./mail/dovecot2, Secure IMAP and POP3 server

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2013Q3, Version: 2.2.7, Package name: dovecot-2.2.7, Maintainer: adam

Dovecot is an open source IMAP and POP3 server for Linux/UNIX-like systems,
written with security primarily in mind. Dovecot is an excellent choice for both
small and large installations. It's fast, simple to set up, requires no special
administration and it uses very little memory.



Package options: kqueue, pam, ssl

Master sites:

SHA1: e28eeef56909c991d0d549cef52d51be65d3f993
RMD160: b5f257d92ec7e2bc21cf222fbe12c7de10080bdf
Filesize: 4403.479 KB

Version history: (Expand)

CVS history: (Expand)


   2013-12-08 12:27:57 by Matthias Scheler | Files touched by this commit (3) | Package updated
Log message:
Pullup ticket #4265 - requested by taca
mail/dovecot2: security update

Revisions pulled up:
- mail/dovecot2/Makefile                                1.51,1.53 via patch
- mail/dovecot2/PLIST                                   1.28-1.29
- mail/dovecot2/distinfo                                1.39-1.40

---
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Tue Oct  8 13:52:47 UTC 2013

   Modified Files:
   	pkgsrc/mail/dovecot2: Makefile PLIST distinfo

   Log message:
   Changes 2.2.6:
   * acl: If public/shared namespace has a shared subscriptions file for
     all users, don't list subscription entries that are not visible to
     the user accessing it.
   + doveadm: Added "auth lookup" command for doing passdb lookup.
   + login_log_format_elements: Added %{orig_user}, %{orig_username}
     and %{orig_domain} expanding to the username exactly as sent by
     the client (before any changes auth process made).
   + Added ssl_prefer_server_ciphers setting.
   + auth_verbose_passwords: Log the password also for unknown users.
   + Linux: Added optional support for SO_REUSEPORT with
     inet_listener { reuse_port=yes }
   - director: v2.2.5 changes caused "SYNC lost" errors
   - dsync: Many fixes and error handling improvements
   - doveadm -A: Don't waste CPU by doing a separate config lookup
     for each user
   - Long-running ssl-params process no longer prevents Dovecot restart
   - mbox: Fixed mailbox_list_index=yes to work correctly

---
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Wed Nov  6 14:20:58 UTC 2013

   Modified Files:
   	pkgsrc/mail/dovecot2: Makefile PLIST distinfo

   Log message:
   Changes 2.2.7:
   * Some usage of passdb checkpassword could have been exploitable by
     local users. You may need to modify your setup to keep it working.
     See http://wiki2.dovecot.org/AuthDatabase/CheckPassword#Security
   + auth: Added ability to truncate values logged by
     auth_verbose_passwords (see 10-logging.conf comment)
   + mdbox: Added "mdbox_deleted" storage, which can be used to access
     messages with refcount=0. For example: doveadm import
     mdbox_deleted:~/mdbox "" mailbox inbox subject oops
   + ssl-params: Added ssl_dh_parameters_length setting.
   - master process was doing a hostname.domain lookup for each created
     process, which may have caused a lot of unnecessary DNS lookups.
   - dsync: Syncing over 100 messages at once caused problems in some
     situations, causing messages to get new UIDs.
   - fts-solr: Different Solr hosts for different users didn't work.