- Dovecot-news - dovecot.org

v1.2.beta4 released
by Timo Sirainen 25 Mar '09

25 Mar '09

http://dovecot.org/releases/1.2/beta/dovecot-1.2.beta4.tar.gz http://dovecot.org/releases/1.2/beta/dovecot-1.2.beta4.tar.gz.sig This release fixes a memory corruption bug related to MODSEQ handling in earlier v1.2 releases. Memory corruption means that it's a security bug and possibly exploitable. MODSEQ code is new in v1.2, so v1.1 and older releases are not affected. Other than that, there is an ESORT bugfix and other fixes that were added to v1.1 branch too.

1 0

Released Sieve v0.1.4
by Stephan Bosch 21 Mar '09

21 Mar '09

Hello Dovecot users, Not much Sieve development was done in the last five weeks, but some important platform-dependent bugs were found and repaired. The main new feature is the addition of a custom Sieve language extension for debugging in the Sieve command line tools. Changelog Sieve v0.1.4: * Started work on the sieve-filter tool. With this command line tool it will be possible to (re-)apply Sieve filters on a mail folder. It is currently undocumented and far from functional. + Added a custom debug extension that provides the possibility to print debug messages from scripts executed by the Sieve tools. - Fixed issue with opening relative paths as a mail file. Bug reported by Ian P. Christian. - Fixed MAC OSX compile problem. Turns out the extern modifier was missing at multiple places. Bug reported by Edgar Fuss. - Fixed Solaris compile problem: removed unecessary and unportable linker flags that caused compile to fail. Bug reported by Andres Yacopino. The release is available as follows: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.4.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.4.tar.gz.sig Have fun testing the new release and don't hesitate to notify me when there are problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

v1.1.13 and v1.2.beta3 released
by Timo Sirainen 18 Mar '09

18 Mar '09

http://dovecot.org/releases/1.1/dovecot-1.1.13.tar.gz http://dovecot.org/releases/1.1/dovecot-1.1.13.tar.gz.sig http://dovecot.org/releases/1.2/beta/dovecot-1.2.beta3.tar.gz http://dovecot.org/releases/1.2/beta/dovecot-1.2.beta3.tar.gz.sig Looks like Friday the 13th isn't the best day to make releases. :) These releases fix two bad bugs in v1.1.12. - v1.1.12's MAILBOXDIR changes broke accessing mails in some setups - v1.1.12's login_executable -D checking changes caused dovecot to crash at startup if protocols setting contained only pop3. - mbox: pop3_lock_session=yes was broken with mail_privileged_group.

1 0

v1.1.12 and v1.2.beta2 released
by Timo Sirainen 14 Mar '09

14 Mar '09

http://dovecot.org/releases/1.1/dovecot-1.1.12.tar.gz http://dovecot.org/releases/1.1/dovecot-1.1.12.tar.gz.sig http://dovecot.org/releases/1.2/beta/dovecot-1.2.beta2.tar.gz http://dovecot.org/releases/1.2/beta/dovecot-1.2.beta2.tar.gz.sig I thought I'd do a double-release since it's Friday the 13th. v1.2.0 is getting closer, mainly some ACL fixes left. Changes in v1.2.beta2 since beta1: * Authentication userdb: Renamed system_user to system_groups_user. Probably pretty much no one used this feature. * deliver no longer creates temp files to /tmp. They're instead created to the users' mailbox directories. - IMAP: Fixed SORT command crashing - POP3 was broken in beta1 - Fixes to virtual mailboxes - Fixes to IMAP ACL support Changes in both v1.1.12 and v1.2.beta2: * Added :MAILBOXDIR= to mail_location to specify the root dir for mailboxes. dbox users should migrate to ":MAILBOXDIR=mailboxes", because that's going to be the default in v1.2+. + Linux: Adding -D parameter to login_executable makes login processes dump core to login_dir if they crash. - IMAP: SELECT didn't always return first unseen message in reply - POP3: pop3_lock_session=yes didn't use mail_privileged_group while dotlocking. - mbox: Don't crash if >=8192 bytes long line begins with "From ". - Maildir: More fixes to handling over 26 keywords. - Several logging fixes and improvements - Fixed authentication caching with non-plaintext mechanisms when using a blocking passdb (e.g. MySQL) - Fixed DIGEST-MD5 authentication with user@domain style usernames.

1 0

Released Sieve v0.1.3 and ManageSieve v0.11.3 for Dovecot v1.2.beta1
by Stephan Bosch 13 Feb '09

13 Feb '09

Hello Dovecot users, It has been about two months since the last release of the new Sieve implementation and the ManageSieve service for Dovecot v1.2. Therefore, this release contains quite a few changes. It adds new sieve features like the enotify extension and multiscript support. Also, quite a few (user-reported) bugs were fixed since the last release. Changelog Sieve v0.1.3: * Adapted to changes in Dovecot, making this release dependent on Dovecot >= 1.2.beta1 * Made mail address comparison fully case-insensitive. This is particularly noticeable for the :addresses argument of the vacation command. + Finished enotify extension. Currently, only the mailto notification method is implemented. All still needs to be tested thoroughly. + Implemented multiscript support. It is now possible to execute multiple Sieve scripts sequentially. Administrator-controlled scripts can be executed before and after the user's script. Still needs to be tested thoroughly. + Implemented support for configuring the available Sieve extensions. + Made the subaddress extension (partially) configurable using the sieve_subaddress_sep setting, which allows specifying a (multi-charater) separator other than '+'. + Compiler now warns about invalid header field names used for the header and address tests. + Vacation extension now properly generates a References header for the response message. + Added testing of basic result execution to the test suite. Also added support for testing the outgoing messages produced by the Sieve interpreter. + Included execution of the actual result in the sieve-test command line tool. The undocumented sieve-exec tool that existed for this is now removed as planned. + Added support for the now obsolete 'imapflags' extension for backwards compatibility with CMUSieve. This also implements the mark/unmark commands. - Fixed bugs in the regex extension: 1) if an optional match value did not in fact match, subsequent match values would get unexpected indexes. 2) fixed segfault bug occuring when regex is freed. - Fixed bug in the use of the :from agrument for the vacation command. If this address included a phrase part, the response would not be a valid RFC822 message. - Plugged a theoretical security hole occuring when a directory is opened as a Sieve binary. - Cleaned up and fixed various log messages. - Fixed bug in the outgoing address verification. Addresses ending in ',' were erroneously accepted. Changelog ManageSieve v0.11.3: * Changed the SASL service name from "managesieve" into "sieve" as required in the protocol specification. Don't forget to adjust your configuration if your authentication mechanism depends on this service name. * Adapted to changes in Dovecot, making this release dependent on Dovecot >= v1.2.beta1. * Adapted to changes in the new Sieve implementation, making this release dependent on Dovecot Sieve >= v0.1.3 if used. The old cmusieve plugin is still supported. + Implemented making the SIEVE and NOTIFY capability fully dynamic, meaning that the sieve_extensions setting that was introduced for the new Sieve plugin properly affects the ManageSieve daemon as well. + Added support for the CHECKSCRIPT command. In terms of the supported commands, the ManageSieve daemon now complies with protocol VERSION 1.0 as listed in the CAPABILITY response. - Fixed maximum permissions for uploaded scripts; was 0777. This was shielded however by the default umask (not documented to be configurable), so the actual permissions would never have been 0777. - Fixed a segfault bug in the authentication time-out. Bug report and trace provided by Wolfgang Friebel. - Fixed handling of ~/ in use of mail-data for script location. - Fixed small problems in the login proxy support. The following files are released: Sieve: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.3.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.3.tar.gz.sig ManageSieve package: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-managesieve-0.11.3.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-managesieve-0.11.3.tar.gz.s… ManageSieve patch: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2.beta1-managesieve-0.11.3.di… http://www.rename-it.nl/dovecot/1.2/dovecot-1.2.beta1-managesieve-0.11.3.di… Have fun testing the new releases and don't hesitate to notify me when there are problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

v1.2.beta1 released
by Timo Sirainen 11 Feb '09

11 Feb '09

http://dovecot.org/releases/1.2/beta/dovecot-1.2.beta1.tar.gz http://dovecot.org/releases/1.2/beta/dovecot-1.2.beta1.tar.gz.sig Largest changes since v1.1 can be found from http://dovecot.org/doc/NEWS-1.2 Changes since alpha5: - Added support for ESORT extension (also SORT .. RETURN (PARTIAL) from CONTEXT=SORT that allows windowing SORT results) - pop3: If client idles for 10 seconds, commit transaction (allowing mbox to become unlocked). - crashfixes to virtual mailboxes - all kinds of bug fixes, error message improvements, etc. - http://dovecot.org/patches/1.2/stats-plugin.c may give some interesting statistics about commands There isn't really much left to do for v1.2.0 except some small fixing to shared mailbox code. And writing documentation for it..

1 0

I've moved to US
by Timo Sirainen 06 Feb '09

06 Feb '09

I thought about saying this in v1.2.beta1 release annoouncement, but looks like it'll take a few more days. So I've moved to Blacksburg, Virginia and I'm now working for Mailtrust the rest of this year. Here's some talk about it: http://mailtrust.com/blog (A bit stupid looking picture, but then again all my pictures seem to be that way so I didn't bother getting a new one taken.) And if it's not clear from that blog: Pretty much everything I do here will be Dovecot improvements that will be released as open source. Mailtrust has actually been paying for Dovecot features for about 3 years now.

1 0

v1.1.11 released
by Timo Sirainen 04 Feb '09

04 Feb '09

http://dovecot.org/releases/1.1/dovecot-1.1.11.tar.gz http://dovecot.org/releases/1.1/dovecot-1.1.11.tar.gz.sig Hopefully this v1.1 release will last a few months. - IMAP: PERMANENTFLAGS list didn't contain \*, causing some clients not to save keywords. - dbox: INTERNALDATE and save date was returned wrong for converted maildir files. - auth: Using "username" or "domain" passdb fields caused problems with cache and blocking passdbs in v1.1.8 .. v1.1.10. - userdb prefetch + blocking passdbs was broken with non-plaintext auth in v1.1.8 .. v1.1.10. - If mail_chroot is set, don't fail at startup in dump-capability.

1 0

v1.1.10 released
by Timo Sirainen 27 Jan '09

27 Jan '09

http://dovecot.org/releases/1.1/dovecot-1.1.10.tar.gz http://dovecot.org/releases/1.1/dovecot-1.1.10.tar.gz.sig v1.1.9 wasn't such a great release. Once again: Would be great if someone started a proper testing suite so releases could be tested.. - Maildir: Keyword handling was somewhat broken in v1.1.9 - userdb prefetch was broken with blocking passdbs in v1.1.9 - dict process didn't always die with the rest of Dovecot - dict quota was somewhat broken with pgsql

2 1

Released ManageSieve v0.10.5 for Dovecot v1.1.9
by Stephan Bosch 26 Jan '09

26 Jan '09

Hello Dovecot users, Because there was a crash bug in the ManageSieve v0.10.4 login daemon, I made a new release of the ManageSieve service for Dovecot v1.1. This release includes two other small fixes as well. Changelog v0.10.5: - Fixed a segfault bug in the authentication time-out. Bug report and trace provided by Wolfgang Friebel. - Fixed maximum permissions for uploaded scripts; was 0777. This was shielded however by the default umask (not documented to be configurable), so the actual permissions would never have been 0777. - Fixed handling of ~/ in use of mail-data for script location The following files are released: ManageSieve package: http://www.rename-it.nl/dovecot/1.1/dovecot-1.1-managesieve-0.10.5.tar.gz http://www.rename-it.nl/dovecot/1.1/dovecot-1.1-managesieve-0.10.5.tar.gz.s… ManageSieve patch: http://www.rename-it.nl/dovecot/1.1/dovecot-1.1.9-managesieve-0.10.5.diff.gz http://www.rename-it.nl/dovecot/1.1/dovecot-1.1.9-managesieve-0.10.5.diff.g… Have fun testing the new releases and don't hesitate to notify me when there are problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl IRC: Freenode, #dovecot, S[r]us

1 0