reported by gcc 8.3.0 with optimisations turned on (gh#cyrusimap/cyrus-imapd#3854) + Fixed: typos in some GCC feature detection macros + Fixed: undefined reference when using flock locking rather than fcntl (gh#cyrusimap/cyrus-imapd#3769) + Fixed: man pages for optional features had been excluded from release tarballs (gh#cyrusimap/cyrus-imapd#3843)
* Bug fixes + Fixed: don\'t send unsolicited updates about other mailboxes in response to STATUS command. This is technically okay but can confuse clients that don\'t expect it. (gh#cyrusimap/cyrus-imapd#3605) + Fixed: flush output when starting IDLE so changes are told immediately (gh#cyrusimap/cyrus-imapd#3664) + Fixed: XFER of a single user or mailbox now works again (gh#cyrusimap/cyrus-imapd#2383) + Fixed: XFER no longer tries to sync_restart (and hangs) when the destination backend doesn\'t support XFER-via-replication + Fixed: XFER now reports an error when the name argument doesn\'t match anything, instead of doing nothing and then reporting that it succeeded at it. + Fixed: ignore case difference in \'mailto:\' prefix when comparing CalDAV ORGANIZERs (gh#cyrusimap/cyrus-imapd#3597) + Fixed: compare ORGANIZER in CalDAV requests against user\'s schedule addresses + Fixed: scheduling userid now set correctly when virtdomains is disabled or a defaultdomain is set + Fixed: use-after-free in Xapian search error logging + Fixed: use-after-free in JMAP Calendar/set error logging (gh#cyrusimap/cyrus-imapd#3750) + Fixed: quota -f -u [user] no longer removes quota information from other, similarly-named users (gh#cyrusimap/cyrus-imapd#3839)
* Other changes + the formerly-standalone Cassandane tool has been merged into the cyrus-imapd repository, in the \'cassandane\' subdirectory. + XFER will now recognise backends from the upcoming 3.6 and 3.7 versions
* Mon Sep 20 2021 Matthias Fehring - use older python3-Sphinx for TW builds in order to cope with upstream Sphinx >=3 issues
* Wed Sep 01 2021 Matthias Fehring - update to version 3.4.2 + Security fixes
* Fixed: Certain user inputs are used as hash table keys during processing. A poorly chosen string hashing algorithm meant that the user could control which bucket their data was stored in, allowing a malicious user to direct many inputs to a single bucket. Each subsequent insertion to the same bucket requires a strcmp of every other entry in it. At tens of thousands of entries, each new insertion could keep the CPU busy in a strcmp loop for minutes. The string hashing algorithm has been replaced with a better one, and now also uses a random seed per hash table, so malicious inputs cannot be precomputed. (CVE-2021-33582) + Build changes
* Fixed: build problems when --without-sieve configured (gh#cyrusimap/cyrus-imapd#3527) + Bug fixes
* Fixed: missing CY namespace in some DAV responses
* Fixed: don\'t allow JMAP uploads if the user does not have r/w access to any mailbox/calendar/addressbook
* Fixed: Email/query sometimes chose the wrong search algorithm
* Fixed: LMTP delivery to shared mailboxes was broken (gh#cyrusimap/cyrus-imapd#3488)
* Fixed: \'lookup\' ACL alone was not allowing IMAP LIST (gh#cyrusimap/cyrus-imapd#3528)
* Fixed: RTF message bodies were treated as plain text in search snippets
* Mon May 10 2021 Matthias Fehring - use version tag in spec file instead of obsolete _tarver definition
* Mon May 10 2021 Matthias Fehring - update to version 3.4.1
* Fixed: Remote authenticated users could bypass intended access restrictions on certain server annotations. Additionally, a long-standing bug in replication did not allow server annotations to be replicated. Combining these two bugs, a remote authenticated user could stall replication, requiring administrator intervention. (CVE-2021-32056)
* Fixed: using GLIBC-only macro to check for GCC features (gh#cyrusimap/cyrus-imapd#3462)
* Fixed: per-server annotations were unable to replicate (gh#cyrusimap/cyrus-imapd#3456)
* Fixed: ctl_cyrusdb -r assertion on startup when mboxlist_db configured to \"skiplist\" (gh#cyrusimap/cyrus-imapd#3468)
* Fixed: JMAP email updates must result in non-empty mailboxIds
* Fixed: output JMAP dates as Dates, not UTCDates
* Fixed: JMAP Calendars Extension - gracefully handle empty property values
* Fixed: JMAP Calendars Extension - ignore empty string default values in events
* Fixed: JMAP Calendars Extension - do not use Participant.email for scheduling
* Wed Apr 21 2021 Matthias Fehring - fix missing replacement for placeholders in systemd service files
* Tue Apr 20 2021 Matthias Fehring - add cyrus-imapd-3.4.0-remove-rpath.patch to remove RPATH from perl module Cyrus::SIEVE::managesieve (managesieve.so)
* Tue Apr 20 2021 Matthias Fehring - update to version 3.4.0
* Major changes since the 3.2 series + DAV improvements + Improved performance for users with large folders + LITERAL- maximum size is now honoured (RFC 7888) + Support for the ESORT (but not CONTEXT) extension from RFC 5267 + Experimental JMAP for Sieve Scripts support (requires jmap_nonstandard_extensions: yes in imapd.conf(5)). + Experimental Handling Message Disposition Notification with JMAP support (requires jmap_nonstandard_extensions: yes in imapd.conf(5)). + Experimental JMAP Backup extension (requires jmap_nonstandard_extensions: yes in imapd.conf(5)). + Experimental JMAP Notes extension (requires jmap_nonstandard_extensions: yes in imapd.conf(5)). + Experimental JMAP Blob extension (requires jmap_nonstandard_extensions: yes in imapd.conf(5)). + Experimental JMAP Mail extension (requires jmap_nonstandard_extensions: yes in imapd.conf(5)). + New cyrus.index format v17 adds changes_epoch field, needed by JMAP Backups extension + New reverseuniqueids imapd.conf(5) option (default on), which improves performance for users with large mailboxes + Further improvements to the reverseacls imapd.conf(5) performance option + Improvements to replication reliability and performance + Experimental vnd.cyrus.log and vnd.cyrus.jmapquery Sieve extensions + Experimental Sieve Snooze extension based on draft-ietf-extra-sieve-snooze + Experimental Sieve mailboxid extension based on draft-ietf-extra-sieve-mailboxid + Improvements to conversations + New mailbox_maxmessages_addressbook, mailbox_maxmessages_calendar, and mailbox_maxmessages_email imapd.conf(5) options for providing server-wide limits on the amount of objects in any one mailbox, independently of quotas. These default to 0 (unlimited) for backward compatibility, but are highly recommended for protecting your server from misbehaving clients. + New IMAP create/delete behaviour based on draft-ietf-extra-imap4rev2: mailboxes containing child mailboxes can no longer be deleted; and when creating mailboxes, ancestors will be created as needed. + CRC32 optimisations + quota(8) and cyr_expire(8) arguments are now in the admin namespace like other tools + Support for per-language indexing and searching + SNMP support has been removed, as it was broken and unmaintained + New sync_rightnow_channel imapd.conf(5) option to enable real-time replication to the specified channel as writes occur. + Caching of mailbox state for quicker replication turnaround. Configure sync_cache_db and sync_cache_db_path in imapd.conf(5) to enable. + New search-fuzzy-always annotation allows per-user override of the search_fuzzy_always imapd.conf(5) option + New lmtp_preparse imapd.conf(5) option for parsing incoming messages before locking the mailbox. + New search_index_skip_users and search_index_skip_domains imapd.conf(5) options for skipping indexing of particular users/domains. + The HTTP Admin module\'s Currently Running Services feature now works on the major BSDs (thanks Felix J. Ogris) + squatter(8) once again supports the -s option to skip reindexing mailboxes which were not modified since the last index (Squat backend only) + squatter(8) now supports long options + Improvements to search query normalisation performance
* Updates to default configuration The cyr_info(8) conf, conf-all and conf-default subcommands accept an - s argument to highlight imapd.conf(5) options that are new or whose behaviour has changed since the specified version. We recommend using this when evaluating a new Cyrus version to check which configuration options you will need to examine and maybe set or change during the process. + The annotation_definitions file is now loaded case-insensitively + Implementations may want to revisit their search_normalisation_max settings, but its default value 1000 is a good conservative choice. Current server-grade hardware may use 20000 or more.
* Significant bugfixes + Fixed: Sieve Editheader Extension (RFC 5293) now works correctly with respect to section 7, Interaction with Other Sieve Extensions. + Fixed: indexed search now works correctly with Squat engine again (gh#cyrusimap/cyrus-imapd#2598)- configuration changes
* remove CYRUS_SNMP_OPTIONS from /etc/sysconfig/cyrus-imapd as SNMP support has been removed
* add some resource control settings to cyrus-imapd.service file + TasksMax=2048 + LimitNOFILE=10000 + Restart=on-failure + RestartSec=5- spec file changes
* obsolete cyrus-imapd-snmp and cyrus-imapd-snmp-mibs as SNMP support has been removed
* Tue Mar 23 2021 Matthias Fehring - update to versino 3.3.91 (aka. 3.4.0-rc1)
* no separate changelog available for this version, but have a look at https://www.cyrusimap.org/3.4/imap/download/release-notes/3.4/x/3.4.0-rc1.html
* before upgrading you should also read the documentation at https://www.cyrusimap.org/3.4/imap/download/upgrade.html
* Fri Feb 19 2021 Matthias Fehring - update to version 3.3.83 (aka. 3.4.0-beta3)
* no separate changelog available for this version, but have a look at https://www.cyrusimap.org/3.4/imap/download/release-notes/3.4/index.html
* before upgrading you should also read the documentation at https://www.cyrusimap.org/3.4/imap/download/upgrade.html
* Thu Feb 04 2021 Matthias Fehring - update to version 3.3.82 (aka. 3.4.0-beta)
* no separate changelog available for this version, but have a look at https://www.cyrusimap.org/3.4/imap/download/release-notes/3.4/index.html
* before upgrading you should also read the documentation at https://www.cyrusimap.org/3.4/imap/download/upgrade.html