Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
- ok'ed recht@
- Addresses a few recent security issues:
http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=33723
http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=33733
Changes to the Cyrus IMAP Server since 2.2.10
* Fix possible single byte overflow in mailbox handling code.
* Fix possible single byte overflows in the imapd annotate extension.
* Fix stack buffer overflows in fetchnews (exploitable by peer news
server), backend (exploitable by admin), and in imapd (exploitable
by users though only on platforms where a filename may be larger
than a mailbox name).
|
|
|
|
Patch by adrianp@.
While at it also make it build on OSX.
Changes to the Cyrus IMAP Server since 2.2.9
Fix 0 termination in mysasl_canon_user.
Check for imap magic plus buffer overflow in proxyd also (CAN-2004-1015).
Changes to the Cyrus IMAP Server since 2.2.8
Change ACLs correctly when renaming a user
Do not abandon std{in,out,err} file descriptors; syslog assumes it can
use stderr if syslogd isn't running.
Clean up imap magic plus to avoid buffer overrun (CAN-2004-1011)
Fix lack of bounds checking in PARTIAL and FETCH (CAN-2004-1012, CAN-2004-10
13)
Do not attempt to reuse a freed connection in lmtpproxyd.
Allow login without authentication with -N switch in proxyd.
Fix use of xrealloc and fold pointers in lmtpengine.
|
|
enable it via patches for just that one program.
|
|
to RFC 2822).
Patches forwarded by Jukka Salmi in PR 27239
Bump PKGVERSION to 4.
|
|
debugging Cyrus services.
Bump PKGREVISION.
|
|
fixed in the main Cyrus sources. Fix from <seb>.
|
|
This release corrects a minor issue found with the handling of Sieve
notifications in 2.2.7.
|
|
Noted by Jukka Salmi in private mail.
bump PKGREVISION to 1
|
|
Changes to the Cyrus IMAP Server since 2.2.6:
- Fix handling of PARTIAL command and partial body fetches
- A large number of portability fixes supplied by Albert Chin
- Added client_timeout option to control connect() timeouts
for proxy code
- Added popuseacl option
- Fix a number of issues with the quota -f tool
- Fix thread safety issue in saslserver()
- Fix possible stage file leak in append code
- Fix bugs in handling of MULTIAPPEND introduced in 2.2.3
- Fixed regression bug in Sieve vacation
|
|
Changes to the Cyrus IMAP Server since 2.2.5
- Fix a bug in the proxy code where a backend connection might get
closed twice
- Improved consistancy checking in chk_cyrus
- Fix segfault in APPEND code
- Fix a bug with an interaction between sieve and unixhierarchysep
- Fix a file descriptor leak in the quotadb code
- Fix a triggered assertation in service-thread services
- Add a number of internal consistancy checks to the skiplist code
- Allow mbpath to handle virtual domains
- Fix various MANAGESIEVE client authentication issues
- Other minor fixes
|
|
Changes to the Cyrus IMAP Server since 2.2.4
- Bug fixed in hash table code that could sometimes cause crashes with
the quotalegacy database
- Net-SNMP compatibility
- Significantly improved com_err detection
- Assorted minor NNTP improvements
- Assorted other minor bugfixes
|
|
- allow deletions in the middle of a hash_enumerate
- typo
Posted by Jukka Salmi on tech-pkg@.
While at it add a knob for changing cyrus' default idle method.
# CYRUS_IDLE
# use METHOD for IMAP IDLE
# METHOD is poll, idled or no
# Default: not defined
(Idea from FreeBSD)
Bump PKGREVISION to 2.
|
|
configure.in for completeness and for documentation purposes.
|
|
changes:
- Quota now uses the cyrusdb interface (quotalegacy by default).
- All incoming messages are now staged to disk before locking the
destination mailbox (locks are no longer held during a network read).
- Fixed off-by-one error in fetchnews (articles are no longer skipped).
nntpd now uses the Followup-To: header (if exists) instead of the
Newsgroups: header when constructing post address(es) and adds them to
the Reply-To: header instead of the To: header.
- Added berkeley_locks_max, berkeley_txns_max and berkeley_cachesize options.
- Added imapmagicplus option.
- Substantial work on afspts/ptloader canonicalization code
- Much improved LDAP ptloader code (no more internal OpenLDAP dependencies)
- Fixed a number of IPv6 related bugs
|
|
Patch provided from Cyrus's CVS by Jukka Salmi in PR pkg/25256.
Details: https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/cyrus/lib/auth_krb5.c.diff?r1=1.2&r2=1.3
|
|
IMAP (Internet Message Access Protocol) is an Internet standards-track
protocol for accessing messages (mail, bboards, news, etc). The Cyrus
IMAP server differs from other IMAP server implementations in that it
is generally intended to be run on "sealed" servers, where normal users
are not permitted to log in. The mailbox database is stored in parts of
the filesystem that are private to the Cyrus IMAP system. All user
access to mail is through the IMAP, POP3, or KPOP protocols.
|