October 2008 - Dovecot-news

v1.1.6 released
by Timo Sirainen 29 Oct '08

29 Oct '08

http://dovecot.org/releases/1.1/dovecot-1.1.6.tar.gz http://dovecot.org/releases/1.1/dovecot-1.1.6.tar.gz.sig The invalid message address parsing bug is pretty important since it allows a remote user to send broken mail headers and prevent the recipient from accessing the mailbox afterwards, because the process will always just crash trying to parse the header. This is assuming that the IMAP client uses FETCH ENVELOPE command, not all do. Note that it doesn't affect versions older than v1.1.4. + dovecot -n and -a now prints some system information at the top. + More error/debug message logging improvements. - pop3-login: Fixed assert-crash if a client sent USER+PASS+USER+PASS commands in the same IP packet. - Parsing an invalid message address like "From: (" caused an assert-crash in v1.1.4 and v1.1.5. - Folding whitespace wasn't handled correctly inside quoted-strings, causing some messages to be parsed incorrectly. - mbox: Fixed saving messages that begin with a valid From_-line.

1 0

ManageSieve v0.11.0 released for Dovecot 1.2.alpha3
by Stephan Bosch 23 Oct '08

23 Oct '08

Hello Dovecot users, I have composed a release of the ManageSieve service for Dovecot v1.2. I also added two new capabilities that were added to the ManageSieve specification. Just like the last few releases, this new release supports the new Sieve plugin already. Change Log v0.11.0 ------------------- * Upgraded to Dovecot v1.2 * Added support for new ManageSieve capabilities RENAME and NOOP * Moved sieve settings to plugin {} section of config file. Now the settings `sieve` and `sieve_dir` in the plugin section are used for both the Sieve plugin and the ManageSieve service, avoiding the posibility of accidental differences in configuration. Installation ------------ The full installation procedure and other relevant information regarding ManageSieve is supposed to be available on the Dovecot wiki: http://wiki.dovecot.org/ManageSieve However, the changes regarding the config file are not properly described there yet. Refer to the package's README file in stead. New release: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-managesieve-0.11.0.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-managesieve-0.11.0.tar.gz.s… I have released a new patch for Dovecot v1.2 as well: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2.alpha3-managesieve-0.11.0.d… http://www.rename-it.nl/dovecot/1.2/dovecot-1.2.alpha3-managesieve-0.11.0.d… My public key (id: 3DFBB4F4) can be found at wwwkeys.pgp.net. Don't hesitate to notify me when there are problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl IRC: Freenode, #dovecot, S[r]us

1 0

First release (v0.1.0) of the new Sieve implementation for Dovecot v1.2
by Stephan Bosch 23 Oct '08

23 Oct '08

Hello Dovecot users, Finally, after little more than a year, I finished the first release of the new Sieve implementation for Dovecot. The main reason for rewriting the Sieve engine is to provide more reliable script execution and to provide better error messages to users and system administrators. Also, since the Sieve language evolves quickly, with new language extensions published every year, the aim is to provide support for quickly extending the engine with new features. This implementation aims to comply to RFC8225 and it provides support for the following Sieve language extensions: * fileinto * reject * envelope * encoded-character * vacation * subaddress * relational * regex * imap4flags * copy * include * body * variables In comparison to the old CMU Sieve plugin, I added support for the very useful variables extension. However, the notify extension is notably missing. This will be implemented for next major release (0.2.x). Refer to the README file for a full list of its features: http://hg.rename-it.nl/dovecot-libsieve/raw-file/0.1.0/README Installation ------------ The source package is available as follows: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.0.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.0.tar.gz.sig Alternatively, it can be cloned from the mercurial repository: hg clone http://hg.rename-it.nl/dovecot-libsieve The compilation procedure is identical to the cmusieve plugin (http://wiki.dovecot.org/LDA/Sieve). Don't forget to execute ./autogen.sh first if you obtained the sources through mercurial. This release will not compile against Dovecot versions older than v1.2.alpha3. The configuration is very similar to the original plugin as well. The most notable difference is the name of the plugin, which is simply 'sieve' in stead of 'cmusieve'. After compilation, the Sieve engine can be verified before deployment using the included test suite. This is done by executing `make test` in the top of the source tree. The test suite is known to finish flawlessly on the i386 and amd64 platforms. The test suite is not very comprehensive yet, as it only tests the evaluation of scripts and omits testing the actual execution of actions. As this release contains about 30k effective lines of fresh code, bugs will eventually surface. Make sure that you provide enough information to reproduce the problem if you report bugs, i.e. the script and the mail message that caused the problem and/or relevant log entries. Have fun testing the new Sieve plugin. Don't hesitate to notify me when there are problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl IRC: Freenode, #dovecot, S[r]us

1 0

Released v1.1.5 and v1.2.alpha3
by Timo Sirainen 22 Oct '08

22 Oct '08

http://dovecot.org/releases/1.1/dovecot-1.1.5.tar.gz http://dovecot.org/releases/1.1/dovecot-1.1.5.tar.gz.sig http://dovecot.org/releases/1.2/alpha/dovecot-1.2.alpha3.tar.gz http://dovecot.org/releases/1.2/alpha/dovecot-1.2.alpha3.tar.gz.sig A combined release announcement for a change. :) Largest changes since v1.1.4: * Dovecot prints an informational message about authentication problems at startup. The message goes away after the first successful authentication. This hopefully reduces the number of "Why doesn't my authentication work?" questions. + Maildir/dbox: Try harder to assign unique UIDVALIDITY values to mailboxes to avoid potential problems when recreating or renaming mailboxes. The UIDVALIDITY is tracked using dovecot-uidvalidity* files in the mail root directory. + Many logging improvements - In some conditions Dovecot could have stopped using existing cache file and never used it again until it was deleted. - pop3 + Maildir: Make sure virtual sizes are always written to dovecot-uidlist. This way if the indexes are lost Dovecot will never do a huge amount of work to recalculate them. - mbox: Fixed listing mailboxes in namespaces with prefix beginning with '~' or '/' (i.e. UW-IMAP compatibility namespaces didn't work). - dict quota: Don't crash when recalculating quota (when quota warnings enabled). - Fixes to handling "out of disk space/quota" failures. - Blocking passdbs/userdbs (e.g. PAM, MySQL) could have failed lookups sometimes when auth_worker_max_request_count was non-zero. - Fixed compiling with OpenBSD Largest changes since v1.2.alpha2: + Added userdb checkpassword (by Sascha Wilde) + Autocreate plugin: http://wiki.dovecot.org/Plugins/Autocreate + Listescape plugin: http://wiki.dovecot.org/Plugins/Listescape - All the same fixes as for v1.1.5 I was thinking about waiting for Kolab people's work for shared mailbox support to get done, get that code to v1.2 tree and then release v1.2.beta1 with feature freeze.

1 0

v1.1.4 released
by Timo Sirainen 05 Oct '08

05 Oct '08

http://dovecot.org/releases/1.1/dovecot-1.1.4.tar.gz http://dovecot.org/releases/1.1/dovecot-1.1.4.tar.gz.sig - SORT: Yet another assert-crashfix when renumbering index sort IDs. - ACL plugin fixes: Negative rights were actually treated as positive rights. 'k' right didn't prevent creating parent/child/child mailbox. ACL groups weren't working. - Maildir++ quota: Fixes to rebuilding when quota limit wasn't specified in Dovecot (0 limit or limit read from maildirsize). - mbox: Several bugfixes causing errors and crashes. - Several fixes to expire plugin / expire-tool. - lock_method=dotlock could have deadlocked with itself. - Many error handling fixes and log message improvements.

1 0