summaryrefslogtreecommitdiff
path: root/mail
AgeCommit message (Collapse)AuthorFilesLines
2016-12-25Update exim to 4.88wiedi3-17/+17
Security update to address CVE-2016-9963 Exim version 4.88 ----------------- JH/01 Use SIZE on MAIL FROM in a cutthrough connection, if the destination supports it and a size is available (ie. the sending peer gave us one). JH/02 The obsolete acl condition "demime" is removed (finally, after ten years of being deprecated). The replacements are the ACLs acl_smtp_mime and acl_not_smtp_mime. JH/03 Upgrade security requirements imposed for hosts_try_dane: previously a downgraded non-dane trust-anchor for the TLS connection (CA-style) or even an in-clear connection were permitted. Now, if the host lookup was dnssec and dane was requested then the host is only used if the TLSA lookup succeeds and is dnssec. Further hosts (eg. lower priority MXs) will be tried (for hosts_try_dane though not for hosts_require_dane) if one fails this test. This means that a poorly-configured remote DNS will make it incommunicado; but it protects against a DNS-interception attack on it. JH/04 Bug 1810: make continued-use of an open smtp transport connection non-noisy when a race steals the message being considered. JH/05 If main configuration option tls_certificate is unset, generate a self-signed certificate for inbound TLS connections. JH/06 Bug 165: hide more cases of password exposure - this time in expansions in rewrites and routers. JH/07 Retire gnutls_require_mac et.al. These were nonfunctional since 4.80 and logged a warning sing 4.83; now they are a configuration file error. JH/08 Bug 1836: Fix crash in VRFY handling when handed an unqualified name (lacking @domain). Apply the same qualification processing as RCPT. JH/09 Bug 1804: Avoid writing msglog files when in -bh or -bhc mode. JH/10 Support ${sha256:} applied to a string (as well as the previous certificate). JH/11 Cutthrough: avoid using the callout hints db on a verify callout when a cutthrough deliver is pending, as we always want to make a connection. This also avoids re-routing the message when later placing the cutthrough connection after a verify cache hit. Do not update it with the verify result either. JH/12 Cutthrough: disable when verify option success_on_redirect is used, and when routing results in more than one destination address. JH/13 Cutthrough: expand transport dkim_domain option when testing for dkim signing (which inhibits the cutthrough capability). Previously only the presence of an option was tested; now an expansion evaluating as empty is permissible (obviously it should depend only on data available when the cutthrough connection is made). JH/14 Fix logging of errors under PIPELINING. Previously the log line giving the relevant preceding SMTP command did not note the pipelining mode. JH/15 Fix counting of empty lines in $body_linecount and $message_linecount. Previously they were not counted. JH/16 DANE: treat a TLSA lookup response having all non-TLSA RRs, the same as one having no matching records. Previously we deferred the message that needed the lookup. JH/17 Fakereject: previously logged as a norml message arrival "<="; now distinguished as "(=". JH/18 Bug 1867: make the fail_defer_domains option on a dnslookup router work for missing MX records. Previously it only worked for missing A records. JH/19 Bug 1850: support Radius libraries that return REJECT_RC. JH/20 Bug 1872: Ensure that acl_smtp_notquit is run when the connection drops after the data-go-ahead and data-ack. Patch from Jason Betts. JH/21 Bug 1846: Send DMARC forensic reports for reject and quaratine results, even for a "none" policy. Patch from Tony Meyer. JH/22 Fix continued use of a connection for further deliveries. If a port was specified by a router, it must also match for the delivery to be compatible. JH/23 Bug 1874: fix continued use of a connection for further deliveries. When one of the recipients of a message was unsuitable for the connection (has no matching addresses), we lost track of needing to mark it deferred. As a result mail would be lost. JH/24 Bug 1832: Log EHLO response on getting conn-close response for HELO. JH/25 Decoding ACL controls is now done using a binary search; the source code takes up less space and should be simpler to maintain. Merge the ACL condition decode tables also, with similar effect. JH/26 Fix problem with one_time used on a redirect router which returned the parent address unchanged. A retry would see the parent address marked as delivered, so not attempt the (identical) child. As a result mail would be lost. JH/27 Fix a possible security hole, wherein a process operating with the Exim UID can gain a root shell. Credit to http://www.halfdog.net/ for discovery and writeup. Ubuntu bug 1580454; no bug raised against Exim itself :( JH/28 Enable {spool,log} filesystem space and inode checks as default. Main config options check_{log,spool}_{inodes,space} are now 100 inodes, 10MB unless set otherwise in the configuration. JH/29 Fix the connection_reject log selector to apply to the connect ACL. Previously it only applied to the main-section connection policy options. JH/30 Bug 1897: fix callouts connection fallback from TLS to cleartext. PP/01 Changed default Diffie-Hellman parameters to be Exim-specific, created by me. Added RFC7919 DH primes as an alternative. PP/02 Unbreak build via pkg-config with new hash support when crypto headers are not in the system include path. JH/31 Fix longstanding bug with aborted TLS server connection handling. Under GnuTLS, when a session startup failed (eg because the client disconnected) Exim did stdio operations after fclose. This was exposed by a recent change which nulled out the file handle after the fclose. JH/32 Bug 1909: Fix OCSP proof verification for cases where the proof is signed directly by the cert-signing cert, rather than an intermediate OCSP-signing cert. This is the model used by LetsEncrypt. JH/33 Bug 1914: Ensure socket is nonblocking before draining after SMTP QUIT. HS/01 Fix leak in verify callout under GnuTLS, about 3MB per recipient on an incoming connection. HS/02 Bug 1802: Do not half-close the connection after sending a request to rspamd. HS/03 Use "auto" as the default EC curve parameter. For OpenSSL < 1.0.2 fallback to "prime256v1". JH/34 SECURITY: Use proper copy of DATA command in error message. Could leak key material. Remotely explaoitable. CVE-2016-9963. ok wiz@
2016-12-23Pointers do not have an order relative to 0, don't try to use that.joerg4-2/+30
2016-12-22 Sendmail milter for amavisd-new.kivinen1-1/+2
2016-12-21 Sendmail milter for amavisd-new.kivinen6-0/+69
2016-12-16Update SMF manifest and add methods based on whats in illumos.hans5-41/+602
This will create two sendmail service instances, :mta and :msp, to start the two sendmail instances that are usually required. The :mta instance optionally depends on spamassassin and spamass-milter.
2016-12-16Add SMF manifest and method.hans6-3/+297
2016-12-16Add option for security/gnupg21 support.hans1-3/+6
2016-12-15Update to 1.2.1. From the changelog:schmonz6-44/+32
- The 'isync' compatibility wrapper is now deprecated. - An IMAP Path/NAMESPACE rooted in INBOX won't be handled specially any more. This means that some Patterns may need adjustment. - The default output is a lot less verbose now. The meanings of the -V and -D options changed significantly. - The SSL/TLS configuration has been re-designed. SSL is now explicitly enabled or disabled - "use SSL if available" is gone. Notice: Tunnels are assumed to be secure and thus default to no SSL. - Support for SASL (flexible authentication) has been added. - Support for Windows file systems has been added. - Support for compressed data transfer has been added. - Folder deletions can be propagated now.
2016-12-15Add SHA512 digests for remaining patches.schmonz1-1/+5
2016-12-15Add SHA512 digests for some patches.schmonz1-1/+5
2016-12-14Changes 2.2.27:adam5-18/+31
* dovecot.list.index.log rotation sizes/times were changed so that the .log file stays smaller and .log.2 is deleted sooner. + Added mail_crypt plugin that allows encryption of stored emails. See http://wiki2.dovecot.org/Plugins/MailCrypt + stats: Global stats can be sent to Carbon server by setting stats_carbon_server=ip:port + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't send ID/XCLIENT + Added generic hash modifier for %variables: %{<hash algorithm>;rounds=<n>,truncate=<bits>,salt=s>:field} Hash algorithm is any of the supported ones, e.g. md5, sha1, sha256. Also "pkcs5" is supported using SHA256. For example: %{sha256:user} or %{md5;truncate=32:user}. + Added support for SHA3-256 and SHA3-512 hashes. + config: Support DNS wildcards in local_name, e.g. local_name *.example.com { .. } matches anything.example.com, but not multiple.anything.example.com. + config: Support multiple names in local_name, e.g. local_name "1.example.com 2.example.com" { .. } - Fixed crash in auth process when auth-policy was configured and authentication was aborted/failed without a username set. - director: If two users had different tags but the same hash, the users may have been redirected to the wrong tag's hosts. - Index files may have been thought incorrectly lost, causing "Missing middle file seq=.." to be logged and index rebuild. This happened more easily with IMAP hibernation enabled. - Various fixes to restoring state correctly in un-hibernation. - dovecot.index files were commonly 4 bytes per email too large. This is because 3 bytes per email were being wasted that could have been used for IMAP keywords. - Various fixes to handle dovecot.list.index corruption better. - lib-fts: Fixed assert-crash in address tokenizer with specific input. - Fixed assert-crash in HTML to text parsing with specific input (e.g. for FTS indexing or snippet generation) - doveadm sync -1: Fixed handling mailbox GUID conflicts. - sdbox, mdbox: Perform full index rebuild if corruption is detected inside lib-index, which runs index fsck. - quota: Don't skip quota checks when moving mails between different quota roots. - search: Multiple sequence sets or UID sets in search parameters weren't handled correctly. They were incorrectly merged together.
2016-12-12Add patch to fix RFC976 "From_ lines" issuewiedi3-3/+29
2016-12-12Updated notmuch to 0.23.3.wiz2-7/+7
Notmuch 0.23.3 (2016-11-27) =========================== Command Line Interface ---------------------- Treat disappearing files during notmuch new as non-fatal. Test Suite ---------- Fix incompatibility (related to signature size) with gnupg 2.1.16.
2016-12-12Revert "Specify readline requirement on 30 packages"wiz2-4/+2
Many of these definitely do not depend on readline. So there must be a different underlying problem, and that should be tracked down instead of papering over it.
2016-12-07fix int type on SunOSwiedi1-1/+3
2016-12-07c99 fixes SunOSwiedi1-1/+2
2016-12-06adjust patch: everyone wants paths.hwiedi3-7/+7
2016-12-05Re-add checksum for "patch-1.7.1.rr.compressed.gz"tron1-1/+5
2016-12-05Update roundcube-plugin-zipdownload to 1.2.3.taca2-6/+8
* Add is_IS locale support.
2016-12-05Update roundcube-plugin-password to 1.2.3.taca2-6/+7
* Add is_IS locale support.
2016-12-05roundcube-plugin-enigma to 1.2.3.taca3-7/+11
pkgsrc changes: * Add dependency to security/pear-Crypt_GPG. other changes: * Add eu_EU and sq_AL locale. RELEASE 1.2.3 * Enigma: Fix bug where last records on keys list were hidden (#5461) * Enigma: Fix key search with keyword containing non-ascii characters (#5459)
2016-12-05Update roundcube to 1.2.3, including security fix.taca4-13/+21
pkgsrc changes: * Drop dependency to pear-Mail_mimeDecode. * Update dependency. Other changes: * Add is_IS, ku_IQ and sq_AL locale support. RELEASE 1.2.3 * Searching in both contacts and groups when LDAP addressbook with group_filters option is used * Fix vulnerability in handling of mail()'s 5th argument * Fix To: header encoding in mail sent with mail() method (#5475) * Fix flickering of header topline in min-mode (#5426) * Fix bug where folders list would scroll to top when clicking on subscription checkbox (#5447) * Fix decoding of GB2312/GBK text when iconv is not installed (#5448) * Fix regression where creation of default folders wasn't functioning without prefix (#5460) * Fix bug where deleting folders with subfolders could fail in some cases (#5466) * Fix bug where IMAP password could be exposed via error message (#5472) * Fix bug where it wasn't possible to store more that 2MB objects in memcache/apc, Added memcache_max_allowed_packet and apc_max_allowed_packet settings (#5452) * Fix "Illegal string offset" warning in rcube::log_bug() on PHP 7.1 (#5508) * Fix storing "empty" values in rcube_cache/rcube_cache_shared (#5519) * Fix missing content check when image resize fails on attachment thumbnail generation (#5485) * Fix displaying attached images with wrong Content-Type specified (#5527)
2016-12-05Update "mutt" package to version 1.7.2:tron2-11/+7
This is a bug fix release, primarily fixing build issues with OpenSSL 1.1 and GPGME 1.8.
2016-12-04Recursive revbump from textproc/icu 58.1ryoon20-37/+40
2016-12-04Specify readline requirement on 30 packagesmarino2-2/+4
Solves: /usr/libexec/binutils225/elf/ld.gold: error: cannot find -lreadline The missing specification is obvious on DragonFly because there's no publically accessible version of readline in base.
2016-12-03Update to 45.5.1ryoon2-235/+235
* Sync with thunderbird-45.5.1
2016-12-03Update to 45.5.1ryoon2-7/+7
Changelog: 45.5.1: #CVE-2016-9079: Use-after-free in SVG Animation 45.5.0: #CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1 #CVE-2016-5294: Arbitrary target directory for result files of update process #CVE-2016-5297: Incorrect argument length checking in JavaScript #CVE-2016-9066: Integer overflow leading to a buffer overflow in nsScriptLoadHandler #CVE-2016-5291: Same-origin policy violation using local HTML file and saved shortcut file #CVE-2016-9074: Insufficient timing side-channel resistance in divSpoiler #CVE-2016-5290: Memory safety bugs fixed in Thunderbird 45.5
2016-12-01Make clamsmtp work when PKG_SYSCONFDIR is not PREFIX/etcnros1-1/+3
2016-12-01Fix weird CONFLICTS line.wiz1-2/+2
2016-11-28Updated thunderbird-enigmail to 1.9.6.1.wiz2-7/+7
This version fixes a bug on some Linux systems that makes Enigmail not find GnuPG (and thus renders Enigmail unusable).
2016-11-28Updated notmuch to 0.23.2.wiz2-8/+7
Notmuch 0.23.2 (2016-11-20) =========================== Emacs ----- Fix notmuch-interesting-buffer and notmuch-cycle-notmuch-buffers. notmuch-tree-mode and notmuch-message-mode buffers are now considered interesting by `notmuch-interesting-buffer` and `notmuch-cycle-notmuch-buffers`. Restore compatibility with Emacs 23. Notmuch support for Emacs 23 is now deprecated.
2016-11-28Updated neomutt to 20161126.wiz3-10/+11
2016-11-26 Richard Russon <rich@flatcap.org> * Features - Upstream adoption of compress - Multiple hcache backends and run-time selection - $forward_references includes References: header on forwards - Hooks: define hooks for startup and shutdown - Add $collapse_all to close threads automatically * Bug Fixes - Index in pager crash - Tag with multiple labels - Make sure gdbm's symbols are not resolved in QDBM's compatibility layer - Fix crash when doing collapse_all on an empty folder - Fix: crash when browsing empty dir - Initialize imap_authenticate's return value to something meaningful * Translations - Update German translation - Update Slovak translation - Update French translation - Add English (British) translation - Convert files to utf-8 - Mass tidy up of the translation messages * Docs - new-mail bug is fixed - add since date for features - expand example command options for compress - fix entries for beep and new-mail-command - add a version number to the generated vimrc - fix links in README - don't use smart quotes in manual examples - <escape> and \e means refers to both alt and escape key * Build - Travis: test messages - Add option to disable translation messages - Split hcache code into per-backend files - Doc/Makefile clean neomutt-syntax.vim - Improve discovery for the Berkeley Database - Fix nntp/notmuch conditionals - Implement mutt_strchrnul() - Rename vim-keybindings to vim-keys * Upstream - attach_format: add new %F placeholder - Compose: add operation to rename an attachment - Chain %d->%F->%f in the attachment menu - Move mbox close-append logic inside mbox_close_mailbox() - When $flag_safe is set, flagged messages cannot be deleted - Adds the '@' pattern modifier to limit matches to known aliases - Adds <mark-message> binding to create "hotkeys" for messages - Updated requirement on the C compiler - Fix mark-message translation and keybind menu - More openssl1.1 fixes: remove uses of X509->name in debugging. (closes #3870) - Don't close stderr when opening a tunnel. (closes #3726) - Minor resource and error logic cleanup in tunnel_socket_open() - Make sure that the output of X509_NAME_oneline is null-terminated
2016-11-20Update compressed mbox patch.joerg2-11/+8
2016-11-20Note that mail/dovecot is 1.2, which is obsolete.gdt1-0/+4
2016-11-17Update squirrelmail to 1.4.23pre14605, latest snapshot.taca3-23/+7
PHP 7.0 support should be improved, too. - Added new "smtp_helo_override" hook; allows plugins to override the HELO host sent to the SMTP server when sending messages - Added STARTTLS support for both IMAP and SMTP connections - Added PDO support for database connections, so no external database module needs to be installed
2016-11-16Updated thunderbird-enigmail to 1.9.6.wiz3-10/+10
Changes in 1.9.6 Make key importing more robust New variant of PGP/​MIME messages broken by MS-Exchang Better detection is decrypted message is displayed Changes in 1.9.5 Enigmail wizard fails with GnuPG installation Include AppData Forwarding an encrypted message results in empty body enigmail does not seem to parse last '=' in quoted-printable encoded encrypted/​signed parts select keys for Per-Recipient-Rules regression : all keys are unchecked
2016-11-15Fix DOTLOCK_GROUP. From J. Lewis Muir on pkgsrc-users.wiz1-2/+2
2016-11-15Update mail/msmtp to msmtp-1.6.6leot2-8/+7
Changes: 1.6.6 ----- This version fixes a memory leak and a double-free in msmtp_read_headers(). The double-free was triggered by read errors.
2016-11-14Updated neomutt to 20161104.wiz2-8/+7
2016-11-04 Richard Russon <rich@flatcap.org> * Bug Fixes - don't crash when the imap connection dies * Upstream - Add root-message function to jump to root message in thread. - Updated French translation. - Prevent an integer overflow in mutt_mktime() (closes #3880) - Fix pager segfault when lineInfo.chunks overflows. (closes #3888) - Perform charset conversion on text attachments when piping. (closes #3773) (see #3886) - Add a --disable-doc configuration option. - Make ncurses and ncursesw header checking the same. - Attempt to silence a clang range warning. (closes #3891) - Fixed issue from changeset 4da647a80c55. (closes #3892) - Define PATH_MAX, it's missing on the GNU Hurd. (closes #3815)
2016-11-13Update to 2.211wen2-8/+7
Upstream changes: 2.211 2016-11-12 09:39:09-05:00 America/New_York - fix a fencepost error in headers and header_names that led to a spurious undef in return and to a warning (thanks, Pali Roh獺r)
2016-11-12Bump BUILDLINK_ABI_DEPENDS since older dovecot2-pigeonhole dose not worktaca1-2/+2
with 2.2.26.0.
2016-11-12Add build problem on NetBSD 7.0_STABLE at least.taca3-6/+20
2016-11-12v0.4.16:adam3-11/+8
* Part of the Sieve extprograms implementation was moved to Dovecot, which means that this release depends on Dovecot v2.2.26+. * ManageSieve: The PUTSCRIPT command now allows uploading empty Sieve scripts. There was really no good reason to disallow doing that. + Sieve vnd.dovecot.report extension: + Added a Dovecot-Reporting-User field to the report body, which contains the e-mail address of the user sending the report. + Added support for configuring the "From:" address used in the report. + LDA sieve plugin: Implemented support for a "discard script" that is run when the message is going to be discarded. This allows doing something other than throwing the message away for good. + Sieve vnd.dovecot.environment extension: Added vnd.dovecot.config.* environment items. These environment items map to sieve_env_* settings from the plugin {} section in the configuration. Such values can of course also be returned from userdb. + Sieve vacation extension: Use the Microsoft X-Auto-Response-Suppress header to prevent unwanted responses from and to (older) Microsoft products. + ManageSieve: Added rawlog_dir setting to store ManageSieve traffic logs. This replaces at least partially the rawlog plugin (mimics similar IMAP/POP3 change). - doveadm sieve plugin: synchronization: Prevent setting file timestamps to unix epoch time. This occurred when Dovecot passed the timestamp as 'unknown' during synchronization. - Sieve exprograms plugin: Fixed spurious '+' sometimes returned at the end of socket-based program output. - imapsieve plugin: Fixed crash occurring in specific situations. - Performed various fixes based on static analysis and Clang warnings.
2016-11-12Changes 2.2.26:adam7-85/+16
* master: Removed hardcoded 511 backlog limit for listen(). The kernel should limit this as needed. * doveadm import: Source user is now initialized the same as target user. Added -U parameter to override the source user. * Mailbox names are no longer limited to 16 hierarchy levels. We'll check another way to make sure mailbox names can't grow larger than 4096 bytes. + Added a concept of "alternative usernames" by returning user_* extra field(s) in passdb. doveadm proxy list shows these alt usernames in "doveadm proxy list" output. "doveadm director&proxy kick" adds -f <passdb field> parameter. The alt usernames don't have to be unique, so this allows creation of user groups and kicking them in one command. + auth: passdb/userdb dict allows now %variables in key settings. + auth: If passdb returns noauthenticate=yes extra field, assume that it only set extra fields and authentication wasn't actually performed. + auth: passdb static now supports password={scheme} prefix. + auth, login_log_format_elements: Added %{local_name} variable, which expands to TLS SNI hostname if given. + imapc: Added imapc_max_line_length to limit maximum memory usage. + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic logs. This replaces at least partially the rawlog plugin. + dsync: Added dsync_features=empty-header-workaround setting. This makes incremental dsyncs work better for servers that randomly return empty headers for mails. When an empty header is seen for an existing mail, dsync assumes that it matches the local mail. + doveadm sync/backup: Added -I <max size> parameter to skip too large mails. + doveadm sync/backup: Fixed -t parameter and added -e for "end date". + doveadm mailbox metadata: Added -s parameter to allow accessing server metadata by using empty mailbox name. + Added "doveadm service status" and "doveadm process status" commands. + director: Added director_flush_socket. See http://wiki2.dovecot.org/Director#Flush_socket + doveadm director flush: Users are now moved only max 100 at a time to avoid load spikes. --max-parallel parameter overrides this. + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a warning if any lock is waited on or kept for this many milliseconds. - master process's listener socket was leaked to all child processes. This might have allowed untrusted processes to capture and prevent "doveadm service stop" comands from working. - login proxy: Fixed crash when outgoing SSL connections were hanging. - auth: userdb fields weren't passed to auth-workers, so %{userdb:*} from previous userdbs didn't work there. - auth: Each userdb lookup from cache reset its TTL. - auth: Fixed auth_bind=yes + sasl_bind=yes to work together - auth: Blocking userdb lookups reset extra fields set by previous userdbs. - auth: Cache keys didn't include %{passdb:*} and %{userdb:*} - auth-policy: Fixed crash due to using already-freed memory if policy lookup takes longer than auth request exists. - lib-auth: Unescape passdb/userdb extra fields. Mainly affected returning extra fields with LFs or TABs. - lmtp_user_concurrency_limit>0 setting was logging unnecessary anvil errors. - lmtp_user_concurrency_limit is now checked before quota check with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work. - lmtp: %{userdb:*} variables didn't work in mail_log_prefix - autoexpunge settings for mailboxes with wildcards didn't work when namespace prefix was non-empty. - Fixed writing >2GB to iostream-temp files (used by fs-compress, fs-metawrap, doveadm-http) - director: Ignore duplicates in director_servers setting. - director: Many fixes related to connection handshaking, user moving and error handling. - director: Don't break with shutdown_clients=no - zlib, IMAP BINARY: Fixed internal caching when accessing multiple newly created mails. They all had UID=0 and the next mail could have wrongly used the previously cached mail. - doveadm stats reset wasn't reseting all the stats. - auth_stats=yes: Don't update num_logins, since it doubles them when using with mail stats. - quota count: Fixed deadlocks when updating vsize header. - dict-quota: Fixed crashes happening due to memory corruption. - dict proxy: Fixed various timeout-related bugs. - doveadm proxying: Fixed -A and -u wildcard handling. - doveadm proxying: Fixed hangs and bugs related to printing. - imap: Fixed wrongly triggering assert-crash in client_check_command_hangs. - imap proxy: Don't send ID command pipelined with nopipelining=yes - imap-hibernate: Don't execute quota_over_script or last_login after un-hibernation. - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in one IP packet. - imap-hibernate: Fixed various failures when un-hibernating. - fts: fts_autoindex=yes was broken in 2.2.25 unless fts_autoindex_exclude settings existed. - fts-solr: Fixed searching multiple mailboxes (patch by x16a0) - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed a crash with certain emails. - pop3-migration + dbox: Various fixes related to POP3 UIDL optimization in 2.2.25. - pop3-migration: Fixed "truncated email header" workaround. v2.2.26 had a couple of nasty bugs left in it, so here's a fixup release. The version number is also a little bit weird, but had to be done this way (although 2.2.26.0.1 could have been another possibility). - Fixed some compiling issues. - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and multiple passdbs. - auth: Fixed crash when exporting to auth-worker passdb extra fields that had empty values. - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
2016-11-10Add patch to fix SA working with >=Net::DNS-1.01, taken from upstream.roy3-4/+21
2016-11-07Recursive bump for xapian shlib major bump.wiz3-4/+6
2016-11-06Update to 1.300030wen2-8/+7
Upstream changes: 1.300030 2016-10-03 18:33:57-04:00 America/New_York - no changes since 1.300029 1.300029 2016-07-17 15:49:18-04:00 America/New_York (TRIAL RELEASE) - bring localpart quoting more in line with RFC 821
2016-11-05Updated rspamd to 1.3.5.wiz2-7/+7
1.3.5: * [CritFix] Fix issue with finding of end of lines pointers * [Feature] Add DMARC_NA symbol * [Feature] Add R_DKIM_NA / R_SPF_NA / AUTH_NA symbols * [Feature] Add spamhaus DROP dnsbl * [Feature] Add termination callbacks for workers * [Feature] Add user-agent for rspamc * [Feature] Allow parsing of mailbox messages from the commandline * [Feature] Support excluding selected users from ratelimits * [Feature] Yield DMARC_DNSFAIL on lookup failure * [Fix] Banish table.maxn from Lua parts * [Fix] Do not use headers to calculate messages digests * [Fix] Fix absurdic scores for HFILTER_URL_ONLY * [Fix] Fix actrie patterns * [Fix] Fix format string * [Fix] Fix handling of '\0' in lua_tcp * [Fix] Fix issue with empty messages and dkim * [Fix] Fix min_learns option * [Fix] Fix options for SPF dnsfail symbol * [Fix] Fix processing of symbols when reject limit is reached * [Fix] Settings: fix `authenticated` parameter (#886) * [Fix] Try to avoid race condition when using rrd * [Fix] Use the correct macro to get the size of controller * [Fix] Fix build and tests on OpenBSD
2016-11-04Add support for FreeBSD 11 & 12 via FreeBSD ports.sevan3-15/+51
2016-11-02Add a dependency on p5-Mail-DKIM so that spamassassin can use it's DKIM tests.roy1-2/+3