Revision 1.46.2.1, Mon May 15 16:08:41 2006 UTC (17 years, 11 months ago) by salo
Branch: pkgsrc-2006Q1
Changes since 1.46: +2 -3 lines

Pullup ticket 1585 - requested by ghen
security update for dovecot

Revisions pulled up:
- pkgsrc/mail/dovecot/Makefile			1.47, 1.48, 1.49, 1.51
- pkgsrc/mail/dovecot/PLIST			1.9, 1.10
- pkgsrc/mail/dovecot/distinfo			1.26, 1.27, 1.28, 1.29
- pkgsrc/mail/dovecot/patches/patch-aa		1.6
- pkgsrc/mail/dovecot/patches/patch-ab		1.12
- pkgsrc/mail/dovecot/patches/patch-ac		removed
- pkgsrc/mail/dovecot/patches/patch-ad		removed
- pkgsrc/mail/dovecot/patches/patch-ae		removed

   Module Name:		pkgsrc
   Committed By:	ghen
   Date:		Tue Apr  4 09:38:46 UTC 2006

   Modified Files:
   	pkgsrc/mail/dovecot: Makefile PLIST distinfo
   	pkgsrc/mail/dovecot/patches: patch-aa patch-ab
   Removed Files:
   	pkgsrc/mail/dovecot/patches: patch-ac patch-ad patch-ae

   Log Message:
   Update Dovecot from 1.0beta3 to 1.0beta5.  The beta4 release had SSL issues
   which were fixed again in beta5.

   patch-ac and patch-ad were taken from CVS and are not needed anymore.

   Changes in Dovecot 1.0beta4:
   	* Changed the default lock_method back to fcntl. Apparently flock
   	  gives problems with some systems.
   	* mbox: mailboxes beginning with '.' are now also listed
   	* Replaced mail_use_modules and mail_modules settings with mail_plugins
   	  and mail_plugin_dir. Now instead of loading all plugins from the
   	  directory, you'll have to give a list of plugins to load. If the
   	  plugin couldn't be loaded, the process exits instead of just
   	  ignoring the problem (this is important with ACL plugin).

   	+ Added support for "master users" who can log in as other people.
   	  The master username can be given either in authorization ID
   	  string with SASL PLAIN mechanism or by setting
   	  auth_master_user_separator and giving it within the normal username
   	  string.
   	+ Added ACL plugin with ACL file backend. This however doesn't mean
   	  that there yet exists a proper shared folder support. If master user
   	  logged in as someone else, the ACLs are checked as the master user.
   	+ Added some Dovecot extensions to checkpassword passdb, see ChangeLog
   	+ Updated passwd-file format to allow specifying any key=value fields
   	+ Maildir++ quota support and several quota fixes
   	+ passdb supporting extra fields: Added "allow_nets" option which takes
   	  a comma separated list of IPs/networks where to allow user to log in.
   	+ NFS: Handle ESTALE errors the best way we can
   	+ IMAP now writes to log when client disconnects
   	+ In shared mailboxes (if dovecot-shared file exists) \Seen flags are
   	  now kept only in index files, so as long as each user has a separate
   	  index file they have separate \Seen flags.
   	- Fixes to DIGEST-MD5 realm handling so it works with more clients
   	- BODYSTRUCTURE -> BODY conversion from cache file was broken with
   	  mails containing message/rfc822 parts.
   	- Fixed several memory leaks
   	- We could have sent client FETCH notifications about messages before
   	  telling about them with EXISTS
   	- Compiling fixes for Solaris and some other OSes
   	- Fixed problem with internal timeout handling code, which caused eg.
   	  outlook-idle workaround to break.
   	- If /dev/urandom didn't exist, we didn't seed OpenSSL's random number
   	  generator properly. Patch by Vilmos Nebehaj.
   	- Maildir: Recent flags weren't always immediately removed from mails
   	  when mailbox was opened.
   	- Several changes to SSL proxying code, hopefully making it work
   	  better.

   Changes in Dovecot 1.0beta5:
   	- Beta4's SSL proxying rewrite worked worse than I thought.
   	  Reverted it back to original code.
   	- Filesystem quota plugin now looks up the mount path correctly.
---
   Module Name:		pkgsrc
   Committed By:	xtraeme
   Date:		Wed Apr 12 18:19:16 UTC 2006

   Modified Files:
   	pkgsrc/mail/dovecot: Makefile distinfo

   Log Message:
   Update to 1.0beta6:

   v1.0.beta6 2006-04-12

           * The login and master usernames were reversed when using
             master_user_separator (now the order is UW-IMAP compatible).
           * Killing dovecot master process now kills all IMAP and POP3
             processes also.

           + -a parameter to dovecot prints now all settings that Dovecot uses.
             -n prints all settings that are different from defaults.
           + Added pop3_lock_session setting
           + %M modifier returns string's MD5 sum. Patch by Ben Winslow
           - PLAIN SASL authentication wasn't working properly, causing failed
             logins with some clients (broken in beta4)
           - Fixes to Maildir++ quota, should actually work now
           - Don't crash if passwd-file has entries without passwords
             (eg. deny=yes databases)
           - Fixed prefetch userdb to work nicely with other userdbs
           - If master process runs out of file descriptors, don't go to
             infinite loop (unlikely to have happened unless the OS's default
             fd limit was too low)
           - Fixed non-plaintext password lookups from LDAP. Patch by Lior Okman
           - %U modifier was actually lowercasing the string. Patch by
   	  Ben Winslow
---
   Module Name:		pkgsrc
   Committed By:	ghen
   Date:		Fri Apr 14 19:01:53 UTC 2006

   Modified Files:
   	pkgsrc/mail/dovecot: Makefile distinfo

   Log Message:
   Update dovecot to 1.0beta7:

   + Added shutdown_clients setting to control if existing imap/pop3 processes
     should be killed when master is.
   - Master login fixes, PLAIN authentication was still broken..
---
   Module Name:		pkgsrc
   Committed By:	grant
   Date:		Fri May 12 11:02:48 UTC 2006

   Modified Files:
   	pkgsrc/mail/dovecot: Makefile distinfo

   Log Message:
   update dovecot to 1.0beta8.

   changes since 1.0beta7:

           * Fixed a security hole with mbox: "1 LIST .. *" command could
             list all directories and files under the mbox root directory, so
             if your mails were stored in eg. /var/mail/%u/ directory, the
             command would list everything under /var/mail.
           + Unless nfs_check=no or mmap_disable=yes, check for the first login
             if the user's index directory exists in NFS mount. If so, refuse to
             run. This is done only on first login to avoid constant extra
             overhead.
           + If we have plugins set and imap_capability unset, figure out the
             IMAP capabilities automatically by running imap binary at startup.
             The generated capability list isn't updated until Dovecot is
             restarted completely, so if you add or remove IMAP plugins you
             should restart. If you have problems related to this, set
             imap_capabilities setting manually to work around it.
           + Added auth_username_format setting
           - pop3_lock_session setting wasn't really working
           - Lots of fixes related to quota handling. It's still not working
             perfectly though.
           - Lots of index handling fixes, especially with mmap_disable=yes
           - Maildir: saving mails could have sometimes caused "Append with UID
             n, but next_uid = m" errors
           - flock() locking never timeouted because ignoring SIGALRM caused the
             system call just to be restarted when SIGALRM occurred (probably not
             with all OSes though?)
           - kqueue: Fixed "Unrecognized event". Patch by Vaclav Haisman
---
   Module Name:		pkgsrc
   Committed By:	jwise
   Date:		Fri May 12 15:47:39 UTC 2006

   Modified Files:
   	pkgsrc/mail/dovecot: PLIST

   Log Message:
   Fix missing file (lib/dovecot/pop3/lib01_quota_plugin.so) in PLIST.