- Dovecot-news - dovecot.org

Released Pigeonhole Sieve v0.1.18 and ManageSieve v0.11.12 for Dovecot v1.2.15
by Stephan Bosch 05 Oct '10

05 Oct '10

Hello Dovecot users, The recent release of Dovecot v1.2.15 is a good opportunity to release new versions of Sieve and ManageSieve for Dovecot v1.2. These releases consist entirely of bugfixes and introduce no new features. Changelog Sieve v0.1.18: - Imap4flags: fixed segfault bug occuring in multiscript context. Occured in specific situations when a script using imap4flags was followed in the sequence by scripts not using imap4flags. - Imap4flags: fixed bug in setflag command; when parameter was a stringlist, only the last item was actually set. - Prevented assertion failure due to currupt binary string representation. If the string were missing a final \0 character an assertion was produced in stead of a binary corruption error. - Multiscript: fixed duplicate implicit keep caused by erroneous execution state update. - Fixed Sieve script name checking to properly handle length limit and added 0x00ff as invalid character. - Removed spurious old stdio.h (top) includes; these caused compile issues on specific systems. - Fixed default Sieve capability (as reported by ManageSieve): extra extensions spamtest, spamtestplus and virustest were enabled by default. These should, however, only be enabled when properly configured and there is no default configuration. - Variables extension: fixed :length set modifier to recognize utf8 characters in stead of octets. - Fixed unnecessary reporting of dummy extensions in ManageSieve SIEVE capability; the comparator-i;octet and comparator-i;ascii-numeric 'extensions' were reported explicitly. - LDA Sieve plugin: added _version symbol to enable Dovecot's plugin version check. Without this check, people can forget to recompile the plugin, which can lead to unexpected effects. Changelog ManageSieve v0.11.12: - Fixed error handling of PUTSCRIPT commmand; save commit errors would not make the command fail. - Fixed PUTSCRIPT bug causing it to hang when given an empty script name. The releases are available as follows: Sieve http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.18.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.18.tar.gz.sig ManageSieve http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-managesieve-0.11.12.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-managesieve-0.11.12.tar.gz.… ManageSieve patch http://www.rename-it.nl/dovecot/1.2/dovecot-1.2.15-managesieve-0.11.12.diff… http://www.rename-it.nl/dovecot/1.2/dovecot-1.2.15-managesieve-0.11.12.diff… Refer to http://pigeonhole.dovecot.org and the Dovecot wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

ACL handling bugs in v1.2.8+ and v2.0
by Timo Sirainen 02 Oct '10

02 Oct '10

I thought I'd write one mail about this, rather than duplicate the whole thing to both v1.2.15 and v2.0.5 release announcements. So, ever since this commit: 2009-11-10 Timo Sirainen <tss(a)iki.fi> * src/plugins/acl/acl-backend-vfile.c: acl: Merge group rights if user belongs to more than one. [76ff6831c9ae] The ACLs were being merged, rather than fully replaced, a bit too often. Since this is about merging, the problem could have happened only when using more than one entry in the ACL file. The main problems created by this were: a) If admin wanted to remove some rights from mailboxes in user's private namespace (e.g. symlinked shared mailboxes), they may not have gotten removed. b) When mixing up multiple ACL entries, such as groups/users the more specific entry may not have replaced the previous entry (e.g. group-override may not have worked as expected). The bug happened when two or more ACL entries of same "type" existed. The first entry was handled correctly, but the next ones may have only been adding ACLs rather than replacing them. For example if you had the following ACL file: group=people lrwi user=foo lr user=bar lr So basically everyone in "people" group should have "lrwi" rights, but foo and bar users should have only "lr" rights. If foo and bar didn't belong to people group, everything would work as expected. If they did, then what would happen is: * foo would work correctly, because it was the first entry of user type. * bar would keep "lrwi" rights, because the previous entry (user=foo) was of the same type (both are "user" type), so Dovecot decided to add the rights on top of group=people entry rather than replace them. BTW. The other ACL bug/"feature" of automatically adding admin rights that was fixed in v1.2.15 was already fixed in v2.0.beta2.

1 0

v2.0.5 released
by Timo Sirainen 02 Oct '10

02 Oct '10

http://dovecot.org/releases/2.0/dovecot-2.0.5.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.5.tar.gz.sig See the "ACL handling bugs" message for more details about the ACL merging bug. * acl: Fixed the logic of merging multiple ACL entries. Now it works as documented, while previously it could have done slightly different things depending on the order of the entries. * virtual: Allow opening virtual mailboxes that refer to non-existing mailboxes. It seems that the benefits of this outweigh the lack of error message when typoing a mailbox name. + Added some disk I/O optimizations to Maildir and index code. They're especially helpful with short-lived connections like POP3. + pop3: Added pop3_fast_size_lookups setting. - doveconf sometimes failed with complaining about missing ssl_key setting, causing e.g. dovecot-lda to fail. - lda: If there's an error in configuration, doveconf didn't exit with EX_TEMPFAIL as it should have. - sdbox: Fixed memory leak when copying messages with hard links. - zlib + sdbox combination didn't work - zlib: Fixed several crashes, which mainly showed up with mbox. - quota: Don't crash if user has quota disabled, but plugin loaded. - doveadm fetch uid was actually returning sequence, not uid. - v2.0.4's subscription listing ignored (and logged a warning about) subscriptions=no namespaces' entries in some configurations. (So listing shared mailboxes' subscriptions could have been broken.) - acl: Fixed crashing when sometimes listing shared mailboxes via dict proxy.

1 0

v1.2.15 released
by Timo Sirainen 02 Oct '10

02 Oct '10

http://dovecot.org/releases/1.2/dovecot-1.2.15.tar.gz http://dovecot.org/releases/1.2/dovecot-1.2.15.tar.gz.sig See the "ACL handling bugs" message for more details about the ACL merging bug. * acl: Fixed the logic of merging multiple ACL entries. Now it works as documented, while previously it could have done slightly different things depending on the order of the entries. * acl: Don't give admin rights to all owner mailboxes. This was originally done to make sure that mailbox owner couldn't accidentally remove their own admin rights. But this is already prevented by SETACL command, so it's not necessary. Also sysadmin may have intentionally removed some admin rights from some mailboxes (especially when using symlinked shared mailboxes). - Maildir: Fixed potential "Duplicate file entry" in dovecot-uidlist file errors. - Maildir: Avoid unnecessary uidlist recreation during mail delivery. - imap: When SELECT fails, it didn't close the previous mailbox. - Dovecot master process could have died if it got SIGCHLD signals very rapidly while it was trying to log. This could have happened for example if a lot of imap/pop3 sessions disconnected at the exact same time.

1 0

Released Pigeonhole v0.2.1 for Dovecot v2.0.4
by Stephan Bosch 27 Sep '10

27 Sep '10

Hello Dovecot users, There haven't been that many Pigeonhole developments lately, not even really significant bugs were reported. That is why this release is pretty small in terms of changes. However, one issue got some attention: the fact that not recompiling Pigeonhole for Dovecot v2.0.3 would result in rather interesting message delivery. Normally, Dovecot would complain about a version mismatch, but unfortunately Pigeonhole's Sieve plugin didn't record the Dovecot version it was compiled with. Starting with this release, such problems should not occur again. Changelog v0.2.1: + Incorporated distinction between original and final envelope recipient in Sieve interpreter, as recently introduced in Dovecot. + Regex extension: added support for regex keys composed from variables. - LDA Sieve plugin: added _version symbol to enable Dovecot's plugin version check. Without this check, people can forget to recompile the plugin, which can lead to unexpected effects. - LDA Sieve plugin: turned debug message about an unconfigured home directory into a proper error and added script path information. - Fixed unnecessary reporting of dummy extensions in ManageSieve SIEVE capability; the comparator-i;octet and comparator-i;ascii-numeric 'extensions' were reported explicitly. The release is available as follows: http://www.rename-it.nl/dovecot/2.0/dovecot-2.0-pigeonhole-0.2.1.tar.gz http://www.rename-it.nl/dovecot/2.0/dovecot-2.0-pigeonhole-0.2.1.tar.gz.sig Refer to http://pigeonhole.dovecot.org and the Dovecot v2.0 wiki for more information. Have fun testing this new release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

v2.0.4 released
by Timo Sirainen 26 Sep '10

26 Sep '10

http://dovecot.org/releases/2.0/dovecot-2.0.4.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.4.tar.gz.sig multi-dbox users: Be careful about the INDEX change. Maildir users: I hope v2.0 is now finally stable. * multi-dbox: If :INDEX=path is specified, keep storage/dovecot.map.index* files also in the index path rather than in the main storage directory. WARNING: if you specified :INDEX= with earlier mdbox installation, you must now manually move the storage indexes to the expected directory! Otherwise Dovecot won't see them and will rebuild the indexes, possibly unexpunging some mails. - Maildir: Copying messages with hard links sometimes caused the source maildir's entire tmp/ directory to be renamed to destination maildir as if it were a message. - Maildir: v2.0.3 broke expunging copied messages sometimes - Maildir: INBOX whose tmp/ directory was lost couldn't be opened - single-dbox: Messages weren't copied with hard links - vpopmail support is hopefully working again. - dsync: POP3 UIDLs weren't copied with Maildir - dict file: Fixed fd leak (showed up easily with LMTP + quota)

1 0

v2.0.3 released
by Timo Sirainen 17 Sep '10

17 Sep '10

http://dovecot.org/releases/2.0/dovecot-2.0.3.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.3.tar.gz.sig * dovecot-lda: Removed use of non-standard Envelope-To: header as a default for -a. Set lda_original_recipient_header=Envelope-To to returns the old behavior. + Added support for reverse quota warnings (i.e. when quota goes back under the limit). This is enabled by adding '-' to beginning of quota_warning value. Based on patch by Jeroen Koekkoek. + dovecot-lda: Added lda_original_recipient_header setting, which is used for getting original recipient if -a isn't used. + dovecot-lda: Added -r parameter to specify final recipient address. (It may differ from original address for e.g. aliases.) + Maildir: uidlist file can now override message's GUID, making it possible for multiple messages in a mailbox to have the same GUID. This also fixes dsync's message conflict resolution. - dovecot-lda: If destination user isn't found, exit with EX_NOUSER, not EX_TEMPFAIL. - dsync: Fixed handling \Noselect mailboxes - Fixed an infinite loop introduced by v2.0.2's message parser changes. - Fixed a crash introduced by v2.0.2's istream-crlf changes.

1 0

Released Pigeonhole v0.2.0 for Dovecot v2.0.2
by Stephan Bosch 10 Sep '10

10 Sep '10

Hello Dovecot users, I have finally finished the first release of Pigeonhole for Dovecot v2.0. The most notable change from previous Dovecot v1.2 Sieve/ManageSieve releases is that all is now integrated in a single package and there is no need to patch Dovecot anymore to gain ManageSieve support. Changelog v0.2.0: * Merged Sieve and ManageSieve packages into a single Pigeonhole package. There is also no need to patch Dovecot anymore to gain ManageSieve support. Version numbering of previous Sieve releases is continued as v0.2.0. The sources originally branched off from Sieve v0.1.5 and ManageSieve v0.11.4, but the NEWS history of much more recent releases for Dovecot v1.2 is included since these changes are all included in this release as well. * The ManageSieve service now binds to TCP port 4190 by default due to the IANA port assignment for the ManageSieve service. When upgrading from v1.2, this should be taken into account. The service can be configured manually to listen on both 2000 and 4190. * The Dovecot configuration now calls the ManageSieve protocol 'sieve' in stead of 'managesieve' because it is registered as such with IANA. The binaries and the services are still called managesieve and managesieve-login. * The binary representation of a compiled Sieve script is updated to include source code locations of all commands and arguments. This is implemented in a similar manner as such debug information is included in some system executables and libraries (DWARF-like). Run-time errors can now always refer to the proper line number in the Sieve source script. * The Sieve plugin is adapted to work properly with the new LMTP service introduced with Dovecot v2.0. The same plugin is used for both LDA and LMTP. * The 'sieve_subaddress_sep' setting for the Sieve subaddress extension is now known as 'recipient_delimiter'. Although the deprecated sieve_subaddress_sep setting is still recognized for backwards compatibility, it is recommended to update the setting to the new name, since the new LMTP service also use the recipient_delimiter setting. * ManageSieve: changed default IMPLEMENTATION capability to from 'Dovecot' to 'Dovecot Pigeonhole'. * Renamed the sieved tool to sieve-dump. The original name was somewhat confusing. * Updated man pages to match style and structure of new Dovecot man pages. * Made testsuite commands more uniform and cleaned up many of the testsuite scripts. Some minor new tests were added in the process. + Simplified string matching API to use abstract string lists as data sources. This will also make implementing the index extension easier in the future. + Significantly improved trace debugging with the sieve-test tool. The full execution of the script can be examined, including the matched values and keys of the respective Sieve test commands. The executed statements are listed with their line number (and code address when requested). The level of detail is configurable from the command line. + The SIEVE and NOTIFY capabilities reported by the ManageSieve protocol can now be configured manually. If left unconfigured, the capabilities are determined from the default Sieve and ManageSieve configuration. User-specific capabilities aren't reported until after authentication. + Significantly improved file error handling. This means that administrators get a more useful and informative log message when file operations fail. The most notable example is that when the LDA Sieve plugin is trying to store a binary for a global script, the resulting failure message also points the administrator towards pre-compiling the script with sievec. + Added runtime argument value checking for several commands (redirect, date, vacation). When variables are used, these checks cannot be performed at compiletime. A proper runtime error now is produced when invalid data is encountered. + UTF8 validity of fileinto command argument is now checked either at compile time or at runtime. Previously, it was not checked until the store action was executed. + Validity of IMAP flags for the imap4flags extension is now checked also at runtime. Previously, it was not checked until the store action was executed. + Simplified and restructured error handling. Also made sure that user-caused errors are no longer written to the Dovecot master/LDA log. - Multiscript: fixed duplicate implicit keep caused by erroneous execution state update. - Prevented assertion failure due to currupt binary string representation. If the string was missing a final \0 character an assertion was produced in stead of a binary corruption error. - Imap4flags: fixed bug in setflag command; when parameter was a stringlist, only the last item was actually set. - Variables extension: fixed :length set modifier to recognize utf8 characters in stead of octets. - Testsuite: prevented innocent warning messages, i.e. those that are part of the test, from showing up by default. - ManageSieve/Sieve storage: fixed error handling of PUTSCRIPT commmand; save commit errors would not make the command fail. - ManageSieve: enforced protocol syntax better with some of the commands; some commands allowed spurious extra arguments. - Fixed Sieve script name checking to properly handle length limit and added 0x00ff as invalid character. - Removed spurious old stdio.h (top) includes; these caused compile issues on specific systems. - Fixed default Sieve capability (as reported by ManageSieve): extra extensions spamtest, spamtestplus and virustest were enabled by default. These should, however, only be enabled when properly configured and there is no default configuration. The release is available as follows: http://www.rename-it.nl/dovecot/2.0/dovecot-2.0-pigeonhole-0.2.0.tar.gz http://www.rename-it.nl/dovecot/2.0/dovecot-2.0-pigeonhole-0.2.0.tar.gz.sig Refer to http://pigeonhole.dovecot.org and the Dovecot v2.0 wiki for more information. Have fun testing this first release and don't hesitate to notify me when there are any problems. The bugfixes above are also applied to the Dovecot v1.2 Sieve and ManageSieve sources and I'll produce new releases for those in the next few days. Oh.. and if anyone is wondering what those duplicate notifications are on the dovecot-cvs list.. well.. oops. :) Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

v2.0.2 released
by Timo Sirainen 08 Sep '10

08 Sep '10

http://dovecot.org/releases/2.0/dovecot-2.0.2.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.2.tar.gz.sig Many small fixes and logging improvements, but most importantly fixes LMTP with Maildir. * vpopmail support is disabled for now, since it's broken. You can use it via checkpassword support or its sql/ldap database directly. - maildir: Fixed "duplicate uidlist entry" errors that happened at least with LMTP when mail was delivered to multiple recipients - Deleting ACLs didn't cause entries to be removed from acl_shared_dict - mail_max_lock_timeout setting wasn't working with all locks - auth_cache_size setting's old-style value wasn't autoconverted and it usually also caused a crash

1 0

v2.0.1 released
by Timo Sirainen 24 Aug '10

24 Aug '10

http://dovecot.org/releases/2.0/dovecot-2.0.1.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.1.tar.gz.sig Some small fixes mainly, but since people aren't reporting much bugs for v2.0.0 anymore maybe v2.0.1 release will change that. :) Some of the more important changes since v2.0.0 are: * When dsync is started as root, remote dsync command is now also executed as root instead of with dropped privileges. - IMAP: QRESYNC parameters for SELECT weren't handled correctly. - UTF-8 string validity checking wasn't done correctly (e.g. mailbox names in Sieve fileinto) - dsync: Fixed a random assert-crash with remote dsyncing

1 0