Fedora 11 Update: dovecot-1.2.5-1.fc11

updates at fedoraproject.org updates at fedoraproject.org
Tue Oct 6 10:11:57 UTC 2009


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-9759
2009-09-18 23:22:55
--------------------------------------------------------------------------------

Name        : dovecot
Product     : Fedora 11
Version     : 1.2.5
Release     : 1.fc11
URL         : http://www.dovecot.org/
Summary     : Secure imap and pop3 server
Description :
Dovecot is an IMAP server for Linux/UNIX-like systems, written with security
primarily in mind.  It also contains a small POP3 server.  It supports mail
in either of maildir or mbox formats.

The SQL drivers and authentication plugins are in their subpackages.

--------------------------------------------------------------------------------
Update Information:

- Authentication: DIGEST-MD5 and RPA mechanisms no longer require user's login
realm to be listed in auth_realms. It only made configuration more difficult
without really providing extra security.  - zlib plugin: Don't allow clients to
save compressed data directly. This prevents users from exploiting (most of the)
potential security holes in zlib/bzlib.  - fix index file handling that could
have caused an assert-crash  - IMAP: Fixes to QRESYNC extension.  - deliver:
Don't send rejects to any messages that have Auto-Submitted header. This avoids
emails loops.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Sep 18 2009 Michal Hlavinka <mhlavink at redhat.com> - 1:1.2.5-1
- updated to dovecot 1.2.5
- Authentication: DIGEST-MD5 and RPA mechanisms no longer require
  user's login realm to be listed in auth_realms. It only made
  configuration more difficult without really providing extra security.
- zlib plugin: Don't allow clients to save compressed data directly.
  This prevents users from exploiting (most of the) potential security
  holes in zlib/bzlib.
- fix index file handling that could have caused an assert-crash
- IMAP: Fixes to QRESYNC extension.
- deliver: Don't send rejects to any messages that have Auto-Submitted
  header. This avoids emails loops.
* Fri Aug 21 2009 Michal Hlavinka <mhlavink at redhat.com> - 1:1.2.4-1
- updated: dovecot 1.2.4, managesieve 0.11.9, sieve 0.1.12
- fixed a crash in index file handling
- fixed a crash in saving messages where message contained a CR
  character that wasn't followed by LF
- fixed a crash when listing shared namespace prefix
- sieve: implemented the new date extension. This allows matching
  against date values in header fields and the current date at
  the time of script evaluation
- managesieve: reintroduced ability to abort SASL with "*" response
* Mon Aug 10 2009 Michal Hlavinka <mhlavink at redhat.com> - 1:1.2.3-1
- updated: dovecot 1.2.3, managesieve 0.11.8, sieve 0.1.11
- Mailbox names with control characters can't be created anymore.
  Existing mailboxes can still be accessed though.
- Allow namespace prefix to be opened as mailbox, if a mailbox
  already exists in the root dir.
- Maildir: dovecot-uidlist was being recreated every time a mailbox
  was accessed, even if nothing changed.
- listescape plugin was somewhat broken
- ldap: Fixed hang when >128 requests were sent at once.
- fts_squat: Fixed crashing when searching virtual mailbox.
- imap: Fixed THREAD .. INTHREAD crashing.
* Tue Jul 28 2009 Michal Hlavinka <mhlavink at redhat.com> - 1:1.2.2-1.20090728snap
- updated to post 1.2.2 snapshot (including post release GSSAPI fix)
- Fixed "corrupted index cache file" errors
- IMAP: FETCH X-* parameters weren't working.
- Maildir++ quota: Quota was sometimes updated wrong
- Dovecot master process could hang if it received signals too rapidly
* Thu Jul 23 2009 Michal Hlavinka <mhlavink at redhat.com> - 1:1.2.1-2
- updated sieve plugin to 0.1.9
* Mon Jul 13 2009 Michal Hlavinka <mhlavink at redhat.com> - 1:1.2.1-1
- updated to 1.2.1
- GSSAPI authentication is fixed (#506782)
- logins now fail if home directory path is relative, because it was 
  not working correctly and never was expected to work
- sieve and managesieve update
* Wed Jul  8 2009 Michal Hlavinka <mhlavink at redhat.com> - 1:1.2.0-3
- update sieve and managesieve plugins
* Tue Jul  7 2009 Michal Hlavinka <mhlavink at redhat.com> - 1:1.2.0-2
- update sieve plugin
* Thu Jul  2 2009 Michal Hlavinka <mhlavink at redhat.com> - 1:1.2.0-1
- updated to 1.2.0
* Thu Jun 25 2009 Michal Hlavinka <mhlavink at redhat.com> - 1:1.2-0.rc6.1
- updated to 1.2.rc6
* Fri Jun 19 2009 Michal Hlavinka <mhlavink at redhat.com> - 1:1.2-0.rc5.2
- managesieve updated to 0.11.5 for dovecot rc5
* Thu Jun 18 2009 Michal Hlavinka <mhlavink at redhat.com> - 1:1.2-0.rc5.1
- updated to 1.2.rc5
* Mon Apr 20 2009 Michal Hlavinka <mhlavink at redhat.com> - 1:1.2-0.rc3.1
- updated to 1.2.rc3
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update dovecot' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------




More information about the Fedora-package-announce mailing list