Changes 2.2.30:

* auth: Use timing safe comparisons for everything related to
  passwords. It's unlikely that these could have been used for
  practical attacks, especially because Dovecot delays and flushes all
  failed authentications in 2 second intervals. Also it could have
  worked only when passwords were stored in plaintext in the passdb.
* master process sends SIGQUIT to all running children at shutdown,
  which instructs them to close all the socket listeners immediately.
  This way restarting Dovecot should no longer fail due to some
  processes keeping the listeners open for a long time.

+ auth: Add passdb { mechanisms=none } to match separate passdb lookup
+ auth: Add passdb { username_filter } to use passdb only if user
  matches the filter. See https://wiki2.dovecot.org/PasswordDatabase
+ dsync: Add dsync_commit_msgs_interval setting. It attempts to commit
  the transaction after saving this many new messages. Because of the
  way dsync works, it may not always be possible if mails are copied
  or UIDs need to change.
+ imapc: Support imapc_features=search without ESEARCH extension.
+ imapc: Add imapc_features=fetch-bodystructure to pass through remote
  server's FETCH BODY and BODYSTRUCTURE.
+ imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on the
  remote server.
+ passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
+ If dovecot.index.cache corruption is detected, reset only the one
  corrupted mail instead of the whole file.
+ doveadm mailbox status: Add "firstsaved" field.
+ director_flush_socket: Add old host's up/down and vhost count as parameters
- More fixes to automatically fix corruption in dovecot.list.index
- dsync-server: Fix support for dsync_features=empty-header-workaround
- imapc: Various bugfixes, including infinite loops on some errors
- IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
  enabled modseq tracking via CONDSTORE/QRESYNC.
- fts-lucene: Fix it to work again with mbox format
- Some internal error messages may have contained garbage in v2.2.29
- mail-crypt: Re-encrypt when copying/moving mails and per-mailbox keys
  are used. Otherwise the copied mails can't be opened.
- vpopmail: Fix compiling

4 files changed, 12 insertions, 10 deletions

diff --git a/mail/dovecot2/Makefile.common b/mail/dovecot2/Makefile.common
index a419df98740..be8471c254c 100644
--- a/mail/dovecot2/Makefile.common
+++ b/mail/dovecot2/Makefile.common
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.8 2017/05/15 12:31:10 jperkin Exp $
+# $NetBSD: Makefile.common,v 1.9 2017/05/31 11:04:37 adam Exp $
 #
 # when updating to a new release, update ABI depends in
 # the buildlink3.mk file as well, since the plugins' version
@@ -9,7 +9,7 @@
 # used by mail/dovecot2-mysql/Makefile
 # used by mail/dovecot2-pgsql/Makefile
 
-DISTNAME=	dovecot-2.2.29.1
+DISTNAME=	dovecot-2.2.30
 CATEGORIES=	mail
 MASTER_SITES=	https://www.dovecot.org/releases/2.2/
 
diff --git a/mail/dovecot2/PLIST b/mail/dovecot2/PLIST
index 1557840216e..52b36f451ff 100644
--- a/mail/dovecot2/PLIST
+++ b/mail/dovecot2/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.53 2017/04/13 01:59:08 taca Exp $
+@comment $NetBSD: PLIST,v 1.54 2017/05/31 11:04:37 adam Exp $
 bin/doveadm
 bin/doveconf
 bin/dsync
@@ -200,6 +200,7 @@ include/dovecot/imap-seqset.h
 include/dovecot/imap-settings.h
 include/dovecot/imap-state.h
 include/dovecot/imap-status.h
+include/dovecot/imap-sync-private.h
 include/dovecot/imap-sync.h
 include/dovecot/imap-url.h
 include/dovecot/imap-urlauth-backend.h
@@ -888,6 +889,7 @@ share/doc/dovecot/wiki/Plugins.QuotaClone.txt
 share/doc/dovecot/wiki/Plugins.Snarf.txt
 share/doc/dovecot/wiki/Plugins.Stats.txt
 share/doc/dovecot/wiki/Plugins.Trash.txt
+share/doc/dovecot/wiki/Plugins.VarExpandCrypt.txt
 share/doc/dovecot/wiki/Plugins.Virtual.txt
 share/doc/dovecot/wiki/Plugins.Welcome.txt
 share/doc/dovecot/wiki/Plugins.Zlib.txt
diff --git a/mail/dovecot2/buildlink3.mk b/mail/dovecot2/buildlink3.mk
index bc187e21ee7..2f5d29b5208 100644
--- a/mail/dovecot2/buildlink3.mk
+++ b/mail/dovecot2/buildlink3.mk
@@ -1,4 +1,4 @@
-# $NetBSD: buildlink3.mk,v 1.21 2017/03/18 07:14:46 adam Exp $
+# $NetBSD: buildlink3.mk,v 1.22 2017/05/31 11:04:37 adam Exp $
 
 BUILDLINK_TREE+=	dovecot
 
@@ -7,7 +7,7 @@ DOVECOT_BUILDLINK3_MK:=
 
 BUILDLINK_API_DEPENDS.dovecot+=		dovecot>=2.2.0
 # must match current package version for plugins to load
-BUILDLINK_ABI_DEPENDS.dovecot+=		dovecot>=2.2.28
+BUILDLINK_ABI_DEPENDS.dovecot+=		dovecot>=2.2.30
 BUILDLINK_PKGSRCDIR.dovecot?=		../../mail/dovecot2
 
 pkgbase:=	dovecot
diff --git a/mail/dovecot2/distinfo b/mail/dovecot2/distinfo
index 069a85ae797..ddb36184d14 100644
--- a/mail/dovecot2/distinfo
+++ b/mail/dovecot2/distinfo
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.72 2017/04/13 01:59:08 taca Exp $
+$NetBSD: distinfo,v 1.73 2017/05/31 11:04:37 adam Exp $
 
-SHA1 (dovecot-2.2.29.1.tar.gz) = b9fab821e50337919ac617f1bb9d72e9aa9e8778
-RMD160 (dovecot-2.2.29.1.tar.gz) = 3fcfb72df0debe90fe7b7bd7bb98e8bba210857d
-SHA512 (dovecot-2.2.29.1.tar.gz) = 1e5ea6080ebe7dd4afe6fcfe8e98ed6d2ad2735655a18cc96e439dd044ccc3a1a6a80428bc746b4d6250820895d6a62121562e97e4b46c8b1cf88a19443bc111
-Size (dovecot-2.2.29.1.tar.gz) = 5972119 bytes
+SHA1 (dovecot-2.2.30.tar.gz) = 6b8397cab7cfadcf9da43b2029c803ca4a0f1a3e
+RMD160 (dovecot-2.2.30.tar.gz) = 61079a5ddac582b3ae64902ab126e8632c5c0d18
+SHA512 (dovecot-2.2.30.tar.gz) = 31e4d5f3efa01a7975d8374558045599dcde271f9772598f3d1e08800f106bbb715ba6f41846e0aebd3ba73b79c2337b705dc3f35eb3cc98f0df557d5d4b953b
+Size (dovecot-2.2.30.tar.gz) = 6006654 bytes
 SHA1 (patch-aa) = ea185011f0c1ee3aa1ff528e61f6f356fe385666
 SHA1 (patch-ab) = d637a64feec8e4eafacda149cf0193aa1b70a054
 SHA1 (patch-ae) = 51d8cb998cc2ded8bfc767710e465b752c50e656