%global __provides_exclude_from %{_docdir}

%global __requires_exclude_from %{_docdir}

Summary: Secure imap and pop3 server

Name: dovecot

Epoch: 1

Version: 2.2.10

%global prever %{nil}

Release: 5%{?dist}

#dovecot itself is MIT, a few sources are PD, pigeonhole is LGPLv2

License: MIT and LGPLv2

Group: System Environment/Daemons

URL: http://www.dovecot.org/

Source: http://www.dovecot.org/releases/2.2/%{name}-%{version}%{?prever}.tar.gz

Source1: dovecot.init

Source2: dovecot.pam

%global pigeonholever 0.4.2

Source8: http://www.rename-it.nl/dovecot/2.2/dovecot-2.2-pigeonhole-%{pigeonholever}.tar.gz

#wget http://hg.rename-it.nl/dovecot-2.2-pigeonhole/archive/%{pigeonholever}.tar.bz2 -O dovecot-2.2-pigeonhole-%{pigeonholever}.tar.bz2

#Source8: dovecot-2.2-pigeonhole-%{pigeonholever}.tar.bz2

Source9: dovecot.sysconfig

Source10: dovecot.tmpfilesd

#our own

Source14: dovecot.conf.5

# 3x Fedora/RHEL specific

Patch1: dovecot-2.0-defaultconfig.patch

Patch2: dovecot-1.0.beta2-mkcert-permissions.patch

Patch3: dovecot-1.0.rc7-mkcert-paths.patch

Patch4: dovecot-2.1.10-reload.patch

Patch5: dovecot-2.1-privatetmp.patch

#wait for network

Patch6: dovecot-2.1.10-waitonline.patch

#workaround for chroot installation without /dev/random present, rhbz#1026790

Patch7: dovecot-2.2.9-nodevrand.patch

# dovecot < 2.2.13, rhbz#1096402,rhbz#1108004

Patch8: dovecot-2.2.10-CVE_2014_3430.patch

Source15: prestartscript

Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)

BuildRequires: openssl-devel, pam-devel, zlib-devel, bzip2-devel, libcap-devel

BuildRequires: libtool, autoconf, automake, pkgconfig

BuildRequires: sqlite-devel

BuildRequires: postgresql-devel

BuildRequires: mysql-devel

BuildRequires: openldap-devel

BuildRequires: krb5-devel

BuildRequires: quota-devel

# gettext-devel is needed for running autoconf because of the

# presence of AM_ICONV

BuildRequires: gettext-devel

# Explicit Runtime Requirements for executalbe

Requires: openssl >= 0.9.7f-4

# Package includes an initscript service file, needs to require initscripts package

Requires(pre): shadow-utils

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

Requires: systemd

Requires(post): systemd-units

Requires(preun): systemd-units

Requires(postun): systemd-units

%else

Requires: initscripts

Requires(post): chkconfig

Requires(preun): chkconfig initscripts

Requires(postun): initscripts

%endif

%if %{?fedora}0 > 150 || %{?rhel}0 >60

#clucene in fedora <=15 and rhel<=6 is too old

BuildRequires: clucene-core-devel

%endif

%define ssldir %{_sysconfdir}/pki/%{name}

%if %{?fedora}00%{?rhel} < 6

%define _initddir %{_initrddir}

BuildRequires: curl-devel expat-devel

%else

BuildRequires: libcurl-devel expat-devel

%endif

%global restart_flag /var/run/%{name}/%{name}-restart-after-rpm-install

%description

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security 

primarily in mind.  It also contains a small POP3 server.  It supports mail 

in either of maildir or mbox formats.

The SQL drivers and authentication plug-ins are in their subpackages.

%package pigeonhole

Requires: %{name} = %{epoch}:%{version}-%{release}

Obsoletes: dovecot-sieve < 1:1.2.10-3

Obsoletes: dovecot-managesieve < 1:1.2.10-3

Summary: Sieve and managesieve plug-in for dovecot

Group: System Environment/Daemons

License: MIT and LGPLv2

%description pigeonhole

This package provides sieve and managesieve plug-in for dovecot LDA.

%package pgsql

Requires: %{name} = %{epoch}:%{version}-%{release}

Summary: Postgres SQL back end for dovecot

Group: System Environment/Daemons

%description pgsql

This package provides the Postgres SQL back end for dovecot-auth etc.

%package mysql

Requires: %{name} = %{epoch}:%{version}-%{release}

Summary: MySQL back end for dovecot

Group: System Environment/Daemons

%description mysql

This package provides the MySQL back end for dovecot-auth etc.

%prep

%setup -q -n %{name}-%{version}%{?prever} -a 8

%patch1 -p1 -b .default-settings

%patch2 -p1 -b .mkcert-permissions

%patch3 -p1 -b .mkcert-paths

%patch4 -p1 -b .reload

%patch5 -p1 -b .privatetmp

%patch6 -p1 -b .waitonline

%patch7 -p1 -b .nodevrand

%patch8 -p1 -b .CVE_2014_3430

sed -i '/DEFAULT_INCLUDES *=/s|$| '"$(pkg-config --cflags libclucene-core)|" src/plugins/fts-lucene/Makefile.in

%build

#required for fdpass.c line 125,190: dereferencing type-punned pointer will break strict-aliasing rules

%global _hardened_build 1

export CFLAGS="%{__global_cflags} -fno-strict-aliasing"

export LDFLAGS="-Wl,-z,now -Wl,-z,relro %{__global_ldflags}"

autoreconf -I . -fiv #required for aarch64 support

%configure                       \

    INSTALL_DATA="install -c -p -m644" \

    --docdir=%{_docdir}/%{name}-%{version}     \

    --disable-static             \

    --disable-rpath              \

    --with-nss                   \

    --with-shadow                \

    --with-pam                   \

    --with-gssapi=plugin         \

    --with-ldap=plugin           \

    --with-sql=plugin            \

    --with-pgsql                 \

    --with-mysql                 \

    --with-sqlite                \

    --with-zlib                  \

    --with-libcap                \

%if %{?fedora}0 > 150 || %{?rhel}0 >60

    --with-lucene                \

%endif

    --with-ssl=openssl           \

    --with-ssldir=%{ssldir}      \

    --with-solr                  \

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

    --with-systemdsystemunitdir=%{_unitdir}  \

%endif

    --with-docs

sed -i 's|/etc/ssl|/etc/pki/dovecot|' doc/mkcert.sh doc/example-config/conf.d/10-ssl.conf

make %{?_smp_mflags}

#pigeonhole

pushd dovecot-2*2-pigeonhole-%{pigeonholever}

# required for snapshot

[ -f configure ] || autoreconf -fiv

[ -f ChangeLog ] || echo "Pigeonhole ChangeLog is not available, yet" >ChangeLog

%configure                             \

    INSTALL_DATA="install -c -p -m644" \

    --disable-static                   \

    --with-dovecot=../                 \

    --without-unfinished-features

make %{?_smp_mflags}

popd

%install

rm -rf $RPM_BUILD_ROOT

make install DESTDIR=$RPM_BUILD_ROOT

#move doc dir back to build dir so doc macro in files section can use it

mv $RPM_BUILD_ROOT/%{_docdir}/%{name}-%{version} %{_builddir}/%{name}-%{version}%{?prever}/docinstall

pushd dovecot-2*2-pigeonhole-%{pigeonholever}

make install DESTDIR=$RPM_BUILD_ROOT

mv $RPM_BUILD_ROOT/%{_docdir}/%{name}-%{version} $RPM_BUILD_ROOT/%{_docdir}/%{name}-2.2-pigeonhole-%{pigeonholever}

install -m 644 AUTHORS ChangeLog COPYING COPYING.LGPL INSTALL NEWS README $RPM_BUILD_ROOT/%{_docdir}/%{name}-2.2-pigeonhole-%{pigeonholever}

popd

%if %{?fedora}00%{?rhel} < 6

sed -i 's|password-auth|system-auth|' %{SOURCE2}

%endif

install -p -D -m 644 %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/pam.d/dovecot

#install man pages

install -p -D -m 644 %{SOURCE14} $RPM_BUILD_ROOT%{_mandir}/man5/dovecot.conf.5

#install waitonline script

install -p -D -m 755 %{SOURCE15} $RPM_BUILD_ROOT%{_libexecdir}/dovecot/prestartscript

# generate ghost .pem files

mkdir -p $RPM_BUILD_ROOT%{ssldir}/certs

mkdir -p $RPM_BUILD_ROOT%{ssldir}/private

touch $RPM_BUILD_ROOT%{ssldir}/certs/dovecot.pem

chmod 600 $RPM_BUILD_ROOT%{ssldir}/certs/dovecot.pem

touch $RPM_BUILD_ROOT%{ssldir}/private/dovecot.pem

chmod 600 $RPM_BUILD_ROOT%{ssldir}/private/dovecot.pem

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

install -p -D -m 644 %{SOURCE10} $RPM_BUILD_ROOT%{_tmpfilesdir}/dovecot.conf

%else

install -p -D -m 755 %{SOURCE1} $RPM_BUILD_ROOT%{_initddir}/dovecot

install -p -D -m 600 %{SOURCE9} $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/dovecot

%endif

mkdir -p $RPM_BUILD_ROOT/var/run/dovecot/{login,empty}

# Install dovecot configuration and dovecot-openssl.cnf

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/dovecot/conf.d

install -p -m 644 docinstall/example-config/dovecot.conf $RPM_BUILD_ROOT%{_sysconfdir}/dovecot

install -p -m 644 docinstall/example-config/conf.d/*.conf $RPM_BUILD_ROOT%{_sysconfdir}/dovecot/conf.d

install -p -m 644 $RPM_BUILD_ROOT/%{_docdir}/%{name}-2.2-pigeonhole-%{pigeonholever}/example-config/conf.d/*.conf $RPM_BUILD_ROOT%{_sysconfdir}/dovecot/conf.d

install -p -m 644 docinstall/example-config/conf.d/*.conf.ext $RPM_BUILD_ROOT%{_sysconfdir}/dovecot/conf.d

install -p -m 644 $RPM_BUILD_ROOT/%{_docdir}/%{name}-2.2-pigeonhole-%{pigeonholever}/example-config/conf.d/*.conf.ext $RPM_BUILD_ROOT%{_sysconfdir}/dovecot/conf.d ||:

install -p -m 644 doc/dovecot-openssl.cnf $RPM_BUILD_ROOT%{ssldir}/dovecot-openssl.cnf

install -p -m755 doc/mkcert.sh $RPM_BUILD_ROOT%{_libexecdir}/%{name}/mkcert.sh

mkdir -p $RPM_BUILD_ROOT/var/lib/dovecot

#remove the libtool archives

find $RPM_BUILD_ROOT%{_libdir}/%{name}/ -name '*.la' | xargs rm -f

#remove what we don't want

rm -f $RPM_BUILD_ROOT%{_sysconfdir}/dovecot/README

pushd docinstall

rm -f securecoding.txt thread-refs.txt

popd

#drop -devel files

rm -rf $RPM_BUILD_ROOT/%{_includedir}/dovecot

rm -f  $RPM_BUILD_ROOT/%{_datadir}/aclocal/dovecot.m4

rm -f  $RPM_BUILD_ROOT/%{_libdir}/dovecot/libdovecot*.so

rm -f  $RPM_BUILD_ROOT/%{_libdir}/dovecot/dovecot-config

%clean

rm -rf $RPM_BUILD_ROOT

%pre

#dovecot uid and gid are reserved, see /usr/share/doc/setup-*/uidgid 

getent group dovecot >/dev/null || groupadd -r --gid 97 dovecot

getent passwd dovecot >/dev/null || \

useradd -r --uid 97 -g dovecot -d /usr/libexec/dovecot -s /sbin/nologin -c "Dovecot IMAP server" dovecot

getent group dovenull >/dev/null || groupadd -r dovenull

getent passwd dovenull >/dev/null || \

useradd -r -g dovenull -d /usr/libexec/dovecot -s /sbin/nologin -c "Dovecot's unauthorized user" dovenull

# do not let dovecot run during upgrade rhbz#134325

if [ "$1" = "2" ]; then

  rm -f %restart_flag

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

  /bin/systemctl is-active %{name}.service >/dev/null 2>&1 && touch %restart_flag ||:

  /bin/systemctl stop %{name}.service >/dev/null 2>&1

%else

  /sbin/service %{name} status >/dev/null 2>&1 && touch %restart_flag ||:

  /sbin/service %{name} stop >/dev/null 2>&1

%endif

fi

%post

if [ $1 -eq 1 ]

then

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

  %systemd_post dovecot.service

%else

  /sbin/chkconfig --add %{name}

%endif

fi

# generate the ssl certificates

if [ ! -f %{ssldir}/certs/%{name}.pem ]; then

    SSLDIR=%{ssldir} OPENSSLCONFIG=%{ssldir}/dovecot-openssl.cnf \

         %{_libexecdir}/%{name}/mkcert.sh &> /dev/null

fi

if [ ! -f /var/lib/dovecot/ssl-parameters.dat ]; then

    /usr/libexec/dovecot/ssl-params &>/dev/null

fi

install -d -m 0755 -g dovecot -d /var/run/dovecot

install -d -m 0755 -d /var/run/dovecot/empty

install -d -m 0750 -g dovenull /var/run/dovecot/login

[ -x /sbin/restorecon ] && /sbin/restorecon -R /var/run/dovecot

%preun

if [ $1 = 0 ]; then

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

        /bin/systemctl disable dovecot.service dovecot.socket >/dev/null 2>&1 || :

        /bin/systemctl stop dovecot.service dovecot.socket >/dev/null 2>&1 || :

%else

    /sbin/service %{name} stop > /dev/null 2>&1

    /sbin/chkconfig --del %{name}

%endif

    rm -rf /var/run/dovecot

fi

%postun

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

/bin/systemctl daemon-reload >/dev/null 2>&1 || :

%endif

if [ "$1" -ge "1" -a -e %restart_flag ]; then

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

    /bin/systemctl start dovecot.service >/dev/null 2>&1 || :

%else

    /sbin/service %{name} start >/dev/null 2>&1 || :

%endif

rm -f %restart_flag

fi

%posttrans

# dovecot should be started again in #postun, but it's not executed on reinstall

# if it was already started, restart_flag won't be here, so it's ok to test it again

if [ -e %restart_flag ]; then

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

    /bin/systemctl start dovecot.service >/dev/null 2>&1 || :

%else

    /sbin/service %{name} start >/dev/null 2>&1 || :

%endif

rm -f %restart_flag

fi

%check

make check

cd dovecot-2*2-pigeonhole-%{pigeonholever}

make check

%files

%defattr(-,root,root,-)

%doc docinstall/* AUTHORS ChangeLog COPYING COPYING.LGPL COPYING.MIT NEWS README

%{_sbindir}/dovecot

%{_bindir}/doveadm

%{_bindir}/doveconf

%{_bindir}/dsync

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

%_tmpfilesdir/dovecot.conf

%{_unitdir}/dovecot.service

%{_unitdir}/dovecot.socket

%else

%{_initddir}/dovecot

%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/sysconfig/dovecot

%endif

%dir %{_sysconfdir}/dovecot

%dir %{_sysconfdir}/dovecot/conf.d

%config(noreplace) %{_sysconfdir}/dovecot/dovecot.conf

#list all so we'll be noticed if upstream changes anything

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/10-auth.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/10-director.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/10-logging.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/10-mail.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/10-master.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/10-ssl.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/15-lda.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/15-mailboxes.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/20-imap.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/20-lmtp.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/20-pop3.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/90-acl.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/90-quota.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/90-plugin.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-checkpassword.conf.ext

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-deny.conf.ext

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-dict.conf.ext

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-ldap.conf.ext

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-master.conf.ext

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-passwdfile.conf.ext

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-sql.conf.ext

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-static.conf.ext

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-system.conf.ext

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-vpopmail.conf.ext

%config(noreplace) %{_sysconfdir}/pam.d/dovecot

%config(noreplace) %{ssldir}/dovecot-openssl.cnf

%dir %{ssldir}

%dir %{ssldir}/certs

%dir %{ssldir}/private

%attr(0600,root,root) %ghost %config(missingok,noreplace) %verify(not md5 size mtime) %{ssldir}/certs/dovecot.pem

%attr(0600,root,root) %ghost %config(missingok,noreplace) %verify(not md5 size mtime) %{ssldir}/private/dovecot.pem

%dir %{_libdir}/dovecot

%dir %{_libdir}/dovecot/auth

%dir %{_libdir}/dovecot/dict

%{_libdir}/dovecot/doveadm

%{_libdir}/dovecot/*.so.*

#these (*.so files) are plugins, not a devel files

%{_libdir}/dovecot/*_plugin.so

%exclude %{_libdir}/dovecot/*_sieve_plugin.so

%{_libdir}/dovecot/auth/libauthdb_imap.so

%{_libdir}/dovecot/auth/libauthdb_ldap.so

%{_libdir}/dovecot/auth/libmech_gssapi.so

%{_libdir}/dovecot/auth/libdriver_sqlite.so

%{_libdir}/dovecot/dict/libdriver_sqlite.so

%{_libdir}/dovecot/libdriver_sqlite.so

%{_libdir}/dovecot/libssl_iostream_openssl.so

%dir %{_libdir}/dovecot/settings

%{_libexecdir}/%{name}

%exclude %{_libexecdir}/%{name}/managesieve*

%ghost /var/run/dovecot

%attr(0750,dovecot,dovecot) /var/lib/dovecot

%{_mandir}/man1/deliver.1.gz

%{_mandir}/man1/doveadm*.1.gz

%{_mandir}/man1/doveconf.1.gz

%{_mandir}/man1/dovecot*.1.gz

%{_mandir}/man1/dsync.1.gz

%{_mandir}/man5/dovecot.conf.5.gz

%{_mandir}/man7/doveadm-search-query.7.gz

%files pigeonhole

%defattr(-,root,root,-)

%{_bindir}/sieve-dump

%{_bindir}/sieve-filter

%{_bindir}/sieve-test

%{_bindir}/sievec

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/20-managesieve.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/90-sieve.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/90-sieve-extprograms.conf

%{_docdir}/%{name}-2.2-pigeonhole-%{pigeonholever}

%{_libexecdir}/%{name}/managesieve

%{_libexecdir}/%{name}/managesieve-login

%{_libdir}/dovecot/*_sieve_plugin.so

%{_libdir}/dovecot/settings/libmanagesieve_*.so

%{_libdir}/dovecot/sieve/

%{_mandir}/man1/sieve-dump.1.gz

%{_mandir}/man1/sieve-filter.1.gz

%{_mandir}/man1/sieve-test.1.gz

%{_mandir}/man1/sievec.1.gz

%{_mandir}/man1/sieved.1.gz

%{_mandir}/man7/pigeonhole.7.gz

%files mysql

%defattr(-,root,root,-)

%{_libdir}/%{name}/libdriver_mysql.so

%{_libdir}/%{name}/auth/libdriver_mysql.so

%{_libdir}/%{name}/dict/libdriver_mysql.so

%files pgsql

%defattr(-,root,root,-)

%{_libdir}/%{name}/libdriver_pgsql.so

%{_libdir}/%{name}/auth/libdriver_pgsql.so

%{_libdir}/%{name}/dict/libdriver_pgsql.so

%changelog

* Wed Jun 11 2014 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-5

- fix CVE-2014-3430: denial of service through maxxing out SSL connections (#1108004)

* Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 1:2.2.10-4

- Mass rebuild 2014-01-24

* Wed Jan 15 2014 Honza Horak <hhorak@redhat.com> - 1:2.2.10-3

- Rebuild for mariadb-libs

  Related: #1045013

* Wed Jan 08 2014 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-2

- fix pigeonhole docdir name

* Fri Jan 03 2014 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-1

- dovecot updated to 2.2.10, pigeonhole updated to 0.4.2

* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 1:2.2.5-3

- Mass rebuild 2013-12-27

* Fri Dec 06 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.5-2

- fix chroot installation hang (#1026790)

* Wed Aug 07 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.5-1

- dovecot updated to 2.2.5

* Tue Jul 30 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.4-2

- dovecot pigeonhole updated to 0.4.1

* Fri Jul 19 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.4-1

- fix name conflict with cyrus-sasl

- dovecot updated to 2.2.4

- drop devel sub-package

* Mon Jun 17 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.3-1

- dovecot updated to 2.2.3

- IMAP: If subject contained only whitespace, Dovecot returned an

  ENVELOPE reply with a huge literal value, effectively causing the

  IMAP client to wait for more data forever.

- IMAP: Various URLAUTH fixes.

- imapc: Various bugfixes and improvements

- pop3c: Various fixes to make it work in dsync (without imapc)

- dsync: Fixes to syncing subscriptions. Fixes to syncing mailbox

  renames.

* Tue May 21 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.2-2

- fix location of tmpfiles configuration (#964448)

* Mon May 20 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.2-1

- dovecot updated to 2.2.2

- IMAP: Various URLAUTH fixes.

- IMAP: Fixed a hang with invalid APPEND parameters.

- IMAP LIST-EXTENDED: INBOX was never listed with \Subscribed flag.

- mailbox_list_index=yes still caused crashes.

- maildir: Fixed a crash after dovecot-keywords file was re-read.

- maildir: If files had reappeared unexpectedly to a Maildir, they

  were ignored until index files were deleted.

- Maildir: Fixed handling over 26 keywords in a mailbox. 

- imap/pop3-login proxying: Fixed a crash if TCP connection succeeded,

  but the remote login timed out.

* Thu May 16 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.1-4

- update pigeonhole to 0.4.0

* Mon Apr 29 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.1-3

- revert last change and use different fix

* Wed Apr 24 2013 Kalev Lember <kalevlember@gmail.com> - 1:2.2.1-2

- Filter out autogenerated perl deps (#956194)

* Fri Apr 19 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.1-1

- dovecot updated to 2.2.1

- mailbox_list_index=yes was broken.

- LAYOUT=index didn't list subscriptions.

- auth: Multiple master passdbs didn't work.

- Message parsing (e.g. during search) crashed when multipart message

  didn't actually contain any parts.

- dovecot updated to 2.2.1

* Mon Apr 15 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.0-1

- dovecot updated to 2.2.0

- Mailbox list indexes weren't using proper file permissions based

  on the root directory.

- replicator: doveadm commands and user list export may have skipped

  some users.

- Various fixes to mailbox_list_index=yes

* Fri Apr 05 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2-0.4

- dovecot updated to 2.2 RC4

- various bugfixes to LDAP changes in rc3

* Wed Mar 27 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2-0.3

- dovecot updated to 2.2 RC3

- Fixed a crash when decoding quoted-printable content.

- dsync: Various bugfixes

* Thu Feb 28 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2-0.2

- do not print error when NetworkManager is not installed (#916456)

* Wed Feb 27 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2-0.1

- major update to dovecot 2.2 RC2

* Mon Feb 11 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.15-1

- dovecot updated to 2.1.15

- v2.1.14's dovecot.index.cache fixes caused Dovecot to use more disk I/O

  and memory than was necessary.

* Tue Feb 05 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.14-2

- spec clean up

* Thu Jan 31 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.14-1

- dovecot updated to 2.1.14

- v2.1.11+ had a race condition where it sometimes overwrote data in

  dovecot.index.cache file. This could have caused Dovecot to return

  the same cached data to two different messages.

- mdbox: Fixes to handling duplicate GUIDs during index rebuild

* Tue Jan 15 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.13-1

- dovecot updated to 2.1.13

- Some fixes to cache file changes in v2.1.11.

- virtual storage: Sorting mailbox by from/to/cc/bcc didn't work.

* Mon Dec 03 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.12-1

- dovecot updated to 2.1.12

- lmtp proxy: Fixed hanging if remote server was down.

- doveadm: Various fixes to handling doveadm-server connections.

- auth: passdb imap was broken in v2.1.10.

* Thu Nov 08 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.10-3

- fix network still not ready race condition (#871623)

* Fri Nov 02 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.10-2

- add reload command to service file

* Wed Sep 19 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.10-1

- dovecot updated to 2.1.10, pigeonhole updated to 0.3.3

- director: In some conditions director may have disconnected from

  another director (without logging about it), thinking it was sending

  invalid data.

- imap: Various fixes to listing mailboxes.

- login processes crashed if there were a lot of local {} or remote {}

  settings blocks.

* Fri Aug 24 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.9-2

- use new systemd rpm macros (#851238)

* Thu Aug 02 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.9-1

- dovecot updated to 2.1.9

- Full text search indexing might have failed for some messages,

  always causing indexer-worker process to run out of memory.

- fts-lucene: Fixed handling SEARCH HEADER FROM/TO/SUBJECT/CC/BCC when

  the header wasn't lowercased.

- fts-squat: Fixed crash when searching a virtual mailbox.

- pop3: Fixed assert crash when doing UIDL on empty mailbox on some

  setups. 

- auth: GSSAPI RFC compliancy and error handling fixes.

- Various fixes related to handling shared namespaces

* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:2.1.8-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

* Tue Jul 03 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.8-2

- pigeonhole updated to 0.3.1

- Fixed several small issues, including a few potential segfault bugs, based

  on static source code analysis.

* Tue Jul 03 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.8-1

- dovecot updated to 2.1.8

- imap: Mailbox names were accidentally sent as UTF-8 instead of mUTF-7

  in previous v2.1.x releases for STATUS, MYRIGHTS and GETQUOTAROOT commands.

- lmtp proxy: Don't timeout connections too early when mail has a lot of RCPT TOs.

- director: Don't crash if the director is working alone.

- shared mailboxes: Avoid doing "@domain" userdb lookups.

- doveadm: Fixed crash with proxying some commands.

- fts-squat: Fixed handling multiple SEARCH parameters.

- imapc: Fixed a crash when message had more than 8 keywords.

- imapc: Don't crash on APPEND/COPY if server doesn't support UIDPLUS.

* Mon Jul 02 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.7-5

- make quota work with NFS mounted mailboxes

* Fri Jun 22 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.7-4

- posttrans argument is always zero

* Fri Jun 15 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.7-3

- do not let dovecot run during upgrade (#134325)

* Wed May 30 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.7-2

- fix changelog, 2.1.7-1 had copy-pasted upstream changelog, which was wrong

- director: Don't crash with quickly disconnecting incoming director

  connections.

- mdbox: If mail was originally saved to non-INBOX, and namespace

  prefix is non-empty, don't assert-crash when rebuilding indexes.

- sdbox: Don't use more fds than necessary when copying mails.

- auth: Fixed crash with DIGEST-MD5 when attempting to do master user

  login without master passdbs. 

- Several fixes to mail_shared_explicit_inbox=no

- imapc: Use imapc_list_prefix also for listing subscriptions.

* Wed May 30 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.7-1

- updated to 2.1.7

- v2.1.5: Using "~/" as mail_location or elsewhere failed to actually

  expand it to home directory.

- dbox: Fixed potential assert-crash when reading dbox files.

- trash plugin: Fixed behavior when quota is already over limit.

- mail_log plugin: Logging "copy" event didn't work.

- Proxying to backend server with SSL: Verifying server certificate

  name always failed, because it was compared to an IP address.

* Wed May 09 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.6-2

- fix socket activation again, fix in 2.1.6 is incomplete

* Wed May 09 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.6-1

- v2.1.5: Using "~/" as mail_location or elsewhere failed to actually

  expand it to home directory.

- dbox: Fixed potential assert-crash when reading dbox files.

- trash plugin: Fixed behavior when quota is already over limit.

- Proxying to backend server with SSL: Verifying server certificate

  name always failed, because it was compared to an IP address.

* Tue Apr 24 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.5-1

- IMAP: Several fixes related to mailbox listing in some configs

- director: A lot of fixes and performance improvements

- mbox: Deleting a mailbox didn't delete its index files.

- pop3c: TOP command was sent incorrectly

- trash plugin didn't work properly

- LMTP: Don't add a duplicate Return-Path: header when proxying.

- listescape: Don't unescape namespace prefixes.

* Tue Apr 24 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.4-2

- close systemd extra sockets that are not configured

* Tue Apr 10 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.4-1