Date: Thu, 29 Aug 2019 14:47:25 +0000 (UTC) From: Larry Rosenman <ler@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-branches@freebsd.org Subject: svn commit: r510165 - in branches/2019Q3/mail: dovecot dovecot-pigeonhole Message-ID: <201908291447.x7TElPVc023876@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: ler Date: Thu Aug 29 14:47:25 2019 New Revision: 510165 URL: https://svnweb.freebsd.org/changeset/ports/510165 Log: MFH: r506460 r506487 r506821 r506824 r507181 r507215 r510075 mail/dovecot, mail/dovecot-pigeonhole: Update to 2.3.7 and 0.5.7 respectively. dovecot changelog: * fts-solr: Removed break-imap-search parameter + Added more events for the new statistics, see https://doc.dovecot.org/admin_manual/list_of_events/ + mail-lua: Add IMAP metadata accessors, see https://doc.dovecot.org/admin_manual/lua/ + Add event exporters that allow exporting raw events to log files and external systems, see https://doc.dovecot.org/configuration_manual/event_export/ + SNIPPET is now PREVIEW and size has been increased to 200 characters. + Add body option to fts_enforced. This triggers building FTS index only on body search, and an error using FTS index fails the search rather than reads through all the mails. - Submission/LMTP: Fixed crash when domain argument is invalid in a second EHLO/LHLO command. - Copying/moving mails using Maildir format loses IMAP keywords in the destination if the mail also has no system flags. - mail_attachment_detection_options=add-flags-on-save caused email body to be unnecessarily opened when FETCHing mail headers that were already cached. - mail attachment detection keywords not saved with maildir. - dovecot.index.cache may have grown excessively large in some situations. This happened especially when using autoexpunging with lazy_expunge folders. Also with mdbox format in general the cache file wasn't recreated as often as it should have. - Autoexpunged mails weren't immediately deleted from the disk. Instead, the deletion from disk happened the next time the folder was opened. This could have caused unnecessary delays if the opening was done by an interactive IMAP session. - Dovecot's TCP connections sometimes add extra 40ms latency due to not enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't affected, but everything else was. This delay wasn't always visible - only in some situations with some message/packet sizes. - imapc: Fix various crash conditions - Dovecot builds were not always reproducible. - login-proxy: With shutdown_clients=no after config reload the existing connections could no longer be listed or kicked with doveadm. - "doveadm proxy kick" with -f parameter caused a crash in some situations. - Auth policy can cause segmentation fault crash during auth process shutdown if all auth requests have not been finished. - Fix various minor bugs leading into incorrect behaviour in mailbox list index handling. These rarely caused noticeable problems. - LDAP auth: Iteration accesses freed memory, possibly crashing auth-worker - local_name { .. } filter in dovecot.conf does not correctly support multiple names and wildcards were matched incorrectly. - replicator: dsync assert-crashes if it can't connect to remote TCP server. - config: Memory leak in config process when ssl_dh setting wasn't set and there was no ssl-parameters.dat file. This caused config process to die once in a while with "out of memory". pigeonhole changelog: + vacation: Made the subject for the automatic response message produced by the Sieve vacation action configurable. Both the default subject (if the script defines none) and the subject template (e.g. used to add a subject prefix) can be configured. - dsync: dsync-replication does not synchronize Sieve scripts. - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection. - testsuite: Pigeonhole testsuite segfaulted if it was compiled with GCC 9 mail/dovecot: stop spamming the log with EINVAL. PR: 239172 Submitted by: zillion1@o2.pl Obtained from: dovecot mailing list. mail/dovecot: stop whining about TCP_NODELAY errors. [PATCH] lib: ostream-file: Don't log any errors when setting TCP_NODELAY It's likely never useful to log the error, and it seems more and more unexpected errors just keep popping up. Obtained from: upstream git. mail/dovecot: One should actually TEST their patches. Fix previous commit. Pointy Hat To: ler mail/dovecot: [PATCH] lib-storage: Namespace prefix shouldn't be included in all mailbox name validity checks Obtained from: upstream github. mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.7.1 and 0.5.7.1 respectively. These releases fix the reported regressions in v2.3.7 & v0.5.7. Dovecot core: - Fix TCP_NODELAY errors being logged on non-Linux OSes - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME - Remove wrongly added checks in namespace prefix checking Pigeonhole: - dsync: Sieve script syncing failed if mailbox attributes weren't enabled. mail/dovecot,mail/dovecot-pigeonhole: fix CVE-2019-11500 Changes ------- * CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes. Found by Nick Roessler and Rafi Rubin. Security: CVE-2019-11500 PR: 241074 Approved by: ports-secteam (delphij, joneum) Modified: branches/2019Q3/mail/dovecot-pigeonhole/Makefile branches/2019Q3/mail/dovecot-pigeonhole/distinfo branches/2019Q3/mail/dovecot/Makefile branches/2019Q3/mail/dovecot/distinfo branches/2019Q3/mail/dovecot/pkg-plist Directory Properties: branches/2019Q3/ (props changed) Modified: branches/2019Q3/mail/dovecot-pigeonhole/Makefile ============================================================================== --- branches/2019Q3/mail/dovecot-pigeonhole/Makefile Thu Aug 29 14:09:54 2019 (r510164) +++ branches/2019Q3/mail/dovecot-pigeonhole/Makefile Thu Aug 29 14:47:25 2019 (r510165) @@ -2,7 +2,7 @@ # $FreeBSD$ PORTNAME= dovecot-pigeonhole -PORTVERSION= 0.5.6 +PORTVERSION= 0.5.7.2 CATEGORIES= mail MASTER_SITES= http://pigeonhole.dovecot.org/releases/${DOVECOTVERSION}/ DISTNAME= ${PORTNAME:C/-/-${DOVECOTVERSION}-/}-${PORTVERSION} @@ -12,8 +12,8 @@ COMMENT= Sieve plugin for the Dovecot 'deliver' LDA an LICENSE= LGPL21 -BUILD_DEPENDS= dovecot>=2.3.6:mail/dovecot -RUN_DEPENDS= dovecot>=2.3.6:mail/dovecot +BUILD_DEPENDS= dovecot>=2.3.7:mail/dovecot +RUN_DEPENDS= dovecot>=2.3.7:mail/dovecot DOVECOTVERSION= 2.3 Modified: branches/2019Q3/mail/dovecot-pigeonhole/distinfo ============================================================================== --- branches/2019Q3/mail/dovecot-pigeonhole/distinfo Thu Aug 29 14:09:54 2019 (r510164) +++ branches/2019Q3/mail/dovecot-pigeonhole/distinfo Thu Aug 29 14:47:25 2019 (r510165) @@ -1,3 +1,3 @@ -TIMESTAMP = 1556659509 -SHA256 (dovecot-2.3-pigeonhole-0.5.6.tar.gz) = 7c2fe7e23e732a8451172c00da5f19532448c95e03e44d47c61b123e8210f5b8 -SIZE (dovecot-2.3-pigeonhole-0.5.6.tar.gz) = 1854287 +TIMESTAMP = 1567007127 +SHA256 (dovecot-2.3-pigeonhole-0.5.7.2.tar.gz) = d59d0c5c5225a126e5b98bf95d75e8dd368bdeeb3da2e9766dbe4fddaa9411b0 +SIZE (dovecot-2.3-pigeonhole-0.5.7.2.tar.gz) = 1857602 Modified: branches/2019Q3/mail/dovecot/Makefile ============================================================================== --- branches/2019Q3/mail/dovecot/Makefile Thu Aug 29 14:09:54 2019 (r510164) +++ branches/2019Q3/mail/dovecot/Makefile Thu Aug 29 14:47:25 2019 (r510165) @@ -7,9 +7,9 @@ ###################################################################### PORTNAME= dovecot -PORTVERSION= 2.3.6 +PORTVERSION= 2.3.7.2 CATEGORIES= mail ipv6 -MASTER_SITES= https://www.dovecot.org/releases/2.3/ +MASTER_SITES= https://dovecot.org/releases/2.3/ MAINTAINER= ler@FreeBSD.org COMMENT= Secure, fast and powerful IMAP and POP3 server Modified: branches/2019Q3/mail/dovecot/distinfo ============================================================================== --- branches/2019Q3/mail/dovecot/distinfo Thu Aug 29 14:09:54 2019 (r510164) +++ branches/2019Q3/mail/dovecot/distinfo Thu Aug 29 14:47:25 2019 (r510165) @@ -1,3 +1,3 @@ -TIMESTAMP = 1556658186 -SHA256 (dovecot-2.3.6.tar.gz) = ed1d8dc1beeae9c6c73deac73a62ef19fe9262fbffd86604a3f690452f5536c7 -SIZE (dovecot-2.3.6.tar.gz) = 6980135 +TIMESTAMP = 1567006255 +SHA256 (dovecot-2.3.7.2.tar.gz) = 666ce084760a47e601d49a9be3c7993c48789d332631e8dfb45f443b367b1260 +SIZE (dovecot-2.3.7.2.tar.gz) = 7076231 Modified: branches/2019Q3/mail/dovecot/pkg-plist ============================================================================== --- branches/2019Q3/mail/dovecot/pkg-plist Thu Aug 29 14:09:54 2019 (r510164) +++ branches/2019Q3/mail/dovecot/pkg-plist Thu Aug 29 14:47:25 2019 (r510165) @@ -11,7 +11,7 @@ %%DATADIR%%/stopwords/stopwords_ro.txt %%DATADIR%%/stopwords/stopwords_ru.txt %%DATADIR%%/stopwords/stopwords_sv.txt -%%ETCDIR%%/README +%%DATADIR%%/stopwords/stopwords_tr.txt %%ETCDIR%%/example-config/conf.d/10-auth.conf %%ETCDIR%%/example-config/conf.d/10-director.conf %%ETCDIR%%/example-config/conf.d/10-logging.conf @@ -42,6 +42,7 @@ %%ETCDIR%%/example-config/dovecot-ldap.conf.ext %%ETCDIR%%/example-config/dovecot-sql.conf.ext %%ETCDIR%%/example-config/dovecot.conf +%%ETCDIR%%/README %%LDAP%%include/dovecot/ldap-client.h %%LDAP%%lib/dovecot/libdovecot-ldap.a %%LDAP%%lib/dovecot/libdovecot-ldap.so @@ -82,7 +83,6 @@ include/dovecot/auth-cache.h include/dovecot/auth-client-connection.h include/dovecot/auth-client-interface.h include/dovecot/auth-client-private.h -include/dovecot/auth-client-request.h include/dovecot/auth-client.h include/dovecot/auth-common.h include/dovecot/auth-fields.h @@ -95,7 +95,6 @@ include/dovecot/auth-request-handler.h include/dovecot/auth-request-stats.h include/dovecot/auth-request-var-expand.h include/dovecot/auth-request.h -include/dovecot/auth-server-connection.h include/dovecot/auth-settings.h include/dovecot/auth-stats.h include/dovecot/auth-token.h @@ -361,6 +360,11 @@ include/dovecot/lib-event.h include/dovecot/lib-signals.h include/dovecot/lib.h include/dovecot/llist.h +include/dovecot/lmtp-client.h +include/dovecot/lmtp-commands.h +include/dovecot/lmtp-common.h +include/dovecot/lmtp-recipient.h +include/dovecot/lmtp-settings.h include/dovecot/log-throttle.h include/dovecot/login-common.h include/dovecot/login-proxy-state.h
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201908291447.x7TElPVc023876>