dovecot22-devel-2.2.31-2.12.1<>,\ /=„EgSJ mFF|6ae]g½N0 1R7DnN3P준T,j:z XI9%5ܵT%$ Zv9z>/sOlh}.-mJLt6\.{k/-+÷{jYlhҦofL%l큾\,C\I><?d  F $,0CLw f lf 8f f f mBf pfz8f6f4Tf$4(8n9n:'nF/G/fH9tfIC fXEtYE\Ef]ODf^x)bxcy3dyeyfylyuyfv|wfx`fzCdovecot22-devel2.2.312.12.1Development files for Dovecot pluginsDovecot is an IMAP and POP3 server for Linux and UNIX-like systems, written primarily with security in mind. Although it is written in C, it uses several coding techniques to avoid most of the common pitfalls. Dovecot can work with standard mbox and maildir formats and is fully compatible with UW-IMAP and Courier IMAP servers as well as mail clients accessing the mailboxes directly. This package holds the file needed to compile plugins outside of the dovecot tree.\ lamb61openSUSE Leap 42.3openSUSEBSD-3-Clause AND LGPL-2.1-or-later AND MIThttp://bugs.opensuse.orgDevelopment/Libraries/C and C++http://www.dovecot.orglinuxx86_64`JS{D:-1EfVWx T0) D[Ndy% 9?Vx*aUxd%v   Cm 5%!j`dfj mF;\-}U 5;j1_l:SO b M 5q'{SL Qi"DCC5''~(#tFz- 6.Uc] IdPc(kSD]Id\Ef iD} DI'}4R,   k %Y |h p Fd!n ,c % ]ic+)  %5Z  "x{ D . Y j qwG 3w!lp au-m-5K{<dg!L *'  Y  z%& QWwA u@ EN ! &QWKk X$d<kZC/insr| d^  1{M9[dQAGKrQ 0zuf!K] pZ ,{o71 N * W ),'|![.K)y) I7 +[R [I"R\4IqJWxuu &fa  Q # FQOPggA큤A큤\ O\ ,\ 5\ <\ <\ <\ <\ <\ <\ <\ -\ ,\ ,\ ,\ ,\ 2\ 2\ -\ -\ -\ -\ 2\ 2\ 2\ -\ 2\ 2\ 2\ 2\ 2\ 2\ 2\ -\ 2\ 2\ 2\ 2\ 2\ 2\ ,\ ,\ ,\ ,\ ,\ ,\ -\ ,\ 5\ ,\ /\ 8\ 8\ 8\ 8\ ,\ ,\ ,\ 0\ 0\ ,\ 2\ 2\ 2\ 2\ 2\ 2\ /\ /\ /\ /\ /\ .\ .\ .\ .\ .\ .\ .\ .\ .\ -\ -\ ;\ ;\ ;\ ;\ ;\ ;\ ;\ ;\ ;\ ;\ ;\ ,\ .\ .\ :\ :\ 1\ ,\ ,\ ,\ 0\ ,\ ,\ ,\ ,\ ,\ ,\ ,\ ,\ ,\ ,\ ,\ .\ .\ .\ .\ .\ ,\ >\ >\ /\ >\ /\ /\ /\ /\ >\ /\ /\ >\ >\ /\ /\ /\ /\ >\ ,\ ,\ ,\ ,\ ,\ ,\ ,\ ,\ ,\ ,\ ,\ ,\ ,\ .\ .\ .\ .\ .\ .\ .\ .\ .\ .\ .\ .\ .\ .\ .\ .\ .\ .\ .\ 6\ 6\ 6\ 6\ .\ .\ 6\ 6\ .\ .\ 6\ 5\ 5\ 5\ 6\ .\ .\ .\ .\ 6\ .\ .\ .\ 6\ 6\ .\ 6\ 6\ 6\ 6\ 6\ .\ /\ /\ /\ /\ /\ .\ .\ /\ /\ /\ 0\ 0\ /\ 0\ 0\ 0\ 0\ ,\ 0\ 0\ 0\ 0\ 0\ 0\ 0\ 0\ 0\ 0\ 0\ 0\ 0\ ,\ ,\ ,\ ,\ /\ -\ ,\ ,\ ,\ -\ -\ ,\ ,\ -\ -\ ,\ ,\ .\ .\ ,\ .\ ,\ ,\ ,\ ,\ .\ .\ ,\ ,\ .\ .\ ,\ .\ ,\ 0\ .\ .\ ,\ .\ /\ ,\ ,\ ,\ ,\ ,\ ,\ /\ ,\ ,\ ,\ 1\ .\ ,\ ,\ ,\ .\ ,\ 5\ 5\ 5\ 5\ ,\ 0\ /\ /\ 0\ 1\ 0\ .\ /\ /\ /\ /\ /\ /\ /\ /\ /\ 0\ 0\ 0\ 0\ 0\ 0\ 0\ 0\ 0\ 1\ 0\ 0\ 0\ 0\ 0\ 0\ /\ /\ /\ .\ .\ 0\ 0\ 0\ 0\ 0\ /\ /\ /\ /\ /\ /\ 0\ /\ /\ 0\ 0\ /\ 0\ /\ 0\ 0\ 0\ 0\ 0\ /\ /\ /\ /\ /\ /\ /\ ,\ -\ -\ -\ -\ -\ -\ -\ -\ -\ -\ -\ /\ .\ /\ /\ /\ /\ /\ ,\ ,\ /\ /\ /\ /\ /\ /\ /\ 2\ 2\ 2\ ,\ .\ .\ .\ .\ .\ .\ .\ .\ .\ .\ .\ .\ .\ .\ .\ .\ ,\ ,\ ,\ ,\ -\ ,\ 2\ ,\ ,\ ?\ ?\ ,\ .\ .\ .\ .\ ,\ ,\ ,\ ,\ .\ ,\ ,\ ,\ ,\ /\ ,\ 2\ 2\ 2\ 2\ 2\ ,\ 7\ 7\ 7\ 7\ 7\ 0\ 0\ 0\ 0\ ,\ ,\ ,\ ,\ .\ A\ A\ A\ A\ A\ A\ A\ A\ A\ A\ A\ A\ A\ A\ A\ A\ A\ A\ A\ A\ .\ .\ C\ C\ C\ C\ .\ ,\ ,\ 0\ 0\ ,\ ,\ ,\ .\ .\ ,\ ,\ ,\ 5\ /\ /\ /\ ,\ ,\ -\ -\ -\ ,\ ,\ ,\ ,\ 0\ S\ P\ O\ O\ P\ P\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ P\ Q\ Q\ P\ Q\ Q\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ S\ P\ 1\ ,\ 1\ 1\ 1\ 5\ .\ .\ .\ ,\ ,\ ,\ ,\ ,\ ,\ ,\ /\ -\ ,\ ,\ ,\ ,\ ,\ ,\ ,\ ,\ 2\ 2\ 2\ 2\ ,\ ,\ ,\ ,\ ,\ ,\ ,\ /\ :\ /\ 1\ .\ 5\ S\ 1\ 0\ .\ O\ ,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.so.0.0.0libdovecot-dsync.so.0.0.0libdovecot-fts.so.0.0.0libdovecot-lda.so.0.0.0libdovecot-ldap.so.0.0.0libdovecot-login.so.0.0.0libdovecot-sieve.so.0.0.0libdovecot-sql.so.0.0.0libdovecot-storage.so.0.0.0libdovecot.so.0.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootdovecot22-2.2.31-2.12.1.src.rpmdovecot-develdovecot22-develdovecot22-devel(x86-64)   dovecot22rpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsLzma)2.2.313.0.4-14.0-14.4.6-1otherproviders(dovecot-devel)4.11.2\@\e\w@[{Z@ZX@YZ1YZ1YRHYP@YMY9<@Y0Y.X:@XXXX @XXBXe@XF@X%X%WWWzOWq@WX@WX@WVVJV1VV^Vn@Vn@Vn@Vl @Vl @Vf@VU~@U~@UY@UUUUUT@UT@UT@UT@UT@U8U8T@T_W@TL@T>aTTT=@T=@TT @T @T @T @T T T T T T T T TT@S׌S׌S׌S׌S׌S׌SpRRb@Rb@R1@R;R@RxRUE@R q@Q@QɆ@Q@QW@Q@QQo@Qg@QfQa_Q^Q^QJ@Q,Q']P[Peter Varkoly Peter Varkoly Peter Varkoly varkoly@suse.comvarkoly@suse.comvarkoly@suse.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.dekukuk@suse.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.dematwey.kornilov@gmail.commrueckert@suse.demrueckert@suse.dewr@rosenauer.orgmrueckert@suse.demrueckert@suse.demichael@stroeder.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.deLed mrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.devarkoly@suse.comalexandre@exatati.com.bralexandre@exatati.com.brvarkoly@suse.comalexandre@exatati.com.bralexandre@exatati.com.bralexandre@exatati.com.bralexandre@exatati.com.bralexandre@exatati.com.bralexandre@exatati.com.bralexandre@exatati.com.bralexandre@exatati.com.bralexandre@exatati.com.bralexandre@exatati.com.brwr@rosenauer.orgalexandre@exatati.com.bralexandre@exatati.com.bralexandre@exatati.com.bralexandre@exatati.com.bralexandre@exatati.com.bralexandre@exatati.com.bralexandre@exatati.com.bralexandre@exatati.com.bralexandre@exatati.com.bralexandre@exatati.com.bralexandre@exatati.com.bralexandre@exatati.com.br- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related to SSL client certificate authentication applyed upstream patches: 0001-login-common-Ensure-we-get-username-from-certificate.patch 0002-auth-Fail-authentication-if-certificate-username-was.patch 0003-auth-Do-not-import-empty-certificate-username.patch- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524: FTS or POP3-UIDL header from dovecot index overflow applyed upstream patches: 0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch 0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch- managesieve-login: managesieve_client_input_next_cmd(): Fix handling of command continuation(bsc#1111789) added: managesieve-login-code-cleanup.patch- bsc#1082828 - (CVE-2017-15130) VUL-0: CVE-2017-15130: dovecot22: TLS SNI config lookups are inefficient and can be used for DoS applyed upstream patches. added: 0001-lib-dns-Move-before-lib-master.patch 0002-config-Add-config_filter_get_all.patch 0003-config-Add-command-to-request-all-filters.patch 0004-lib-master-Support-validating-config-filters-against.patch 0005-login-common-Enable-config-filtering-by-local-name.patch 0006-lib-master-Fix-dns_match_wildcard-result-value-check.patch- bsc#1082826 VUL-0: CVE-2017-14461: dovecot22: rfc822_parse_domain Information Leak Vulnerability applyed upstream patches. added: 0001-lib-mail-rfc822-parser-Add-asserts-to-make-sure-pars.patch 0002-lib-mail-test-message-address-Add-TEST_MESSAGE_ADDRE.patch 0003-lib-mail-Fix-out-of-bounds-read-when-parsing-an-inva.patch 0004-lib-mail-Make-sure-parsers-don-t-accidentally-go-muc.patch 0005-lib-mail-Add-rfc822_parser_deinit.patch 0006-lib-mail-Refactor-code-to-make-the-next-commit-small.patch 0007-global-Call-rfc822_parser_deinit-wherever-possible.patch- bsc#1075608 New: VUL-0: dovecot: auth client leaks memory if SASL authentication is aborted. added: dovecot-22-auth-client-leaks-memory-if-SASL-authentication-is-aborted.patch Fix VUL-0: CVE-2017-15132: dovecot: *EMBARGOED* auth client leaks memory if SASL authentication is aborted.- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch: Do not attempt to deinitialize backend if it's not set- Fix notify extension (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html) bcb321bc62117d30bc53a872ca1154c0100aeefd.patch 8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with libressl- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662) - make sure we do not generate dhparams smaller than 2048 in fips mode- update to 2.2.31 * LMTP: Removed "(Dovecot)" from added Received headers. Some installations want to hide it, and there's not really any good reason for anyone to have it. + Add ssl_alt_cert and ssl_alt_key settings to add support for having both RSA and ECDSA certificates. + dsync/imapc, pop3-migration plugin: Strip trailing whitespace from headers when matching mails. This helps with migrations from Zimbra. + acl: Add acl_globals_only setting to disable looking up per-mailbox dovecot-acl files. + Parse invalid message addresses better. This mainly affects the generated IMAP ENVELOPE replies. - v2.2.30 wasn't fixing corrupted dovecot.index.cache files properly. It could have deleted wrong mail's cache or assert-crashed. - v2.2.30 mail-crypt-acl plugin was assert-crashing - v2.2.30 welcome plugin wasn't working - Various fixes to handling mailbox listing. Especially related to handling nonexistent autocreated/autosubscribed mailboxes and ACLs. - Global ACL file was parsed as if it was local ACL file. This caused some of the ACL rule interactions to not work exactly as intended. - auth: forward_* fields didn't work properly: Only the first forward field was working, and only if the first passdb lookup succeeded. - Using mail_sort_max_read_count sometimes caused "Broken sort-* indexes, resetting" errors. - Using mail_sort_max_read_count may have caused very high CPU usage. - Message address parsing could have crashed on invalid input. - imapc_features=fetch-headers wasn't always working correctly and caused the full header to be fetched. - imapc: Various bugfixes related to connection failure handling. - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when expunging mails. - quota=count: quota_warning = -storage=.. was never executed - quota=count: Add support for "ns" parameter - dsync: Fix incremental syncing for mails that don't have Date or Message-ID headers. - imap: Fix hang when client sends pipelined SEARCH + EXPUNGE/CLOSE/LOGOUT. - oauth2: Token validation didn't accept empty server responses. - imap: NOTIFY command has been almost completely broken since the beginning. I guess nobody has been trying to use it. - update pigeonhole to 0.4.19 * This release adjusts Pigeonhole to several changes in the Dovecot API, making it depend on Dovecot v2.2.31. Previous versions of Pigeonhole will produce compile warnings with the recent Dovecot releases (but still work ok). - Fixed bug in handling of implicit keep in some cases. Implicit side-effects, such as assigned flags, were not always applied correctly. This is in essence a very old bug, but it was exposed by recent changes. - include extension: Fixed segfault that (sometimes) occurred when the global script location was left unconfigured. - drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch: included in pigeonhole 0.4.19 - refreshed patches to apply cleanly again: dovecot-2.2.18-better_ssl_defaults.patch dovecot-2.2.18-dont_use_etc_ssl_certs.patch- update to 2.2.30.2 - auth: Multiple failed authentications within short time caused crashes - push-notification: OX driver crashed at deinit- update to 2.2.30.1 (boo# 1044110) - quota_warning scripts weren't working in v2.2.30 - vpopmail still wasn't compiling * auth: Use timing safe comparisons for everything related to passwords. It's unlikely that these could have been used for practical attacks, especially because Dovecot delays and flushes all failed authentications in 2 second intervals. Also it could have worked only when passwords were stored in plaintext in the passdb. * master process sends SIGQUIT to all running children at shutdown, which instructs them to close all the socket listeners immediately. This way restarting Dovecot should no longer fail due to some processes keeping the listeners open for a long time. + auth: Add passdb { mechanisms=none } to match separate passdb lookup + auth: Add passdb { username_filter } to use passdb only if user matches the filter. See https://wiki2.dovecot.org/PasswordDatabase + dsync: Add dsync_commit_msgs_interval setting. It attempts to commit the transaction after saving this many new messages. Because of the way dsync works, it may not always be possible if mails are copied or UIDs need to change. + imapc: Support imapc_features=search without ESEARCH extension. + imapc: Add imapc_features=fetch-bodystructure to pass through remote server's FETCH BODY and BODYSTRUCTURE. + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on the remote server. + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters. + If dovecot.index.cache corruption is detected, reset only the one corrupted mail instead of the whole file. + doveadm mailbox status: Add "firstsaved" field. + director_flush_socket: Add old host's up/down and vhost count as parameters - More fixes to automatically fix corruption in dovecot.list.index - dsync-server: Fix support for dsync_features=empty-header-workaround - imapc: Various bugfixes, including infinite loops on some errors - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't enabled modseq tracking via CONDSTORE/QRESYNC. - fts-lucene: Fix it to work again with mbox format - Some internal error messages may have contained garbage in v2.2.29 - mail-crypt: Re-encrypt when copying/moving mails and per-mailbox keys are used. Otherwise the copied mails can't be opened. - vpopmail: Fix compiling- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch: fix flags with implicit keeps in sieve rules- fix dovecot-2.2.18-better_ssl_defaults.patch: aNULLLL is not a valid token, use aNULL.- update to 2.2.29.1 (boo#1032248) - imapc reconnection fix was forgotten from 2.2.29 release, which also made "make check" fail in a unit test - dict-sql: Merging multiple UPDATEs to a single statement wasn't actually working. - Fixed building with vpopmail * passdb/userdb dict: Don't double-expand %variables in keys. If dict was used as the authentication passdb, using specially crafted %variables in the username could be used to cause DoS %(CVE-2017-2669) * When Dovecot encounters an internal error, it logs the real error and usually logs another line saying what function failed. Previously the second log line's error message was a rather uninformative "Internal error occurred. Refer to server log for more information." Now the real error message is duplicated in this second log line. * lmtp: If a delivery has multiple recipients, run autoexpunging only for the last recipient. This avoids a problem where a long autoexpunge run causes LMTP client to timeout between the DATA replies, resulting in duplicate mail deliveries. * config: Don't stop the process due to idling. Otherwise the configuration is reloaded when the process restarts. * mail_log plugin: Differentiate autoexpunges from regular expunges * imapc: Use LOGOUT to cleanly disconnect from server. * lib-http: Internal status codes (>9000) are no longer visible in logs * director: Log vhost count changes and HOST-UP/DOWN + quota: Add plugin { quota_max_mail_size } setting to limit the maximum individual mail size that can be saved. + imapc: Add imapc_features=delay-login. If set, connecting to the remote IMAP server isn't done until it's necessary. + imapc: Add imapc_connection_retry_count and imapc_connection_retry_interval settings. + imap, pop3, indexer-worker: Add (deinit) to process title before autoexpunging runs. + Added %{encrypt} and %{decrypt} variables + imap/pop3 proxy: Log proxy state in errors as human-readable string. + imap/pop3-login: All forward_* extra fields returned by passdb are sent to the next hop when proxying using ID/XCLIENT commands. On the receiving side these fields are imported and sent to auth process where they're accessible via %{passdb:forward_*}. This is done only if the sending IP address matches login_trusted_networks. + imap-login: If imap_id_retain=yes, send the IMAP ID string to auth process. %{client_id} expands to it in auth process. The ID string is also sent to the next hop when proxying. + passdb imap: Use ssl_client_ca_* settings for CA validation. - fts-tika: Fixed crash when parsing attachment without Content-Disposition header. Broken by 2.2.28. - trash plugin was broken in 2.2.28 - auth: When passdb/userdb lookups were done via auth-workers, too much data was added to auth cache. This could have resulted in wrong replies when using multiple passdbs/userdbs. - auth: passdb { skip & mechanisms } were ignored for the first passdb - oauth2: Various fixes, including fixes to crashes - dsync: Large Sieve scripts (or other large metadata) weren't always synced. - Index rebuild (e.g. doveadm force-resync) set all mails as \Recent - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix - doveadm: Exit codes weren't preserved when proxying commands via doveadm-server. Almost all errors used exit code 75 (tempfail). - ACLs weren't applied to not-yet-existing autocreated mailboxes. - Fixed a potential crash when parsing a broken message header. - cassandra: Fallback consistency settings weren't working correctly. - doveadm director status : "Initial config" was always empty - imapc: Various reconnection fixes. - update pigeonhole to 0.4.18 + imapsieve plugin: Implemented the copy_source_after rule action. When this is enabled for a mailbox rule, the specified Sieve script is executed for the message in the source mailbox during a "COPY" event. This happens only after the Sieve script that is executed for the corresponding message in the destination mailbox finishes running successfully. + imapsieve plugin: Added non-standard Sieve environment items for the source and destination mailbox. - multiscript: The execution of the discard script had an implicit "keep", rather than an implicit "discard". - refreshed dovecot-2.2.18-better_ssl_defaults.patch - moved the libdovecot-ldap.so symlink to the devel package- dcrypt is only build with ECC enabled openssl. This seems to be missing on SLE 11. Guard against that now.- update pigeonhole to 0.4.17 - LDA Sieve plugin: Fixed handling of an early explicit keep during multiscript execution. Action side-effects and the message snapshot would be lost at the final stage where the implicit keep is evaluated. This could result in the IMAP flags assigned to the message to be forgotten or that headers modified by the "editheader" extension would revert to their original state. - file script storage: Amended the up-to-date time stamp comparison for on-disk binaries to include nanoseconds. This will fix problems occurring when both binary and script are saved within the same second. This fix is ineffective on older systems that have no support for nanoseconds in stat() timestamps, which should be pretty rare nowadays. - file script storage: Improve saving and listing permission error to include more details. - imapsieve plugin: Make sure "INBOX" is upper case in static mailbox rules. Otherwise, the mailbox name would never match, since matching is performed case-sensitively and Dovecot only returns the upper-cased "INBOX". - imapsieve plugin: Fixed assert failure occurring when used with virtual mailboxes. - doveadm sieve plugin: Fixed crash when setting Sieve script via attribute's string value.- update to 2.2.28 * director: "doveadm director move" to same host now refreshes user's timeout. This allows keeping user constantly in the same backend by just periodically moving the user there. * When new mailbox is created, use initially INBOX's dovecot.index.cache caching decisions. * Expunging mails writes GUID to dovecot.index.log now only if the GUID is quickly available from index/cache. * pop3c: Increase timeout for PASS command to 5 minutes. * Mail access errors are no longer ignored when searching or sorting. With IMAP the untagged SEARCH/SORT reply is still sent the same as before, but NO reply is returned instead of OK. + Make dovecot.list.index's filename configurable. This is needed when there are multiple namespaces pointing to the same mail root (e.g. lazy_expunge namespace for mdbox). + Add size.virtual to dovecot.index when folder vsizes are accessed (e.g. quota=count). This is mainly a workaround to avoid slow quota recalculation performance when message sizes get lost from dovecot.index.cache due to corruption or some other reason. + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support them in lib-dsasl for client side. + auth: Support filtering by SASL mechanism: passdb { mechanisms } + Shrink the mail processes' memory usage by not storing settings duplicated unnecessarily many times. + imap: Add imap_fetch_failure setting to control what happens when FETCH fails for some mails (see example-config). + imap: Include info about last command in disconnection log line. + imap: Created new SEARCH=X-MIMEPART extension. It's currently not advertised by default, since it's not fully implemented. + fts-solr: Add support for basic authentication. + Cassandra: Support automatically retrying failed queries if execution_retry_interval and execution_retry_times are set. + doveadm: Added "mailbox path" command. + mail_log plugin: If plugin { mail_log_cached_only=yes }, log the wanted fields only if it doesn't require opening the email. + mail_vsize_bg_after_count setting added (see example-config). + mail_sort_max_read_count setting added (see example-config). + pop3c: Added pop3c_features=no-pipelining setting to prevent using PIPELINING extension even though it's advertised. - Index files: day_first_uid wasn't updated correctly since v2.2.26. This caused dovecot.index.cache to be non-optimal. - imap: SEARCH/SORT may have assert-crashed in client_check_command_hangs - imap: FETCH X-MAILBOX may have assert-crashed in virtual mailboxes. - imap: Running time in tagged command reply was often wrongly 0. - search: Using NOT n:* or NOT UID n:* wasn't handled correctly - director: doveadm director kick was broken - director: Fix crash when using director_flush_socket - director: Fix some bugs when moving users between backends - imapc: Various error handling fixes and improvements - master: doveadm process status output had a lot of duplicates. - autoexpunge: If mailbox's rename timestamp is newer than mail's save-timestamp, use it instead. This is useful when autoexpunging e.g. Trash/* and an entire mailbox is deleted by renaming it under Trash to prevent it from being autoexpunged too early. - autoexpunge: Multiple processes may have been trying to expunge the same mails simultaneously. This was problematic especially with lazy_expunge plugin. - auth: %{passdb:*} was empty in auth-worker processes - auth-policy: hashed_password was always sent empty. - dict-sql: Merge multiple UPDATEs to a single statement if possible. - fts-solr: Escape {} chars when sending queries - fts: fts_autoindex_exclude = \Special-use caused crashes - doveadm-server: Fix leaks and other problems when process is reused for multiple requests (service_count != 1) - sdbox: Fix assert-crash on mailbox create race - lda/lmtp: deliver_log_format values weren't entirely correct if Sieve was used. especially %{storage_id} was broken. - lmtp_user_concurrency_limit didn't work if userdb changed username - drop obsolete patches: dovecot-2.2.27-endian.patch 79195413c349af7f9ce26871bf79c70af07ea7ce.patch- Remove superfluous insserv PreReq.- added dovecot-2.2.27-endian.patch: fixes testsuite on s390(x)- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch: backport patch from git to fix crashes when using FTS plugins- update to 2.2.27 * dovecot.list.index.log rotation sizes/times were changed so that the .log file stays smaller and .log.2 is deleted sooner. + Added mail_crypt plugin that allows encryption of stored emails. See http://wiki2.dovecot.org/Plugins/MailCrypt + stats: Global stats can be sent to Carbon server by setting stats_carbon_server=ip:port + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't send ID/XCLIENT + Added generic hash modifier for %variables: %{;rounds=,truncate=,salt=s>:field} Hash algorithm is any of the supported ones, e.g. md5, sha1, sha256. Also "pkcs5" is supported using SHA256. For example: %{sha256:user} or %{md5;truncate=32:user}. + Added support for SHA3-256 and SHA3-512 hashes. + config: Support DNS wildcards in local_name, e.g. local_name *.example.com { .. } matches anything.example.com, but not multiple.anything.example.com. + config: Support multiple names in local_name, e.g. local_name "1.example.com 2.example.com" { .. } - Fixed crash in auth process when auth-policy was configured and authentication was aborted/failed without a username set. - director: If two users had different tags but the same hash, the users may have been redirected to the wrong tag's hosts. - Index files may have been thought incorrectly lost, causing "Missing middle file seq=.." to be logged and index rebuild. This happened more easily with IMAP hibernation enabled. - Various fixes to restoring state correctly in un-hibernation. - dovecot.index files were commonly 4 bytes per email too large. This is because 3 bytes per email were being wasted that could have been used for IMAP keywords. - Various fixes to handle dovecot.list.index corruption better. - lib-fts: Fixed assert-crash in address tokenizer with specific input. - Fixed assert-crash in HTML to text parsing with specific input (e.g. for FTS indexing or snippet generation) - doveadm sync -1: Fixed handling mailbox GUID conflicts. - sdbox, mdbox: Perform full index rebuild if corruption is detected inside lib-index, which runs index fsck. - quota: Don't skip quota checks when moving mails between different quota roots. - search: Multiple sequence sets or UID sets in search parameters weren't handled correctly. They were incorrectly merged together. - refreshed patches to apply cleanly again dovecot-2.2.18-better_ssl_defaults.patch dovecot-2.2.18-dont_use_etc_ssl_certs.patch - drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream- update to 2.2.26.0 - Fixed some compiling issues. - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and multiple passdbs. - auth: Fixed crash when exporting to auth-worker passdb extra fields that had empty values. - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit * master: Removed hardcoded 511 backlog limit for listen(). The kernel should limit this as needed. * doveadm import: Source user is now initialized the same as target user. Added -U parameter to override the source user. * Mailbox names are no longer limited to 16 hierarchy levels. We'll check another way to make sure mailbox names can't grow larger than 4096 bytes. + Added a concept of "alternative usernames" by returning user_* extra field(s) in passdb. doveadm proxy list shows these alt usernames in "doveadm proxy list" output. "doveadm director&proxy kick" adds -f parameter. The alt usernames don't have to be unique, so this allows creation of user groups and kicking them in one command. + auth: passdb/userdb dict allows now %variables in key settings. + auth: If passdb returns noauthenticate=yes extra field, assume that it only set extra fields and authentication wasn't actually performed. + auth: passdb static now supports password={scheme} prefix. + auth, login_log_format_elements: Added %{local_name} variable, which expands to TLS SNI hostname if given. + imapc: Added imapc_max_line_length to limit maximum memory usage. + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic logs. This replaces at least partially the rawlog plugin. + dsync: Added dsync_features=empty-header-workaround setting. This makes incremental dsyncs work better for servers that randomly return empty headers for mails. When an empty header is seen for an existing mail, dsync assumes that it matches the local mail. + doveadm sync/backup: Added -I parameter to skip too large mails. + doveadm sync/backup: Fixed -t parameter and added -e for "end date". + doveadm mailbox metadata: Added -s parameter to allow accessing server metadata by using empty mailbox name. + Added "doveadm service status" and "doveadm process status" commands. + director: Added director_flush_socket. See http://wiki2.dovecot.org/Director#Flush_socket + doveadm director flush: Users are now moved only max 100 at a time to avoid load spikes. --max-parallel parameter overrides this. + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a warning if any lock is waited on or kept for this many milliseconds. - master process's listener socket was leaked to all child processes. This might have allowed untrusted processes to capture and prevent "doveadm service stop" comands from working. - login proxy: Fixed crash when outgoing SSL connections were hanging. - auth: userdb fields weren't passed to auth-workers, so %{userdb:*} from previous userdbs didn't work there. - auth: Each userdb lookup from cache reset its TTL. - auth: Fixed auth_bind=yes + sasl_bind=yes to work together - auth: Blocking userdb lookups reset extra fields set by previous userdbs. - auth: Cache keys didn't include %{passdb:*} and %{userdb:*} - auth-policy: Fixed crash due to using already-freed memory if policy lookup takes longer than auth request exists. - lib-auth: Unescape passdb/userdb extra fields. Mainly affected returning extra fields with LFs or TABs. - lmtp_user_concurrency_limit>0 setting was logging unnecessary anvil errors. - lmtp_user_concurrency_limit is now checked before quota check with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work. - lmtp: %{userdb:*} variables didn't work in mail_log_prefix - autoexpunge settings for mailboxes with wildcards didn't work when namespace prefix was non-empty. - Fixed writing >2GB to iostream-temp files (used by fs-compress, fs-metawrap, doveadm-http) - director: Ignore duplicates in director_servers setting. - director: Many fixes related to connection handshaking, user moving and error handling. - director: Don't break with shutdown_clients=no - zlib, IMAP BINARY: Fixed internal caching when accessing multiple newly created mails. They all had UID=0 and the next mail could have wrongly used the previously cached mail. - doveadm stats reset wasn't reseting all the stats. - auth_stats=yes: Don't update num_logins, since it doubles them when using with mail stats. - quota count: Fixed deadlocks when updating vsize header. - dict-quota: Fixed crashes happening due to memory corruption. - dict proxy: Fixed various timeout-related bugs. - doveadm proxying: Fixed -A and -u wildcard handling. - doveadm proxying: Fixed hangs and bugs related to printing. - imap: Fixed wrongly triggering assert-crash in client_check_command_hangs. - imap proxy: Don't send ID command pipelined with nopipelining=yes - imap-hibernate: Don't execute quota_over_script or last_login after un-hibernation. - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in one IP packet. - imap-hibernate: Fixed various failures when un-hibernating. - fts: fts_autoindex=yes was broken in 2.2.25 unless fts_autoindex_exclude settings existed. - fts-solr: Fixed searching multiple mailboxes (patch by x16a0) - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed a crash with certain emails. - pop3-migration + dbox: Various fixes related to POP3 UIDL optimization in 2.2.25. - pop3-migration: Fixed "truncated email header" workaround. - update pigeonhole to 0.4.15 * Part of the Sieve extprograms implementation was moved to Dovecot, which means that this release depends on Dovecot v2.2.26+. * ManageSieve: The PUTSCRIPT command now allows uploading empty Sieve scripts. There was really no good reason to disallow doing that. + Sieve vnd.dovecot.report extension: + Added a Dovecot-Reporting-User field to the report body, which contains the e-mail address of the user sending the report. + Added support for configuring the "From:" address used in the report. + LDA sieve plugin: Implemented support for a "discard script" that is run when the message is going to be discarded. This allows doing something other than throwing the message away for good. + Sieve vnd.dovecot.environment extension: Added vnd.dovecot.config.* environment items. These environment items map to sieve_env_* settings from the plugin {} section in the configuration. Such values can of course also be returned from userdb. + Sieve vacation extension: Use the Microsoft X-Auto-Response-Suppress header to prevent unwanted responses from and to (older) Microsoft products. + ManageSieve: Added rawlog_dir setting to store ManageSieve traffic logs. This replaces at least partially the rawlog plugin (mimics similar IMAP/POP3 change). - doveadm sieve plugin: synchronization: Prevent setting file timestamps to unix epoch time. This occurred when Dovecot passed the timestamp as 'unknown' during synchronization. - Sieve exprograms plugin: Fixed spurious '+' sometimes returned at the end of socket-based program output. - imapsieve plugin: Fixed crash occurring in specific situations. - Performed various fixes based on static analysis and Clang warnings. - drop obsolete patches: 0001-auth-Introduce-db_ldap_bind_sasl-function.patch 0002-auth-Fix-default-SASL-bind-for-LDAP.patch- added dovecot-2.2.25-umask_for_mkcert.patch: CVE-2016-4983 (bnc #984639)- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch 0002-auth-Fix-default-SASL-bind-for-LDAP.patch: Fix LDAP based authentication for some setups (boo #1003952)- update pigeonhole to 0.4.15 * vacation extension: The sieve_user_email setting is now used in the check for implicit delivery. - imapsieve plugin: For any mail transaction, the mailbox was opened a second time, even if no mailbox rule matched. This was unintentional, useless and caused problems when the imapsieve plugin was used with other plugins like acl. - extprograms plugin: Significantly improved error handling. No stream errors were logged. - extprograms plugin: Fixed bug in handling of result code from remote program (script service). - extprograms plugin: Connection to remote program service was not retried. - Several small fixes based on static analysis. - Fixed handling of quoted string localparts in email addresses.- update to 2.2.25 * lmtp: Start tracking lmtp_user_concurrency_limit and reject already at RCPT TO stage. This avoids MTA unnecessarily completing DATA only to get an error. * doveadm: Previously only mail settings were read from protocol doveadm { .. } section. Now all settings are. + quota: Added quota_over_flag_lazy_check setting. It avoids checking quota_over_flag always at startup. Instead it's checked only when quota is being read for some other purpose. + auth: Added a new auth policy service: http://wiki2.dovecot.org/Authentication/Policy + auth: Added PBKDF2 password scheme + auth: Added %{auth_user}, %{auth_username} and %{auth_domain} + auth: Added ":remove" suffix to extra field names to remove them. + auth: Added "delay_until=[+]" passdb extra field. The auth will wait until and optionally some randomness and then return success. + dict proxy: Added idle_msecs= parameter. Support async operations. + Performance improvements for handling large mailboxes. + Added lib-dcrypt API for providing cryptographic functions. + Added "doveadm mailbox update" command + imap commands' output now includes timing spent on the "syncing" stage if it's larger than 0. + cassandra: Added metrics= to connect setting to output internal statistics in JSON format every second to . + doveadm mailbox delete: Added -e parameter to delete only empty mailboxes. Added --unsafe option to quickly delete a mailbox, bypassing lazy_expunge and quota plugins. + doveadm user & auth cache flush are now available via doveadm-server. + doveadm service stop will stop specified services while leaving the rest of Dovecot running. + quota optimization: Avoid reading mail sizes for backends which don't need them (count, fs, dirsize) + Added mailbox { autoexpunge_max_mails= } setting. + Added welcome plugin: http://wiki2.dovecot.org/Plugins/Welcome + fts: Added fts_autoindex_exclude setting. - v2.2.24's MIME parser was assert-crashing on mails having truncated MIME headers. - auth: With multiple userdbs the final success/failure result wasn't always correct. The last userdb's result was always used. - doveadm backup was sometimes deleting entire mailboxes unnecessarily. - doveadm: Command -parameters weren't being sent to doveadm-server. - If dovecot.index read failed e.g. because mmap() reached VSZ limit, an empty index could have been opened instead, corrupting the mailbox state. - imapc: Fixed EXPUNGE handling when imapc_features didn't have modseq. - lazy-expunge: Fixed a crash when copying failed. Various other fixes. - fts-lucene: Fixed crash on index rescan. - auth_stats=yes produced broken output - dict-ldap: Various fixes - dict-sql: NULL values crashed. Now they're treated as "not found". - update pigeonhole 0.4.15.rc1 - imapsieve plugin: For any mail transaction, the mailbox was opened a second time, even if no mailbox rule matched. This was unintentional, useless and caused problems when the imapsieve plugin was used with other plugins like acl. - extprograms plugin: Significantly improved error handling. No stream errors were logged. - Several small fixes based on static analysis. - drop patch dovecot-2.2.24-lucene-crashfix.patch- fixed crash in fts-lucene dovecot-2.2.24-lucene-crashfix.patch https://github.com/dovecot/core/commit/0f801c1bd3d684c219d7f3b1e75f8b85f66f7951- update pigeonhole 0.4.14 * The address test now allows specifying the X-Original-To header. + Implemented the Sieve imapsieve extension and its IMAP counterpart (RFC 6785) as a set of plugins. This allows running Sieve scripts at IMAP activity, rather than at delivery. There are also facilities for the familiar sieve_before/sieve_after administrator scripts. A user script is defined for a mailbox using an IMAP METADATA entry, whereas administrator scripts are configured using mailbox matching rules defined in the plugin settings. + Adjusted the Sieve ihave extension to allow capability tests to be performed at runtime. This way, scripts can be written that work both at delivery and from IMAP. + Implemented support for runtime trace debugging. This means that detailed information about which commands, actions and tests are performed is written to a file. That file is created in the configured directory, but only if that directory exists. This way, a particular user can be easily singled out for debugging. This works much like the Dovecot rawlog facility. The trace output is identical to what is produced using sieve-test with its "-t" command line option. + Added a "sieve_user_email" setting that configures the user's primary email address. This is mainly useful to have a user email address available in IMAP, where envelope data is unavailable. + Implemented the dovecot-specific "vnd.dovecot.report" extension. This allows sending report messages in the Message Abuse Reporting Format (RFC 5965). - extprograms plugin: Fixed epoll() panic caused by closing the output FD before the output stream. - Made sure that the local part of a mail address is encoded properly using quoted string syntax when it is not a dot-atom.- update to 2.2.24 * doveconf now warns if it sees a global setting being changed when the same setting was already set inside some filters. (A common mistake has been adding more plugins to a global mail_plugins setting after it was already set inside protocol { .. }, which caused the global setting to be ignored for that protocol.) * LMTP proxy: Increased default timeout 30s -> 125s. This makes it less likely to reach the timeout and cause duplicate deliveries. * LMTP and indexer now append ":suffix" to session IDs to make it unique for the specific user's delivery. (Fixes duplicate session ID warnings in stats process.) + Added dict-ldap for performing read-only LDAP dict lookups. + lazy-expunge: All mails can be saved to a single specified mailbox. + mailbox { autoexpunge } supports now wildcards in mailbox names. + doveadm HTTP API: Added support for proxy commands + imapc: Reconnect when getting disconnected in non-selected state. + imapc: Added imapc_features=modseq to access MODSEQs/HIGHESTMODSEQ. This is especially useful for incremental dsync. + doveadm auth/user: Auth lookup performs debug logging if -o auth_debug=yes is given to doveadm. + Added passdb/userdb { auth_verbose=yes|no } setting. + Cassandra: Added user, password, num_threads, connect_timeout and request_timeout settings. + doveadm user -e : Print with %variables expanded. - Huge header lines could have caused Dovecot to use too much memory (depending on config and used IMAP commands). (Typically this would result in only the single user's process dying with out of memory due to reaching service { vsz_limit } - not a global DoS). - dsync: Detect and handle invalid/stale -s state string better. - dsync: Fixed crash caused by specific mailbox renames - auth: Auth cache is now disabled passwd-file. It was unnecessary and it broke %variables in extra fields. - fts-tika: Don't crash if it returns 500 error - dict-redis: Fixed timeout handling - SEARCH INTHREAD was crashing - stats: Only a single fifo_listeners was supported, making it impossible to use both auth_stats=yes and mail stats plugin. - SSL errors were logged in separate "Stacked error" log lines instead of as part of the disconnection reason. - MIME body parser didn't handle properly when a child MIME part's --boundary had the same prefix as the parent.- update to 2.2.23 * Various fixes to doveadm. Especially running commands via doveadm-server was broken. * director: Fixed user weakness getting stuck in some situations * director: Fixed a situation where directors keep re-sending different states to each others and never becoming synced. * director: Fixed assert-crash related to a slow "user killed" reply * Fixed assert-crash related to istream-concat, which could have been triggered at least by a Sieve script.- update pigeonhole to 0.4.13 * redirect action: Added the list-id header to the duplicate ID for mail loop prevention. This means that the message sent directly to the user and the message coming through the mailing list itself are treated as different messages by the loop detection of the redirect command, even though their Message-ID may be identical. * Changed the Sieve number type to uint64_t, which means that Sieve numbers can now technically range up to 2^64. Some other Sieve implementation allowed this, making this change necessary for successful migration. + Implemented the sieve_implicit_extensions setting. The extensions listed in this setting do not need to be enabled explicitly using the Sieve "require" command. This behavior directly violates the standard, but can be necessary for compatibility with some existing implementations of Sieve. Do not use this setting unless you really need to! - redirect action: Made mail loop detection more robust by forcibly adding a Message-ID header if it is missing. - Prevent logging a useless "script not found" error message for LDAP scripts for which the entry exists but no attribute containing a script. This is not necessarily an error. - extprograms plugin: Changed the communication channel between parent and child process for a directly forked program from a socketpair to a double pipe. Linux does not support /dev/stdin, /dev/stdout and friends for sockets. For some shell program authors this may be confusing, so that is why it is changed. When using the script service, these device nodes are still not usable though.- update to 2.2.22 + Added doveadm HTTP API: See http://wiki2.dovecot.org/Design/DoveadmProtocol/HTTP + virtual plugin: Mailbox filtering can now be done based on the mailbox metadata. See http://wiki2.dovecot.org/Plugins/Virtual + stats: Added doveadm stats reset to reset global stats. + stats: Added authentication statistics if auth_stats=yes. + dsync, imapc, pop3c & pop3-migration: Many optimizations, improvements and error handling fixes. + doveadm: Most commands now stop soon after SIGINT/SIGTERM. - auth: Auth caching was done too aggressively when %variables were used in default_fields, override_fields or LDAP pass/user_attrs. userdb result_* were also ignored when user was found from cache. - imap: Fixed various assert-crashes caused v2.2.20+. Some of them caught actual hangs or otherwise unwanted behavior towards IMAP clients. - Expunges were forgotten in some situations, for example when pipelining multiple IMAP MOVE commands. - quota: Per-namespaces quota were broken for dict and count backends in v2.2.20+ - fts-solr: Search queries were using OR instead of AND as the separator for multi-token search queries in v2.2.20+. - Single instance storage support wasn't really working in v2.2.16+ - dbox: POP3 message ordering wasn't working correctly. - virtual plugin: Fixed crashes related to backend mailbox deletions. - update pigeonhole to 0.4.13.rc1 * redirect action: Added the list-id header to the duplicate ID for mail loop prevention. This means that the message sent directly to the user and the message coming through the mailing list itself are treated as different messages by the loop detection of the redirect command, even though their Message-ID may be identical. * Changed the Sieve number type to uint64_t, which means that Sieve numbers can now technically range up to 2^64. Some other Sieve implementation allowed this, making this change necessary for successful migration. + Implemented the sieve_implicit_extensions setting. The extensions listed in this setting do not need to be enabled explicitly using the Sieve "require" command. This behavior direct violates the standard, but can be necessary for compatibility with some existing implementations of Sieve. Do not use this setting unless you really need to! - redirect action: Made mail loop detection more robust by forcibly adding a Message-ID header if it is missing. - Prevent logging a useless "script not found" error message for LDAP scripts for which the entry exists but no attribute containing a script. This is not necessarily an error. - extprograms plugin: Changed the communication channel between parent and child process for a directly forked program from a socketpair to a double pipe. Linux does not support /dev/stdin, /dev/stdout and friends for sockets. For some shell program authors this may be confusing, so that is why it is changed. When using the script service, these device nodes are still not usable though. - drop patches included in version update: 3a719a01a1790df053854d5245ace5ab6d0c3d13.patch 6971937a6f3e93844dbd43bdbe903628e21a9422.patch- update pigeonhole to 0.4.12 + Implemented the Sieve extracttext extension (RFC 5703; Section 7). It is now possible to extract body text from a message into a variable. * Increased ABI version due to changes in the Sieve interpreter's object definitions. - multiscript: Fixed bug in handling of (implicit) keep; final keep action was always executed as though there was a failure. This caused the keep action to revert back to the initial message, causing editheader actions to be ignored. - managesieve-login: Fixed proxy to allow SASL mechanisms other than PLAIN. Before, the proxy would fail if the server did not support the PLAIN mechanism. - ldap storage: Prevent segfault occurring when assigning certain (global) configuration options.- update pigeonhole to 0.4.11 no noticable changes compared to rc1- update pigeonhole to 0.4.11.rc1 - Sieve mime extension: Fixed the header :mime :anychild test to work properly outside a foreverypart loop. - Several fixes in message body part handling: - Fixed assert failure occurring when text extraction is attempted on an empty or broken text part. - Fixed assert failure in handling of body parts that are converted to text. - Fixed header unfolding for (mime) headers parsed from any mime part. - Fixed trimming for (mime) headers parsed from any mime part. - Fixed erroneous changes to the message part tree structure performed when re-parsing the message. - LDA Sieve plugin: Fixed logging of actions; sometimes the configured log format was not followed. - LDA Sieve plugin: Fixed bug in error handling of script storage initialization. - Sieve Extprograms plugin: Ignored ENOTCONN error in shutdown(fd, SHUT_WR) call. - Fixed duplication of discard actions in the script result. Each discard was counted as a separate action, which means that action limit would be crossed too early. - Made sure that quota errors never get logged as errors in syslog. - Fixed handling of implicit keep for a partially executed transaction that yielded a temporary failure. - Fixed handling of global errors. If master and user error handler were identical, in some cases the log message could be lost. - Fixed AIX compile issue in message body parser.- move stopword files from the lucene package to the main FTS package- update pigeonhole to 0.4.10 - Renamed pigeonhole.m4 to dovecot-pigeonhole.m4- pulled 2 patches from upstream: 3a719a01a1790df053854d5245ace5ab6d0c3d13.patch 6971937a6f3e93844dbd43bdbe903628e21a9422.patch- for more consistent build behavior enable clucene support only on distros newer than SLE 11- update to 2.2.21 - doveadm mailbox list (and some others) were broken in v2.2.20 - director: Fixed making backend changes when running with only a single director server. - virtual plugin: Fixed crash when trying to open nonexistent autocreated backend mailbox.- update to 2.2.20 + Added mailbox { autoexpunge=