Changelog for
cyradm-2.4.22-lp153.2.1.x86_64.rpm :
* Sat Jan 07 2023 Aeneas Jaißle
- Add cyrus-imapd-2.4.22-perl-5.36.patch: redefine assert() macro to ensure compatibility with the C standard one, which is expected by sub-components.
* Tue Nov 08 2022 Peter Varkoly - cyrus user uid outside allowed range (bsc#1198761) Configure cyrus user by using sysuser-tools
* Mon Feb 28 2022 Matthias Fehring - Add cyrus-imapd-2.4.22-fix-cve-2021-33582.patch: Fix CVE-2021-33582- Add cyrus-imapd-2.4.22-recognize-new-backends.patch: Recognize backends of Cyrus versions 3.6 and 3.7
* Wed Jan 19 2022 Peter Varkoly - Add conflicts entry for mailutils-delivery
* Sun Oct 31 2021 Marcus Meissner - disable cmu.mib url, which no longer exists.
* Fri May 14 2021 Jan Engelhardt - Fix Tumbleweed build: don\'t depend on insserv. In fact, just drop all sysvinit blocks.
* Tue Mar 09 2021 Matthias Fehring - Update to 2.4.22
* Fixed: use-after-free segfault in imapd and mupdate-client (gh#cyrusimap/cyrus-imapd#3312)
* Fixed: XFER now recognises 3.4 and 3.5 backends- change source URLs to GitHub- set correct perl interpreter shebang in tools/rehash
* Wed Dec 16 2020 Matthias Fehring - fix build with glibc 2.30+
* cyrus-imapd-2.4.21-fix-bdb-function-conflict.patch- disable lto
* Wed Dec 16 2020 Matthias Fehring - Update to 2.4.21
* Fixed: timsieved segfault (gh#cyrusimap/cyrus-imapd#885)
* Fixed: better recovery from mupdate failure (gh#cyrusimap/cyrus-imapd#2199)
* Fixed: sync_client now replicates annotations in user/mailbox mode
* Fixed: build failure with LibreSSL 2.7
* Fixed: XFER now correctly distinguishes between 2.3.x releases
* Fixed: XFER now recognises 3.1, 3.2 and 3.3 backends (gh#cyrusimap/cyrus-imapd#885)
* Fixed: XFER now syslogs a warning when it doesn\'t recognise the backend Cyrus version
* Fri Jul 19 2019 matthias.gerstnerAATTsuse.com- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html
* Wed Jan 23 2019 liedkeAATTrz.uni-mannheim.de- Update to 2.4.20
* Fixed: lmtpd crash
* Fixed: auth_pts will now error if its configured socket path is too long for its buffer- Removed cyrus-imapd-2.4.19-lmtpd_crash.patch
* Wed Jan 16 2019 Peter Varkoly - bsc#1119629 cyrus-imapd.service contains bogus User and Groupi specification- bsc#1115999 Please convert SysV init scripts by cyrus-imapd into native systemd services - Removed User and Group from the service file
* Tue Dec 04 2018 Jan Engelhardt - Avoid repeated emission of the %service_
* boilerplate.
* Mon Dec 03 2018 Matthias Fehring - Fixed startup of cyrus-imapd when using native systemd service by setting RuntimeDirectory=cyrus-imapd in the service file
* Wed Nov 28 2018 Peter Varkoly - cyrus-imapd: migrate from cron to systemd timers (bsc#1115438) Created script service and timer replacing cron daily script
* Wed Nov 28 2018 Peter Varkoly - Please convert SysV init scripts by cyrus-imapd into native systemd services (bsc#1115999) Fixed using the with_systemd macro
* Thu Nov 23 2017 rbrownAATTsuse.com- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)
* Wed Oct 25 2017 rhaferAATTsuse.de- Removed \"cyrus-imapd-2.4.19_drac_auth.patch\" and dropped drac from the BuildRequires. DRAC\'s upstream is bascially dead nowadays, and the drac patch in cyrus-imapd is also largely unmaintained. Rebased cyrus-imapd-2.4.17_openslp.patch and cyrus-imapd-2.4.19_autocreate-0.10-0.patch as a result of the removal.
* Mon Jul 10 2017 jengelhAATTinai.de- Remove filler wording from description.- Improve find commands.
* Sun Jun 25 2017 ajAATTajaissle.de- Add cyrus-imapd-2.4.19-lmtpd_crash.patch:
* lmtpd: fix uninitialised variable crash [boo#1045899]
* Wed Jun 21 2017 ajAATTajaissle.de- Rebased patch:
* cyrus-imapd-2.4.18-implicit_definitions.patch as cyrus-imapd-2.4.19-implicit_definitions.patch Add fix for implicit-fortify-decl in ldap.c
* Wed Jun 14 2017 ajAATTajaissle.de- Update to 2.4.19
* Complete backport of the new (2.5 and later) IMAP IDLE implementation (thanks Thomas Jarosh). This fixes a bunch of bugs and race conditions that were inherent to the older implementation
* New option “imapidletimeout” overrides “timeout” specifically for connections in IDLE state
* OpenSSL 1.1.0 is now supported
* Fixed: imap ENABLED doesn’t print
* ENABLED when nothing new enabled
* Fixed: mailbox lock management over rename (thanks Thomas Jarosh)
* Fixed: added overflow protection to urlfetch range checks
* Fixed: lmtpd can now deliver when mupdate server isn’t available (thanks Michael Menge)
* Fixed task 227: service processes no longer divide by zero when invoked with -T 0 argument (thanks Ian Batten and Jens Erat)
* Fixed task 229: ctl_cyrusdb now uses database paths from imapd.conf (thanks Simon Matter)
* Fixed bug #3862: mailbox database changes now rolled back on mupdate failure during rename (thanks Michael Menge)
* Fixed: XFER to 2.5 and later no longer downgrades index to oldest version
* Fixed: nonsensical “TEXT.MIME” section now handled as “HEADER”
* Fixed: added missing ‘auditlog: ‘ prefix to backend connections (thanks Wolfgang Breyha)
* Fixed: IMAP SEARCH crash on some platforms
* Fixed: memory leaks in IMAP SEARCH and IMAP APPEND
* Fixed Issue #1967: EXISTS count reported earlier if fetching past size of previous message set- Rebased patches:
* cyrus-imapd-2.4.17_drac_auth.patch as cyrus-imapd-2.4.19_drac_auth.patch
* cyrus-imapd-2.4.17_autocreate-0.10-0.patch as cyrus-imapd-2.4.19_autocreate-0.10-0.patch- Removed patches: - cyrus-imapd-2.4.18-CVE-2015-8077.patch (upstream) - cyrus-imapd-2.4.18-CVE-2015-8078.patch (upstream)- Added cyrus-imapd-2.4.19.tar.gz.sig
* Fri May 27 2016 tchvatalAATTsuse.com- Try to cleanup with spec-cleaner- Remove exit 0 in pre that stopped execution of the rest of the code- Update pre/post requires to be acutally correct- Disable stict-aliasing to avoid some problems
* Mon Dec 21 2015 ajAATTajaissle.de- Add cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch to add Outlook 2013-compatible XLIST behaviour.
* Sun Nov 15 2015 ajAATTajaissle.de- Added cyrus-imapd-2.4.18-CVE-2015-8077.patch: boo#954200, CVE-2015-8077: Integer overflow in range checks- Added cyrus-imapd-2.4.18-CVE-2015-8078.patch: boo#954201, CVE-2015-8078: Integer overflow in index_urlfetch
* Sun Aug 23 2015 ajAATTajaissle.de- Update to 2.4.18 [boo#945844]
* Security fix: handle urlfetch range starting outside message range
* A bunch of cleanups and fixes to compiling
* A bunch of sieve cleanups
* Enhanced SSL/TLS configuration options
* Disable use of SSLv2/SSLv3
* Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos)
* Fixed Task #116: correct LIST response for domains starting with ‘inbox.’
* Fixed Task #76: fixed lmtpd userdeny db checks (thanks Leena Heino)
* Fixed bug #3856: lmtpd now performs userdeny checks
* Fixed bug #3848: support charset aliases in encoded headers
* Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha)
* Fixed bug #3415: fixed nntpd LIST/GROUP bug
* Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves
* Fixed bug #3757: don’t segfault on mailbox close with no user
* New ssl/tls configuration options tls_compression: 0 Enable TLS compression. Disabled by default. tls_eccurve: prime256v1 Select the elliptic curve used for ECDHE. tls_prefer_server_ciphers: 0 Prefer the cipher order configured on the server-side. tls_versions: tls1_0 tls1_1 tls1_2 Disable SSL/TLS protocols not in this list.- Removed the following patches (included upstream): - cyrus-imapd-2.4.17_tls-session-leak.patch - cyrus-imapd.tls_options.patch- Added patch cyrus-imapd-2.4.18-implicit_definitions.patch: - Have the correct #include when using implicit definitions
* Mon Dec 08 2014 ajAATTajaissle.de- Changed cyrus-imapd-rc-2.tar.gz/cron.daily.cyrus to use \'su -s /bin/bash - cyrus\', as the default shell is now /sbin/nologin [boo#908014]- Changed cyrus-imapd-rc-2.tar.gz/rc.cyrus to set /var/run/cyrus-master.pid as the PID file (was: /var/run/cyrus.pid) [boo#908006]
* Fri Nov 21 2014 tchvatalAATTsuse.com- Drop unused patch:
* KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch
* Fri Nov 14 2014 rhaferAATTsuse.com- Replace the TLS/POODLE patch with what was merged into the upstream git repo:
* cyrus-imapd.tls_options.patch
* Obsoletes patches cyrus-imapd.tls_tlsonly.patch and cyrus-imapd.tls_ec.patch- Add a default tls_versions settings to imapd.conf which disables POODLE affected SSL versions.
* Sat Oct 18 2014 johannesAATTlst.de- Add two patches from Kristian Kraemmer Nielsen found on the info-cyrus mailing list (http://lists.andrew.cmu.edu/pipermail/info-cyrus/2014-October/037708.html)
* cyrus-imapd.tls_ec.patch - adding tls_ec for Perfect Forward Secrecy
* cyrus-imapd.tls_tlsonly.patch - add tlsonly config option to fix POODLE vulnerability
