-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-4021 2010-03-10 05:17:52 --------------------------------------------------------------------------------
Name : dovecot Product : Fedora 11 Version : 1.2.11 Release : 2.fc11 URL : http://www.dovecot.org/ Summary : Secure imap and pop3 server Description : Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages. -------------------------------------------------------------------------------- Update Information: - updated to 1.2.11 - mbox: Message header reading was unnecessarily slow. Fetching a huge header could have resulted in Dovecot eating a lot of CPU. Also searching messages was much slower than necessary. - maildir: Reading uidlist could have ended up in an infinite loop. - IMAP IDLE: v1.2.7+ caused extra load by checking changes every 0.5 seconds after a change had occurred in mailbox - fix missing bzip2 support in zlib plugin -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 12 2010 Michal Hlavinka <[email protected]> - 1:1.2.11-2 - fix missing bzip2 support in zlib plugin (#572797) * Tue Mar 9 2010 Michal Hlavinka <[email protected]> - 1:1.2.11-1 - updated to 1.2.11 - mbox: Message header reading was unnecessarily slow. Fetching a huge header could have resulted in Dovecot eating a lot of CPU. Also searching messages was much slower than necessary. - maildir: Reading uidlist could have ended up in an infinite loop. - IMAP IDLE: v1.2.7+ caused extra load by checking changes every 0.5 seconds after a change had occurred in mailbox * Mon Jan 25 2010 Michal Hlavinka <[email protected]> - 1:1.2.10-2 - updated sive and managesieve - Added preliminary support for Sieve plugins and added support for installing Sieve development headers - Variables extension: added support for variable namespaces. - Added configurable script size limit. Compiler will refuse to compile files larger than sieve_max_script_size. - Fixed a bug in the i;ascii-numeric comparator. If one of the strings started with a non-digit character, the comparator would always yield less-than. - Imap4flags extension: fixed bug in removeflag: removing a single flag failed due to off-by-one error (bug report by Julian Cowley). - Fixed parser recovery. In particular cases it would trigger spurious errors after an initial valid error and sometimes additional errors were inappropriately ignored. - Implemented ManageSieve QUOTA enforcement. - Added MAXREDIRECTS capability after login. - Implemented new script name rules specified in most recent ManageSieve draft. - Fixed assertion failure occuring with challenge-response SASL mechanisms. * Mon Jan 25 2010 Michal Hlavinka <[email protected]> - 1:1.2.10-1 - updated to 1.2.10 - %variables now support %{host}, %{pid} and %{env:ENVIRONMENT_NAME} everywhere. - LIST-STATUS capability is now advertised - maildir: Fixed several assert-crashes. - imap: LIST "" inbox shouldn't crash when using namespace with "INBOX." prefix. - lazy_expunge now ignores non-private namespaces. * Fri Dec 18 2009 Michal Hlavinka <[email protected]> - 1:1.2.9-1 - sieve updated to 0.1.14 - managesieve updated to 0.11.10 - updated to 1.2.9 - maildir: When saving, filenames now always contain ,S=<size>. Previously this was done only when quota plugin was loaded. It's required for zlib plugin and may be useful for other things too. - maildir: v1.2.7 and v1.2.8 caused assert-crashes in maildir_uidlist_records_drop_expunges() - maildir_copy_preserve_filename=yes could have caused crashes. - Maildir++ quota: % limits weren't updated when limits were read from maildirsize. - virtual: v1.2.8 didn't fully fix the "lots of mailboxes" bug - virtual: Fixed updating virtual mailbox based on flag changes. - fts-squat: Fixed searching multi-byte characters. * Tue Nov 24 2009 Michal Hlavinka <[email protected]> - 1:1.2.8-2 - fix dovecot's restart after update (#518753) * Fri Nov 20 2009 Michal Hlavinka <[email protected]> - 1:1.2.8-1 - update to dovecot 1.2.8 * Mon Nov 16 2009 Michal Hlavinka <[email protected]> - 1:1.2.7-2 - use originall managesieve to dovecot diff * Fri Nov 13 2009 Michal Hlavinka <[email protected]> - 1:1.2.7-1 - updated to dovecot 1.2.7 - spec cleanup - add man pages - IMAP: IDLE now sends "Still here" notifications to same user's connections at the same time. This hopefully reduces power usage of some mobile clients that use multiple IDLEing connections. - IMAP: If imap_capability is set, show it in the login banner. - IMAP: Implemented SORT=DISPLAY extension. - Login process creation could have sometimes failed with epoll_ctl() errors or without epoll probably some other strange things could have happened. - Maildir: Fixed some performance issues - Maildir: Fixed crash when using a lot of keywords. - Several fixes to QRESYNC extension and modseq handling - mbox: Make sure failed saves get rolled back with NFS. - dbox: Several fixes. * Wed Oct 21 2009 Michal Hlavinka <[email protected]> - 1:1.2.6-3 - imap-login: If imap_capability is set, show it in the banner instead of the default (#524485) - sieve updated to 0.1.13 which brings these changes: - Body extension: implemented proper handling of the :raw transform and added various new tests to the test suite. However, :content "multipart" and :content "message/rfc822" are still not working. - Fixed race condition occuring when multiple instances are saving the same binary (patch by Timo Sirainen). - Body extension: don't give SKIP_BODY_BLOCK flag to message parser, we want the body! - Fixed bugs in multiscript support; subsequent keep actions were not always merged correctly and implicit side effects were not always handled correctly. - Fixed a segfault bug in the sieve-test tool occuring when compile fails. - Fixed segfault bug in action procesing. It was triggered while merging side effects in duplicate actions. - Fixed bug in the Sieve plugin that caused it to try to stat() a NULL path, yielding a 'Bad address' error. * Fri Oct 9 2009 Michal Hlavinka <[email protected]> - 1:1.2.6-2 - fix init script for case when no action was specified * Tue Oct 6 2009 Michal Hlavinka <[email protected]> - 1:1.2.6-1 - dovecot updated to 1.2.6 - Added authtest utility for doing passdb and userdb lookups. - login: ssl_security string now also shows the used compression. - quota: Don't crash with non-Maildir++ quota backend. - imap proxy: Fixed crashing with some specific password characters. - fixed broken dovecot --exec-mail. - Avoid assert-crashing when two processes try to create index at the same time. * Fri Sep 18 2009 Michal Hlavinka <[email protected]> - 1:1.2.5-1 - updated to dovecot 1.2.5 - Authentication: DIGEST-MD5 and RPA mechanisms no longer require user's login realm to be listed in auth_realms. It only made configuration more difficult without really providing extra security. - zlib plugin: Don't allow clients to save compressed data directly. This prevents users from exploiting (most of the) potential security holes in zlib/bzlib. - fix index file handling that could have caused an assert-crash - IMAP: Fixes to QRESYNC extension. - deliver: Don't send rejects to any messages that have Auto-Submitted header. This avoids emails loops. * Fri Aug 21 2009 Michal Hlavinka <[email protected]> - 1:1.2.4-1 - updated: dovecot 1.2.4, managesieve 0.11.9, sieve 0.1.12 - fixed a crash in index file handling - fixed a crash in saving messages where message contained a CR character that wasn't followed by LF - fixed a crash when listing shared namespace prefix - sieve: implemented the new date extension. This allows matching against date values in header fields and the current date at the time of script evaluation - managesieve: reintroduced ability to abort SASL with "*" response * Mon Aug 10 2009 Michal Hlavinka <[email protected]> - 1:1.2.3-1 - updated: dovecot 1.2.3, managesieve 0.11.8, sieve 0.1.11 - Mailbox names with control characters can't be created anymore. Existing mailboxes can still be accessed though. - Allow namespace prefix to be opened as mailbox, if a mailbox already exists in the root dir. - Maildir: dovecot-uidlist was being recreated every time a mailbox was accessed, even if nothing changed. - listescape plugin was somewhat broken - ldap: Fixed hang when >128 requests were sent at once. - fts_squat: Fixed crashing when searching virtual mailbox. - imap: Fixed THREAD .. INTHREAD crashing. * Tue Jul 28 2009 Michal Hlavinka <[email protected]> - 1:1.2.2-1.20090728snap - updated to post 1.2.2 snapshot (including post release GSSAPI fix) - Fixed "corrupted index cache file" errors - IMAP: FETCH X-* parameters weren't working. - Maildir++ quota: Quota was sometimes updated wrong - Dovecot master process could hang if it received signals too rapidly * Thu Jul 23 2009 Michal Hlavinka <[email protected]> - 1:1.2.1-2 - updated sieve plugin to 0.1.9 * Mon Jul 13 2009 Michal Hlavinka <[email protected]> - 1:1.2.1-1 - updated to 1.2.1 - GSSAPI authentication is fixed (#506782) - logins now fail if home directory path is relative, because it was not working correctly and never was expected to work - sieve and managesieve update * Wed Jul 8 2009 Michal Hlavinka <[email protected]> - 1:1.2.0-3 - update sieve and managesieve plugins * Tue Jul 7 2009 Michal Hlavinka <[email protected]> - 1:1.2.0-2 - update sieve plugin * Thu Jul 2 2009 Michal Hlavinka <[email protected]> - 1:1.2.0-1 - updated to 1.2.0 * Thu Jun 25 2009 Michal Hlavinka <[email protected]> - 1:1.2-0.rc6.1 - updated to 1.2.rc6 * Fri Jun 19 2009 Michal Hlavinka <[email protected]> - 1:1.2-0.rc5.2 - managesieve updated to 0.11.5 for dovecot rc5 * Thu Jun 18 2009 Michal Hlavinka <[email protected]> - 1:1.2-0.rc5.1 - updated to 1.2.rc5 * Mon Apr 20 2009 Michal Hlavinka <[email protected]> - 1:1.2-0.rc3.1 - updated to 1.2.rc3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #572797 - dovecot zlib plugin is missing bzip2 support https://bugzilla.redhat.com/show_bug.cgi?id=572797 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update dovecot' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/package-announce
