Commit Graph

66 Commits

Author SHA1 Message Date
W. Michael Petullo 7d16bff5a4 dovecot: update to 2.3.21
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2024-01-06 13:48:23 -08:00
Daniel Golle a1648fbd1c dovecot: update to version 2.3.20
v2.3.20 2022-12-22  Aki Tuomi <aki.tuomi@open-xchange.com>

    + Add dsync_features=no-header-hashes. When this setting is enabled and
      one dsync side doesn't support mail GUIDs (i.e. imapc), there is no
      fallback to using header hashes. Instead, dsync assumes that all mails
      with identical IMAP UIDs contains the same mail contents. This can
      significantly improve dsync performance with some IMAP servers that
      don't support caching Date/Message-ID headers.
    + lua: HTTP client has more settings now, see
      https://doc.dovecot.org/admin_manual/lua/#dovecot.http.client
    + replicator: "doveadm replicator status" command now outputs when the
      next sync is expected for the user.
    - LAYOUT=index: duplicate GUIDs were not cleaned out. Also the list
      recovery was not optimal.
    - auth: Assert crash would occur when iterating multiple userdb
      backends.
    - director: Logging into director using master user with
      auth_master_user_separator character redirected user to a wrong
      backend, unless master_user_separator setting was also set to the same
      value. Merged these into auth_master_user_separator.
    - dsync: Couldn't always fix folder GUID conflicts automatically with
      Maildir format. This resulted in replication repeatedly failing
      with "Remote lost mailbox GUID".
    - dsync: Failed to migrate INBOX when using namespace prefix=INBOX/,
      resulting in "Remote lost mailbox GUID" errors.
    - dsync: INBOX was created too early with namespace prefix=INBOX/,
      resulting a GUID conflict. This may have been resolved automatically,
      but not always.
    - dsync: v2.3.18 regression: Wrong imapc password with dsync caused
      Panic: file lib-event.c: line 506 (event_pop_global):
      assertion failed: (event == current_global_event)
    - imapc: Requesting STATUS for a mailbox with imapc and INDEXPVT
      configured did not return correct (private) unseen counts.
    - lib-dict: Process would crash when committing data to redis without
      dict proxy.
    - lib-mail: Corrupted cached BODYSTRUCTURE caused panic during FETCH.
      Fixes: Panic: file message-part-data.c: line 579 (message_part_is_attachment):
      assertion failed: (data != NULL). v2.3.13 regression.
    - lib-storage: mail_attribute_dict with dict-sql failed when it tried to
      lookup empty dict keys.
    - lib: ioloop-kqueue was missing include breaking some BSD builds.
    - lua-http: Dovecot Lua HTTP client could not resolve DNS names in mail
      processes, because it expected "dns-client" socket to exist in the
      current directory.
    - oauth2: Using %{oauth2:name} variables could cause useless
      introspections.
    - pop3: Sending POP3 command with ':' character caused an assert-crash.
      v2.3.18 regression.
    - replicator: Replication queue had various issues, potentially causing
      replication requests to become stuck.
    - stats: Invalid Prometheus label names were created with specific
      histogram group_by configurations. Prometheus rejected these labels.

v2.3.19.1 2022-06-14  Aki Tuomi <aki.tuomi@open-xchange.com>

    - doveadm deduplicate: Non-duplicate mails were deleted.
      v2.3.19 regression.
    - auth: Crash would occur when iterating multiple backends.
      Fixes: Panic: file userdb-blocking.c:
      line 125 (userdb_blocking_iter_next): assertion failed: (ctx->conn != NULL)

v2.3.19 2022-05-10  Aki Tuomi <aki.tuomi@open-xchange.com>

    + Added mail_user_session_finished event, which is emitted when the mail
      user session is finished (e.g. imap, pop3, lmtp). It also includes
      fields with some process statistics information.
      See https://doc.dovecot.org/admin_manual/list_of_events/ for more
      information.
    + Added process_shutdown_filter setting. When an event matches the filter,
      the process will be shutdown after the current connection(s) have
      finished. This is intended to reduce memory usage of long-running imap
      processes that keep a lot of memory allocated instead of freeing it to
      the OS.
    + auth: Add cache hit indicator to auth passdb/userdb finished events.
      See https://doc.dovecot.org/admin_manual/list_of_events/ for more
      information.
    + doveadm deduplicate: Performance is improved significantly.
    + imapc: COPY commands were sent one mail at a time to the remote IMAP
      server. Now the copying is buffered, so multiple mails can be copied
      with a single COPY command.
    + lib-lua: Add a Lua interface to Dovecot's HTTP client library. See
      https://doc.dovecot.org/admin_manual/lua/ for more information.
    - auth: Cache lookup would use incorrect cache key after username change.
    - auth: Improve handling unexpected LDAP connection errors/hangs.
      Try to fix up these cases by reconnecting to the LDAP server and
      aborting LDAP requests earlier.
    - auth: Process crashed if userdb iteration was attempted while auth-workers
      were already full handling auth requests.
    - auth: db-oauth2: Using %{oauth2:name} variables caused unnecessary
      introspection requests.
    - dict: Timeouts may have been leaked at deinit.
    - director: Ring may have become unstable if a backend's tag was changed.
      It could also have caused director process to crash.
    - doveadm kick: Numeric parameter was treated as IP address.
    - doveadm: Proxying can panic when flushing print output. Fixes
      Panic: file ioloop.c: line 865 (io_loop_destroy): assertion failed:
      (ioloop == current_ioloop).
    - doveadm sync: BROKENCHAR was wrongly changed to '_' character when
      migrating mailboxes. This was set by default to %, so any mailbox
      names containing % characters were modified to "_25".
    - imapc: Copying or moving mails with doveadm to an imapc mailbox could
      have produced "Error: Syncing mailbox '[...]' failed" Errors. The
      operation itself succeeded but attempting to sync the destination
      mailbox failed.
    - imapc: Prevent index log synchronization errors when two or more imapc
      sessions are adding messages to the same mailbox index files, i.e.
      INDEX=MEMORY is not used.
    - indexer: Process was slowly leaking memory for each indexing request.
    - lib-fts: fts header filters caused binary content to be sent to the
      indexer with non-default configuration.
    - doveadm-server: Process could hang in some situations when printing
      output to TCP client, e.g. when printing doveadm sync state.
    - lib-index: dovecot.index.log files were often read and parsed entirely,
      rather than only the parts that were actually necessary. This mainly
      increased CPU usage.
    - lmtp-proxy: Session ID forwarding would cause same session IDs being
      used when delivering same mail to multiple backends.
    - log: Log prefix update may have been lost if log process was busy.
      This could have caused log prefixes to be empty or in some cases
      reused between sessions, i.e. log lines could have been logged for the
      wrong user/session.
    - mail_crypt: Plugin crashes if it's loaded only for some users. Fixes
      Panic: Module context mail_crypt_user_module missing.
    - mail_crypt: When LMTP was delivering mails to both recipients with mail
      encryption enabled and not enabled, the non-encrypted recipients may
      have gotten mails encrypted anyway. This happened when the first
      recipient was encrypted (mail_crypt_save_version=2) and the 2nd
      recipient was not encrypted (mail_crypt_save_version=0).
    - pop3: Session would crash if empty line was sent.
    - stats: HTTP server leaked memory.
    - submission-login: Long credentials, such as OAUTH2 tokens, were refused
      during SASL interactive due to submission server applying line length
      limits.
    - submission-login: When proxying to remote host, authentication was not
      using interactive SASL when logging in using long credentials such as
      OAUTH2 tokens. This caused authentication to fail due to line length
      constraints in SMTP protocol.
    - submission: Terminating the client connection with QUIT command after
      mail transaction is started with MAIL command and before it is
      finished with DATA/BDAT can cause a segfault crash.
    - virtual: doveadm search queries with mailbox-guid as the only parameter
      crashes: Panic: file virtual-search.c: line 77 (virtual_search_get_records):
      assertion failed: (result != 0)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2023-05-13 15:55:08 +03:00
Juan del Bosque 96145db78a dovecot: Fix iconv macro is missing compile error
Fix a Dovecot compile error when building with no other packages than
the default in master build, because iconv macro is missing.

Fixes: #20677

Signed-off-by: Juan del Bosque <juan@web64.pro>
2023-05-10 14:02:20 +08:00
Paul Fertser 0c10c224be treewide: remove AUTORELEASE
Automatically compute and substitute current values for all
$(AUTORELEASE) instances as this feature is deprecated and shouldn't be
used.

The following temporary change was made to the core:

diff --git a/rules.mk b/rules.mk
index 57d7995d4fa8..f16367de87a8 100644
--- a/rules.mk
+++ b/rules.mk
@@ -429,7 +429,7 @@ endef
 abi_version_str = $(subst -,,$(subst _,,$(subst .,,$(1))))

 COMMITCOUNT = $(if $(DUMP),0,$(call commitcount))
-AUTORELEASE = $(if $(DUMP),0,$(call commitcount,1))
+AUTORELEASE = $(if $(DUMP),0,$(shell sed -i "s/\$$(AUTORELEASE)/$(call commitcount,1)/" $(CURDIR)/Makefile))

 all:
 FORCE: ;

And this command used to fix affected packages:

for i in $(cd feeds/packages; git grep -l PKG_RELEASE:=.*AUTORELEASE | \
                              sed 's^.*/\([^/]*\)/Makefile^\1^';);
do
  make package/$i/download
done

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
2023-04-21 22:46:58 +02:00
W. Michael Petullo 4c2306468a dovecot: update to 2.3.18
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2022-05-11 19:08:53 +02:00
Lucian Cristian 95f2ce90ca dovecot: update to 2.3.16
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2021-09-19 15:19:01 -07:00
Rosen Penev 6baf7dd125
dovecot: update to 2.3.13
Fixed and refreshed patches.

Switched to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-02-22 16:34:12 -08:00
Ilya Lipnitskiy 5d8d4fbbcb
treewide: Run refresh on all packages
The crude loop I wrote to come up with this changeset:

  find -L package/feeds/packages/ -name patches | \
  sed 's/patches$/refresh/' | sort | xargs make

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
2021-02-20 16:02:15 -08:00
Jan Pavlinec a5c9ef50dc
dovecot: disable zstd
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-09-10 12:38:01 +02:00
Jan Pavlinec 8ae394430a
dovecot: update to version 2.3.11.3 (security fix)
Fixes:
CVE-2020-12100
CVE-2020-12673
CVE-2020-12674

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-09-08 12:57:01 +02:00
Jan Pavlinec d863e26817
dovecot: update to version 2.3.10.1 (security fix)
Fixes:
CVE-2020-10957
CVE-2020-10958
CVE-2020-10967

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-05-29 15:11:50 +02:00
Ian Cooper 645bea6d88 dovecot: remove incorrect PKG_BUILD_DEPENDS
The package Makefile contains a PKG_BUILD_DEPENDS=libiconv
line, which apart from being incorrect if libiconv-full is
specified in the build configuration, is also unnecessary,
since the package Makefile already includes nls.mk which
sets PKG_BUILD_DEPENDS appropriately.

Signed-off-by: Ian Cooper <iancooper@hotmail.com>
2020-04-30 00:52:12 +01:00
Lucian Cristian f1fcdf2adb dovecot: update to 2.3.10
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2020-03-25 20:43:13 +02:00
Jan Pavlinec 8a0e224fcc
dovecot: update to version 2.3.9.3 (security fix)
Fixes:
CVE-2020-7046
CVE-2020-7957

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-02-20 13:31:57 +01:00
Rosen Penev 0af6c48070
dovecot: Disable libunwind support
Fixes missing dependency error.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-12-26 16:59:36 -08:00
Lucian Cristian 9423c29af5 dovecot: update to 2.3.9
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2019-12-10 00:04:10 +02:00
Lucian Cristian 962716aad7 dovecot: update to 2.3.8
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2019-10-26 21:04:57 +03:00
Jan Pavlinec 299e5b0a9b
treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-17 12:40:26 +02:00
Josef Schlehofer 5275c4156b
dovecot: Update to version 2.3.7.2
Fix CVE-2019-11500

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-10 08:49:56 +02:00
Josef Schlehofer e27438f140
dovecot: Improve packaging and include configs
- Add dovenull user, otherwise, dovecot doesn't start
- Build docs to have configuration files for dovecot
- Remove init script as conffile
- Move build options from Makefile to Config.in
- Install section to be more readable
- Refresh patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-08-18 13:36:03 +02:00
Josef Schlehofer fcbc1cad2c
dovecot: update to version 2.3.7.1
Move PKG_MAINTAINER above PKG_LICENSE to be sync with other packages

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-08-18 13:18:24 +02:00
Lucian Cristian 971b20380e dovecot: update to 2.3.7
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2019-07-14 23:08:01 +03:00
Lucian Cristian 6ea951b2de dovecot: update to 2.3.6
also don't pack docs

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2019-05-13 16:19:50 +03:00
Lucian Cristian 7aae4eed85 dovecot: update to 2.3.5.2
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2019-04-29 04:29:17 +03:00
Lucian Cristian a9502d6d73 dovecot: gssapi build fix, add parallel build
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2019-04-13 19:24:43 +03:00
Rosen Penev 5ec9545ddc
dovecot: Fix deprecated API patch
Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-04-09 19:35:03 -07:00
Lucian Cristian 2d3f82ed2e dovecot: update to 2.3.5.1
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2019-04-07 17:11:34 +03:00
Lucian Cristian 3866fbabc2 dovecot: update to 2.3.5
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2019-03-13 22:05:28 +02:00
Rosen Penev 05c39b5dde dovecot: Fix compilation with OpenSSL 1.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-02-13 18:57:57 -08:00
Jan Pavlinec 0edcd5871c
dovecot: update to version 2.3.4.1 (security fix)
Fixes CVE-2019-3814

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-02-05 21:32:05 +01:00
Rosen Penev d9fa9b0fad dovecot: Make OpenSSL ENGINE support optional
Allows libopenssl to be smaller.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-01-01 23:34:11 -08:00
Lucian Cristian 229c2cad26 dovecot: update to 2.3.4
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2018-11-28 21:58:12 +02:00
Lucian Cristian 195dd657f2 dovecot: update to 2.3.3
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2018-11-11 14:58:11 +02:00
Rosen Penev 5226c0bfe9 dovecot: Fix compilation for OpenSSL without deprecated APIs
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-06 19:10:20 -08:00
Daniel F. Dickinson 2b7531ad9f doveco: pigeonhole: Use stock dovecot dir locations
We move dovecot libexec binaries and modules (including the package
pigeonhole) to their standard locations.  This is okay for libexec
because it was added to core prior to 17.04 release.  Moving the
binaries normally in libexec eliminates the reason the modules were in an
unusual directory, which is that there were conflicts with
libexec binaries that were in lib, which the modules normally use.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2018-08-19 14:35:38 -04:00
Daniel F. Dickinson f0fb968346 dovecot: Fix managesieve-login needs libdovecot-login
When trying to use managesieve my MUA complained sieve wasn't supported.
On investigation dovecot logs the following could be seen:

    Aug 16 00:28:44 managesieve-login: Fatal: master:
      service(managesieve-login): child 1430 returned error 127
    Aug 16 00:31:32 managesieve-login: Error: Error loading shared
      library libdovecot-login.so.0: No such file or directory
      (needed by /usr/lib/dovecot/managesieve-login)
    Aug 16 00:31:32 managesieve-login: Error: Error loading
      shared library libdovecot.so.0: No such file or directory
      (needed by /usr/lib/dovecot/managesieve-login)
    Aug 16 00:31:32 managesieve-login: Error: Error relocating
      /usr/lib/dovecot/managesieve-login: net_ip2addr: symbol not found

The issue (verified with readelf on non-working build and build with my fix)
is that there is no RPATH information in the pigeonhole binaries (like
managesieve-login).

The dovecot-config that is 'installed' in the staging dir
assumes that plugins will be built on the same host as the installed files.
The 'installed' dovecot-config (partial) looks like:

LIBDOVECOT='-L/usr/lib/dovecot -ldovecot'
LIBDOVECOT_LOGIN='-ldovecot-login -L/home/user/Build/openwrt/openwrt-ath79/staging_dir/target-mips_24kc_musl/usr/lib -lssl -lcrypto'
LIBDOVECOT_SQL=-ldovecot-sql
LIBDOVECOT_COMPRESS=-ldovecot-compression
LIBDOVECOT_LDA=-ldovecot-lda
LIBDOVECOT_STORAGE='-ldovecot-storage '
LIBDOVECOT_DSYNC=-ldovecot-dsync
LIBDOVECOT_LIBFTS=-ldovecot-fts

The solution I used was to modify dovecot-config to add the rpath to
DOVECOT_BINARY_LDFLAGS, and to replace references to host directories
with staging_dir directories.

This results in RPATH being added as it needs to be, and results in a working
version of dovecot+pigeonhole.

NB: I've also touched package version of pigeonhole as this change in dovecot
results in (needed) binary changes for pigeonhole.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2018-08-19 14:35:23 -04:00
Lucian Cristian 06ee5719a5 dovecot: update to 2.3.2.1
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2018-07-15 21:21:57 +03:00
Sebastian Kemper 1ec6d2be11 dovecot: include nls.mk for iconv support
libmariadb 10.2 needs to be linked in together with iconv, hence include
nls.mk.

dovecot will use iconv (if it can find it) also for its own character
conversion needs, so add a general depend as well.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-07-13 22:44:19 +02:00
Lucian Cristian 78b842da56 dovecot: update to 2.3.2
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2018-07-06 23:58:38 +03:00
W. Michael Petullo 9fff237349 dovecot: explicitly disable use of sodium
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-06-16 18:03:39 -04:00
W. Michael Petullo 4944e64765 dovecot: update to 2.3.1
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-06-10 15:28:50 -04:00
W. Michael Petullo 25fb926c40 dovecot: add GSSAPI module
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2018-05-25 12:00:11 -04:00
Lucian Cristian 2229c81280 dovecot: update dovecot to 2.2.35
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2018-03-25 10:36:33 +03:00
Val Kulkov 12f0caf3b4 dovecot: prepare for runtime dependency by plugins
Add ABI_VERSION declaration in order to tell dovecot plugins that are
runtime-dependent on dovecot's Application Binary Interface (ABI)
version, such as the pigeonhole mail filter, that they need to be
rebuilt each time the dovecot's ABI version changes.

This PR is not yet closing issue #5062. A forthcoming PR for pigeonhole
package will close the issue.

Introduce a new configuration parameter to enable ICU (i18n) support.
Make the ICU disabled by default.

Introduce PKG_CONFIG_DEPENDS with the list of configuration parameters
triggering rebuild of dovecot.

Declare the conffiles section to save dovecot's configuration files and
its init.d script on sysupgrade.

Introduce a new package, dovecot-utils, to contain doveadm and dsync
utilities: closes #4912.

Correct the destination directory for the installation of
example-config files. At present, the example files are installed into
/usr/share/doc/dovecot/example-config/example-config.

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
2017-11-28 01:34:28 -05:00
Lucian Cristian 134164a8a7 dovecot: update to 2.2.33.2
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2017-10-25 16:28:40 +03:00
Lucian Cristian 635567c66e dovecot: update to 2.2.33.1
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2017-10-18 02:10:21 +03:00
Lucian Cristian 31fae1f00a dovecot: add mysql and postgresql modules
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2017-09-20 21:02:19 +03:00
Lucian Cristian 4d6fd00441 dovecot: update to 2.2.32
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2017-08-28 17:09:03 +03:00
W. Michael Petullo e584683c24 dovecot: install libraries to allow building plugins
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2017-07-04 21:17:04 -04:00
Lucian Cristian ab4499bdaa dovecot: update
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2017-07-03 01:13:30 +03:00