[Dovecot] 1.0beta3 released
Since there have been so many requests, I guess it's time for beta3 now. There are a couple of issues that I'm still concerned about, but those probably happen with beta2 as well.
If you're beginning to see more connection hangs/timeouts with this release, please tell me.
* Dotlock code changed to timeout faster in some situations when
the lock file is old.
+ Added support for loading SQL drivers dynamically (see INSTALL file
for how to build them)
+ Keywords are stored to dboxes, and other dbox improvements.
+ dict-sql could actually work now, making quota-in-sql-database
possibly working now (not fully tested)
+ Added mail storage conversion plugin to convert automatically from
one mailbox format to another while user logs in. Doesn't preserve
UIDVALIDITY/UIDs though.
+ Added plugin { .. } section to dovecot.conf for passing parameters
to plugins (see dovecot-example.conf).
+ Added ssl-build-param binary which is used to generate
ssl-parameters.dat. Main dovecot binary doesn't anymore link to
SSL libraries, and this also makes the process title be clearer
about why the process is eating all the CPU.
- Fix building without OpenSSL
- Fixed memory leak in MySQL driver
- Fixes to checkpassword
- Broken Content-Length header could have broken mbox opening
- Fixed potential hangs after APPEND command
- Fixed potential crashes in dovecot-auth and imap/pop3-login
- zlib plugin now links with -lz so it could actually work
- kqueue fixes by Vaclav HaismanTimo Sirainen wrote:
Since there have been so many requests, I guess it's time for beta3 now.
Thanks Timo, you da man!
-- This email and all contents are subject to the following disclaimer: http://www.dcdata.co.za/emaildisclaimer.html
I can confirm that this works perfectly with vpopmail authentication
(and with ubuntu breezy on amd64).
Thank you very much.
will
On 8 Feb 2006, at 10:22, Timo Sirainen wrote:
Since there have been so many requests, I guess it's time for beta3
now. There are a couple of issues that I'm still concerned about, but those probably happen with beta2 as well.If you're beginning to see more connection hangs/timeouts with this release, please tell me.
- Dotlock code changed to timeout faster in some situations when the lock file is old.
- Added support for loading SQL drivers dynamically (see INSTALL file for how to build them)
- Keywords are stored to dboxes, and other dbox improvements.
- dict-sql could actually work now, making quota-in-sql-database possibly working now (not fully tested)
- Added mail storage conversion plugin to convert automatically from one mailbox format to another while user logs in. Doesn't preserve UIDVALIDITY/UIDs though.
- Added plugin { .. } section to dovecot.conf for passing parameters to plugins (see dovecot-example.conf).
- Added ssl-build-param binary which is used to generate ssl-parameters.dat. Main dovecot binary doesn't anymore link to SSL libraries, and this also makes the process title be clearer about why the process is eating all the CPU.
- Fix building without OpenSSL
- Fixed memory leak in MySQL driver
- Fixes to checkpassword
- Broken Content-Length header could have broken mbox opening
- Fixed potential hangs after APPEND command
- Fixed potential crashes in dovecot-auth and imap/pop3-login
- zlib plugin now links with -lz so it could actually work
- kqueue fixes by Vaclav Haisman
i386 http://fedora.ivazquez.net/yum/4/i386/RPMS.alternatives/dovecot-1.0-0.iva.4.... http://fedora.ivazquez.net/yum/4/i386/SRPMS.alternatives/dovecot-1.0-0.iva.4...
ppc http://fedora.ivazquez.net/yum/4/ppc/RPMS.alternatives/dovecot-1.0-0.iva.4.b... http://fedora.ivazquez.net/yum/4/ppc/SRPMS.alternatives/dovecot-1.0-0.iva.4....
x86_64 http://fedora.ivazquez.net/yum/4/x86_64/RPMS.alternatives/dovecot-1.0-0.iva.... http://fedora.ivazquez.net/yum/4/x86_64/SRPMS.alternatives/dovecot-1.0-0.iva...
-- Ignacio Vazquez-Abrams ivazquez@ivazquez.net http://fedora.ivazquez.net/
gpg --keyserver hkp://subkeys.pgp.net --recv-key 38028b72
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Timo Sirainen tss@iki.fi writes:
Since there have been so many requests, I guess it's time for beta3 now.
I finally got around to update the SUSE 10.0 RPMs. The LDAP and SQL backends are split out to reduce dependencies on SQL backends that aren't used; vpopmail isn't built for SUSE.
http://home.pages.de/~mandree/suse-10.0-i586/ http://home.pages.de/~mandree/suse-10.0-src/
Matthias Andree -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux)
iD8DBQFD8chYvmGDOQUufZURAosbAJ4vTmDyjAd5Ha4y8xLYQW+4EP1umQCcDhuG JM7m93LMDITfI1X2vzP8WGs= =Ww0l -----END PGP SIGNATURE-----
I'm not on subscribed to the list, so please CC me on any replies.
- Fixed potential hangs after APPEND command
- Fixed potential crashes in dovecot-auth and imap/pop3-login
These two issue have been assigned the CVE id CVE-2006-0730. I've not taken a look through CVS yet, but I was wondering if someone can point me at some commits as the various distributions will be interested in backporting these fixes to any affected versions of dovecot shipped.
Thanks.
-- JB
On 16.2.2006 21:43, "Josh Bressers" bressers@redhat.com wrote:
I'm not on subscribed to the list, so please CC me on any replies.
- Fixed potential hangs after APPEND command
This isn't security related at all. Guess I should have used different wording.
- Fixed potential crashes in dovecot-auth and imap/pop3-login
These two issue have been assigned the CVE id CVE-2006-0730. I've not taken a look through CVS yet, but I was wondering if someone can point me at some commits as the various distributions will be interested in backporting these fixes to any affected versions of dovecot shipped.
These problems aren't in 0.99.x versions.
Dovecot-auth crash exists in 1.0beta1 and beta2 versions, fixed by commit:
2006-01-28 21:09 Timo Sirainen tss@iki.fi
* src/auth/auth-request-handler.c: If authentication client
disconnects while it still has pending requests, don't crash (got
broken in the large pointer-change commit).Imap/pop3-login crash exists in 1.0test33, 1.0beta2 and everything between them. Fixed by commit:
2006-01-28 21:47 Timo Sirainen tss@iki.fi
* src/: imap-login/client-authenticate.c, imap-login/client.c,
pop3-login/client-authenticate.c, pop3-login/client.c: If client
disconnected while we were trying to send authentication
continuation to it, we crashed.Patches in:
http://dovecot.org/patches/1.0-auth-crashfix.diff http://dovecot.org/patches/1.0-login-crashfixes.diff
participants (6)
-
Ignacio Vazquez-Abrams
-
Josh Bressers
-
Matthias Andree
-
Neil Wilson
-
Timo Sirainen
-
William Ross