dovecot (1.0.rc17-1ubuntu2.3) feisty-security; urgency=low * SECURITY UPDATE: mailboxes of other users could be read via symlinks. * Add upstream-mail-group-fixes.dpatch: upstream fixes (CVE-2008-1199). * Add upstream-invalid-password-fixes.dpatch: proactive upstream fixes to avoid future issues in underlying passdb (CVE-2008-1218). * References http://dovecot.org/list/dovecot-news/2008-March/000060.html http://dovecot.org/list/dovecot-news/2008-March/000064.html -- Kees Cook Mon, 24 Mar 2008 14:26:07 -0700 dovecot (1.0.rc17-1ubuntu2.2) feisty-security; urgency=low * SECURITY UPDATE: LDAP-authenticated users may accidentally shared cached login when they have the same password. * Add ldap_auth_cache.dpatch: upstream fixes, thanks to Fabio Tranchitella. * References http://dovecot.org/list/dovecot-news/2007-December/000057.html CVE-2007-6598 -- Kees Cook Wed, 09 Jan 2008 15:05:54 -0800 dovecot (1.0.rc17-1ubuntu2.1) feisty-security; urgency=low * SECURITY UPDATE: path traversal in shared spool configurations. * Add debian/patches/compressed-folders.dpatch: upstream fix. * References CVE-2007-2231 -- Kees Cook Tue, 17 Jul 2007 11:34:02 -0700 dovecot (1.0.rc17-1ubuntu2) feisty; urgency=low [ Martin Pitt, edited lightly by Ian Jackson: ] * Add debian/tests/: autopkgtest control file plus our current package-tests test suite for security QA. -- Ian Jackson Thu, 22 Feb 2007 20:11:51 +0000 dovecot (1.0.rc17-1ubuntu1) feisty; urgency=low * Merge from debian unstable, remaining changes: - snakeoil ssl - Remove stop script symlinks from rc0 and rc6 -- Matthias Klose Sun, 14 Jan 2007 10:32:43 +0000 dovecot (1.0.rc17-1) unstable; urgency=low * New upstream release. * Updated dovecot-sieve from CVS. -- Fabio Tranchitella Fri, 12 Jan 2007 09:42:47 +0100 dovecot (1.0.rc15-2ubuntu1) feisty; urgency=low * Merge from debian unstable, remaining changes: - snakeoil ssl - Remove stop script symlinks from rc0 and rc6 -- Michael Vogt Tue, 19 Dec 2006 10:36:05 +0100 dovecot (1.0.rc15-2) unstable; urgency=medium * debian/dovecot-common.README.Debian: updated details about raw logging; thanks Chris Moore for providing a patch. (Closes: #400689) * debian/patches/dovecot-example.dpatch: added a missing slash for an absolute path. (Closes: #400830) * debian/patches/dovecotpw.dpatch: applied patched to fix argument parsing on some architectures. (Closes: #402075) -- Fabio Tranchitella Mon, 18 Dec 2006 18:34:31 +0100 dovecot (1.0.rc15-1ubuntu1) feisty; urgency=low * Merge from debian unstable. Remaining changes: - snakeoil ssl - Remove stop script symlinks from rc0 and rc6 -- Michael Vogt Mon, 27 Nov 2006 20:47:11 +0100 dovecot (1.0.rc15-1) unstable; urgency=medium * New upstream release. * Fixes a security bug: Off-by-one buffer overflow with mmap_disable=yes. (See: http://www.dovecot.org/list/dovecot-news/2006-November/000023.html) -- Fabio Tranchitella Mon, 20 Nov 2006 12:47:39 +0100 dovecot (1.0.rc14-1) unstable; urgency=medium * New upstream release. -- Fabio Tranchitella Thu, 16 Nov 2006 09:37:38 +0100 dovecot (1.0.rc13-1) unstable; urgency=medium * New upstream release. * debian/rules: + preserve upstream config.guess and config.sub. (Closes: #397404) + really clean dovecot-sieve/src on clean target. (Closes: #397407) * debian/control: added build-conflict with automake1.4. (Closes: #397409) * dovecot-sieve/src/Makefile.am: move sieve plug-ins under usr/lib/dovecot/lda/modules; thanks to Chris Vanden Berghe for pointing this out. -- Fabio Tranchitella Tue, 7 Nov 2006 09:26:56 +0100 dovecot (1.0.rc12-1) unstable; urgency=low * New upstream release. -- Fabio Tranchitella Sun, 5 Nov 2006 16:52:52 +0100 dovecot (1.0.rc10-3) unstable; urgency=medium * debian/rules: fixed two typos in the configure call. (Closes: #395016) * Included dovecot-sieve plug-in from CVS. (Closes: #394885) * Urgency medium: we are near the freeze, and this release must be part of etch. -- Fabio Tranchitella Tue, 31 Oct 2006 06:30:45 +0000 dovecot (1.0.rc10-2) unstable; urgency=low * debian/patches/dovecot-example.dpatch: commented out a close brace. (Closes: #394785) -- Fabio Tranchitella Mon, 23 Oct 2006 08:17:13 +0000 dovecot (1.0.rc10-1) unstable; urgency=low * New upstream release. (Closes: #393004) * debian/patches/dovecot-example.dpatch: + added specific comments to the mail_extra_groups option. (Closes: #383453) + removed duplicated LDA section. (Closes: #391632) * debian/dovecot.8: fixed a layout error. (Closes: #393080) * debian/dovecot-common.init: added LSB headers. * Switched to the upstream dovecot deliver (LDA). * debian/patches/quota_v2.dpatch: added, thanks to Jonas Smedegaard. (Closes: #377563) -- Fabio Tranchitella Sun, 22 Oct 2006 08:55:16 +0000 dovecot (1.0.rc7-1) unstable; urgency=low * New upstream release. (Closes: #377840, #385101) * debian/patches/dovecot-example.dpatch: set a default value for pop3_uidl_format. (Closes: #383883) -- Fabio Tranchitella Tue, 29 Aug 2006 10:38:17 +0200 dovecot (1.0.rc6-1) unstable; urgency=low * New upstream release: + Fixed imap segfaults on small mbox files (2 bytes). (Closes: #377840) + Fixed a known bug in dovecot's IDLE handler. (Closes: #351828) + Added support for quota2. (Closes: #377563) * debian/control: converted build-depends on linux-kernel-headers to build-conflicts to help the GNU/kFreeBSD port. (Closes: #377479) * debian/control: changed maintainer to "Dovecot Maintainers"; no changes to the email addresses. -- Fabio Tranchitella Tue, 15 Aug 2006 10:58:57 +0200 dovecot (1.0.rc2-2) unstable; urgency=low * patched the quota plugin to fix a missing symbol (Closes: #377018) -- Jaldhar H. Vyas Fri, 7 Jul 2006 10:50:04 -0400 dovecot (1.0.rc2-1ubuntu2) edgy; urgency=low * Remove stop script symlinks from rc0 and rc6. * Remove dependency on linux-kernel-headers. -- Scott James Remnant Mon, 18 Sep 2006 16:53:37 +0100 dovecot (1.0.rc2-1ubuntu1) edgy; urgency=low * Merge from debian unstable. -- Martin Pitt Fri, 7 Jul 2006 10:04:42 +0200 dovecot (1.0.rc2-1) unstable; urgency=high * New upstream release * Update dovecot-lda to the latest version (05132006) * IPv6 with SSL/TLS should work now. (Closes: #374783) * go back to using poll instead of epoll. (Closes: #376222) -- Jaldhar H. Vyas Thu, 6 Jul 2006 00:47:56 -0400 dovecot (1.0.rc1-1ubuntu1) edgy; urgency=low * Merge from debian unstable. -- Martin Pitt Fri, 30 Jun 2006 15:13:37 +0200 dovecot (1.0.rc1-1) unstable; urgency=low * New upstream release. * Add a build-dependency on linux-kernel-headers for the xfs quotas stuff. Make it higher than the version in sarge because sarges xfs includes are too old. If any knowledgeable person would like to give me a patch for this, please do. (Closes: #374793) -- Jaldhar H. Vyas Wed, 28 Jun 2006 11:42:07 -0400 dovecot (1.0.beta9-1ubuntu1) edgy; urgency=low * Merge from debian unstable, resolved minor conflicts. * debian/control: Removed unnecessary build dependency ssl-cert, add it as dovecot-common dependency. * Remove debian/patches/prohibit_.._mbox_mask.dpatch, upstream now. -- Martin Pitt Wed, 28 Jun 2006 08:45:43 +0200 dovecot (1.0.beta9-1) unstable; urgency=low * New upstream release * Added XFS quota support. Thanks Pawel Jarosz (Closes #373936) -- Jaldhar H. Vyas Mon, 19 Jun 2006 16:55:20 -0400 dovecot (1.0.beta8-4) unstable; urgency=high * Unfortunately, the patch in the last version broke the mysql module. Fixed thanks to Martin Pitt. (Closes: #369359, #373227) -- Jaldhar H. Vyas Sun, 11 Jun 2006 16:27:43 -0400 dovecot (1.0.beta8-3) unstable; urgency=high * [SECURITY] SQL injection could occur in the postgresql module with certain client character encodings. (See CVE-2006-2314) Used the patch from upstream and Martin Pitt . Thanks Martin. (Closes: #369359) -- Jaldhar H. Vyas Sun, 11 Jun 2006 15:33:55 -0400 dovecot (1.0.beta8-2) unstable; urgency=high * Don't chown/chmod ssl certificate unless we created it. (Closes: #364766) * Upstream fixed the crash if passwd-file had entries without passwords. (Closes: #361536) * fixed up the last versions changelog to better describe the security problem which was fixed there. -- Jaldhar H. Vyas Sun, 21 May 2006 13:16:17 -0400 dovecot (1.0.beta8-1) unstable; urgency=high * New upstream release. * [SECURITY] Fixes a directory traversal vulnerability. (see: http://www.dovecot.org/list/dovecot-news/2006-May/000006.html and CVE-2006-2414) * Set urgency to high: this version fixes a security bug * Standards-Version: 3.7.2, no changes needed. -- Fabio Tranchitella Sat, 13 May 2006 22:46:16 +0200 dovecot (1.0.beta7-1) unstable; urgency=low * New upstream version. * Added sqlite support. -- Jaldhar H. Vyas Wed, 12 Apr 2006 23:25:41 -0400 dovecot (1.0.beta5-1) unstable; urgency=low * New upstream version. Also updated dovecot-lda from CVS. * debian/control. Added build-depends on flex to prevent FTBS. -- Jaldhar H. Vyas Thu, 6 Apr 2006 16:22:46 -0400 dovecot (1.0.beta3-3ubuntu5) dapper; urgency=low * debian/dovecot-common.postinst: - Do not chmod/chown an already existing SSL certificate. This will leave permissions of the snakeoil SSL key intact. Closes: LP#45207 -- Martin Pitt Wed, 17 May 2006 13:41:35 +0200 dovecot (1.0.beta3-3ubuntu4) dapper; urgency=low * Add debian/patches/prohibit_.._mbox_mask.dpatch: - Fix information disclosure due to path traversal: Do not allow '.' and '..' as valid list masks. - This regression was introduced in some 1.0beta version, so 0.99.x are not affected. - Patch taken from upstream: http://dovecot.org/list/dovecot-cvs/2006-May/005563.html - Closes: LP#44364 -- Martin Pitt Fri, 12 May 2006 14:48:39 +0200 dovecot (1.0.beta3-3ubuntu3) dapper; urgency=low * Create /var/run/dovecot on boot. -- Scott James Remnant Tue, 11 Apr 2006 01:48:01 +0100 dovecot (1.0.beta3-3ubuntu2) dapper; urgency=low * Rebuild against the new libmysqlclient15off with correct symbols. -- Adam Conrad Thu, 6 Apr 2006 12:47:52 +1000 dovecot (1.0.beta3-3ubuntu1) dapper; urgency=low * Synchronize to Debian, UVF exception approved by mdz. Closes: LP#30314 * Removed auth_crashfix.dpatch, login-crashfixes.dpatch: Fixed upstream. -- Martin Pitt Tue, 4 Apr 2006 11:36:03 +0200 dovecot (1.0.beta3-3) unstable; urgency=low * Compile against the newer mysql library. (Closes: #356729) -- Fabio Tranchitella Wed, 22 Mar 2006 13:43:04 +0000 dovecot (1.0.beta3-2) unstable; urgency=low [Fabio Tranchitella] * debian/control: added build-depends on byacc. * debian/rules: removed --with-vpopmail option, because libvpopmail-dev is in contrib and we don't wanto to have dovecot build-depends on it. * debian/patches/dovecot-example.dpatch: added two small commented block of configuration for dovecot-lda. -- Fabio Tranchitella Sun, 26 Feb 2006 20:59:06 +0000 dovecot (1.0.beta3-1) unstable; urgency=high [Fabio Tranchitella] * New upstream release, which fixes two security related bugs. CVE-2006-0730 (Closes: #353341) * Included dovecot-lda (ver. 20060209). (Closes: #353307, #347348, #333962) [ Jaldhar H. Vyas ] * Removed the code for upgrading impad.pem. This might bite if you if you try and upgrade a woody version of dovecot to this one. So don't do that. (Closes: #337715) * dovecot-imapd,dovecot-pop3d: depend on dovecot-common >= 1.0beta3-1 as the way SSL parameters are generated has changed. (Closes: #353404) -- Jaldhar H. Vyas Fri, 17 Feb 2006 22:06:21 -0500 dovecot (1.0.beta2-1) unstable; urgency=low [Fabio Tranchitella] * New upstream release. * debian/rules: compile with vpopmail support. (Closes: #347838) * debian/patches: removed zlib patch (merged with upstream). -- Fabio Tranchitella Thu, 2 Feb 2006 21:38:32 +0000 dovecot (1.0.alpha5-1ubuntu3) dapper; urgency=low * SECURITY UPDATE: Multiple remote DoS. * Add debian/patches/auth_crashfix.dpatch: - src/auth/auth-request-handler.c: Fix crash if authentication client disconnected while it still had pending requests. - Patch taken from upstream CVS (from 1.0beta3 release). * Add debian/patches/login-crashfixes.dpatch: - imap-login/client-authenticate.c pop3-login/client-authenticate.c: Fix crash if client disconnected while we were trying to send authentication continuation to it. - Patch taken from upstream CVS (from 1.0beta3 release). * CVE-2006-0730 (just one for both vulns) * debian/patches/ssl-cert-snakeoil.dpatch: Also change the internal defaults in src/master/master-settings.c, to make the snakeoil cert actually work OOTB. -- Martin Pitt Wed, 22 Feb 2006 11:30:40 +0100 dovecot (1.0.alpha5-1ubuntu2) dapper; urgency=low * Switch default config to use ssl-cert-snakeoil certificates. * Add Depends on ssl-cert. * Make postinst use a more generic grep for SSL_* otherwise it just doesn't work. -- Fabio M. Di Nitto Sat, 04 Feb 2006 12:37:07 +0100 dovecot (1.0.alpha5-1ubuntu1) dapper; urgency=low * Build against libmysqlclient15. -- Martin Pitt Thu, 2 Feb 2006 16:26:05 +0000 dovecot (1.0.alpha5-1) unstable; urgency=low [Fabio Tranchitella] * New upstream release. * Compile dovecot with Kerberos support. (Closes: #338384) * Fixed a small typo in mbox specification. (Closes: #339789) * Added man page for maildirmake.dovecot, thanks to Henry Precheur. (Closes: #340498) * Use /usr/lib/dovecot/modules as basedir for dynamic modules. Upstream suggests /usr/lib/dovecot, but we already use it as libexec directory. -- Fabio Tranchitella Wed, 21 Dec 2005 13:44:38 +0000 dovecot (1.0.alpha4-1) unstable; urgency=low [Jaldhar H. Vyas] * New upstream version. * Made sure the default dovecot.conf includes mail_extra_groups=mail (Closes: #336476) somehow this edit got lost at some point. * use ISO8601 date format as default value for log_timestamp in /etc/dovecot/dovecot.conf (Closes: #333059) * stop shipping {arch} directories in source (Closes: #334646) * Include plugin for compressed mboxen (Closes: #332384) * updated NEWS.Debian to warn users that the dovecot.conf syntax has changed (Closes: #334209) * Remember, remember, the 5th of November. -- Jaldhar H. Vyas Sat, 5 Nov 2005 23:19:19 -0500 dovecot (1.0.alpha3-2) unstable; urgency=low [Jaldhar H. Vyas] * dovecot-common: When creating the dovecot user in the postinst, the --ingroup option to adduser to add dovecot to group mail isn't used anymore. (Closes: #330960, #331106) * commented out userdb passdb from default configuration. Most people won't need that. (Closes: #330978) -- Jaldhar H. Vyas Thu, 6 Oct 2005 14:25:33 -0400 dovecot (1.0.alpha3-1) unstable; urgency=low [ Fabio Tranchitella ] * New upstream release (dovecot-1.0.alpha.3) * debian/patches/ipv6_v6only.dpatch: removed, upstream accepted it. * debian/dovecot-common.postinst: removed bashisms. * debian/dovecot-common.postinst: add dovecot user to group mail. (Closes: #323921) * debian/control: removed conflicts with imap-server and pop3-server, added replaces instead. (Closes: #324480) [ Jaldhar H. Vyas ] * No longer crashes when using LDAP as userdb/passdb (Closes: #320388) -- Jaldhar H. Vyas Mon, 26 Sep 2005 01:42:09 -0400 dovecot (0.99.20050712-2) unstable; urgency=low * Fabio Tranchitella + debian/control: dovecot-common has to depend on adduser. + debian/patches/documentation.dpatch: some cosmetic fixes about mysql backend. * Jaldhar H. Vyas + debian/control: tighten dovecot-imapd and dovecot-pop3d's dependency on dovecot-common (Closes: #319465) + debian/patches/dovecot-example.dpatch: some more fixes to default configuration. (Closes: #319413, #319941) -- Jaldhar H. Vyas Fri, 29 Jul 2005 15:37:52 -0400 dovecot (0.99.20050712-1) unstable; urgency=low * Fabio Tranchitella + New upstream version (dovecot-stable, last update 20050712). (Closes: #312893) + debian/control: Standards-Version: 3.6.2 (no changes needed). + debian/patches/dovecot-sql.dpatch: use the right path for mysql socket. (Closes: #298874) * Jaldhar H. Vyas + Removed dovecot package as it was just a woody->sarge transitional pseudo-package. + Apply patch to debian/dovecot-common.init to help when manually starting dovecot. Thanks Roland Stigge. (Closes: #309679) + Apply patch to src/lib/network.c to support IPV6_V6ONLY. Thanks Marco D'Itri. (Closes: #308652) + depend on the latest postgresql library. -- Jaldhar H. Vyas Wed, 20 Jul 2005 06:30:37 -0400 dovecot (0.99.14-1) unstable; urgency=low * New upstream version. * dovecot-common: another postinst regexp fix for SSL cert/key files. (Closes: #294989) -- Jaldhar H. Vyas Sat, 12 Feb 2005 21:34:33 -0500 dovecot (0.99.13-6) unstable; urgency=high * dovecot-common: *sigh* another init script fix. Hopefully we now fully deal with dovecot being run from inetd. Thanks again to Magnus Holmgren. (Closes: #293348) * High again so -5 doesn't get into sarge. -- Jaldhar H. Vyas Mon, 7 Feb 2005 02:58:30 -0500 dovecot (0.99.13-5) unstable; urgency=high * dovecot-common: typo in postinst resulted in incorrect generation of keys for first-time installers. Hence urgency high. * dovecot-common: In init script, make extra check to make sure an IMAP or POP3 server called from inetd is dovecot and not some other random inferior product. (Closes: #293348) -- Jaldhar H. Vyas Sat, 5 Feb 2005 13:56:31 -0500 dovecot (0.99.13-4) unstable; urgency=low * build depend on libmysqlclient12 * dovecot-common: Allow STARTTLS to work when dovecot is run from inetd Thanks Magnus Holmgren (Closes: #290985) * dovecot-common: let init script exit if dovecot is being run from inetd Thanks Magnus Holmgren (Closes: #292195) * dovecot-common: fix a number of problems in postinst + fails if /etc/ssl/certs or /etc/ssl/private doesn't exist + certs cannot be generated and upgrade fails if openssl is not configured. Fail more gracefully if this is the case. + read the name and path for the cert from dovecot.conf instead of hardcoding it. Thanks Frederic Pauget (Closes: #292344) -- Jaldhar H. Vyas Sun, 30 Jan 2005 15:20:03 -0500 dovecot (0.99.13-3) unstable; urgency=high * Oops -2 had to be urgency=high so -1 doesn't get into sarge. -- Jaldhar H. Vyas Sat, 8 Jan 2005 12:11:38 -0500 dovecot (0.99.13-2) unstable; urgency=low * dovecot-imapd, dovecot-pop3d: It occurred to me that the effects of fixing #288391 will cause confusion in the minds of new installers so I should add a warning in README.Debian and NEWS.Debian in a vain effort to stave off swarms of bug reports. (Vain, because no one actually reads documentation anyway.) -- Jaldhar H. Vyas Sat, 8 Jan 2005 11:29:59 -0500 dovecot (0.99.13-1) unstable; urgency=high * New upstream version. * dovecot-imapd, dovecot-pop3d: No longer mess with dovecot.conf in postinst (Closes: #288391) * urgency high due to #288391 being a release-critical bug. -- Jaldhar H. Vyas Fri, 7 Jan 2005 17:37:08 -0500 dovecot (0.99.12-1) unstable; urgency=low * New upstream version. (Yes I know 0.99.13 is just around the corner.) * SASL is reenabled so this bug ("Dovecot seems not to require SASL") is no longer valid (Closes: #272093) * Configuration files moved to /etc/dovecot (Closes: #276183) * Permissions on /var/run/dovecot and /var/run/dovecot/login no longer give warnings. (Closes: #283996) * SSL certificate is world readable (Closes #277114). * Thanks to Jan Buren, much extra documentation has been added to /usr/share/doc/dovecot-common/README.Debian * Lintian overrides added. * Happy new year to all you Gregorians -- Jaldhar H. Vyas Fri, 31 Dec 2004 15:55:07 -0500 dovecot (0.99.11-3) unstable; urgency=medium * applied dovecot-large-header-fix patch to prevent 100% CPU utilization when dealing with really large headers. (Closes: #271458) -- Jaldhar H. Vyas Mon, 13 Sep 2004 20:20:23 -0400 dovecot (0.99.11-2) unstable; urgency=low * Eliminated duplicate stanza in dovecot.conf (Closes: #270181) * Reapplied CRAM-MD5 patch. -- Jaldhar H. Vyas Mon, 6 Sep 2004 01:24:53 -0400 dovecot (0.99.11-1) unstable; urgency=low * New upstream release. * patch to give bug reporting address in configure.ac. Thanks Matthias Andree. -- Jaldhar H. Vyas Sat, 4 Sep 2004 14:24:57 -0400 dovecot (0.99.10.9-2) unstable; urgency=low * screw mipsel. * Added PAM_RHOST patch. Thanks Dean Gaudet. (Closes: #264712) * Added CRAM-MD5 patch. Thanks Joshua Goodall. * Added unexpected EOF patch from Timo. -- Jaldhar H. Vyas Tue, 17 Aug 2004 01:13:20 -0400 dovecot (0.99.10.9-1) unstable; urgency=low * New upstream release. -- Jaldhar H. Vyas Mon, 2 Aug 2004 18:56:02 -0400 dovecot (0.99.10.8-1) unstable; urgency=low * New upstream release. -- Jaldhar H. Vyas Fri, 30 Jul 2004 08:17:51 -0400 dovecot (0.99.10.7-1) unstable; urgency=low * New upstream release. -- Jaldhar H. Vyas Wed, 14 Jul 2004 07:29:49 -0400 dovecot (0.99.10.6-3) unstable; urgency=low * Patched so dovecot follows symlinks to directories again. (Closes: #256061) * Changed the priority of init script so it is run after postgresql (Closes: #256068) -- Jaldhar H. Vyas Thu, 24 Jun 2004 23:57:50 -0400 dovecot (0.99.10.6-2) unstable; urgency=high * I needed to enable one more parameter in the configuration in order to get dot-locking working. Hence this should still be high urgency. (Really Closes: #185335) -- Jaldhar H. Vyas Mon, 21 Jun 2004 20:02:29 -0400 dovecot (0.99.10.6-1) unstable; urgency=high * New upstream version. + finally fixes dot-locking so I think it deserves high priority for sarge. (Closes: #185335) * dovecot: fixed a typo in description (Closes: #254415) * dovecot-common: man page for dovecot added. Thanks Kai Hendry. (Closes: #253482) -- Jaldhar H. Vyas Sat, 19 Jun 2004 23:18:39 -0400 dovecot (0.99.10.5-4) unstable; urgency=high * Crap, typo in dovecot-common.postinst sorry. This should only affect new installs though. -- Jaldhar H. Vyas Fri, 11 Jun 2004 22:30:41 -0400 dovecot (0.99.10.5-3) unstable; urgency=high * SECURITY: set permissions on config files to 0600 to prevent disclosure of sensitive information to local users. (Closes: #253760) * SECURITY: Tightened permissions on generated SSL certificate. (Closes: #253833) * Made a note that dovecot-openssl.conf is not needed on Debian because we generate a certificate in dovecot-commons' postinst. (Closes: #253774) * Added maildir-autocreate patch. -- Jaldhar H. Vyas Fri, 11 Jun 2004 09:12:07 -0400 dovecot (0.99.10.5-2) unstable; urgency=low * Added maildir-stat patch. -- Jaldhar H. Vyas Thu, 10 Jun 2004 14:39:28 -0400 dovecot (0.99.10.5-1) unstable; urgency=low * New upstream version. * Enabled mysql support. -- Jaldhar H. Vyas Thu, 27 May 2004 13:21:42 -0400 dovecot (0.99.10.4-5) unstable; urgency=high * Switched to using openssl as dovecot segfaults with gnutls7 and is not compatible with gnutls10 (Closes: #244570) -- Jaldhar H. Vyas Mon, 19 Apr 2004 22:45:21 -0400 dovecot (0.99.10.4-4) unstable; urgency=low * Added a patch to src/auth/db-pgsql.c from Zsolt VARGA. -- Jaldhar H. Vyas Tue, 30 Mar 2004 12:49:31 -0500 dovecot (0.99.10.4-3) unstable; urgency=high * dovecot-common: Fix postinst to no longer delete /etc/pam.d/imap (Closes: #232832) -- Jaldhar H. Vyas Mon, 15 Mar 2004 10:27:52 -0500 dovecot (0.99.10.4-2) unstable; urgency=low * dovecot-common: now replaces: dovecot for smoother upgrades. (Closes: #223666) -- Jaldhar H. Vyas Thu, 11 Dec 2003 09:18:12 -0500 dovecot (0.99.10.4-1) unstable; urgency=low * New upstream version + This fixes the curruption of .subscriptions files wth folders in maildir format. (Closes: #222272) * Some extra information included in dovecot-common.README.Debian. (Closes: #221106) There should probaly be more so if you have ideas let me know. -- Jaldhar H. Vyas Mon, 1 Dec 2003 23:41:00 -0500 dovecot (0.99.10.2-1) unstable; urgency=low * New upstream version. -- Jaldhar H. Vyas Tue, 11 Nov 2003 17:21:45 -0500 dovecot (0.99.10-11) unstable; urgency=low * Build depend on gnutls 7 instead of 5 (Closes: #219523) -- Jaldhar H. Vyas Thu, 6 Nov 2003 22:25:00 -0500 dovecot (0.99.10-10) unstable; urgency=low * maildirmake.dovecot will now let you create maildirs whose names have spaces in them and chown them to a specified user. Thanks Paul Slootman (Closes: #219168) -- Jaldhar H. Vyas Tue, 4 Nov 2003 20:00:25 +0000 dovecot (0.99.10-9) unstable; urgency=low * Don't use SASL2 as upstream says the support is broken. -- Jaldhar H. Vyas Tue, 23 Sep 2003 16:27:11 +0000 dovecot (0.99.10-8) unstable; urgency=low * Patched so suid works on 2.6 kernels. Thanks Peter Gervai. (Closes: #211420) -- Jaldhar H. Vyas Wed, 17 Sep 2003 17:59:10 +0000 dovecot (0.99.10-7) unstable; urgency=low * Yet another init script fix. It should be ok now. Thanks once again to Alexis Iglauer. -- Jaldhar H. Vyas Wed, 27 Aug 2003 10:56:04 -0400 dovecot (0.99.10-6) unstable; urgency=low * fix some errors in init script (closes: #207464) Thanks to Adam Lackorzynski and Alexis Iglauer. -- Jaldhar H. Vyas Wed, 27 Aug 2003 09:02:23 -0400 dovecot (0.99.10-5) unstable; urgency=high * dovecot-pop3d, dovecot-imapd: make sure init script doesn't attempt to start the daemons if unconfigured thus preventing segfault on startup. (Closes: #206992, #207140) -- Jaldhar H. Vyas Mon, 25 Aug 2003 16:40:53 -0400 dovecot (0.99.10-4) unstable; urgency=low * Updated PAM configuration to the new scheme and added appropriate dependency. -- Jaldhar H. Vyas Fri, 22 Aug 2003 12:54:54 -0400 dovecot (0.99.10-3) unstable; urgency=low * dovecot-pop3d: Patch for proper PAM service name. * dovecot-imapd, dovecot-pop3d: Make sure there is an appropriate entry in the protocol = line in /etc/dovecot.conf so the service will start up without errors. (Closes: #204213) -- Jaldhar H. Vyas Thu, 21 Aug 2003 13:47:00 -0400 dovecot (0.99.10-2.1) unstable; urgency=low * Non-maintainer upload at request of maintainer. * Fix segfault on alpha caused by time_t size. Closes: #203892. * Fix segfault when user's home directory is left empty. -- Scott James Remnant Wed, 6 Aug 2003 01:47:16 +0100 dovecot (0.99.10-2) unstable; urgency=low * corrected paths to example and configuration files in sample config (Closes: #199740) * Added postgresql support. -- Jaldhar H. Vyas Thu, 3 Jul 2003 16:45:49 -0400 dovecot (0.99.10-1) unstable; urgency=low * New upstream release. * PAM service name has changed to dovecot (for IMAP and POP3.) I've included code to move /etc/pam.d/imap to /etc/pam.d/dovecot but if things suddenly stop working, this is the first thing to check. -- Jaldhar H. Vyas Thu, 26 Jun 2003 22:31:07 -0400 dovecot (0.99.10-0.rc2) unstable; urgency=low * New upstream release. Fixes broken imaps support. * Typo in configure options that broke LDAP support on woody corrected. * Only start /usr/sbin/dovecot if either the IMAP or POP3 servers are installed. (Closes: #192066) -- Jaldhar H. Vyas Mon, 23 Jun 2003 23:26:04 -0400 dovecot (0.99.9.1-1) unstable; urgency=low * New upstream release. -- Jaldhar H. Vyas Sun, 4 May 2003 21:49:55 -0400 dovecot (0.99.9-1) unstable; urgency=low * New upstream release. * The IMAP and POP3 servers have been split into seperate package so you don't have to install both. There is also a dovecot-common package for the parts they share. The dovecot package is now a dummy just for transitioning to this new scheme. (Closes: #187826) * Allow chmod in maildirmake.dovecot to fail gracefully (Closes: #191244) -- Jaldhar H. Vyas Wed, 30 Apr 2003 08:53:46 -0400 dovecot (0.99.8.1-4) unstable; urgency=low * Added a build-depends on libsasl-dev (Closes: #187516) * Enabled pop3 service. However it is still turned off in the config file by default so as to not surprise anyone who thought they only had an IMAP server. * Consequently, changed "IMAP server" in descriptions etc. to "mail server". * only skip key generation if both /etc/ssl/certs/dovecot.pem and /etc/ssl/private/dovecot.pem exist. (Closes: #187638) * post-0.99.8.1 patch: Fix renaming subfolders with maildir. * post-0.99.8.1 patch: Fix other maildir subfolder problems. * post-0.99.8.1 patch: Fix partial body fetches. * post-0.99.8.1 patch: Fix using LITERAL+APPEND. -- Jaldhar H. Vyas Sat, 5 Apr 2003 14:13:52 -0500 dovecot (0.99.8.1-3) unstable; urgency=low * Fixed bashism and perlism(!) in maildirmake.dovecot. Thanks Clint Adams. (Closes: #185768) * Enabled LDAP support. The configuration is in /etc/dovecot-ldap.conf but is commented out. * Happy new year to all Debian users still on the Julian calendar. -- Jaldhar H. Vyas Tue, 25 Mar 2003 09:25:37 -0500 dovecot (0.99.8.1-2) unstable; urgency=low * Make a seperate check for /etc/ssl/private/imapd.pem in case we don't have it. (Closes: #185334) * Move check for dovecot user and creation code to postinsts' configure phase. (Closes: #185333) -- Jaldhar H. Vyas Wed, 19 Mar 2003 01:50:10 -0500 dovecot (0.99.8.1-1) unstable; urgency=low * new upstream release. (Closes: #184131) Does not include the POP3 server or LDAP and SASL support for now so we can get into the archive quickly. Fixes segfaults in imap-master (Closes: #184231) Fixes faulty mail autodetection presets (Closes: #179625) -- Jaldhar H. Vyas Sun, 16 Mar 2003 15:47:54 -0500 dovecot (0.99.7-4) unstable; urgency=low * Fixed location of handlers. (Closes: #179273) -- Jaldhar H. Vyas Fri, 31 Jan 2003 18:37:23 -0500 dovecot (0.99.7-3) unstable; urgency=low * doh pam file should be called imap not dovecot (Closes: #179180) -- Jaldhar H. Vyas Fri, 31 Jan 2003 14:12:29 -0500 dovecot (0.99.7-2) unstable; urgency=low * Added two upstream patches to fix broken plain authentication and building with vpopmail support (which is not enabled in the Debian package yet.) -- Jaldhar H. Vyas Fri, 17 Jan 2003 14:24:22 -0500 dovecot (0.99.7-1) unstable; urgency=low * New upstream release. * Syslog no longer fills up with entries when dovecot is misconfigured. (Closes: #175507) * startup is logged now. shutdowns were already logged. (Closes: #175509) * dovecot will not remove your SSL certificates now. (Closes: #175282) -- Jaldhar H. Vyas Wed, 15 Jan 2003 00:58:23 -0500 dovecot (0.99.6rc2-1) unstable; urgency=low * New upstream release. * Includes patch which stops dovecot from dying on alpha (Closes: #175577) -- Jaldhar H. Vyas Wed, 8 Jan 2003 14:22:09 -0500 dovecot (0.99.5-1) unstable; urgency=low * New upstream release with many fixes and improvements. -- Jaldhar H. Vyas Fri, 3 Jan 2003 00:53:26 -0500 dovecot (0.99.4-1) unstable; urgency=low * Initial Release. -- Jaldhar H. Vyas Wed, 18 Dec 2002 09:44:39 -0500