Hello community, here is the log from the commit of package dovecot23 for openSUSE:Factory checked in at 2018-10-02 19:49:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/dovecot23 (Old) and /work/SRC/openSUSE:Factory/.dovecot23.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "dovecot23" Tue Oct 2 19:49:09 2018 rev:11 rq:639470 version:2.3.3 Changes: -------- --- /work/SRC/openSUSE:Factory/dovecot23/dovecot23.changes 2018-07-22 23:05:45.368896767 +0200 +++ /work/SRC/openSUSE:Factory/.dovecot23.new/dovecot23.changes 2018-10-02 19:49:42.285688629 +0200 @@ -1,0 +2,67 @@ +Mon Oct 1 22:55:38 UTC 2018 - Marcus Rueckert <mrueck...@suse.de> + +- update pigeonhole to 0.5.3 + - Fix assertion panic occurring when managesieve service fails to + open INBOX while saving a Sieve script. This was caused by a + lack of cleanup after failure. + - Fix specific messages causing an assert panic with actions that + compose a reply (e.g. vacation). With some rather weird input + from the original message, the header folding algorithm (as + used for composing the References header for the reply) got + confused, causing the panic. + - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command + parsing. After finishing reading the Sieve script, the command + parsing sometimes didn't continue with the search arguments. + This is a time- critical bug that likely only occurs when the + Sieve script is sent in the next TCP frame. + +------------------------------------------------------------------- +Mon Oct 1 22:54:12 UTC 2018 - Marcus Rueckert <mrueck...@suse.de> + +- update to 2.3.3 + * doveconf hides more secrets now in the default output. + * ssl_dh setting is no longer enforced at startup. If it's not + set and non-ECC DH key exchange happens, error is logged and + client is disconnected. + + Added log_debug=<filter> setting. + + Added log_core_filter=<log filter> setting. + + quota-clone: Write to dict asynchronously + + --enable-hardening attempts to use retpoline Spectre 2 + mitigations + + lmtp proxy: Support source_ip passdb extra field. + + doveadm stats dump: Support more fields and output stddev + by default. + + push-notification: Add SSL support for OX backend. + - NUL bytes in mail headers can cause truncated replies when + fetched. + - director: Conflicting host up/down state changes may in some + rare situations ended up in a loop of two directors constantly + overwriting each others' changes. + - director: Fix hang/crash when multiple doveadm commands are + being handled concurrently. + - director: Fix assert-crash if doveadm disconnects too early + - virtual plugin: Some searches used 100% CPU for many seconds + - dsync assert-crashed with acl plugin in some situations. + - mail_attachment_detection_options=add-flags-on-save + assert-crashed with some specific Sieve scripts. + - Mail snippet generation crashed with mails containing invalid + Content-Type:multipart header. + - Log prefix ordering was different for some log lines. + - quota: With noenforcing option current quota usage wasn't + updated. + - auth: Kerberos authentication against Samba assert-crashed. + - stats clients were unnecessarily chatty with the stats server. + - imapc: Fixed various assert-crashes when reconnecting to + server. + - lmtp, submission: Fix potential crash if client disconnects + while handling a command. + - quota: Fixed compiling with glibc-2.26 / support libtirpc. + - fts-solr: Empty search values resulted in 400 Bad Request + errors + - fts-solr: default_ns parameter couldn't be used + - submission server crashed if relay server returned over 7 lines + in a reply (e.g. to EHLO) +- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch: + included in update + +------------------------------------------------------------------- Old: ---- 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch dovecot-2.3-pigeonhole-0.5.2.tar.gz dovecot-2.3-pigeonhole-0.5.2.tar.gz.sig dovecot-2.3.2.1.tar.gz dovecot-2.3.2.1.tar.gz.sig New: ---- dovecot-2.3-pigeonhole-0.5.3.tar.gz dovecot-2.3-pigeonhole-0.5.3.tar.gz.sig dovecot-2.3.3.tar.gz dovecot-2.3.3.tar.gz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dovecot23.spec ++++++ --- /var/tmp/diff_new_pack.lxDFHx/_old 2018-10-02 19:49:43.005687877 +0200 +++ /var/tmp/diff_new_pack.lxDFHx/_new 2018-10-02 19:49:43.009687873 +0200 @@ -17,11 +17,11 @@ Name: dovecot23 -Version: 2.3.2.1 +Version: 2.3.3 Release: 0 %define pkg_name dovecot -%define dovecot_version 2.3.2.1 -%define dovecot_pigeonhole_version 0.5.2 +%define dovecot_version 2.3.3 +%define dovecot_pigeonhole_version 0.5.3 %define dovecot_branch 2.3 %define dovecot_pigeonhole_source_dir %{pkg_name}-%{dovecot_branch}-pigeonhole-%{dovecot_pigeonhole_version} %define dovecot_pigeonhole_docdir %{_docdir}/%{pkg_name}/dovecot-pigeonhole @@ -136,7 +136,6 @@ Source12: dovecot23.keyring Patch: dovecot-2.3.0-dont_use_etc_ssl_certs.patch Patch1: dovecot-2.3.0-better_ssl_defaults.patch -Patch2: https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch Summary: IMAP and POP3 Server Written Primarily with Security in Mind License: BSD-3-Clause AND LGPL-2.1-or-later AND MIT Group: Productivity/Networking/Email/Servers @@ -316,7 +315,6 @@ %setup -q -n %{pkg_name}-%{dovecot_version} -a 1 %patch -p1 %patch1 -p1 -%patch2 -p1 gzip -9v ChangeLog # Fix plugins dir. sed -i 's|#mail_plugin_dir = /usr/lib/dovecot|mail_plugin_dir = %{_libdir}/dovecot/modules|' doc/example-config/conf.d/10-mail.conf ++++++ dovecot-2.3-pigeonhole-0.5.2.tar.gz -> dovecot-2.3-pigeonhole-0.5.3.tar.gz ++++++ ++++ 1871 lines of diff (skipped) ++++++ dovecot-2.3-pigeonhole-0.5.2.tar.gz -> dovecot-2.3.3.tar.gz ++++++ /work/SRC/openSUSE:Factory/dovecot23/dovecot-2.3-pigeonhole-0.5.2.tar.gz /work/SRC/openSUSE:Factory/.dovecot23.new/dovecot-2.3.3.tar.gz differ: char 5, line 1