Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package cyrus-imapd for openSUSE:Factory checked in at 2025-07-21 19:59:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cyrus-imapd (Old) and /work/SRC/openSUSE:Factory/.cyrus-imapd.new.8875 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cyrus-imapd" Mon Jul 21 19:59:32 2025 rev:4 rq:1294442 version:3.8.6 Changes: -------- --- /work/SRC/openSUSE:Factory/cyrus-imapd/cyrus-imapd.changes 2025-05-31 19:17:17.979831364 +0200 +++ /work/SRC/openSUSE:Factory/.cyrus-imapd.new.8875/cyrus-imapd.changes 2025-07-21 20:00:04.126507648 +0200 @@ -1,0 +2,25 @@ +Fri Jul 18 13:03:45 UTC 2025 - Matthias Gerstner <matthias.gerst...@suse.com> + +- add 0001-Squash-some-clang-complaints.patch: fix compile errors in 3.8 + release line occuring with newer compilers. + +------------------------------------------------------------------- +Tue Jul 15 12:09:11 UTC 2025 - Peter Varkoly <vark...@suse.com> + +- update to version 3.8.6 (bugfix release) + VUL-0: CVE-2025-49812: cyrus-imapd: Opossum Attack Application Layer + Desynchronization using Opportunistic TLS (bsc#1246165) + The industry is deprecating STARTTLS (aka opportunistic TLS) in favor of + implicit TLS over a dedicated port. STARTTLS is now disabled by default. + * Fixed issue #5477: master: tighten up pidfile/etc handling (bsc#1241543) + VUL-0: cyrus-imapd: privilege drop happens too late, opening attack vectors from cyrus to root + * Fixed issue #5450: fix zoneinfo_db code for GCC 15 (thanks Yadd) + * Fixed issue #5309: deadlock on shutdown (thanks Mark Cammidge) + * Fixed issue #5424: recognise service-specific SASL options in + ``cyr_info conf-lint`` + * Fixed issue #5420: fix double-free in http_admin (thanks Wolfgang Breyha) + * Fixed issue #5460: pop3d: add basic prometheus support (thanks Wolfgang + Breyha) + * Fixed issue #5454: httpd fails to parse OpenSSL version for status string + +------------------------------------------------------------------- Old: ---- cyrus-imapd-3.8.5.tar.gz cyrus-imapd-3.8.5.tar.gz.sig New: ---- 0001-Squash-some-clang-complaints.patch cyrus-imapd-3.8.6.tar.gz cyrus-imapd-3.8.6.tar.gz.sig ----------(New B)---------- New: - add 0001-Squash-some-clang-complaints.patch: fix compile errors in 3.8 release line occuring with newer compilers. ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cyrus-imapd.spec ++++++ --- /var/tmp/diff_new_pack.bh9XQy/_old 2025-07-21 20:00:05.074547100 +0200 +++ /var/tmp/diff_new_pack.bh9XQy/_new 2025-07-21 20:00:05.074547100 +0200 @@ -30,7 +30,7 @@ %global _servicename cyrus-imapd %define _sover 0 Name: cyrus-imapd -Version: 3.8.5 +Version: 3.8.6 Release: 0 Summary: The Cyrus IMAP and POP Mail Server License: BSD-3-Clause @@ -51,6 +51,7 @@ # PATCH-FIX-FEDORA -- Link Perl components against pcre2 # pending upstream discussion Patch8: perl-pcre2.patch +Patch9: 0001-Squash-some-clang-complaints.patch BuildRequires: autoconf >= 2.63 BuildRequires: automake @@ -106,7 +107,7 @@ %endif %endif -%sysusers_requires +#%%sysusers_requires Prereq: system-user-mail Requires: perl-Cyrus-Annotator = %{version} Requires: perl-Cyrus-IMAP = %{version} ++++++ 0001-Squash-some-clang-complaints.patch ++++++ >From f187c82604997991121c913732ffd95c161cbe27 Mon Sep 17 00:00:00 2001 From: Ken Murchison <mu...@fastmail.com> Date: Mon, 27 Feb 2023 11:09:51 -0500 Subject: [PATCH] Squash some clang complaints --- backup/cyr_backup.c | 3 --- imap/httpd.h | 2 +- imap/reconstruct.c | 2 +- imap/squat_build.c | 4 ---- imap/zoneinfo_db.c | 3 ++- 5 files changed, 4 insertions(+), 10 deletions(-) diff --git a/backup/cyr_backup.c b/backup/cyr_backup.c index 07d534454..ec3f752bd 100644 --- a/backup/cyr_backup.c +++ b/backup/cyr_backup.c @@ -730,7 +730,6 @@ static int cmd_json_chunks(struct backup *backup, struct backup_chunk *chunk = NULL; json_t *jchunks = NULL; struct stat data_stat_buf; - double total_length = 0.0; int r; (void) options; @@ -759,8 +758,6 @@ static int cmd_json_chunks(struct backup *backup, ratio = 100.0 * (data_stat_buf.st_size - chunk->offset) / chunk->length; } - total_length += chunk->length; - /* XXX which fields do we want? */ json_object_set_new(jchunk, "id", json_integer(chunk->id)); json_object_set_new(jchunk, "offset", json_integer(chunk->offset)); diff --git a/imap/httpd.h b/imap/httpd.h index 67279a942..43cf8205b 100644 --- a/imap/httpd.h +++ b/imap/httpd.h @@ -280,7 +280,7 @@ struct range { struct patch_doc_t { const char *format; /* MIME format of patch document */ - int (*proc)(); /* Function to parse and apply doc */ + int (*proc)(txn_t *, void *); /* Function to parse and apply doc */ }; typedef int (*encode_proc_t)(struct transaction_t *txn, diff --git a/imap/reconstruct.c b/imap/reconstruct.c index d5f355653..58f215a4b 100644 --- a/imap/reconstruct.c +++ b/imap/reconstruct.c @@ -821,7 +821,7 @@ static void reconstruct_mbentry(const char *header_path) mbentry->mbtype &= ~(MBTYPE_LEGACY_DIRS); token = tok_next(&tok); - if (strcmpnull(token, FNAME_HEADER+1) || tok_next(&tok)) { + if (strcmpnull(token, &FNAME_HEADER[1]) || tok_next(&tok)) { xzfree(mbentry->uniqueid); } } diff --git a/imap/squat_build.c b/imap/squat_build.c index b56717f30..b7dd51867 100644 --- a/imap/squat_build.c +++ b/imap/squat_build.c @@ -1163,7 +1163,6 @@ static int dump_doc_list_present_bits(SquatIndex *index, int start_present = docs->first_valid_entry; int end_present = docs->last_valid_entry; char *buf; - int present_count; /* If the leaf is empty, we should never get here! */ assert(start_present <= end_present); @@ -1175,7 +1174,6 @@ static int dump_doc_list_present_bits(SquatIndex *index, return SQUAT_ERR; } else { *buf++ = (char)end_present; - present_count = 1; } } else { int first_byte = start_present >> 3; @@ -1191,10 +1189,8 @@ static int dump_doc_list_present_bits(SquatIndex *index, *buf++ = (char)first_byte; *buf++ = (char)byte_count - 1; memset(buf, 0, byte_count); - present_count = 0; for (i = start_present; i <= end_present; i++) { if (docs->docs[i] != NULL) { - present_count++; buf[(i >> 3) - first_byte] |= 1 << (i & 7); } } diff --git a/imap/zoneinfo_db.c b/imap/zoneinfo_db.c index 3be631ccd..46f7c661a 100644 --- a/imap/zoneinfo_db.c +++ b/imap/zoneinfo_db.c @@ -243,7 +243,8 @@ struct findrock { const char *find; int tzid_only; time_t changedsince; - int (*proc)(); + int (*proc)(const char *tzid, int tzidlen, + struct zoneinfo *zi, void *rock); void *rock; }; -- 2.49.0 ++++++ cyrus-imapd-3.8.5.tar.gz -> cyrus-imapd-3.8.6.tar.gz ++++++ /work/SRC/openSUSE:Factory/cyrus-imapd/cyrus-imapd-3.8.5.tar.gz /work/SRC/openSUSE:Factory/.cyrus-imapd.new.8875/cyrus-imapd-3.8.6.tar.gz differ: char 13, line 1