-
dovecot (1:1.0.5-1ubuntu2.2) gutsy-security; urgency=low
* SECURITY UPDATE: mailboxes of other users could be read via symlinks.
* Add upstream-mail-group-fixes.dpatch: upstream fixes (CVE-2008-1199).
* Add upstream-invalid-password-fixes.dpatch: proactive upstream fixes
to avoid future issues in underlying passdb (CVE-2008-1218).
* References
http://dovecot.org/list/dovecot-news/2008-March/000060.html
http://dovecot.org/list/dovecot-news/2008-March/000064.html
-- Kees Cook <email address hidden> Mon, 24 Mar 2008 14:26:07 -0700
-
dovecot (1:1.0.5-1ubuntu2.1) gutsy-security; urgency=low
* SECURITY UPDATE: LDAP-authenticated users may accidentally shared
cached login when they have the same password.
* Add ldap_auth_cache.dpatch: upstream fixes, thanks to Fabio Tranchitella.
* References
http://dovecot.org/list/dovecot-news/2007-December/000057.html
CVE-2007-6598
-- Kees Cook <email address hidden> Wed, 09 Jan 2008 15:05:54 -0800
-
dovecot (1:1.0.5-1ubuntu2) gutsy; urgency=low
* Fix dovecot restart when removing -pop3d/-imapd packages (LP: #151650):
- debian/dovecot-{pop3d,imapd}.postrm: start dovecot.
* Restart dovecot when -pop3d/-imapd package are installed:
- debian/dovecot-{pop3d,imapd}.postinst: restart dovecot.
-- Mathias Gug <email address hidden> Thu, 11 Oct 2007 15:24:23 -0400
-
dovecot (1:1.0.5-1ubuntu1) gutsy; urgency=low
[Mathias Gug]
* Merge with Debian (LP: #149049); remaining changes:
- Use Snakeoil SSL certificate by default.
+ debian/control: Depend on ssl-cert
+ debian/patches/ssl-cert-snakeoil.dpatch: Change default SSL cert paths
to snakeoil.
+ debian/dovecot-common.postinst: Relax grep for SSL_* a bit.
- Fast TearDown:
+ debian/rules: Call dh_installinit in 'multiuser' mode.
+ debian/control: Depend on newer sysv-rc for this.
+ debian/dovecot-common.postinst: Remove stop script symlinks from rc0
and rc6 on upgrades. Needs to be kept until next LTS release.
- Add autopkgtest in debian/tests/.
[Soren Hansen]
* Based on work by Mathias Gug: Enable imap/pop3 protocols when installing
dovecot-imap/dovecot-pop3 package (LP: #146648):
- debian/dovecot-pop3d.postinst, debian/dovecot-imapd.postinst: add
imap,imaps/pop3,pop3s to protocols line in dovecot.conf (removing "none"
if it's there).
- debian/dovecot-pop3d.postrm, debian/dovecot-imapd.postrm: remove
imap,imaps/pop3,pop3s from protocols line in dovecot.conf (putting
"none" if last protocol is removed).
* debian/patches/exec_check_for_none.dpatch:
- Disable access(..., X_OK) check for protocols that are not going to be
started anyway.
* debian/patches/protocols_none_by_default.dpatch:
- Set "protocols = none" by default.
-- Soren Hansen <email address hidden> Mon, 08 Oct 2007 15:05:46 +0200
-
dovecot (1:1.0.3-3ubuntu1) gutsy; urgency=low
* Merge with Debian (LP: #136323); remaining changes:
- Use Snakeoil SSL certificate by default.
+ debian/control: Depend on ssl-cert
+ debian/patches/ssl-cert-snakeoil.dpatch: Change default SSL cert paths
to snakeoil.
+ debian/dovecot-common.postinst: Relax grep for SSL_* a bit.
- Fast TearDown:
+ debian/rules: Call dh_installinit in 'multiuser' mode.
+ debian/control: Depend on newer sysv-rc for this.
+ debian/dovecot-common.postinst: Remove stop script symlinks from rc0
and rc6 on upgrades. Needs to be kept until next LTS release.
- Add autopkgtest in debian/tests/.
dovecot (1:1.0.3-3) unstable; urgency=low
* debian/dovecot-common.init: don't use the init script name to locate the
configuration file because it is not reliable. If you really want to start
multiple servers, just copy the init script and use the optional default
file to override the variables. (Closes: #437228)
-- Soren Hansen <email address hidden> Fri, 31 Aug 2007 15:22:25 +0200
-
dovecot (1:1.0.3-2ubuntu1) gutsy; urgency=low
* Merge with Debian; remaining changes:
- Use Snakeoil SSL certificate by default.
+ debian/control: Depend on ssl-cert
+ debian/patches/ssl-cert-snakeoil.dpatch: Change default SSL cert paths
to snakeoil.
+ debian/dovecot-common.postinst: Relax grep for SSL_* a bit.
- Fast TearDown:
+ debian/rules: Call dh_installinit in 'multiuser' mode.
+ debian/control: Depend on newer sysv-rc for this.
+ debian/dovecot-common.postinst: Remove stop script symlinks from rc0
and rc6 on upgrades. Needs to be kept until next LTS release.
- Add autopkgtest in debian/tests/.
dovecot (1:1.0.3-2) unstable; urgency=low
* debian/rules: removed the --with-notify=inotify switch, it should be
detected automatically.
dovecot (1:1.0.3-1) unstable; urgency=low
* New upstream release. (Closes: #434038, #432601)
* This release doesn't build dbox support out-of-the-box. (Closes: #431615)
* dovecot-sieve: updated to the last hg's tip. (Closes: #434079)
* debian/dovecot-*.README.Debian: don't call /etc/init.d scripts directly.
(Closes: #431991)
* debian/dovecot-common.init: updated with patches from Tom Metro, thanks!
(Closes: #426480, #422674)
* debian/dovecot-common.postinst: fixed a missing variable DOMAINNAME.
(Closes: #425917)
* debian/rules: moved the init script to the level 24, after the ntpdate
one. (Closes: #432723)
* debian/patches/00list: added dovecot-drac, again. (Closes: #353039)
* debian/rules: build with inotify and epoll support. (Closes: #419281)
* debian/dovecot.1: added a simple manpage for dovecot. (Closes: #426702)
* debian/copyright: added copyright exceptions as suggested by Timo.
-- Matthias Klose <email address hidden> Mon, 13 Aug 2007 13:31:03 +0200
-
dovecot (1:1.0.3-0ubuntu1) gutsy; urgency=low
* New upstream version.
-- Matthias Klose <email address hidden> Wed, 01 Aug 2007 15:03:18 +0200
-
dovecot (1:1.0.0-1ubuntu1) gutsy; urgency=low
* Merged with Debian unstable; remaining Ubuntu changes:
- Use Snakeoil SSL certificate by default.
+ debian/control: Depend on ssl-cert
+ debian/patches/ssl-cert-snakeoil.dpatch: Change default SSL cert paths
to snakeoil.
+ debian/dovecot-common.postinst: Relax grep for SSL_* a bit.
- Fast TearDown:
+ debian/rules: Call dh_installinit in 'multiuser' mode.
+ debian/control: Depend on newer sysv-rc for this.
+ debian/dovecot-common.postinst: Remove stop script symlinks from rc0
and rc6 on upgrades. Needs to be kept until next LTS release.
- Add autopkgtest in debian/tests/.
* debian/control: Set Ubuntu maintainer.
dovecot (1:1.0.0-1) unstable; urgency=low
* New upstream release, the final 1.0.0. Bumped epoch, because we used the
wrong version scheming in the past and I think it is worth to do so now
that 1.0.0 has been released.
* debian/watch: updated.
* Rebuilt with a new glibc in unstable, now we have inotify support.
(Closes: #395306)
dovecot (1.0.rc31-1) unstable; urgency=low
* New upstream release.
dovecot (1.0.rc30-2) unstable; urgency=low
* debian/dovecot-common.init: check if /etc/inetd.conf exists before
calling sed on it. (Closes: #417299)
dovecot (1.0.rc30-1) unstable; urgency=low
* New upstream release.
*
dovecot (1.0.rc29-1) unstable; urgency=low
* New upstream release.
* debian/rules: ship convert-tool in dovecot-common. (Closes: #416909)
dovecot (1.0.rc28-1) unstable; urgency=low
* New upstream release.
dovecot (1.0.rc27-1) unstable; urgency=low
* New upstream release.
dovecot (1.0.rc26-4) unstable; urgency=low
* debian/dovecot-common.postinst: fixed a typo. (Closes: #414672)
dovecot (1.0.rc26-3) unstable; urgency=low
* debian/control: depends on ucf (>= 2.0020). (Closes: #414032)
* debian/dovecot-common.postinst: handles better chmod/chown on package
upgrade. (Closes: #414257)
dovecot (1.0.rc26-2) unstable; urgency=low
* debian/control:
+ dovecot-{imapd,pop3d}: depends on the same-source dovecot-common.
(Closes: #414032)
* debian/rules: fixed permission for dovecot.conf. (Closes: #413995)
dovecot (1.0.rc26-1) unstable; urgency=low
* New upstream release.
* Add support for ucf, thanks to Vincent Danjean for providing a full patch.
(Closes: #413081)
* debian/dovecot-common.init: create /var/run directories at start-up time.
(Closes: #376143)
dovecot (1.0.rc25-1) unstable; urgency=low
* New upstream release.
dovecot (1.0.rc24-1) unstable; urgency=low
* New upstream release.
dovecot (1.0.rc23-1) unstable; urgency=low
* New upstream release.
* debian/patches/documentation.dpatch, debian/patches/xfs_quotas.dpatch:
removed, applied upstream.
dovecot (1.0.rc22-2) UNRELEASED; urgency=low
* debian/watch: added.
dovecot (1.0.rc22-1) unstable; urgency=low
* New upstream release.
dovecot (1.0.rc21-1) unstable; urgency=low
* New upstream release.
dovecot (1.0.rc19-1) unstable; urgency=low
* New upstream release.
dovecot (1.0.rc18-2) unstable; urgency=low
* dovecot-sieve: updated to cvs version 1.0.1.
* debian/README.Debian: updated for the new setting mail_location, which
substitutes the old default_mail_env. (Closes: #408025)
dovecot (1.0.rc18-1) unstable; urgency=low
* New upstream release.
-- Martin Pitt <email address hidden> Fri, 27 Apr 2007 10:37:55 +0200
-
dovecot (1.0.rc17-1ubuntu2) feisty; urgency=low
[ Martin Pitt, edited lightly by Ian Jackson: ]
* Add debian/tests/: autopkgtest control file plus our current package-tests
test suite for security QA.
-- Ian Jackson <email address hidden> Thu, 22 Feb 2007 20:11:51 +0000
