[ 14:39 ler  ]

• 500595 mail/dovecot/files/patch-src_lib-master_test-event-stats.c

mail/dovecot: remove obsolete patch.

no PORTREVISION bump, as it doesn't change the package.

Reported by:	herbert@gojira.at

[ 21:33 ler  ]

• 500569 mail/dovecot-pigeonhole/Makefile
• 500569 mail/dovecot-pigeonhole/distinfo
• 500569 mail/dovecot/Makefile
• 500569 mail/dovecot/distinfo
• 500569 mail/dovecot/files/patch-src_lib-master_test-event-stats.c
• 500569 mail/dovecot/files/patch-src_lib-sql_driver-mysql.c
• 500569 mail/dovecot/files/patch-src_plugins_fts-solr_solr-connection.c

mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.6, 0.5.6 respectively.

Dovecot changelog:
* CVE-2019-11494: Submission-login crashed with signal 11 due to null pointer
access when authentication was aborted by disconnecting.
* CVE-2019-11499: Submission-login crashed when authentication was started over
TLS secured channel and invalid authentication message was sent.
* auth: Support password grant with passdb oauth2.
+ Use system default CAs for outbound TLS connections.
+ Simplify array handling with new helper macros.
+ fts_solr: Enable configuring batch_size and soft_commit features.
- lmtp/submission: Fixed various bugs in XCLIENT handling, including a hang when
XCLIENT commands were sent infinitely to the remote server.
- lmtp/submission: Forwarded multi-line replies were erroneously sent as two
replies to the client.
- lib-smtp: client: Message was not guaranteed to contain CRLF consistently when
CHUNKING was used.
- fts_solr: Plugin was no longer compatible with Solr 7.
- Make it possible to disable certificate checking without setting
ssl_client_ca_* settings.
- pop3c: SSL support was broken.

(Only the first 15 lines of the commit message are shown above )

[ 23:34 ler  ]

• 494752 mail/dovecot-pigeonhole/Makefile
• 494752 mail/dovecot-pigeonhole/distinfo
• 494752 mail/dovecot/Makefile
• 494752 mail/dovecot/distinfo
• 494752 mail/dovecot/files/patch-src_lib-master_test-event-stats.c
• 494752 mail/dovecot/pkg-plist

mail/dovecot and mail/dovecot-pigeonhole upgrade to 2.3.5 and 0.5.5 respectively

dovecot changelog:
+ Lua push notification driver: mail keywords and flags are provided in
MessageNew and MessageAppend events.
+ submission: Implement support for plugins.
+ auth: When auth_policy_log_only=yes, only log what the policy server response
would do without actually doing it.
+ auth: Always log policy server decisions with auth_verbose=yes
- v2.3.[34]: doveadm log errors: Output was missing user/session
- lda: Debug log lines could have shown slightly corrupted
- login proxy: Login processes may have crashed in various ways when
login_proxy_max_disconnect_delay was set.
- imap: Fix crash with Maildir+zlib if client disconnects during APPEND
- lmtp proxy: Fix potential assert-crash
- lmtp/submission: Fix crash when SMTP client transaction times out
- submission: Split large XCLIENT commands to 512 bytes per command, so Postfix
accepts them.
- submission: Fix crash when client sends invalid BURL command

(Only the first 15 lines of the commit message are shown above )

[ 18:22 ler  ]

• 485697 mail/dovecot/Makefile
• 485697 mail/dovecot/files/patch-src_lib-master_test-event-stats.c

mail/dovecot: pick up patch from upstream to quiet format warnings.

Obtained
from:	https://github.com/dovecot/core/commit/de42b54aaf165d4f62b45be864dde36bdbbc4276

[ 15:12 ler  ]

• 485675 mail/dovecot-pigeonhole/Makefile
• 485675 mail/dovecot-pigeonhole/distinfo
• 485675 mail/dovecot/Makefile
• 485675 mail/dovecot/distinfo
• 485675 mail/dovecot/files/patch-src_lib-master_test-event-stats.c
• 485675 mail/dovecot/files/patch-src_master_main.c

mail/dovecot update to 2.3.4, mail/dovecot-pigeonhole to 0.5.4

dovecot change log:
* The default postmaster_address is now "postmaster@<user domain or
   server hostname>". If username contains the @domain part, that's
   used. If not, then the server's hostname is used.
* "doveadm stats dump" now returns two decimals for the "avg" field.

+ Added push notification driver that uses a Lua script
+ Added new SQL, DNS and connection events.
   See https://wiki2.dovecot.org/Events
+ Added "doveadm mailbox cache purge" command.
+ Added events API support for Lua scripts
+ doveadm force-resync -f parameter performs "index fsck" while opening
   the index. This may be useful to fix some types of broken index files.

(Only the first 15 lines of the commit message are shown above )