-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-11873 2009-11-20 04:27:26 --------------------------------------------------------------------------------
Name : dovecot Product : Fedora 11 Version : 1.2.8 Release : 2.fc11 URL : http://www.dovecot.org/ Summary : Secure imap and pop3 server Description : Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages. -------------------------------------------------------------------------------- Update Information: - updated to dovecot 1.2.8 - add man pages - virtual: When using a lot of mailboxes, the virtual mailbox's header could have grown over 32 kB and caused "out of memory" crashes. Also over 64 kB headers couldn't even be updated with existing transaction log records. Added a new record type that gets used with >=64 kB headers. Older Dovecot versions don't understand this header and will log errors if they see it. - FETCH BODYSTRUCTURE didn't return RFC 2231 "key*" fields correctly - IMAP: IDLE now sends "Still here" notifications to same user's connections at the same time. This hopefully reduces power usage of some mobile clients that use multiple IDLEing connections. - IMAP: If imap_capability is set, show it in the login banner. - IMAP: Implemented SORT=DISPLAY extension. - Login process creation could have sometimes failed with epoll_ctl() errors or without epoll probably some other strange things could have happened. - Maildir: Fixed some performance issues - Maildir: Fixed crash when using a lot of keywords. - Several fixes to QRESYNC extension and modseq handling - mbox: Make sure failed saves get rolled back with NFS. - dbox: Several fixes. -------------------------------------------------------------------------------- ChangeLog: * Tue Nov 24 2009 Michal Hlavinka <[email protected]> - 1:1.2.8-2 - fix dovecot's restart after update (#518753) * Fri Nov 20 2009 Michal Hlavinka <[email protected]> - 1:1.2.8-1 - update to dovecot 1.2.8 * Mon Nov 16 2009 Michal Hlavinka <[email protected]> - 1:1.2.7-2 - use originall managesieve to dovecot diff * Fri Nov 13 2009 Michal Hlavinka <[email protected]> - 1:1.2.7-1 - updated to dovecot 1.2.7 - spec cleanup - add man pages - IMAP: IDLE now sends "Still here" notifications to same user's connections at the same time. This hopefully reduces power usage of some mobile clients that use multiple IDLEing connections. - IMAP: If imap_capability is set, show it in the login banner. - IMAP: Implemented SORT=DISPLAY extension. - Login process creation could have sometimes failed with epoll_ctl() errors or without epoll probably some other strange things could have happened. - Maildir: Fixed some performance issues - Maildir: Fixed crash when using a lot of keywords. - Several fixes to QRESYNC extension and modseq handling - mbox: Make sure failed saves get rolled back with NFS. - dbox: Several fixes. * Wed Oct 21 2009 Michal Hlavinka <[email protected]> - 1:1.2.6-3 - imap-login: If imap_capability is set, show it in the banner instead of the default (#524485) - sieve updated to 0.1.13 which brings these changes: - Body extension: implemented proper handling of the :raw transform and added various new tests to the test suite. However, :content "multipart" and :content "message/rfc822" are still not working. - Fixed race condition occuring when multiple instances are saving the same binary (patch by Timo Sirainen). - Body extension: don't give SKIP_BODY_BLOCK flag to message parser, we want the body! - Fixed bugs in multiscript support; subsequent keep actions were not always merged correctly and implicit side effects were not always handled correctly. - Fixed a segfault bug in the sieve-test tool occuring when compile fails. - Fixed segfault bug in action procesing. It was triggered while merging side effects in duplicate actions. - Fixed bug in the Sieve plugin that caused it to try to stat() a NULL path, yielding a 'Bad address' error. * Fri Oct 9 2009 Michal Hlavinka <[email protected]> - 1:1.2.6-2 - fix init script for case when no action was specified * Tue Oct 6 2009 Michal Hlavinka <[email protected]> - 1:1.2.6-1 - dovecot updated to 1.2.6 - Added authtest utility for doing passdb and userdb lookups. - login: ssl_security string now also shows the used compression. - quota: Don't crash with non-Maildir++ quota backend. - imap proxy: Fixed crashing with some specific password characters. - fixed broken dovecot --exec-mail. - Avoid assert-crashing when two processes try to create index at the same time. * Fri Sep 18 2009 Michal Hlavinka <[email protected]> - 1:1.2.5-1 - updated to dovecot 1.2.5 - Authentication: DIGEST-MD5 and RPA mechanisms no longer require user's login realm to be listed in auth_realms. It only made configuration more difficult without really providing extra security. - zlib plugin: Don't allow clients to save compressed data directly. This prevents users from exploiting (most of the) potential security holes in zlib/bzlib. - fix index file handling that could have caused an assert-crash - IMAP: Fixes to QRESYNC extension. - deliver: Don't send rejects to any messages that have Auto-Submitted header. This avoids emails loops. * Fri Aug 21 2009 Michal Hlavinka <[email protected]> - 1:1.2.4-1 - updated: dovecot 1.2.4, managesieve 0.11.9, sieve 0.1.12 - fixed a crash in index file handling - fixed a crash in saving messages where message contained a CR character that wasn't followed by LF - fixed a crash when listing shared namespace prefix - sieve: implemented the new date extension. This allows matching against date values in header fields and the current date at the time of script evaluation - managesieve: reintroduced ability to abort SASL with "*" response * Mon Aug 10 2009 Michal Hlavinka <[email protected]> - 1:1.2.3-1 - updated: dovecot 1.2.3, managesieve 0.11.8, sieve 0.1.11 - Mailbox names with control characters can't be created anymore. Existing mailboxes can still be accessed though. - Allow namespace prefix to be opened as mailbox, if a mailbox already exists in the root dir. - Maildir: dovecot-uidlist was being recreated every time a mailbox was accessed, even if nothing changed. - listescape plugin was somewhat broken - ldap: Fixed hang when >128 requests were sent at once. - fts_squat: Fixed crashing when searching virtual mailbox. - imap: Fixed THREAD .. INTHREAD crashing. * Tue Jul 28 2009 Michal Hlavinka <[email protected]> - 1:1.2.2-1.20090728snap - updated to post 1.2.2 snapshot (including post release GSSAPI fix) - Fixed "corrupted index cache file" errors - IMAP: FETCH X-* parameters weren't working. - Maildir++ quota: Quota was sometimes updated wrong - Dovecot master process could hang if it received signals too rapidly * Thu Jul 23 2009 Michal Hlavinka <[email protected]> - 1:1.2.1-2 - updated sieve plugin to 0.1.9 * Mon Jul 13 2009 Michal Hlavinka <[email protected]> - 1:1.2.1-1 - updated to 1.2.1 - GSSAPI authentication is fixed (#506782) - logins now fail if home directory path is relative, because it was not working correctly and never was expected to work - sieve and managesieve update * Wed Jul 8 2009 Michal Hlavinka <[email protected]> - 1:1.2.0-3 - update sieve and managesieve plugins * Tue Jul 7 2009 Michal Hlavinka <[email protected]> - 1:1.2.0-2 - update sieve plugin * Thu Jul 2 2009 Michal Hlavinka <[email protected]> - 1:1.2.0-1 - updated to 1.2.0 * Thu Jun 25 2009 Michal Hlavinka <[email protected]> - 1:1.2-0.rc6.1 - updated to 1.2.rc6 * Fri Jun 19 2009 Michal Hlavinka <[email protected]> - 1:1.2-0.rc5.2 - managesieve updated to 0.11.5 for dovecot rc5 * Thu Jun 18 2009 Michal Hlavinka <[email protected]> - 1:1.2-0.rc5.1 - updated to 1.2.rc5 * Mon Apr 20 2009 Michal Hlavinka <[email protected]> - 1:1.2-0.rc3.1 - updated to 1.2.rc3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #526169 - Missing man-pages https://bugzilla.redhat.com/show_bug.cgi?id=526169 [ 2 ] Bug #518753 - dovecot not restarted after yum update https://bugzilla.redhat.com/show_bug.cgi?id=518753 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update dovecot' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list [email protected] http://www.redhat.com/mailman/listinfo/fedora-package-announce
