notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
All times are UTC
Ukraine
non port: mail/dovecot/distinfo
SVNWeb

Number of commits found: 113 (showing only 100 on this page)

1 | 2  »  

Fri, 23 Dec 2022
[ 03:10 Larry Rosenman (ler) search for other commits by this committer ]    commit hash:61ef5b861ca55981d558ec7a4a4f6d6f401e65d0  commit hash:61ef5b861ca55981d558ec7a4a4f6d6f401e65d0  commit hash:61ef5b861ca55981d558ec7a4a4f6d6f401e65d0  61ef5b8 
mail/dovecot: update to 2.3.20

mail/dovecot-pigeonhole: bump to 0.5.20
mail/dovecot-fts-*, mail/dovecot-coi: bump portrevision

mail/dovecot: ChanggLog:
+ Add dsync_features=no-header-hashes. When this setting is enabled and
  one dsync side doesn't support mail GUIDs (i.e. imapc), there is no
  fallback to using header hashes. Instead, dsync assumes that all mails
  with identical IMAP UIDs contains the same mail contents. This can
  significantly improve dsync performance with some IMAP servers that
  don't support caching Date/Message-ID headers.
+ lua: HTTP client has more settings now, see
  https://doc.dovecot.org/admin_manual/lua/#dovecot.http.client
+ replicator: "doveadm replicator status" command now outputs when the
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Thu, 16 Jun 2022
[ 16:32 Larry Rosenman (ler) search for other commits by this committer ]    commit hash:65db233146bff9630ad06868dc63b0e4fb411e0a  commit hash:65db233146bff9630ad06868dc63b0e4fb411e0a  commit hash:65db233146bff9630ad06868dc63b0e4fb411e0a  65db233 
mail/dovecot: update to 2.3.19.1

Due to a severe bug in doveadm deduplicate, we are releasing patch
release 2.3.19.1.
Tue, 10 May 2022
[ 22:31 Larry Rosenman (ler) search for other commits by this committer ]    commit hash:a3215f1b9de56309d8018d5388aba3787e4f1ab3  commit hash:a3215f1b9de56309d8018d5388aba3787e4f1ab3  commit hash:a3215f1b9de56309d8018d5388aba3787e4f1ab3  a3215f1 
mail/dovecot, mail/dovecot-pigeonhole: Upgrade to 2.3.19, 0.5.19

Dovecot Changelog:
+ Added mail_user_session_finished event, which is emitted when the mail
  user session is finished (e.g. imap, pop3, lmtp). It also includes
  fields with some process statistics information.
  See https://doc.dovecot.org/admin_manual/list_of_events/ for more
  information.
+ Added process_shutdown_filter setting. When an event matches the filter,
  the process will be shutdown after the current connection(s) have
  finished. This is intended to reduce memory usage of long-running imap
  processes that keep a lot of memory allocated instead of freeing it to
  the OS.
+ auth: Add cache hit indicator to auth passdb/userdb finished events.
  See https://doc.dovecot.org/admin_manual/list_of_events/ for more
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Fri, 4 Feb 2022
[ 04:50 Larry Rosenman (ler) search for other commits by this committer ]    commit hash:2c53ea8f10d9e98762675d539d65f6a7adaf766c  commit hash:2c53ea8f10d9e98762675d539d65f6a7adaf766c  commit hash:2c53ea8f10d9e98762675d539d65f6a7adaf766c  2c53ea8 
mail/dovecot, mail/dovecot-pigeonhole: update to 2.3.18, 0.5.18 respectively

Dovecot ChangeLog:
* Removed mail_cache_lookup_finished event. This event wasn't especially
  useful, but it increased CPU usage significantly.
* fts: Don't index inline base64 encoded content in FTS indexes using
  the generic tokenizer. This reduces the FTS index sizes by removing
  input that is very unlikely to be searched for. See
  https://doc.dovecot.org/configuration_manual/fts/tokenization for
  details on how base64 is detected. Only applies when using libfts.
* lmtp: Session IDs are now preserved through proxied connections, so
  LMTP sessions can be tracked. This slightly changes the LMTP session
  ID format by appending ":Tn" (transaction), ":Pn" (proxy connection)
  and ":Rn" (recipient) counters after the session ID prefix.
+ Events now have "reason_code" field, which can provide a list of
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Thu, 28 Oct 2021
[ 15:33 Larry Rosenman (ler) search for other commits by this committer ]    commit hash:de2e20b6267a9c18240ee6e4ba6bdc9f647cbecc  commit hash:de2e20b6267a9c18240ee6e4ba6bdc9f647cbecc  commit hash:de2e20b6267a9c18240ee6e4ba6bdc9f647cbecc  de2e20b 
mail/dovecot: mail/dovecot-pigeonhole: upgrade to 2.3.17, 0.5.17

ChangeLogs:
dovecot:
* Dovecot now logs a warning if time seems to jump forward at least
  100 milliseconds.
* dict: Lines logged by the dict process now contain the dict name as
  the prefix.
* lib-index: mail_cache_fields, mail_always_cache_fields and
  mail_never_cache_fields now verifies that the listed header names are
  valid. Especially the UTF8 "–" character has sometimes been wrongly
  used instead of the ASCII "-".
+ *-login: Added login_proxy_rawlog_dir setting to capture
  rawlogs between proxy and backend.
+ dict: The server process now keeps the last 10 idle dict backends
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Sun, 3 Oct 2021
[ 21:36 Larry Rosenman (ler) search for other commits by this committer ]    commit hash:6809759a87db133e040b2d7931f6b544fcb00706  commit hash:6809759a87db133e040b2d7931f6b544fcb00706  commit hash:6809759a87db133e040b2d7931f6b544fcb00706  6809759 
mail/dovecot: update to 2.3.16

mail/dovecot-pigeonhole: update to 0.5.16

ChangeLogs:
https://dovecot.org/pipermail/dovecot-news/2021-August/000463.html
https://dovecot.org/pipermail/dovecot-news/2021-August/000464.html
Sat, 3 Jul 2021
[ 10:09 Kurt Jaeger (pi) search for other commits by this committer Author: Juraj Lutter ]    commit hash:21a797ec8c62a66c2e44c7e99acbf3063ec113aa  commit hash:21a797ec8c62a66c2e44c7e99acbf3063ec113aa  commit hash:21a797ec8c62a66c2e44c7e99acbf3063ec113aa  21a797e  (Only the first 10 of 11 ports in this commit are shown above. View all ports for this commit)
mail/dovecot-*: update 2.3.13 -> 2.3.15 and related ports

PR:			256860
Approved by:		fluffy (ports-secteam)
Submitted by:		otis
Relnotes:		https://dovecot.org/pipermail/dovecot-news/2021-June/000457.html
			https://dovecot.org/pipermail/dovecot-news/2021-March/000455.html
			https://dovecot.org/pipermail/dovecot-news/2021-March/000456.html
			https://dovecot.org/pipermail/dovecot-news/2021-June/000458.html
Security:		CVE-2021-29157, CVE-2021-33515, CVE-2020-28200
Differential Revision:	https://reviews.freebsd.org/D30866
MFH:			2021Q3
Wed, 6 Jan 2021
[ 14:58 pi search for other commits by this committer ] Original commit   Revision:560527
mail/dovecot: update 2.3.11.3 -> 2.3.13, fix CVE in non-default config
mail/dovecot-pigeonhole: update 0.5.11 -> 0.5.13

- please note: option VPOPMAIl was removed from upstream

PR:		252415
Submitted by:	Evilham <contact@evilham.com>
Reviewed by:	fluffy
Approved by:	ler (maintainer)
MFH:		2021Q1
Relnotes:	https://dovecot.org/pipermail/dovecot-news/2021-January/000448.html
		https://dovecot.org/pipermail/dovecot-news/2021-January/000449.html
Security:	CVE-2020-24386, CVE-2020-25275
Fri, 14 Aug 2020
[ 00:27 ler search for other commits by this committer ] Original commit   Revision:544857
mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.11.3 and 0.5.11,
repectively.

dovecot changelog:
* CVE-2020-12100: Parsing mails with a large number of MIME parts could
  have resulted in excessive CPU usage or a crash due to running out of
  stack memory.
* CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
  message buffer size, which leads to reading past allocation which can
  lead to crash.
* CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
  address that has the empty quoted string as local-part causes the lmtp
  service to crash.
* CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
  zero-length message, which leads to assert-crash later on.
* Events: Fix inconsistency in events. See event documentation in
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Mon, 18 May 2020
[ 19:28 ler search for other commits by this committer ] Original commit   Revision:535778
mail/dovecot: Upgrade to 2.3.10.1, fixing multiple vulnerabilities.

- CVE-2020-10957: lmtp/submission: A client can crash the server by
  sending a NOOP command with an invalid string parameter. This occurs
  particularly for a parameter that doesn't start with a double quote.
  This applies to all SMTP services, including submission-login, which
  makes it possible to crash the submission service without
  authentication.
- CVE-2020-10958: lmtp/submission: Sending many invalid or unknown
  commands can cause the server to access freed memory, which can lead
  to a server crash. This happens when the server closes the connection
  with a "421 Too many invalid commands" error. The bad command limit
  depends on the service (lmtp or submission) and varies between 10 to
  20 bad commands.
- CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
  address that has the empty quoted string as local-part causes the
  lmtp service to crash.

Clean up some REINPLACE warnings whilst we're here.

MFH:		2020Q2
Security:	37d106a8-15a4-483e-8247-fcb68b16eaf8
Security:	CVE-2020-10957
Security:	CVE-2020-10958
Security:	CVE-2020-10967
Fri, 6 Mar 2020
[ 19:16 ler search for other commits by this committer ] Original commit   Revision:527892
mail/dovecot: update to 2.3.10.

ChangeLog:
* Disable retpoline migitations by default. These can cause severe
  performance regressions, so they should be only enabled when
  applicable.
* IMAP MOVE now commits transactions in batches of 1000 mails. This
  helps especially with lazy_expunge when moving a lot of mails. It
  mainly avoids situations where multiple IMAP sessions are running the
  same MOVE command and duplicating the mails in the lazy_expunge folder.
  With this change there can still be some duplication, but the MOVE
  always progresses forward. Also if the MOVE fails at some point, the
  changes up to the last 1000 mails are still committed instead of
  rolled back. Note that the COPY command behavior hasn't changed,
  because it is required by IMAP standard to be an atomic operation.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Thu, 13 Feb 2020
[ 00:47 ler search for other commits by this committer ] Original commit   Revision:526001
mail/dovecot: upgrade to 2.3.9.3

Changelog:
    * CVE-2020-7046: Truncated UTF-8 can be used to DoS
      submission-login and lmtp processes.
    * CVE-2020-7957: Specially crafted mail can crash snippet generation.

MFH:		2020Q1
Security:	CVE-2020-7046
Security:	CVE-2020-7957
Security:	74db0d02-b140-4c32-aac6-1f1e81e1ad30
Fri, 13 Dec 2019
[ 15:02 ler search for other commits by this committer ] Original commit   Revision:520040
mail/dovecot: upgrade to 2.3.9.2,

* CVE-2019-19722: Mails with group addresses in From or To fields caused
crash in push notification drivers.
- additional fix for blank headers

PORTREVISION bump for mail/dovecot-pigeonhole, mail/dovecot-fts-xapian
*NOT* requesting MFH as 2.3.9 is not in 2019Q4.

Security:	b7dc4dde-2e48-43f9-967a-c68461537cf2
Security:	CVS-2019-19722
Wed, 4 Dec 2019
[ 17:59 ler search for other commits by this committer ] Original commit   Revision:519037
mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.9, 0.5.9 respectively.

Bump PORTREVISION of mail/dovecot-fts-xapian for version change of dovecot.

Changelog:
Dovecot:
* Changed several event field names for consistency and to avoid
  conflicts in parent-child event relationships:
   * SMTP server command events: Renamed "name" to "cmd_name"
   * Events inheriting from a mailbox: Renamed "name" to "mailbox"
   * Server connection events have only "remote_ip", "remote_port",
     "local_ip" and "local_port".
   * Removed duplicate "client_ip", "ip" and "port".
   * Mail storage events: Removed "service" field.
     Use "service:<name>" category instead.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Tue, 8 Oct 2019
[ 21:56 ler search for other commits by this committer ] Original commit   Revision:514106
mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.8 and 0.5.8 respectively.

release notes:
dovecot:
Changes

+ Added mail_delivery_started and mail_delivery_finished events, see
https://doc.dovecot.org/admin_manual/list_of_events/ for details.
+ dsync-replication: Don't replicate users who have "noreplicate" extra
field in userdb.
+ doveadm service status: Show total number of processes created.
+ When logging to syslog, use instance_name setting's value for the
ident. This commonly is added as a log prefix.
+ Base64 encoding/decoding code was rewritten with additional features.
It shouldn't cause any user visible changes.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Wed, 28 Aug 2019
[ 15:59 ler search for other commits by this committer ] Original commit   Revision:510075
mail/dovecot,mail/dovecot-pigeonhole: fix CVE-2019-11500

Changes
-------
* CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes. Found by Nick Roessler and Rafi Rubin.

MFH:		2019Q3
Security:	CVE-2019-11500
Tue, 23 Jul 2019
[ 14:26 ler search for other commits by this committer ] Original commit   Revision:507215
mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.7.1 and 0.5.7.1
respectively.

These releases fix the reported regressions in v2.3.7 & v0.5.7.

Dovecot core:
        - Fix TCP_NODELAY errors being logged on non-Linux OSes
        - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
        - Remove wrongly added checks in namespace prefix checking

Pigeonhole:
        - dsync: Sieve script syncing failed if mailbox attributes weren't
          enabled.
Fri, 12 Jul 2019
[ 13:20 ler search for other commits by this committer ] Original commit   Revision:506460
mail/dovecot, mail/dovecot-pigeonhole: Update to 2.3.7 and 0.5.7 respectively.

dovecot changelog:
* fts-solr: Removed break-imap-search parameter
+ Added more events for the new statistics, see
  https://doc.dovecot.org/admin_manual/list_of_events/
+ mail-lua: Add IMAP metadata accessors, see
  https://doc.dovecot.org/admin_manual/lua/
+ Add event exporters that allow exporting raw events to log files and
  external systems, see
  https://doc.dovecot.org/configuration_manual/event_export/
+ SNIPPET is now PREVIEW and size has been increased to 200 characters.
+ Add body option to fts_enforced. This triggers building FTS index only
  on body search, and an error using FTS index fails the search rather
  than reads through all the mails.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Tue, 30 Apr 2019
[ 21:33 ler search for other commits by this committer ] Original commit   Revision:500569
mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.6, 0.5.6 respectively.

Dovecot changelog:
* CVE-2019-11494: Submission-login crashed with signal 11 due to null pointer
access when authentication was aborted by disconnecting.
* CVE-2019-11499: Submission-login crashed when authentication was started over
TLS secured channel and invalid authentication message was sent.
* auth: Support password grant with passdb oauth2.
+ Use system default CAs for outbound TLS connections.
+ Simplify array handling with new helper macros.
+ fts_solr: Enable configuring batch_size and soft_commit features.
- lmtp/submission: Fixed various bugs in XCLIENT handling, including a hang when
XCLIENT commands were sent infinitely to the remote server.
- lmtp/submission: Forwarded multi-line replies were erroneously sent as two
replies to the client.
- lib-smtp: client: Message was not guaranteed to contain CRLF consistently when
CHUNKING was used.
- fts_solr: Plugin was no longer compatible with Solr 7.
- Make it possible to disable certificate checking without setting
ssl_client_ca_* settings.
- pop3c: SSL support was broken.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Thu, 18 Apr 2019
[ 15:22 ler search for other commits by this committer ] Original commit   Revision:499273
mail/dovecot: upgrade to 2.3.5.2

* CVE-2019-10691: Trying to login with 8bit username containing
      invalid UTF8 input causes auth process to crash if auth policy is
      enabled. This could be used rather easily to cause a DoS. Similar
      crash also happens during mail delivery when using invalid UTF8 in
      From or Subject header when OX push notification driver is used.

MFH:		2019Q2
Security:	CVE-2019-10691
Thu, 28 Mar 2019
[ 12:24 ler search for other commits by this committer ] Original commit   Revision:497015
mail/dovecot: upgrade to 2.3.5.1.

    * CVE-2019-7524: Missing input buffer size validation leads into
      arbitrary buffer overflow when reading fts or pop3 uidl header
      from Dovecot index. Exploiting this requires direct write access to
      the index files.

MFH:		2019Q1
Security:	CVE-2019-7524
Tue, 5 Mar 2019
[ 23:34 ler search for other commits by this committer ] Original commit   Revision:494752
mail/dovecot and mail/dovecot-pigeonhole upgrade to 2.3.5 and 0.5.5 respectively

dovecot changelog:
+ Lua push notification driver: mail keywords and flags are provided in
MessageNew and MessageAppend events.
+ submission: Implement support for plugins.
+ auth: When auth_policy_log_only=yes, only log what the policy server response
would do without actually doing it.
+ auth: Always log policy server decisions with auth_verbose=yes
- v2.3.[34]: doveadm log errors: Output was missing user/session
- lda: Debug log lines could have shown slightly corrupted
- login proxy: Login processes may have crashed in various ways when
login_proxy_max_disconnect_delay was set.
- imap: Fix crash with Maildir+zlib if client disconnects during APPEND
- lmtp proxy: Fix potential assert-crash
- lmtp/submission: Fix crash when SMTP client transaction times out
- submission: Split large XCLIENT commands to 512 bytes per command, so Postfix
accepts them.
- submission: Fix crash when client sends invalid BURL command
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Tue, 5 Feb 2019
[ 14:50 ler search for other commits by this committer ] Original commit   Revision:492245
mail/dovecot: upgrade to 2.3.4.1

    * CVE-2019-3814: If imap/pop3/managesieve/submission client has
      trusted certificate with missing username field
      (ssl_cert_username_field), under some configurations Dovecot
      mistakenly trusts the username provided via authentication instead
      of failing.
    * ssl_cert_username_field setting was ignored with external SMTP AUTH,
      because none of the MTAs (Postfix, Exim) currently send the
      cert_username field. This may have allowed users with trusted
      certificate to specify any username in the authentication. This bug
      didn't affect Dovecot's Submission service.

PR:		235523
Submitted by:	pascal.christen@hostpoint.ch
MFH:		2019Q1
Security:	1340fcc1-2953-11e9-bc44-a4badb296695
Security:	CVE-2019-3814
Fri, 23 Nov 2018
[ 15:12 ler search for other commits by this committer ] Original commit   Revision:485675
mail/dovecot update to 2.3.4, mail/dovecot-pigeonhole to 0.5.4

dovecot change log:
* The default postmaster_address is now "postmaster@<user domain or
   server hostname>". If username contains the @domain part, that's
   used. If not, then the server's hostname is used.
* "doveadm stats dump" now returns two decimals for the "avg" field.

+ Added push notification driver that uses a Lua script
+ Added new SQL, DNS and connection events.
   See https://wiki2.dovecot.org/Events
+ Added "doveadm mailbox cache purge" command.
+ Added events API support for Lua scripts
+ doveadm force-resync -f parameter performs "index fsck" while opening
   the index. This may be useful to fix some types of broken index files.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Mon, 1 Oct 2018
[ 23:18 ler search for other commits by this committer ] Original commit   Revision:481076
mail/dovecot upgrade to 2.3.3, mail/dovecot-pigeonhole upgrade to 0.5.3.

dovecot changelog:
* doveconf hides more secrets now in the default output.
* ssl_dh setting is no longer enforced at startup. If it's not set and
   non-ECC DH key exchange happens, error is logged and client is
   disconnected.

+ Added log_debug=<filter> setting.
+ Added log_core_filter=<log filter> setting.
+ quota-clone: Write to dict asynchronously
+ --enable-hardening attempts to use retpoline Spectre 2 mitigations
+ lmtp proxy: Support source_ip passdb extra field.
+ doveadm stats dump: Support more fields and output stddev by default.
+ push-notification: Add SSL support for OX backend.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Mon, 9 Jul 2018
[ 17:30 ler search for other commits by this committer ] Original commit   Revision:474275
mail/dovecot: upgrade to 2.3.2.1.
v2.3.2 still had a few unexpected bugs:

- SSL/TLS servers may have crashed during client disconnection
- lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
   sometimes assert-crashed.
- v2.3.2: "make check" may have crashed with 32bit systems
Fri, 29 Jun 2018
[ 16:36 ler search for other commits by this committer ] Original commit   Revision:473557
mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.2 and 0.5.2 respectively

dovecot changelog:
v2.3.2 is mainly a bugfix release. It contains all the changes in v2.2.36, as
well as a bunch of other fixes (mainly for v2.3-only bugs). Binary packages are
already in https://repo.dovecot.org/

* old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE while
   opening /proc/self/io. This may still cause security problems if the
   process is ptrace()d at the same time. Instead, open it while still
   running as root.
+ doveadm: Added mailbox cache decision&remove commands. See
   doveadm-mailbox(1) man page for details.
+ doveadm: Added rebuild attachments command for rebuilding
   $HasAttachment or $HasNoAttachment flags for matching mails. See
   doveadm-rebuild(1) man page for details.
+ cassandra: Use fallback_consistency on more types of errors
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Sun, 1 Apr 2018
[ 17:10 adamw search for other commits by this committer ] Original commit   Revision:466172
Update dovecot to 2.3.1, and dovecot-pigeonhole to 0.5.1

This is a very large update, and it WILL require manually
updating existing conf files, though the changes to do so
are not extensive. Updating instructions are here:

	https://wiki2.dovecot.org/Upgrading/2.3

Additionally there are various cleanups to the dovecot rc(8)
script, and support for a LUA scripting interface for dovecot.

The decision was made not to import the 2.3.0 or 2.3.0.1 releases
here, due to the number of existing bugs. ler and I have been
dogfooding it for months now, and all of the bugs I've encountered
are fixed in this 2.3.1 release.

This update is the result of many, many hours of collborative work
between ler and me, and the input of many people on the freebsd-ports
list.
Mon, 19 Mar 2018
[ 15:06 adamw search for other commits by this committer ] Original commit   Revision:465012
Update dovecot to 2.2.35, and bump pigeonhole

    - charset_alias: compile fails with Solaris Studio, reported by
      John Woods.
    - Fix local name handling in v2.2.34 SNI code, bug found by cPanel.
    - imapc: Don't try to add mails to index if they already exist there.
    - imapc: If email is modified in istream_opened hook, mail size isn't
      updated.
    - lib-dcrypt: When reading encrypted data, more data would not be
      read if buffer was not consumed causing panic or hang.
    - notify: When notify plugin is used and transaction commit fails in
      dsync, crash occurs.
    - sdbox: When delivering to a mailbox that is over quota, temp files
      are not cleaned up when saving or copying fails.
Wed, 28 Feb 2018
[ 23:12 adamw search for other commits by this committer ] Original commit   Revision:463271
Update dovecot to 2.2.34, and bump pigeonhole.

 * CVE-2017-15130: TLS SNI config lookups may lead to excessive
   memory usage, causing imap-login/pop3-login VSZ limit to be reached
   and the process restarted. This happens only if Dovecot config has
   local_name { } or local { } configuration blocks and attacker uses
   randomly generated SNI servernames.
 * CVE-2017-14461: Parsing invalid email addresses may cause a crash or
   leak memory contents to attacker. For example, these memory contents
   might contain parts of an email from another user if the same imap
   process is reused for multiple users. First discovered by Aleksandar
   Nikolic of Cisco Talos. Independently also discovered by "flxflndy"
   via HackerOne.
 * CVE-2017-15132: Aborted SASL authentication leaks memory in login
   process.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Fri, 20 Oct 2017
[ 15:00 ler search for other commits by this committer ] Original commit   Revision:452533
mail/dovecot: update to 2.2.33.2.

One more patch release with some fixes:

- doveadm: Fix crash in proxying (or dsync replication) if remote is
  running older than v2.2.33
- auth: Fix memory leak in %{ldap_dn}
- dict-sql: Fix data types to work correctly with Cassandra

bump dovecot-pigeonhole PORTREVISION as well.
Wed, 11 Oct 2017
[ 17:15 ler search for other commits by this committer ] Original commit   Revision:451765
mail/dovecot: upgrade to 2.2.33.1.

- dovecot-lda was logging to stderr instead of to the log file.
Tue, 10 Oct 2017
[ 15:45 adamw search for other commits by this committer ] Original commit   Revision:451707
Update dovecot to 2.2.33, and bump pigeonhole.

* doveadm director commands wait for the changes to be visible in the
  whole ring before they return. This is especially useful in testing.
* Environments listed in import_environment setting are now set or
  preserved when executing standalone commands (e.g. doveadm)

+ doveadm proxy: Support proxying logs. Previously the logs were
  visible only in the backend's logs.
+ Added %{if}, see https://wiki2.dovecot.org/Variables#Conditionals
+ Added a new notify_status plugin, which can be used to update dict
  with current status of a mailbox when it changes. See
  https://wiki2.dovecot.org/Plugins/NotifyStatus
+ Mailbox list index can be disabled for a namespace by appending
  ":LISTINDEX=" to location setting.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Thu, 24 Aug 2017
[ 16:49 adamw search for other commits by this committer ] Original commit   Revision:448697
Update dovecot to 2.2.32, and bump pigeonhole.

* imapc: Info-level line is logged every time when successfully
  connected to the remote server. This includes local/remote IP/port,
  which can be useful for matching against external logs.
* config: Log a warning if plugin { key=no } is used explicitly.
  v2.3 will support "no" properly in plugin settings, but for now
  any value at all for a boolean plugin setting is treated as "yes",
  even if it's written as explicit "no". This change will now warn
  that it most likely won't work as intended.

+ Various optimizations to avoid accessing files/directories when it's
  not necessary. Especially avoid accessing mail root directories when
  INDEX directories point to a different filesystem.
+ mail_location can now include ITERINDEX parameter. This tells Dovecot
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Sun, 17 Jul 2011
[ 14:32 wxs search for other commits by this committer ] Original commit 
- Update to 1.2.17.

PR:             ports/158271
Submitted by:   wxs@
Approved by:    maintainer timeout
Thu, 23 Dec 2010
[ 04:42 sahil search for other commits by this committer ] Original commit 
- Update to 1.2.16 [1]
- Add CONFLICTS with mail/dovecot2

PR:             ports/152914 [1]
Submitted by:   Alexander Milanov <a@amilanov.com>
Approved by:    maintainer timeout
Wed, 22 Sep 2010
[ 03:02 sahil search for other commits by this committer ] Original commit 
- Update to 1.2.14

PR:             ports/150354
Submitted by:   Denny Lin <dennylin93@hs.ntnu.edu.tw>
Approved by:    maintainer timeout (14 days)
Mon, 5 Jul 2010
[ 05:39 sahil search for other commits by this committer ] Original commit 
- Use pre-su-install instead of pre-install target [1]
- Update to 1.2.12 [2]

PR:             ports/147988 [1], ports/147996 [2]
Submitted by:   glewis@ [1], Denny Lin <dennylin93@hs.ntnu.edu.tw> [2]
Approved by:    Yarema <yds@CoolRat.org> (maintainer)
                wxs@/itetcu@ (mentors, implicit)
Feature safe:   yes
Sat, 24 Apr 2010
[ 21:20 sahil search for other commits by this committer ] Original commit 
- Update to 1.2.11 [1]
- Remove IPV6 from OPTIONS [2]

PR:             ports/144897 [1], ports/145488 [2]
Submitted by:   Denny Lin <dennylin93@cnmc32.hs.ntnu.edu.tw> [1]
Submitted by:   Jeremy Chadwick <freebsd@jdc.parodius.com> [2]
Approved by:    maintainer timeout (> 2 weeks)
Approved by:    wxs@ (mentor)
Tue, 26 Jan 2010
[ 14:23 wxs search for other commits by this committer ] Original commit 
- Update to 1.2.10
- Remove LDA option

PR:             ports/141727
Submitted by:   Mike Jakubik <mike.jakubik@intertainservices.com>
                Yarema <yds@CoolRat.org> (maintainer)
Thu, 10 Dec 2009
[ 15:30 wxs search for other commits by this committer ] Original commit 
- Update to 1.2.8

PR:             ports/139386
Submitted by:   Sahil Tandon <sahil@tandon.net>
Approved by:    Yarema <yds@CoolRat.org> (maintainer)
Mon, 24 Aug 2009
[ 17:05 wxs search for other commits by this committer ] Original commit 
- Update to 1.2.4
- Add a note about changes to this port affecting mail/dovecot-sieve and
  mail/dovecot-managesieve

PR:             ports/137901
Submitted by:   Yasuhiro KIMURA <yasu@utahime.org>
Approved by:    Yarema <yds@CoolRat.org> (maintainer)
Wed, 19 Aug 2009
[ 01:28 wxs search for other commits by this committer ] Original commit 
- Add another MASTER_SITE
- Remove BROKEN with managesieve option (no need to bump PORTREVISION
  as this option is off by default).

PR:             ports/137937
Submitted by:   Yarema <yds@CoolRat.org> (maintainer)
Fri, 14 Aug 2009
[ 21:30 wxs search for other commits by this committer ] Original commit 
- Update to 1.2.3

PR:             ports/137261
Submitted by:   Yasuhiro KIMURA <yasu@utahime.org>
Approved by:    maintainer timeout
Wed, 3 Jun 2009
[ 15:39 dhn search for other commits by this committer ] Original commit 
- Update to 1.1.16

PR:             ports/135194
Submitted by:   Yarema <yds@CoolRat.org> (maintainer)
Fri, 22 May 2009
[ 21:48 miwi search for other commits by this committer ] Original commit 
- Update to 1.1.15

PR:             134852
Submitted by:   Yarema <yds@CoolRat.org> (Maintainer)
Thu, 14 May 2009
[ 12:57 wxs search for other commits by this committer ] Original commit 
- Update to 1.1.14

PR:             ports/133199
Submitted by:   Darren Pilgrim <ports.maintainer@evilphi.com>
Approved by:    maintainer timeout
Thu, 19 Feb 2009
[ 07:25 beech search for other commits by this committer ] Original commit 
- Update to 1.1.11

Approved by:    Yarema <yds@coolrat.org> (maintainer)
Fri, 30 Jan 2009
[ 21:16 beech search for other commits by this committer ] Original commit 
- Update to 1.1.10

Submitted by:   Yarema <yds@coolrat.org> (maintainer)
Sun, 18 Jan 2009
[ 03:41 beech search for other commits by this committer ] Original commit 
- Update to 1.1.8 [1]
- Fix rc.d [2]

PR:             ports/130359 [1]
PR:             ports/130598 [2]
Submitted by:   Marcin Rzepecki <m.rzepecki@iem.pw.edu.pl> [1]
Submitted by:   Craig Leres <leres@ee.lbl.gov> [2]
Approved by:    Yarema <yds@CoolRat.org> (maintainer)
Fri, 28 Nov 2008
[ 14:38 wxs search for other commits by this committer ] Original commit 
Version update to dovecot-1.1.7 and dovecot-1.1.7-managesieve-0.10.4

'statedir' set to /var/db/dovecot instead of defaulting to /var/lib/dovecot
Users should manually rm -rf /var/lib/dovecot

Removed stale code from files/pkg-deinstall.in and files/pkg-install.in

Reworked files/dovecot.sh.in to accept dovecot_config and handle creating
and tearing down runtime directories upon startup and shutdown.

Rediffed files/patch-dovecot-example.conf to clean up line offsets.

PR:             ports/129230
Submitted by:   Yarema <yds@CoolRat.org> (maintainer)
Sun, 16 Nov 2008
[ 04:51 koitsu search for other commits by this committer ] Original commit 
Removal of carriage returns (0x0D) from numerous files.  QAT caught
this, as did our user community.

Reported by:    QAT, andrew clarke <mail@ozzmosis.com>
Sat, 15 Nov 2008
[ 21:43 delphij search for other commits by this committer ] Original commit 
Update to 1.1.6.

PR:             ports/128469
Submitted by:   maintainer (see reply to the PR)
Mon, 8 Sep 2008
[ 06:42 beech search for other commits by this committer ] Original commit  (Only the first 10 of 12 ports in this commit are shown above. View all ports for this commit)
- Update to 1.1.3
- Add support for Berkeley DB used by the expire plugin.
- Install more DOCS.
- Move the SCRIPT_ENV substitutions to SUB_FILES
  otherwise DOVECOT_[UG]ID settings do not propagate to the binary package.
- Change from .if defined(WITHOUT_*)to .if defined(WITH_*) &&
!defined(WITHOUT_*)
- Make the PROTOCOLS substitution include all the protocols which are built
  into the example config file.
- Clean up patch-dovecot-example.conf and perform some post-patch processing
  to reflect more closely how this port actually installs. This is necessary
  because of the optional ManageSieve patch.
- Modify files/dovecot.sh.in to ensure runtime directories exist with correct
  permissions.
- Rework the install so all the example config files get installed into
  EXAMPLESDIR as per hier(7) independent of the NOPORTDOCS tunable. Install
  the relevant config files into etc/ if no prior version exists.
- Ensure that 'make install' and pkg_add(1) produce identical installs and
  that everything is accounted for in the PLIST.

PR:             ports/127200
Submitted by:   Yarema <yds@CoolRat.org> (maintainer)
Wed, 30 Jul 2008
[ 02:15 beech search for other commits by this committer ] Original commit 
- Add the missing ManageSieve support required to make the new
  mail/dovecot-managesieve port functional.

PR:             ports/126054
Submitted by:   Yarema <yds@CoolRat.org>
Approved by:    Robin Breathe <robin@isometry.net> (maintainer)
Thu, 24 Jul 2008
[ 23:38 beech search for other commits by this committer ] Original commit 
- Update to 1.1.2

PR:             ports/125938
Submitted by:   KIMURA Yasuhiro <yasu@utahime.org>
Approved by:    Robin Breathe <robin@isometry.net> (maintainer)
Thu, 26 Jun 2008
[ 22:02 miwi search for other commits by this committer ] Original commit 
- Update to 1.1.1

PR:             124856
Submitted by:   Robin Breathe <robin@isometry.net> (maintainer)
Mon, 16 Jun 2008
[ 22:47 wxs search for other commits by this committer ] Original commit 
Update to 1.0.14

PR:             ports/124482
Submitted by:   KIMURA Yasuhiro <yasu@utahime.org>
Reviewed by:    Robin Breathe <robin@isometry.net> (maintainer)
Mon, 10 Mar 2008
[ 02:39 beech search for other commits by this committer ] Original commit 
- Update mail/dovecot to dovecot-1.0.13, fixing a serious security issue.
- Changelog: http://dovecot.org/list/dovecot-news/2008-March/000065.html

PR:             ports/121548
Submitted by:   Robin Breathe <robin@isometry.net> (maintainer)
Security:      
http://www.vuxml.org/freebsd/b39bdc06-ee42-11dc-8678-00a0cce0781e.html
Wed, 5 Mar 2008
[ 23:58 ehaupt search for other commits by this committer ] Original commit 
- Update to 1.0.12
- Fixes a common insecure mail_extra_groups setting usage, this will require a
  manual change to the active configuration file, please refer to ports/UPDATING

PR:             121411
Submitted by:   Robin Breathe <robin@isometry.net> (maintainer)
Sun, 30 Dec 2007
[ 09:35 delphij search for other commits by this committer ] Original commit 
Update to 1.0.10.

Security:       cf484358-b5d6-11dc-8de0-001c2514716c
PR:             ports/119133
Approved by:    maintainer
Wed, 12 Dec 2007
[ 20:50 delphij search for other commits by this committer ] Original commit 
Update to 1.0.9.

PR:             ports/118561
Submitted by:   delphij
Approved by:    maintainer
Tue, 11 Dec 2007
[ 19:27 delphij search for other commits by this committer ] Original commit 
Update to 1.0.8.

PR:             ports/118319
Submitted by:   delphij
Approved by:    maintainer
Tue, 30 Oct 2007
[ 01:02 delphij search for other commits by this committer ] Original commit 
Update to 1.0.7.

PR:             ports/117645
Approved by:    maintainer
Sun, 28 Oct 2007
[ 22:24 delphij search for other commits by this committer ] Original commit 
Update to 1.0.6.

PR:             ports/117583
Approved by:    maintainer
Mon, 10 Sep 2007
[ 07:35 delphij search for other commits by this committer ] Original commit 
Update to 1.0.5, this is a bugfix release.

PR:             ports/116234
Approved by:    maintainer
Sun, 5 Aug 2007
[ 15:54 delphij search for other commits by this committer ] Original commit 
Update to 1.0.3.

PR:             ports/115120
Approved by:    maintainer
Tue, 17 Jul 2007
[ 10:32 delphij search for other commits by this committer ] Original commit 
Upgrade to 1.0.2.

PR:             ports/114651
Submitted by:   delphij
Approved by:    maintainer
Mon, 18 Jun 2007
[ 19:05 beech search for other commits by this committer ] Original commit 
Update to 1.0.1 (bugfix)

PR:             ports/113804
Submitted by:   Robin Breathe <robin@isometry.net> (maintainer)
Changelog:      http://www.dovecot.org/list/dovecot-news/2007-June/000045.html
Approved by:    sat (mentor)
Sat, 14 Apr 2007
[ 01:46 delphij search for other commits by this committer ] Original commit 
Update to 1.0.0.

PR:             111535
Approved by:    maintainer
Sun, 1 Apr 2007
[ 10:23 ehaupt search for other commits by this committer ] Original commit 
Update to 1.0.r29

PR:             111086
Submitted by:   Robin Breathe <robin@isometry.net> (maintainer)
Sat, 24 Mar 2007
[ 14:46 pav search for other commits by this committer ] Original commit 
- Update to 1.0.r28

PR:             ports/110760
Submitted by:   Robin Breathe <robin@isometry.net> (maintainer)
Thu, 15 Mar 2007
[ 00:38 clsung search for other commits by this committer ] Original commit 
- Update to latest release, dovecot-1.0.rc27.

PR:             ports/110305
Submitted by:   maintainer (Robin Breathe)
Fri, 9 Mar 2007
[ 11:26 miwi search for other commits by this committer ] Original commit 
- Update to 1.0.r26

PR:             110103
Submitted by:   Robin Breathe <robin@isometry.net> (Maintainer)
Tue, 6 Mar 2007
[ 17:42 delphij search for other commits by this committer ] Original commit 
Update to 1.0 rc 25.

PR:             109750
Approved by:    maintainer
Thu, 1 Mar 2007
[ 00:59 clsung search for other commits by this committer ] Original commit 
- Update to latest release, dovecot-1.0.rc24.
- Release : http://www.dovecot.org/list/dovecot-news/2007-February/000033.html

PR:             ports/109529
Submitted by:   maintainer (Robin Breathe)
Thu, 22 Feb 2007
[ 00:51 lx search for other commits by this committer ] Original commit 
Updating to 1.0.r23.

PR:             ports/109414
Submitted by:   Robin Breathe <robin@isometry.net> (maintainer)
Approved by:    edwin (mentor)
Thu, 8 Feb 2007
[ 22:33 miwi search for other commits by this committer ] Original commit 
- Update to 1.0.rc22

PR:              108943
Submitted by:    Robin Breathe <robin@isometry.net> (maintainer)
Tue, 6 Feb 2007
[ 10:07 rafan search for other commits by this committer ] Original commit 
- Update to 1.0 RC21

PR:             ports/108750
Submitted by:   Nils Vogels <nivo+kw+ports.bfa274 at is-root.com>
Approved by:    Robin Breathe <robin at isometry.net> (maintainer)
Fri, 26 Jan 2007
[ 13:18 vanilla search for other commits by this committer ] Original commit 
Upgrade to 1.0.rc19.

PR:             ports/108349
Submitted by:   maintainer
Sun, 7 Jan 2007
[ 23:50 pav search for other commits by this committer ] Original commit 
- Update to 1.0.rc17
- Allow user to override UID/GID

PR:             ports/107654
Submitted by:   Robin Breathe <robin@isometry.net> (maintainer)
Fri, 1 Dec 2006
[ 09:39 pav search for other commits by this committer ] Original commit 
- Update to 1.0 rc15
- Use UID/GID 143

PR:             ports/105899
Submitted by:   Robin Breathe <robin@isometry.net> (maintainer)
Fri, 10 Nov 2006
[ 20:25 pav search for other commits by this committer ] Original commit 
- Update to 1.0.rc13

PR:             ports/105382
Submitted by:   Robin Breathe <robin@isometry.net> (maintainer)
Wed, 8 Nov 2006
[ 01:12 shaun search for other commits by this committer ] Original commit 
Update to 1.0rc12. [1]

This version fixes the bug mentioned in ports/105170.

PR:             ports/105274 [1], ports/105170 (related) [2]
Submitted by:   Robin Breathe <robin@isometry.net> (maintainer) [1],
                Roger Marquis <marquis@roble.com> [2]
Tue, 31 Oct 2006
[ 00:23 shaun search for other commits by this committer ] Original commit 
Update to 1.0.r10.

PR:             ports/104365
Submitted by:   Robin Breathe <robin@isometry.net> (maintainer)
Sat, 19 Aug 2006
[ 14:43 delphij search for other commits by this committer ] Original commit 
Update to 1.0.rc7.

Submitted by:   maintainer
PR:             ports/102249
Mon, 24 Jul 2006
[ 16:29 stefan search for other commits by this committer ] Original commit 
Update to dovecot-1.0.rc2, see
http://www.dovecot.org/list/dovecot-news/2006-July/000010.html.

PR:             100037
Submitted by:   maintainer
Approved by:    arved
Mon, 19 Jun 2006
[ 16:19 garga search for other commits by this committer ] Original commit 
Update to dovecot-1.0.b9.
- Numerous vendor bugfixes:
      http://www.dovecot.org/list/dovecot-news/2006-June/000008.html
- kqueue(2) support seems to have settled down; enable by default.

PR:             ports/99128
Submitted by:   maintainer
Sun, 14 May 2006
[ 16:43 itetcu search for other commits by this committer ] Original commit 
Update the mail/dovecot to 1.0.b8, which addresses numerous problems
(including proper kqueue support -- that means us, BSD folks! ;) ),
the most important of which is a security hole (individuals are
allowed to list other users' mailboxes). [1]

Also move pkg-message --> files/pkg-message.in, list it in SUB_FILES and get
rid of custom hack in Makefile [2]

PR:             ports/97193 [1]
Submitted by:   Jeremy Chadwick <freebsd@jdc.parodius.com> [1]
                itetcu (me) [2]
Approved by:    Robin Breathe <robin@isometry.net> (maintainer),
                lawrance (mentor)
Security:       http://www.securityfocus.com/archive/1/433878 [1]
Security:       http://www.dovecot.org/list/dovecot-news/2006-May/000006.html
[1]
Sat, 6 May 2006
[ 12:20 olgeni search for other commits by this committer ] Original commit 
Upgrade to version 1.0.beta7 and disable broken KQUEUE support.

Obtained from:  maintainer (Robin Breathe <robin(at)isometry.net>)
Sun, 12 Feb 2006
[ 20:12 ahze search for other commits by this committer ] Original commit 
- Update to 1.0.beta3
- Add new options KQUEUE & SQLITE

PR:             ports/93250
Submitted by:   maintainer
Tue, 20 Dec 2005
[ 11:55 edwin search for other commits by this committer ] Original commit 
Maintainer update: mail/dovecot to 1.0.a5

        Update to dovecot-1.0.a5.
        - Numerous small changes and fixes; see
http://www.dovecot.org/list/dovecot/2005-December/010279.html for details.
        - Use vendor install target; patch in --with(out)-docs support to
facilitate NOPORTDOCS macro.
        - Introduce experimental (and probably broken) GSSAPI option.

PR:             ports/90606
Submitted by:   Robin Breathe <robin@isometry.net>
Thu, 20 Oct 2005
[ 20:55 pav search for other commits by this committer ] Original commit 
- Update to 1.0.a4
- Use RC_ORDER

PR:             ports/87732
Submitted by:   Robin Breathe <robin@isometry.net> (maintainer)
Mon, 26 Sep 2005
[ 17:17 vsevolod search for other commits by this committer ] Original commit 
Update to dovecot-1.0.a3, now the recommended version.
Upgrade notes: http://wiki.dovecot.org/moin.cgi/UpgradingDovecot

PR:             86530
Submitted by:   Robin Breathe (maintainer)
Fri, 25 Feb 2005
[ 20:15 pav search for other commits by this committer ] Original commit 
- Update to 0.99.14

PR:             ports/78071
Submitted by:   Dominic Marks <dom@helenmarks.co.uk>
Approved by:    Robin Breathe <robin@isometry.net> (maintainer)
Tue, 18 Jan 2005
[ 21:53 ahze search for other commits by this committer ] Original commit 
Update to 0.99.13
Changelog:      http://www.dovecot.org/list/dovecot/2005-January/005889.html

PR:             ports/76431
Submitted by:   Robin Breathe <robin@isometry.net> (maintainer)
Tue, 7 Dec 2004
[ 09:05 sem search for other commits by this committer ] Original commit 
- Update to dovecot-0.99.12.1
- Removing dependency on GNU make

PR:             ports/74793
Submitted by:   maintainer
Mon, 6 Dec 2004
[ 12:13 ahze search for other commits by this committer ] Original commit 
- Update to dovecot-0.99.12.

Changelog: http://www.dovecot.org/list/dovecot/2004-December/005443.html

PR:             ports/74767
Submitted by:   maintainer
Tue, 12 Oct 2004
[ 07:48 sergei search for other commits by this committer ] Original commit 
- Update to 0.99.11
  Changelog at http://www.dovecot.org/list/dovecot/2004-September/004582.html

PR:             ports/71563
Submitted by:   Robin Breathe (maintainer)
Thu, 5 Aug 2004
[ 06:19 sem search for other commits by this committer ] Original commit 
Update to 0.99.10.9

PR:             ports/69870
Submitted by:   maintainer

Number of commits found: 113 (showing only 100 on this page)

1 | 2  »