%global __provides_exclude_from %{_docdir}

%global __requires_exclude_from %{_docdir}

Summary: Secure imap and pop3 server

Name: dovecot

Epoch: 1

Version: 2.2.36

%global prever %{nil}

Release: 7%{?dist}

#dovecot itself is MIT, a few sources are PD, pigeonhole is LGPLv2

License: MIT and LGPLv2

Group: System Environment/Daemons

URL: http://www.dovecot.org/

Source: http://www.dovecot.org/releases/2.2/%{name}-%{version}%{?prever}.tar.gz

Source1: dovecot.init

Source2: dovecot.pam

%global pigeonholever 0.4.24

Source8: http://www.rename-it.nl/dovecot/2.2/dovecot-2.2-pigeonhole-%{pigeonholever}.tar.gz

#wget http://hg.rename-it.nl/dovecot-2.2-pigeonhole/archive/%{pigeonholever}.tar.bz2 -O dovecot-2.2-pigeonhole-%{pigeonholever}.tar.bz2

#Source8: dovecot-2.2-pigeonhole-%{pigeonholever}.tar.bz2

Source9: dovecot.sysconfig

Source10: dovecot.tmpfilesd

#our own

Source14: dovecot.conf.5

Source15: prestartscript

Source16: dovecot.portreserve

# 3x Fedora/RHEL specific

Patch1: dovecot-2.0-defaultconfig.patch

Patch2: dovecot-1.0.beta2-mkcert-permissions.patch

Patch3: dovecot-1.0.rc7-mkcert-paths.patch

Patch5: dovecot-2.1-privatetmp.patch

#wait for network

Patch6: dovecot-2.1.10-waitonline.patch

#workaround for chroot installation without /dev/random present, rhbz#1026790

Patch7: dovecot-2.2.9-nodevrand.patch

# sent upstream, rhbz#1630380

Patch9: dovecot-2.2.36-aclfix.patch

# dovecot < 2.3, rhbz#1280436

Patch10: dovecot-2.2-gidcheck.patch

Patch11: dovecot-2.2.36-portreserve.patch

Patch12: dovecot-2.2.36-cve_2019_3814part1of3.patch

Patch13: dovecot-2.2.36-cve_2019_3814part2of3.patch

Patch14: dovecot-2.2.36-cve_2019_3814part3of3.patch

Patch15: dovecot-2.2.36-cve_2019_7524part1of2.patch

Patch16: dovecot-2.2.36-cve_2019_7524part2of2.patch

Patch19: dovecot-2.2.36-cve2019_11500_part1of4.patch

Patch20: dovecot-2.2.36-cve2019_11500_part2of4.patch

Patch21: dovecot-2.2.36-cve2019_11500_part3of4.patch

Patch22: dovecot-2.2.36-cve2019_11500_part4of4.patch

Patch23: dovecot-2.2.36-bigkey.patch

Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)

BuildRequires: openssl-devel, pam-devel, zlib-devel, bzip2-devel, xz-devel, libcap-devel

BuildRequires: libtool, autoconf, automake, pkgconfig

BuildRequires: sqlite-devel, tcp_wrappers-devel

BuildRequires: postgresql-devel

BuildRequires: mysql-devel

BuildRequires: openldap-devel

BuildRequires: krb5-devel

BuildRequires: quota-devel

# gettext-devel is needed for running autoconf because of the

# presence of AM_ICONV

BuildRequires: gettext-devel

# Explicit Runtime Requirements for executalbe

Requires: openssl >= 0.9.7f-4

# Package includes an initscript service file, needs to require initscripts package

Requires(pre): shadow-utils

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

Requires: systemd

Requires(post): systemd-units

Requires(preun): systemd-units

Requires(postun): systemd-units

%else

Requires: initscripts

Requires(post): chkconfig

Requires(preun): chkconfig initscripts

Requires(postun): initscripts

%endif

Requires: portreserve

%if %{?fedora}0 > 150 || %{?rhel}0 >60

#clucene in fedora <=15 and rhel<=6 is too old

BuildRequires: clucene-core-devel

%endif

%define ssldir %{_sysconfdir}/pki/%{name}

%if %{?fedora}00%{?rhel} < 6

%define _initddir %{_initrddir}

BuildRequires: curl-devel expat-devel

%else

BuildRequires: libcurl-devel expat-devel

%endif

%global restart_flag /var/run/%{name}/%{name}-restart-after-rpm-install

%description

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security 

primarily in mind.  It also contains a small POP3 server.  It supports mail 

in either of maildir or mbox formats.

The SQL drivers and authentication plug-ins are in their subpackages.

%package pigeonhole

Requires: %{name} = %{epoch}:%{version}-%{release}

Obsoletes: dovecot-sieve < 1:1.2.10-3

Obsoletes: dovecot-managesieve < 1:1.2.10-3

Summary: Sieve and managesieve plug-in for dovecot

Group: System Environment/Daemons

License: MIT and LGPLv2

%description pigeonhole

This package provides sieve and managesieve plug-in for dovecot LDA.

%package pgsql

Requires: %{name} = %{epoch}:%{version}-%{release}

Summary: Postgres SQL back end for dovecot

Group: System Environment/Daemons

%description pgsql

This package provides the Postgres SQL back end for dovecot-auth etc.

%package mysql

Requires: %{name} = %{epoch}:%{version}-%{release}

Summary: MySQL back end for dovecot

Group: System Environment/Daemons

%description mysql

This package provides the MySQL back end for dovecot-auth etc.

%package devel

Requires: %{name} = %{epoch}:%{version}-%{release}

Summary: Development files for dovecot

Group: Development/Libraries

%description devel

This package provides the development files for dovecot.

%prep

%setup -q -n %{name}-%{version}%{?prever} -a 8

%patch1 -p1 -b .default-settings

%patch2 -p1 -b .mkcert-permissions

%patch3 -p1 -b .mkcert-paths

%patch6 -p1 -b .waitonline

%patch7 -p1 -b .nodevrand

%patch9 -p1 -b .aclfix

%patch10 -p1 -b .gidcheck

%patch11 -p1 -b .portreserve

%patch12 -p1 -b .cve_2019_3814part1of3

%patch13 -p1 -b .cve_2019_3814part2of3

%patch14 -p1 -b .cve_2019_3814part3of3

%patch15 -p1 -b .cve_2019_7524part1of2

%patch16 -p1 -b .cve_2019_7524part2of2

%patch19 -p1 -b .cve2019_11500_part1of4

%patch20 -p1 -b .cve2019_11500_part2of4

%patch23 -p1 -b .bigkey

sed -i '/DEFAULT_INCLUDES *=/s|$| '"$(pkg-config --cflags libclucene-core)|" src/plugins/fts-lucene/Makefile.in

#pigeonhole

pushd dovecot-2*2-pigeonhole-%{pigeonholever}

%patch21 -p1 -b .cve2019_11500_part3of4

%patch22 -p1 -b .cve2019_11500_part4of4

popd

%build

#required for fdpass.c line 125,190: dereferencing type-punned pointer will break strict-aliasing rules

%global _hardened_build 1

export CFLAGS="%{__global_cflags} -fno-strict-aliasing"

export LDFLAGS="-Wl,-z,now -Wl,-z,relro %{__global_ldflags}"

autoreconf -I . -fiv #required for aarch64 support

%configure                       \

    INSTALL_DATA="install -c -p -m644" \

    --docdir=%{_docdir}/%{name}-%{version}     \

    --disable-static             \

    --disable-rpath              \

    --with-nss                   \

    --with-shadow                \

    --with-pam                   \

    --with-gssapi=plugin         \

    --with-ldap=plugin           \

    --with-sql=plugin            \

    --with-pgsql                 \

    --with-mysql                 \

    --with-sqlite                \

    --with-lzma                  \

    --with-zlib                  \

    --with-libcap                \

%if %{?fedora}0 > 150 || %{?rhel}0 >60

    --with-lucene                \

%endif

    --with-ssl=openssl           \

    --with-ssldir=%{ssldir}      \

    --with-solr                  \

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

    --with-systemdsystemunitdir=%{_unitdir}  \

%endif

    --with-docs                  \

    --with-libwrap

sed -i 's|/etc/ssl|/etc/pki/dovecot|' doc/mkcert.sh doc/example-config/conf.d/10-ssl.conf

make %{?_smp_mflags}

#pigeonhole

pushd dovecot-2*2-pigeonhole-%{pigeonholever}

# required for snapshot

[ -f configure ] || autoreconf -fiv

[ -f ChangeLog ] || echo "Pigeonhole ChangeLog is not available, yet" >ChangeLog

%configure                             \

    INSTALL_DATA="install -c -p -m644" \

    --disable-static                   \

    --with-dovecot=../                 \

    --without-unfinished-features

make %{?_smp_mflags}

popd

%install

rm -rf $RPM_BUILD_ROOT

make install DESTDIR=$RPM_BUILD_ROOT

#move doc dir back to build dir so doc macro in files section can use it

mv $RPM_BUILD_ROOT/%{_docdir}/%{name}-%{version} %{_builddir}/%{name}-%{version}%{?prever}/docinstall

pushd dovecot-2*2-pigeonhole-%{pigeonholever}

make install DESTDIR=$RPM_BUILD_ROOT

mv $RPM_BUILD_ROOT/%{_docdir}/%{name}-%{version} $RPM_BUILD_ROOT/%{_docdir}/%{name}-pigeonhole

install -m 644 AUTHORS ChangeLog COPYING COPYING.LGPL INSTALL NEWS README $RPM_BUILD_ROOT/%{_docdir}/%{name}-pigeonhole

popd

%if %{?fedora}00%{?rhel} < 6

sed -i 's|password-auth|system-auth|' %{SOURCE2}

%endif

install -p -D -m 644 %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/pam.d/dovecot

#install man pages

install -p -D -m 644 %{SOURCE14} $RPM_BUILD_ROOT%{_mandir}/man5/dovecot.conf.5

#install waitonline script

install -p -D -m 755 %{SOURCE15} $RPM_BUILD_ROOT%{_libexecdir}/dovecot/prestartscript

# install portreserve dovecot config

install -p -D -m 644 %{SOURCE16} $RPM_BUILD_ROOT%{_sysconfdir}/portreserve/dovecot

# generate ghost .pem files

mkdir -p $RPM_BUILD_ROOT%{ssldir}/certs

mkdir -p $RPM_BUILD_ROOT%{ssldir}/private

touch $RPM_BUILD_ROOT%{ssldir}/certs/dovecot.pem

chmod 600 $RPM_BUILD_ROOT%{ssldir}/certs/dovecot.pem

touch $RPM_BUILD_ROOT%{ssldir}/private/dovecot.pem

chmod 600 $RPM_BUILD_ROOT%{ssldir}/private/dovecot.pem

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

install -p -D -m 644 %{SOURCE10} $RPM_BUILD_ROOT%{_tmpfilesdir}/dovecot.conf

%else

install -p -D -m 755 %{SOURCE1} $RPM_BUILD_ROOT%{_initddir}/dovecot

install -p -D -m 600 %{SOURCE9} $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/dovecot

%endif

mkdir -p $RPM_BUILD_ROOT/var/run/dovecot/{login,empty}

# Install dovecot configuration and dovecot-openssl.cnf

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/dovecot/conf.d

install -p -m 644 docinstall/example-config/dovecot.conf $RPM_BUILD_ROOT%{_sysconfdir}/dovecot

install -p -m 644 docinstall/example-config/conf.d/*.conf $RPM_BUILD_ROOT%{_sysconfdir}/dovecot/conf.d

install -p -m 644 $RPM_BUILD_ROOT/%{_docdir}/%{name}-pigeonhole/example-config/conf.d/*.conf $RPM_BUILD_ROOT%{_sysconfdir}/dovecot/conf.d

install -p -m 644 docinstall/example-config/conf.d/*.conf.ext $RPM_BUILD_ROOT%{_sysconfdir}/dovecot/conf.d

install -p -m 644 $RPM_BUILD_ROOT/%{_docdir}/%{name}-pigeonhole/example-config/conf.d/*.conf.ext $RPM_BUILD_ROOT%{_sysconfdir}/dovecot/conf.d ||:

install -p -m 644 doc/dovecot-openssl.cnf $RPM_BUILD_ROOT%{ssldir}/dovecot-openssl.cnf

install -p -m755 doc/mkcert.sh $RPM_BUILD_ROOT%{_libexecdir}/%{name}/mkcert.sh

mkdir -p $RPM_BUILD_ROOT/var/lib/dovecot

#remove the libtool archives

find $RPM_BUILD_ROOT%{_libdir}/%{name}/ -name '*.la' | xargs rm -f

#remove what we don't want

rm -f $RPM_BUILD_ROOT%{_sysconfdir}/dovecot/README

pushd docinstall

rm -f securecoding.txt thread-refs.txt

popd

%clean

rm -rf $RPM_BUILD_ROOT

%pre

#dovecot uid and gid are reserved, see /usr/share/doc/setup-*/uidgid 

getent group dovecot >/dev/null || groupadd -r --gid 97 dovecot

getent passwd dovecot >/dev/null || \

useradd -r --uid 97 -g dovecot -d /usr/libexec/dovecot -s /sbin/nologin -c "Dovecot IMAP server" dovecot

getent group dovenull >/dev/null || groupadd -r dovenull

getent passwd dovenull >/dev/null || \

useradd -r -g dovenull -d /usr/libexec/dovecot -s /sbin/nologin -c "Dovecot's unauthorized user" dovenull

# do not let dovecot run during upgrade rhbz#134325

if [ "$1" = "2" ]; then

  rm -f %restart_flag

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

  /bin/systemctl is-active %{name}.service >/dev/null 2>&1 && touch %restart_flag ||:

  /bin/systemctl stop %{name}.service >/dev/null 2>&1

%else

  /sbin/service %{name} status >/dev/null 2>&1 && touch %restart_flag ||:

  /sbin/service %{name} stop >/dev/null 2>&1

%endif

fi

%post

if [ $1 -eq 1 ]

then

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

  %systemd_post dovecot.service

%else

  /sbin/chkconfig --add %{name}

%endif

fi

# generate the ssl certificates

if [ ! -f %{ssldir}/certs/%{name}.pem ]; then

    SSLDIR=%{ssldir} OPENSSLCONFIG=%{ssldir}/dovecot-openssl.cnf \

         %{_libexecdir}/%{name}/mkcert.sh &> /dev/null

fi

if [ ! -f /var/lib/dovecot/ssl-parameters.dat ]; then

    /usr/libexec/dovecot/ssl-params &>/dev/null

fi

install -d -m 0755 -g dovecot -d /var/run/dovecot

install -d -m 0755 -d /var/run/dovecot/empty

install -d -m 0750 -g dovenull /var/run/dovecot/login

/sbin/restorecon -R /var/run/dovecot 2>/dev/null || :

%preun

if [ $1 = 0 ]; then

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

        /bin/systemctl disable dovecot.service dovecot.socket >/dev/null 2>&1 || :

        /bin/systemctl stop dovecot.service dovecot.socket >/dev/null 2>&1 || :

%else

    /sbin/service %{name} stop > /dev/null 2>&1

    /sbin/chkconfig --del %{name}

%endif

    rm -rf /var/run/dovecot

fi

%postun

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

/bin/systemctl daemon-reload >/dev/null 2>&1 || :

%endif

if [ "$1" -ge "1" -a -e %restart_flag ]; then

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

    /bin/systemctl start dovecot.service >/dev/null 2>&1 || :

%else

    /sbin/service %{name} start >/dev/null 2>&1 || :

%endif

rm -f %restart_flag

fi

%posttrans

# dovecot should be started again in #postun, but it's not executed on reinstall

# if it was already started, restart_flag won't be here, so it's ok to test it again

if [ -e %restart_flag ]; then

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

    /bin/systemctl start dovecot.service >/dev/null 2>&1 || :

%else

    /sbin/service %{name} start >/dev/null 2>&1 || :

%endif

rm -f %restart_flag

fi

%check

make check

cd dovecot-2*2-pigeonhole-%{pigeonholever}

make check

%files

%defattr(-,root,root,-)

%doc docinstall/* AUTHORS ChangeLog COPYING COPYING.LGPL COPYING.MIT NEWS README

%{_sbindir}/dovecot

%{_bindir}/doveadm

%{_bindir}/doveconf

%{_bindir}/dsync

%if %{?fedora}0 > 140 || %{?rhel}0 > 60

%_tmpfilesdir/dovecot.conf

%{_unitdir}/dovecot.service

%{_unitdir}/dovecot.socket

%else

%{_initddir}/dovecot

%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/sysconfig/dovecot

%endif

%dir %{_sysconfdir}/dovecot

%dir %{_sysconfdir}/dovecot/conf.d

%config(noreplace) %{_sysconfdir}/dovecot/dovecot.conf

#list all so we'll be noticed if upstream changes anything

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/10-auth.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/10-director.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/10-logging.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/10-mail.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/10-master.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/10-ssl.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/15-lda.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/15-mailboxes.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/20-imap.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/20-lmtp.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/20-pop3.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/90-acl.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/90-quota.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/90-plugin.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-checkpassword.conf.ext

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-deny.conf.ext

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-dict.conf.ext

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-ldap.conf.ext

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-master.conf.ext

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-passwdfile.conf.ext

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-sql.conf.ext

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-static.conf.ext

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-system.conf.ext

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/auth-vpopmail.conf.ext

%config(noreplace) %{_sysconfdir}/portreserve/dovecot

%config(noreplace) %{_sysconfdir}/pam.d/dovecot

%config(noreplace) %{ssldir}/dovecot-openssl.cnf

%dir %{ssldir}

%dir %{ssldir}/certs

%dir %{ssldir}/private

%attr(0600,root,root) %ghost %config(missingok,noreplace) %verify(not md5 size mtime) %{ssldir}/certs/dovecot.pem

%attr(0600,root,root) %ghost %config(missingok,noreplace) %verify(not md5 size mtime) %{ssldir}/private/dovecot.pem

%dir %{_libdir}/dovecot

%dir %{_libdir}/dovecot/auth

%dir %{_libdir}/dovecot/dict

%dir %{_libdir}/dovecot/stats

%{_libdir}/dovecot/doveadm

%exclude %{_libdir}/dovecot/doveadm/*sieve*

%{_libdir}/dovecot/*.so.*

#these (*.so files) are plugins, not devel files

%{_libdir}/dovecot/*_plugin.so

%exclude %{_libdir}/dovecot/*_sieve_plugin.so

%{_libdir}/dovecot/auth/lib20_auth_var_expand_crypt.so

%{_libdir}/dovecot/auth/libauthdb_imap.so

%{_libdir}/dovecot/auth/libauthdb_ldap.so

%{_libdir}/dovecot/auth/libmech_gssapi.so

%{_libdir}/dovecot/auth/libdriver_sqlite.so

%{_libdir}/dovecot/dict/libdriver_sqlite.so

%{_libdir}/dovecot/dict/libdict_ldap.so

%{_libdir}/dovecot/stats/libstats_auth.so

%{_libdir}/dovecot/stats/libstats_mail.so

%{_libdir}/dovecot/libdriver_sqlite.so

%{_libdir}/dovecot/libssl_iostream_openssl.so

%{_libdir}/dovecot/libfs_compress.so

%{_libdir}/dovecot/libfs_crypt.so

%{_libdir}/dovecot/libfs_mail_crypt.so

%{_libdir}/dovecot/libdcrypt_openssl.so

%{_libdir}/dovecot/lib20_var_expand_crypt.so

%dir %{_libdir}/dovecot/settings

%{_libexecdir}/%{name}

%exclude %{_libexecdir}/%{name}/managesieve*

%attr(0755,root,dovecot) %ghost /var/run/dovecot

%attr(0750,root,dovenull) %ghost /var/run/dovecot/login

%attr(0755,root,root) %ghost /var/run/dovecot/empty

%attr(0750,dovecot,dovecot) /var/lib/dovecot

%{_datadir}/%{name}

%{_mandir}/man1/deliver.1*

%{_mandir}/man1/doveadm*.1*

%{_mandir}/man1/doveconf.1*

%{_mandir}/man1/dovecot*.1*

%{_mandir}/man1/dsync.1*

%{_mandir}/man5/dovecot.conf.5*

%{_mandir}/man7/doveadm-search-query.7*

%files pigeonhole

%defattr(-,root,root,-)

%{_bindir}/sieve-dump

%{_bindir}/sieve-filter

%{_bindir}/sieve-test

%{_bindir}/sievec

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/20-managesieve.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/90-sieve.conf

%config(noreplace) %{_sysconfdir}/dovecot/conf.d/90-sieve-extprograms.conf

%{_docdir}/%{name}-pigeonhole

%{_libexecdir}/%{name}/managesieve

%{_libexecdir}/%{name}/managesieve-login

%{_libdir}/dovecot/doveadm/*sieve*

%{_libdir}/dovecot/*_sieve_plugin.so

%{_libdir}/dovecot/settings/libmanagesieve_*.so

%{_libdir}/dovecot/settings/libpigeonhole_*.so

%{_libdir}/dovecot/sieve/

%{_mandir}/man1/sieve-dump.1*

%{_mandir}/man1/sieve-filter.1*

%{_mandir}/man1/sieve-test.1*

%{_mandir}/man1/sievec.1*

%{_mandir}/man1/sieved.1*

%{_mandir}/man7/pigeonhole.7*

%files mysql

%defattr(-,root,root,-)

%{_libdir}/%{name}/libdriver_mysql.so

%{_libdir}/%{name}/auth/libdriver_mysql.so

%{_libdir}/%{name}/dict/libdriver_mysql.so

%files pgsql

%defattr(-,root,root,-)

%{_libdir}/%{name}/libdriver_pgsql.so

%{_libdir}/%{name}/auth/libdriver_pgsql.so

%{_libdir}/%{name}/dict/libdriver_pgsql.so

%files devel

%{_includedir}/dovecot

%{_datadir}/aclocal/dovecot*.m4

%{_libdir}/dovecot/libdovecot*.so

%{_libdir}/dovecot/dovecot-config

%changelog

* Mon Mar 02 2020 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-7

- generated key was too small (#1086365)

* Thu Aug 29 2019 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-6

- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte

  when scanning data in quoted strings, leading to out of bounds heap

  memory writes (#1741787)

* Tue Aug 13 2019 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-5

- fix CVE-2019-3814: improper certificate validation (#1674369)

- fix CVE-2019-7524: buffer overflow in indexer-worker process resulting in privilege 

  escalation (#1700398)

* Tue Aug 13 2019 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-4

- use portreserve to avoid port conflicts(#1270283)

* Wed Sep 19 2018 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-3

- fix global ACL directory configuration search path (#1630380)

- update first/last_valid_gid range patch (#1630409)

* Mon Jul 30 2018 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-2

- fix defaut permissions of gost run files

* Tue Jun 12 2018 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-1

- dovecot updated to 2.2.36, pigeonhole to 0.4.24

- fixed dsync not replicating sieve scripts (#1419426)

- fix plugins incorrectly reporting epipe errors(#1489943)

* Tue Mar 21 2017 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-8

- do not iterate over users outside of first/last_valid_gid range (#1280436)

* Thu Jun 09 2016 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-7

- prevent warning messages from %%post section if selinux-policy is

  not installed (yet) (#1057522)

- compile with xz compression support enabled (#1176214)

- fix crash in sieve script compilation (#1177852)

- wait with start after network-online target (#1209006)

- build with tcp wrappers enabled (#1229164)

- fixed userdb extra fields handling in passdb failure (#1234868)

- fix valgrind option detection for make check (#1249625)

- first valid regular user id is 1000 (#1280433)

- fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)

- fixed header parsing when there were multiple same header names (#1224496)

* Mon Jun 06 2016 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-6

- add devel sub-package (#1122676)

* Wed Jun 11 2014 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-5

- fix CVE-2014-3430: denial of service through maxxing out SSL connections (#1108004)

* Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 1:2.2.10-4

- Mass rebuild 2014-01-24

* Wed Jan 15 2014 Honza Horak <hhorak@redhat.com> - 1:2.2.10-3

- Rebuild for mariadb-libs

  Related: #1045013

* Wed Jan 08 2014 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-2

- fix pigeonhole docdir name

* Fri Jan 03 2014 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-1

- dovecot updated to 2.2.10, pigeonhole updated to 0.4.2

* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 1:2.2.5-3

- Mass rebuild 2013-12-27

* Fri Dec 06 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.5-2

- fix chroot installation hang (#1026790)

* Wed Aug 07 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.5-1

- dovecot updated to 2.2.5

* Tue Jul 30 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.4-2

- dovecot pigeonhole updated to 0.4.1

* Fri Jul 19 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.4-1

- fix name conflict with cyrus-sasl

- dovecot updated to 2.2.4

- drop devel sub-package

* Mon Jun 17 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.3-1

- dovecot updated to 2.2.3

- IMAP: If subject contained only whitespace, Dovecot returned an

  ENVELOPE reply with a huge literal value, effectively causing the

  IMAP client to wait for more data forever.

- IMAP: Various URLAUTH fixes.

- imapc: Various bugfixes and improvements

- pop3c: Various fixes to make it work in dsync (without imapc)

- dsync: Fixes to syncing subscriptions. Fixes to syncing mailbox

  renames.

* Tue May 21 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.2-2

- fix location of tmpfiles configuration (#964448)

* Mon May 20 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.2-1

- dovecot updated to 2.2.2

- IMAP: Various URLAUTH fixes.

- IMAP: Fixed a hang with invalid APPEND parameters.

- IMAP LIST-EXTENDED: INBOX was never listed with \Subscribed flag.

- mailbox_list_index=yes still caused crashes.

- maildir: Fixed a crash after dovecot-keywords file was re-read.

- maildir: If files had reappeared unexpectedly to a Maildir, they

  were ignored until index files were deleted.

- Maildir: Fixed handling over 26 keywords in a mailbox. 

- imap/pop3-login proxying: Fixed a crash if TCP connection succeeded,

  but the remote login timed out.

* Thu May 16 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.1-4

- update pigeonhole to 0.4.0

* Mon Apr 29 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.1-3

- revert last change and use different fix

* Wed Apr 24 2013 Kalev Lember <kalevlember@gmail.com> - 1:2.2.1-2

- Filter out autogenerated perl deps (#956194)

* Fri Apr 19 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.1-1

- dovecot updated to 2.2.1

- mailbox_list_index=yes was broken.

- LAYOUT=index didn't list subscriptions.

- auth: Multiple master passdbs didn't work.

- Message parsing (e.g. during search) crashed when multipart message

  didn't actually contain any parts.

- dovecot updated to 2.2.1

* Mon Apr 15 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.0-1

- dovecot updated to 2.2.0

- Mailbox list indexes weren't using proper file permissions based

  on the root directory.

- replicator: doveadm commands and user list export may have skipped

  some users.

- Various fixes to mailbox_list_index=yes

* Fri Apr 05 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2-0.4

- dovecot updated to 2.2 RC4

- various bugfixes to LDAP changes in rc3

* Wed Mar 27 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2-0.3

- dovecot updated to 2.2 RC3

- Fixed a crash when decoding quoted-printable content.

- dsync: Various bugfixes

* Thu Feb 28 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2-0.2

- do not print error when NetworkManager is not installed (#916456)

* Wed Feb 27 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.2-0.1

- major update to dovecot 2.2 RC2

* Mon Feb 11 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.15-1

- dovecot updated to 2.1.15

- v2.1.14's dovecot.index.cache fixes caused Dovecot to use more disk I/O

  and memory than was necessary.

* Tue Feb 05 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.14-2

- spec clean up

* Thu Jan 31 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.14-1

- dovecot updated to 2.1.14

- v2.1.11+ had a race condition where it sometimes overwrote data in

  dovecot.index.cache file. This could have caused Dovecot to return

  the same cached data to two different messages.

- mdbox: Fixes to handling duplicate GUIDs during index rebuild

* Tue Jan 15 2013 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.13-1

- dovecot updated to 2.1.13

- Some fixes to cache file changes in v2.1.11.

- virtual storage: Sorting mailbox by from/to/cc/bcc didn't work.

* Mon Dec 03 2012 Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.12-1

- dovecot updated to 2.1.12

- lmtp proxy: Fixed hanging if remote server was down.

- doveadm: Various fixes to handling doveadm-server connections.

- auth: passdb imap was broken in v2.1.10.