dovecot 1:2.2.35-2ubuntu1 source package in Ubuntu

Changelog

dovecot (1:2.2.35-2ubuntu1) cosmic; urgency=medium

  * Merge with Debian unstable (LP: #1771816). Remaining changes:
    - Add updated autopkgtest to debian/tests/* (these tests got simplified
      and streamlined to use the packages default configuration which solves
      LP: #1638865)
  * Dropped Changes (now upstream)
    - SECURITY UPDATE: rfc822_parse_domain Information Leak Vulnerability
    - SECURITY UPDATE: TLS SNI config lookups DoS
    - SECURITY UPDATE: Memory leak that can cause crash due to memory exhaustion
  * Dropped Changes (no more needed after 18.04)
    - handle conffile removal of /etc/init/dovecot.conf (due to dropping
      upstart).
  * Dropped Changes (no more needed)
    - Drop build dependency on libstemmer-dev (universe) - this is now in main
    - Disable dovecot-lucene plugin as it had various issues and is deprecated
      in favor of solr anyway (LP 1524526) - no more failing in Cosmic.
  * Dropped Changes (mail-stack-delivery)
    It was decided to no more carry mail-stack-delivery as a package in favor
    to out-of-package solutions. It became less useful due to one of the
    biggest benefit (auto-ssl setup) being part of the base setup now.
    - Add mail-stack-delivery
      - add package in d/rules, d/control
      - add d/*mail-stack-delivery* maintainer scripts and default conf
      - d/mail-stack-delivery.preinst: Move previously installed backups and
        config files to a new package namespace.
      - d/mail-stack-delivery.README.Debian clarified use of configuration files
    - d/mail-stack-delivery.postinst: Use ssl key/cert paths now set up by
      dovecot-core; transition for such configs formerly set up by
      mail-stack-delivery to use the new default ssl config (if user had no
      conffile change or choses new defaults).
    - d/mail-stack-delivery.postinst: if moving dovecot to the new defaults on
      upgrade, also move the related postfix key/cert entries.
    - debian/99-mail-stack-delivery.conf: do not explicitly enable protocols
      as all installed are auto-included from the base config now.
    - adapt autopkgtests to match new version.
    - d/control: for the ssl transition to work we need to ensure dovecot-core
      is complete before upgrading mail-stack-delivery, so add a Pre-Depends.
    - d/mail-stack-delivery.postinst: add SSL_CERT/SSL_KEY detection to
      postconf section (was formerly initialized at the now dropped key setup)
    - d/mail-stack-delivery.postinst: fix SSL_CERT/SSL_KEY detection to only
      read non-comments from the right keywords and to strip common bad-chars
    - d/mail-stack-delivery.postinst: stop modifying mandatory tls config,
      recent upstream has sane defaults now
    - debian/99-mail-stack-delivery.conf: drop explicit ssl_cipher_list,
      recent upstream has sane defaults now
  * Added Changes:
    - carry mail-stack-delivery as empty transitional package
      (can be dropped >20.04)

dovecot (1:2.2.35-2) unstable; urgency=medium

  * [7665652] Use git-subtree to generate pigeonhole patch from git; add
    single-debian-patch to d/source/local-options
  * [bfa0f10] d/rules: specify libdir manually; previous upload moved modules
    under /usr/lib/<triplet>, which was bound to break existing setups
  * [982e826] d/copyright: adjust pigeonhole path and bump years

dovecot (1:2.2.35-1) unstable; urgency=medium

  * [8108cba] New upstream version 2.2.35
  * [6cbbaa1] Update pigeonhole to 0.4.23 (Closes: #892137)
  * [9ace5f2] Switch Vcs-* URLs to salsa.d.o
  * [ef40625] d/rules: call configure via dh_auto_configure.
    Thanks to Helmut Grohne (Closes: #885854)
  * [a459455] Drop B-D on libcurl4-gnutls-dev; removed upstream since 2.2
  * [235af9d] Update upstream signing key

dovecot (1:2.2.34-2) unstable; urgency=high

  * [868dc65] Update pigeonhole to 0.4.22
  * Set urgency to high due to the security fixes in 2.2.34-1

dovecot (1:2.2.34-1) unstable; urgency=medium

  * [f53dc9a] New upstream version 2.2.34
    Fixes the following security issues:
     + CVE-2017-15130: TLS SNI config lookups may lead to excessive memory
       usage (Closes: #891820)
     + CVE-2017-14461: rfc822_parse_domain information leak vulnerability
       (Closes: #891819)
     + CVE-2017-15132: auth client leaks memory if SASL authentication is
       aborted (Closes: #888432)
  * [0dc98c6] Do not patch all-settings.c; regenerate it at build time
    instead. Thanks to Aki Tuomi!
  * [e678e3b] Bump dh compat to 11
     + B-D on debhelper (>= 11~)
     + Use dh_installsystemd instead of dh_systemd_enable
  * [271b290] Bump Standards-Version to 4.1.3; no changes needed
  * [3cd6715] d/copyright: bump upstream and debian years
  * [380d1ac] Drop the ENABLED flag from /etc/default/dovecot (but let the
    initscript handle it if it exists)
  * [97d6fae] d/watch: switch upstream URL to https://

 -- Christian Ehrhardt <email address hidden>  Wed, 16 May 2018 14:40:19 +0200

Upload details

Uploaded by:
Christian Ehrhardt  on 2018-05-22
Uploaded to:
Cosmic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
mail
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
dovecot_2.2.35.orig.tar.gz 5.9 MiB cce15db2fc5233386b63a3cf21c465c09e6e55014ed66c4f184b7d221a47180c
dovecot_2.2.35.orig.tar.gz.asc 1.2 KiB ab08824a77354fa45c7f8a08bfa47e653eaa5253bf12238a7b084677185c5642
dovecot_2.2.35-2ubuntu1.debian.tar.xz 517.0 KiB 819316b4f243fff1a3fbf004faad7295ce41624f60e69b8e927539f02e4559a5
dovecot_2.2.35-2ubuntu1.dsc 3.5 KiB 2741078b1ac8fb08e88c8a64d4dc1ca6ffef7aee83a691fe2fdabc845158f730

View changes file

Binary packages built by this source

dovecot-core: secure POP3/IMAP server - core files

 Dovecot is a mail server whose major goals are security and extreme
 reliability. It tries very hard to handle all error conditions and verify
 that all data is valid, making it nearly impossible to crash. It supports
 mbox/Maildir and its own dbox/mdbox formats, and should also be pretty
 fast, extensible, and portable.
 .
 This package contains the Dovecot main server and its command line utility.

dovecot-core-dbgsym: debug symbols for dovecot-core
dovecot-dev: secure POP3/IMAP server - header files

 Dovecot is a mail server whose major goals are security and extreme
 reliability. It tries very hard to handle all error conditions and verify
 that all data is valid, making it nearly impossible to crash. It supports
 mbox/Maildir and its own dbox/mdbox formats, and should also be pretty
 fast, extensible, and portable.
 .
 This package contains header files needed to compile plugins for the Dovecot
 mail server.

dovecot-gssapi: secure POP3/IMAP server - GSSAPI support

 Dovecot is a mail server whose major goals are security and extreme
 reliability. It tries very hard to handle all error conditions and verify
 that all data is valid, making it nearly impossible to crash. It supports
 mbox/Maildir and its own dbox/mdbox formats, and should also be pretty
 fast, extensible, and portable.
 .
 This package provides GSSAPI authentication support for Dovecot.

dovecot-gssapi-dbgsym: debug symbols for dovecot-gssapi
dovecot-imapd: secure POP3/IMAP server - IMAP daemon

 Dovecot is a mail server whose major goals are security and extreme
 reliability. It tries very hard to handle all error conditions and verify
 that all data is valid, making it nearly impossible to crash. It supports
 mbox/Maildir and its own dbox/mdbox formats, and should also be pretty
 fast, extensible, and portable.
 .
 This package contains the Dovecot IMAP server.

dovecot-imapd-dbgsym: debug symbols for dovecot-imapd
dovecot-ldap: secure POP3/IMAP server - LDAP support

 Dovecot is a mail server whose major goals are security and extreme
 reliability. It tries very hard to handle all error conditions and verify
 that all data is valid, making it nearly impossible to crash. It supports
 mbox/Maildir and its own dbox/mdbox formats, and should also be pretty
 fast, extensible, and portable.
 .
 This package provides LDAP support for Dovecot.

dovecot-ldap-dbgsym: debug symbols for dovecot-ldap
dovecot-lmtpd: secure POP3/IMAP server - LMTP server

 Dovecot is a mail server whose major goals are security and extreme
 reliability. It tries very hard to handle all error conditions and verify
 that all data is valid, making it nearly impossible to crash. It supports
 mbox/Maildir and its own dbox/mdbox formats, and should also be pretty
 fast, extensible, and portable.
 .
 This package contains the Dovecot LMTP server.

dovecot-lmtpd-dbgsym: debug symbols for dovecot-lmtpd
dovecot-lucene: secure POP3/IMAP server - Lucene support

 Dovecot is a mail server whose major goals are security and extreme
 reliability. It tries very hard to handle all error conditions and verify
 that all data is valid, making it nearly impossible to crash. It supports
 mbox/Maildir and its own dbox/mdbox formats, and should also be pretty
 fast, extensible, and portable.
 .
 This package provides Lucene full text search support for Dovecot.

dovecot-lucene-dbgsym: debug symbols for dovecot-lucene
dovecot-managesieved: secure POP3/IMAP server - ManageSieve server

 Dovecot is a mail server whose major goals are security and extreme
 reliability. It tries very hard to handle all error conditions and verify
 that all data is valid, making it nearly impossible to crash. It supports
 mbox/Maildir and its own dbox/mdbox formats, and should also be pretty
 fast, extensible, and portable.
 .
 This package contains the Dovecot ManageSieve server.

dovecot-managesieved-dbgsym: debug symbols for dovecot-managesieved
dovecot-mysql: secure POP3/IMAP server - MySQL support

 Dovecot is a mail server whose major goals are security and extreme
 reliability. It tries very hard to handle all error conditions and verify
 that all data is valid, making it nearly impossible to crash. It supports
 mbox/Maildir and its own dbox/mdbox formats, and should also be pretty
 fast, extensible, and portable.
 .
 This package provides MySQL support for Dovecot.

dovecot-mysql-dbgsym: debug symbols for dovecot-mysql
dovecot-pgsql: secure POP3/IMAP server - PostgreSQL support

 Dovecot is a mail server whose major goals are security and extreme
 reliability. It tries very hard to handle all error conditions and verify
 that all data is valid, making it nearly impossible to crash. It supports
 mbox/Maildir and its own dbox/mdbox formats, and should also be pretty
 fast, extensible, and portable.
 .
 This package provides PostgreSQL support for Dovecot.

dovecot-pgsql-dbgsym: debug symbols for dovecot-pgsql
dovecot-pop3d: secure POP3/IMAP server - POP3 daemon

 Dovecot is a mail server whose major goals are security and extreme
 reliability. It tries very hard to handle all error conditions and verify
 that all data is valid, making it nearly impossible to crash. It supports
 mbox/Maildir and its own dbox/mdbox formats, and should also be pretty
 fast, extensible, and portable.
 .
 This package contains the Dovecot POP3 server.

dovecot-pop3d-dbgsym: debug symbols for dovecot-pop3d
dovecot-sieve: secure POP3/IMAP server - Sieve filters support

 Dovecot is a mail server whose major goals are security and extreme
 reliability. It tries very hard to handle all error conditions and verify
 that all data is valid, making it nearly impossible to crash. It supports
 mbox/Maildir and its own dbox/mdbox formats, and should also be pretty
 fast, extensible, and portable.
 .
 This package provides Sieve filters support for Dovecot.

dovecot-sieve-dbgsym: debug symbols for dovecot-sieve
dovecot-solr: secure POP3/IMAP server - Solr support

 Dovecot is a mail server whose major goals are security and extreme
 reliability. It tries very hard to handle all error conditions and verify
 that all data is valid, making it nearly impossible to crash. It supports
 mbox/Maildir and its own dbox/mdbox formats, and should also be pretty
 fast, extensible, and portable.
 .
 This package provides Solr full text search support for Dovecot.

dovecot-solr-dbgsym: debug symbols for dovecot-solr
dovecot-sqlite: secure POP3/IMAP server - SQLite support

 Dovecot is a mail server whose major goals are security and extreme
 reliability. It tries very hard to handle all error conditions and verify
 that all data is valid, making it nearly impossible to crash. It supports
 mbox/Maildir and its own dbox/mdbox formats, and should also be pretty
 fast, extensible, and portable.
 .
 This package provides SQLite support for Dovecot.

dovecot-sqlite-dbgsym: debug symbols for dovecot-sqlite
mail-stack-delivery: transitional package

 This is a transitional package. It can safely be removed.
 .
 If you had formerly set up dovecot via mail-stack-delivery this package will
 still have the configuration /etc/dovecot/conf.d/99-mail-stack-delivery.conf
 associated to it which will be removed if you purge the package.