Pullup ticket #4265 - requested by taca

mail/dovecot2: security update

Revisions pulled up:
- mail/dovecot2/Makefile                                1.51,1.53 via patch
- mail/dovecot2/PLIST                                   1.28-1.29
- mail/dovecot2/distinfo                                1.39-1.40

---
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Tue Oct  8 13:52:47 UTC 2013

   Modified Files:
   	pkgsrc/mail/dovecot2: Makefile PLIST distinfo

   Log Message:
   Changes 2.2.6:
   * acl: If public/shared namespace has a shared subscriptions file for
     all users, don't list subscription entries that are not visible to
     the user accessing it.
   + doveadm: Added "auth lookup" command for doing passdb lookup.
   + login_log_format_elements: Added %{orig_user}, %{orig_username}
     and %{orig_domain} expanding to the username exactly as sent by
     the client (before any changes auth process made).
   + Added ssl_prefer_server_ciphers setting.
   + auth_verbose_passwords: Log the password also for unknown users.
   + Linux: Added optional support for SO_REUSEPORT with
     inet_listener { reuse_port=yes }
   - director: v2.2.5 changes caused "SYNC lost" errors
   - dsync: Many fixes and error handling improvements
   - doveadm -A: Don't waste CPU by doing a separate config lookup
     for each user
   - Long-running ssl-params process no longer prevents Dovecot restart
   - mbox: Fixed mailbox_list_index=yes to work correctly

---
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Wed Nov  6 14:20:58 UTC 2013

   Modified Files:
   	pkgsrc/mail/dovecot2: Makefile PLIST distinfo

   Log Message:
   Changes 2.2.7:
   * Some usage of passdb checkpassword could have been exploitable by
     local users. You may need to modify your setup to keep it working.
     See http://wiki2.dovecot.org/AuthDatabase/CheckPassword#Security
   + auth: Added ability to truncate values logged by
     auth_verbose_passwords (see 10-logging.conf comment)
   + mdbox: Added "mdbox_deleted" storage, which can be used to access
     messages with refcount=0. For example: doveadm import
     mdbox_deleted:~/mdbox "" mailbox inbox subject oops
   + ssl-params: Added ssl_dh_parameters_length setting.
   - master process was doing a hostname.domain lookup for each created
     process, which may have caused a lot of unnecessary DNS lookups.
   - dsync: Syncing over 100 messages at once caused problems in some
     situations, causing messages to get new UIDs.
   - fts-solr: Different Solr hosts for different users didn't work.

3 files changed, 12 insertions, 7 deletions

diff --git a/mail/dovecot2/Makefile b/mail/dovecot2/Makefile
index a1cff6f419e..b6a918bb47a 100644
--- a/mail/dovecot2/Makefile
+++ b/mail/dovecot2/Makefile
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.50 2013/08/15 09:42:41 adam Exp $
+# $NetBSD: Makefile,v 1.50.2.1 2013/12/08 11:27:56 tron Exp $
 
-DISTNAME=	dovecot-2.2.5
+DISTNAME=	dovecot-2.2.7
 CATEGORIES=	mail
 MASTER_SITES=	http://www.dovecot.org/releases/${PKGVERSION_NOREV:R}/
 
diff --git a/mail/dovecot2/PLIST b/mail/dovecot2/PLIST
index f5ef36ef5cb..8f48a3b819c 100644
--- a/mail/dovecot2/PLIST
+++ b/mail/dovecot2/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.27 2013/09/16 18:40:24 adam Exp $
+@comment $NetBSD: PLIST,v 1.27.2.1 2013/12/08 11:27:56 tron Exp $
 bin/doveadm
 bin/doveconf
 bin/dsync
@@ -112,9 +112,11 @@ include/dovecot/http-client-private.h
 include/dovecot/http-client.h
 include/dovecot/http-date.h
 include/dovecot/http-header-parser.h
+include/dovecot/http-header.h
 include/dovecot/http-message-parser.h
 include/dovecot/http-parser.h
 include/dovecot/http-request-parser.h
+include/dovecot/http-request.h
 include/dovecot/http-response-parser.h
 include/dovecot/http-response.h
 include/dovecot/http-transfer.h
@@ -133,6 +135,7 @@ include/dovecot/imap-fetch.h
 include/dovecot/imap-id.h
 include/dovecot/imap-list.h
 include/dovecot/imap-match.h
+include/dovecot/imap-metadata.h
 include/dovecot/imap-msgpart-url.h
 include/dovecot/imap-msgpart.h
 include/dovecot/imap-notify.h
@@ -197,6 +200,7 @@ include/dovecot/istream-chain.h
 include/dovecot/istream-concat.h
 include/dovecot/istream-crlf.h
 include/dovecot/istream-dot.h
+include/dovecot/istream-hash.h
 include/dovecot/istream-header-filter.h
 include/dovecot/istream-jsonstr.h
 include/dovecot/istream-mail.h
@@ -732,6 +736,7 @@ share/doc/dovecot/wiki/SharedMailboxes.Public.txt
 share/doc/dovecot/wiki/SharedMailboxes.Shared.txt
 share/doc/dovecot/wiki/SharedMailboxes.Symlinks.txt
 share/doc/dovecot/wiki/SharedMailboxes.txt
+share/doc/dovecot/wiki/SocketUnavailable.txt
 share/doc/dovecot/wiki/Statistics.txt
 share/doc/dovecot/wiki/SystemUsers.txt
 share/doc/dovecot/wiki/TestInstallation.txt
diff --git a/mail/dovecot2/distinfo b/mail/dovecot2/distinfo
index 24133de744f..15ec308047f 100644
--- a/mail/dovecot2/distinfo
+++ b/mail/dovecot2/distinfo
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.38 2013/08/15 09:42:41 adam Exp $
+$NetBSD: distinfo,v 1.38.2.1 2013/12/08 11:27:56 tron Exp $
 
-SHA1 (dovecot-2.2.5.tar.gz) = 12c976ec24a869d958f3b09c1a8803dda54fab86
-RMD160 (dovecot-2.2.5.tar.gz) = ca3c0140fbd04f6543ce423cb4bc0a97214127f6
-Size (dovecot-2.2.5.tar.gz) = 4356745 bytes
+SHA1 (dovecot-2.2.7.tar.gz) = e28eeef56909c991d0d549cef52d51be65d3f993
+RMD160 (dovecot-2.2.7.tar.gz) = b5f257d92ec7e2bc21cf222fbe12c7de10080bdf
+Size (dovecot-2.2.7.tar.gz) = 4509163 bytes
 SHA1 (patch-aa) = ea185011f0c1ee3aa1ff528e61f6f356fe385666
 SHA1 (patch-ab) = ce698e00729aeccbb7f3fa4ee9d037791fdd2d14
 SHA1 (patch-ac) = dc5db4870b14bf2424f0c957f5cf7f1a289fefe6