Subject: CVS commit: [pkgsrc-2008Q3] pkgsrc/mail/dovecot
From: Tyler R. Retzlaff
Date: 2008-11-04 12:19:48
Message id: 20081104111948.AEF75175D0@cvs.netbsd.org

Log Message:
pullup ticket #2570 - requested by adrianp
dovecot: update package for security fixes

revisions pulled up:
pkgsrc/mail/dovecot/Makefile	1.122, 1.123
pkgsrc/mail/dovecot/PLIST	1.22
pkgsrc/mail/dovecot/distinfo	1.87, 1.88

   Module Name:    pkgsrc
   Committed By:   ghen
   Date:           Wed Oct 22 21:16:36 UTC 2008

   Modified Files:
           pkgsrc/mail/dovecot: Makefile PLIST distinfo

   Log Message:
   Update to Dovecot 1.1.5.  Changes since 1.1.4:

   * Dovecot prints an informational message about authentication problems
     at startup. The message goes away after the first successful
     authentication. This hopefully reduces the number of "Why doesn't
     my authentication work?" questions.

   + Maildir/dbox: Try harder to assign unique UIDVALIDITY values to
     mailboxes to avoid potential problems when recreating or renaming
     mailboxes. The UIDVALIDITY is tracked using dovecot-uidvalidity*
     files in the mail root directory.
   + Many logging improvements
   - In some conditions Dovecot could have stopped using existing cache
     file and never used it again until it was deleted.
   - pop3 + Maildir: Make sure virtual sizes are always written to
     dovecot-uidlist. This way if the indexes are lost Dovecot will never
     do a huge amount of work to recalculate them.
   - mbox: Fixed listing mailboxes in namespaces with prefix beginning
     with '~' or '/' (i.e. UW-IMAP compatibility namespaces didn't work).
   - dict quota: Don't crash when recalculating quota (when quota warnings
     enabled).
   - Fixes to handling "out of disk space/quota" failures.
   - Blocking passdbs/userdbs (e.g. PAM, MySQL) could have failed lookups
     sometimes when auth_worker_max_request_count was non-zero.
   - Fixed compiling with OpenBSD
   ------------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   adrianp
   Date:           Sun Nov  2 16:19:53 UTC 2008

   Modified Files:
           pkgsrc/mail/dovecot: Makefile distinfo

   Log Message:
   Update to 1.1.6
   Ok'ed geert@
   The invalid message address parsing bug is pretty important since it
   allows a remote user to send broken mail headers and prevent the
   recipient from accessing the mailbox afterwards, because the process
   will always just crash trying to parse the header. This is assuming that
   the IMAP client uses FETCH ENVELOPE command, not all do. Note that it
   doesn't affect versions older than v1.1.4.

           + dovecot -n and -a now prints some system information at the top.
           + More error/debug message logging improvements.
           - pop3-login: Fixed assert-crash if a client sent USER+PASS+USER+PASS
             commands in the same IP packet.
           - Parsing an invalid message address like "From: (" caused an
             assert-crash in v1.1.4 and v1.1.5.
           - Folding whitespace wasn't handled correctly inside quoted-strings,
             causing some messages to be parsed incorrectly.
           - mbox: Fixed saving messages that begin with a valid From_-line.

Files:
RevisionActionfile
1.120.4.2modifypkgsrc/mail/dovecot/Makefile
1.21.4.1modifypkgsrc/mail/dovecot/PLIST
1.85.4.2modifypkgsrc/mail/dovecot/distinfo