summaryrefslogtreecommitdiff
path: root/mail
AgeCommit message (Collapse)AuthorFilesLines
2018-07-24Update alpine to 2.21.bsiegert3-22/+22
Patch (minus the mtest.c one) from Marco Beishuizen in PR pkg/53437. Additions include: - PC-Alpine: New configuration option "Aspell Dictionaries" allows a user to choose the dictionary used to spell check, in case the user communicates in more than one language. Examples of values for the variable are "en_US" or "de_DE", etc. Only the first 10 dictionaries are offered. - Unix-Alpine: Connect securely to a LDAP server on a secure port. Based on a contribution by Wang Kang. - Colors configured in Alpine are inherited in the composer. - When Alpine is compiled with password file and SMIME support the password file is encrypted using a private key/public certificate pair. If one such pair cannot be found, one will be created. - Alpine builds with any version of OpenSSL greater than or equal to 1.0.0c. This includes version 1.1.0. Alpine also builds with LibreSSL. - New SHORTSUBJECT, SHORTSUBJKEY and SHORTSUBJKEYINIT token for index format, which removes text in the SUBJECT between "[" and "]". - New SMARTTIME24 token for index screen. It is close to SMARTDATETIME but it differns in that it gives the time in which the message was sent for messages that are less than a week old. it uses a 24 hour format. - Alpine will include attachments when forwarding some multipart/alternative messages for which it did not use to include attachments. - New configuration option alternate-reply-menu which adds more ways to control features and variables when you start to reply to a message. - Added support for RFC 2971 - IMAP ID extension. - Add configuration ignore-size-changes that allows users to ignore errors in the computation of the size of a message from defective servers. - SMIME: Upgrade the default signature digest from sha1 to sha-256, since clients such as Thunderbird do not validate signatures that use sha1 digest. - Add the configuration variable "default-directories", which is called default-directories, which is a variable saves a list of directories that are readily accessible for save or export of attachments. This makes it easier to save attachments in directories that are hard to navigate to, or that are accessed frequently. - When a filename is attached and its name is encoded, the save attachment command will offer to save the file in the encoded form. This might work for some users, but the save command will have a subcommand ^N to decode the file name and save the file with the decoded name. - The TAB key allows autocomplete in the Fcc field in the composer headers, as well as autocompletes automatically when only one possibility exists for the ^J attach command. - Add support for the "TYPE" and "VALUE" attributes of the html OL tag. - Ignore message from smtp server after a successful authentication challenge. - When a message is saved in the Form Letter folder, add the ability to save the role being used to compose such message so that settings such as the SMTP server set in the role can be used when sending such form message. Suggested and patched by Frank Doepper. - If SSLDIR is defined somehow, do not disable S/MIME if the SSLCERTSDIR is not found. - When Alpine sends an attachment, it will set the boundary attribute in lower case, as some SMTP servers, such as those of libero.it reject messages if the boundary attribute is in uppercase. - Add the ability to change the private key and certificates used to encrypt a password file in the SMIME setup configuration screen. - SMIME: The ctrl-E command that gives information on the certificate is only available for messages that have a signed or encrypted part. - SMIME: If a message contains a RFC822 attachment that is signed/decrypted add the ability to view its SMIME information. - SMIME: Certificate information in the S/MIME screen is available for certificates stored in a container. - SMIME: Offer the common name of the person, instead of the name of file containing the certificate, as the name to be displayed in the certificate management screen for certificate authorities. Suggested by Matthias Rieber. - SMIME: Management of several alternate name (SAN) certificates is improved. When importing a SAN certificate, also import a certificate for the filename, besides for the e-mail addresses in the certificate. Suggested by Matthias Rieber. - SMIME: add full year when displaying information about a certificate in the certificate management screen. Suggested by Matthias Rieber. - SMIME: sort certificates by some type of alphabetical order in the displayed name. - SMIME: Alpine will ask users if they wish to save S/MIME certificates included in signatures, when the option "Validate Using Certificate Store Only" is enabled. If the user does not wish to save it, validation will fail. - HTML: Add support for decoding entities in hexadecimal notation. Suggested by Tulipant Gergely. - The "#" command, when used as part of an aggregate operation will allow users to select the role used in either replying, forwarding or replying to the group of selected messages, Suggested by Hisashi T Fujinaka. - If the charset of a message can not be determined, use the value set in the unknown charset set value for its value. - Resizing setup screen will redraw screen. - Unix Alpine only. Experimental: If Alpine/Pico finds a UCS4 code in the width ambiguous zone, it will use other means to determine the width, such as call wcwidth. - Pico: Code reorganization in the search command to make it easier to add subcommands of the search command. - Pico: Search command can do a case sensitive match. Use the Ctrl-^ subcommand of the search command to bring this choice into view. - Pico: Add the ability to search for strings in the beginning or end of a line. Use the Ctrl-^ subcommand of the search command to bring this choice into view. - For a multipart/alternative message, the Take Address command will work on the part that is being read. - When sending a message, allow for 512 characters of consecutive non-white space before folding the subject line. - Make sure titlebar (the line at the top of the screen) always contains the name of the folder/newsgroup that is open, if this fits in the title. - The feature scramble-message-id will also scramble the name, version and operative system in the message-id header. Based on a contribution by Dennis Davis, which is itself based on a contribution by Mark Hills. - Change in logic in imap_set_password function to make Alpine ask if a user wants to save a password before reading the password file. - When exporting all parts of a message, if two attachments have the same name, do not overwrite a file more than once, but instead add a counter number to the filename to make a new file that does not exist in the file system. - Add the Control-R subcommand to the save command for attachments. This subcommand toggles if the saving will be done in binary mode for text attachments. When a user saves an attachment using binary mode it will be saved as it was sent, otherwise the attachment will be transformed to UTF-8 for further transformation through internal and user defined filters for saving. - Add command line argument -smimedir, which allows to specify the default path for a directory that contains the public, private, and ca directories. This is useful in case a user has a backup of old certificates that cannot be installed in the ~/.alpine-smime dir. - Reimplementation of the code that allows the .pinerc file to be a symbolic link by Kyle George from tcpsoft.com to use realpath. - When saving an attachment, the "^T" command leads to a screen where the "A" command can be used to add a file. A directory can be added by pressing "^X" after the "A" command. Added after a suggestion by Stefan Goessling. - When saving an attachment, the ^Y and ^V commands allow a user to scroll through the history of directories used to save attachments, while preserving the given name of the file. Suggested by Peter Koellner. - SMIME: Turn off automatic signing and encrypting of a message when bouncing. Suggested after a discussion with Matthias Rieber. - When messages are selected, warn the user if a message that is not selected will be bounced, or if not all selected messages will be bounced. Suggested by Ulf-Dietrich Braumann. - The bounce command adds a subcommand to choose a role. - When selecting messages by number, the "." character can be used to specify the message on which the cursor is on. - When Alpine opens an attachment, it sometimes changes the extension of the file that is being opened and replaces it by another for the same mime type. If Alpine finds that the extension of the file corresponds with the mime type, according to the mime-types file, then it will keep it, and no substitution will be made. - Set no restrictions on the length of encoded subjects, but encode words in length of no more than 75 characters. Bugs that have been addressed include: - SMIME: Crash when a certificate has an invalid date of validity. Also Alpine will use the function ASN1_TIME_print to determine the date of validity. Reported by Ben Stienstra. - SMIME: Crash when attempting to unlock the password file and an incorrect password is entered. - SMIME: Crash when checking the signature of a message that contains a RFC822 attached message. Reported by Holger Trapp and Bjorn Krellner. - SMIME: Cancelling entering password to unlock key will not reprompt. - SMIME: fix a bug that did not allow users to transfer certificates to remote containers. Reported by Matthias Rieber. - SMIME: certificates included in messages were not being transferred to a remote container. - SMIME: Crash if public certificates are located in an inaccessible remote server and the private key is not available. - SMIME: Alpine does not remove temporary files created when adding a CA certificate to a container. Reported by Holger Trapp. - SMIME: When reading a local certificate, Alpine converts the name of the certificate to lowercase, which may make Alpine not be able to read such certificate. Reported by Dennis Davis. - SMIME: If the option "Remember S/MIME Passphrase" is disabled, then entering a password to read an encrypted message will make Alpine forget the key and not ask the password to unlock it again in case it is necessary to unlock it again. Reported by Ulf-Dietrich Braumann. - Alpine would use freed memory while trying to compute the color of the titlebar. This happened when trying to continue a postponed message. - Alpine failed to read an encrypted password file if too many passwords were saved in the password file. - When selecting messages while in Threaded Index Screen, some messages other than top of threads could appear in the index, making Alpine display messages "out of the screen." - The index format would be chopped at the position of an unrecognized token, instead of skipping the token as intended. - Work in progress: Avoid calling non-safe functions when Alpine receives a signal. See bug report https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=825772. - Crash when attempting to read a message after a bounce command. In order to produce a crash one needed to use the ^T subcommand and do a search in a LDAP directory. The crash is produced by changes to the text in the title bar. Reported by Heinrich Mislik in the Alpine-info list. - HTML messages that contain UTF-8 may wrap at the wrong position, making Alpine not display the correct character at the position that wrapping is done. Reported by Wang Kang. - Pico: Searching for a string that is too long causes Pico to crash in the next search. - Fix vulnerability in regex library. This only affects those who use this library, such as the windows version of Alpine. See http://www.kb.cert.org/vuls/id/695940">http://www.kb.cert.org/vuls/id/695940 for more details. - Alpine would not set include and lib paths for OpenSSL if this was installed in /usr/local/ssl. - If the .pinerc file is a symbolic link, Alpine might not write its contents when saving its configuration. - The _INIT_ token does not skip over non-alphanumeric characters in the name. Reported by Andreas Fehr. - When opening an INBOX folder in a context different from the incoming folders collection, from the command line, Alpine would open the INBOX folder from the incoming folders collection. - Mismatch in size of UCS and CELL caused a corruption in the content of a pointer, which made the speller in PC-Alpine get the content of a word incorrectly. - Skip testing openssl compatibility version when cross-compilation is detected. Fix contributed by Antti Seppalla - Alpine fails to remove temporary files used during a display or sending filter. Fix contributed by Phil Brooke. - When the index is in zoomed state, adding new messages to the selection would not show those messages if those messages are on top of the current message in the top of the screen. Reported by Ulf-Dietrich Braumann. In addition, when the user scrolls through the index, this scroll smoothly, without jumping pages. Reported by Holger Trapp. - Crash when reviewing history of saving attachments. - Crash when canceling a goto command on a local collection that has not been expanded and attempting to expand such collection. - Crash in Pico when forwarding messages that contain a direction mark at the end of a line. Reported by James Mingo. - Solve compilation errors when Alpine is built with Visual Studio 2015.
2018-07-24Don't remove top-level symlink to queue (as found in mail/qmail). Runschmonz3-12/+41
under Python 3. Honor mk.conf paths, users, and groups for qmail. Set LICENSE. Bump PKGREVISION.
2018-07-20Recursive revbump from textproc/icu-62.1ryoon22-39/+44
2018-07-18Mark packages that require C++03 (or the GNU variants) if they fail withjoerg3-6/+6
C++14 default language.
2018-07-17mutt: Update to version 1.10.1tron2-7/+7
This is a bug fix release, and includes a few important security fixes. It is strongly recommended that IMAP and POP users upgrade as soon as possible.
2018-07-16neomutt: update to 20180716.wiz2-7/+7
2018-07-16 Richard Russon <rich@flatcap.org> * Features - <check-stats> function * Bug Fixes - Lots
2018-07-16Update to 1.5111wen2-8/+9
Upstream changes: Version 1.5111: - Ensure that temp file is created in temp dir - Fix Makefile.PL warning - Fix deleting of inc during release process - Better fix for AutomatedTester warning Version 1.5110: - Updating META.yml Version 1.5109: - Switch to File::Slurper Version 1.5108: - Trying once again to fix the compile test on windows Version 1.5107: - Check in standard tests, including one that skips the compile check on Windows Version 1.5106: - Add standard tests - Detect mailboxes that contain a mix of newline types. Complain about it, but also allow the force option to continue processing. Thanks to Pali Rohár <pali.rohar@gmail.com> for the bug report. - Avoid OO interface to File::Temp, which in some versions and on some operating systems, deletes the file when it is closed. Thanks to Paul Howarth <paul@city-fan.org> for the bug report. https://rt.cpan.org/Public/Bug/Display.html?id=103835 - Fix compatibility issue with newer versions of perl, which remove "." from @INC. https://rt.cpan.org/Ticket/Display.html?id=121466
2018-07-14dovecot2-pigeonhole: updated to 0.5.2adam3-9/+10
v0.5.2: + Implement plugin for the a vendor-defined IMAP capability called "FILTER=SIEVE". It adds the ability to manually invoke Sieve filtering in IMAP. More information can be found in doc/plugins/imap_filter_sieve.txt. - The Sieve addess test caused an assertion panic for invalid addresses with UTF-8 codepoints in the localpart. Fixed by properly detecting invalid addresses with UTF-8 codepoints in the localpart and skipping these like other invalid addresses while iterating addresses for the address test. - Make the length of the subject header for the vacation response configurable and enforce the limit in UTF-8 codepoints rather than bytes. The subject header for a vacation response was statically truncated to 256 bytes, which is too limited for multi-byte UTF-8 characters. - Sieve editheader extension: Fix assertion panic occurring when it is used to manipulate a message header with a very large header field. - Properly abort execution of the sieve_discard script upon error. Before, the LDA Sieve plugin attempted to execute the sieve_discard script when an error occurs. This can lead to the message being lost. - Fix the interaction between quota and the sieve_discard script. When quota was used together with a sieve_discard script, the message delivery did not bounce when the quota was exceeded.
2018-07-14dovecot2: updated to 2.3.2.1adam4-12/+22
v2.3.2 still had a few unexpected bugs: - SSL/TLS servers may have crashed during client disconnection - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have sometimes assert-crashed. - v2.3.2: "make check" may have crashed with 32bit systems v2.3.2 is mainly a bugfix release. It contains all the changes in v2.2.36, as well as a bunch of other fixes (mainly for v2.3-only bugs). Binary packages are already in https://repo.dovecot.org/ * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE while opening /proc/self/io. This may still cause security problems if the process is ptrace()d at the same time. Instead, open it while still running as root. + doveadm: Added mailbox cache decision&remove commands. See doveadm-mailbox(1) man page for details. + doveadm: Added rebuild attachments command for rebuilding $HasAttachment or $HasNoAttachment flags for matching mails. See doveadm-rebuild(1) man page for details. + cassandra: Use fallback_consistency on more types of errors + lmtp proxy: Support outgoing SSL/TLS connections + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings. + submission: Add support for rawlog_dir + submission: Add submission_client_workarounds setting. + lua auth: Add password_verify() function and additional fields in auth request. - doveadm-server: TCP connections are hanging when there is a lot of network output. This especially caused hangs in dsync-replication. - Using multiple type=shared mdbox namespaces crashed - mail_fsync setting was ignored. It was always set to "optimized". - lua auth: Fix potential crash at deinit - SSL/TLS servers may have crashed if client disconnected during handshake. - SSL/TLS servers: Don't send extraneous certificates to client when alt certs are used. - lda, lmtp: Return-Path header without '<' may have assert-crashed. - lda, lmtp: Unencoded UTF-8 in email address headers may assert-crash - lda: -f parameter didn't allow empty/null/domainless address - lmtp, submission: Message size limit was hardcoded to 40 MB. Exceeding it caused the connection to get dropped during transfer. - lmtp: Fix potential crash when delivery fails at DATA stage - lmtp: login_greeting setting was ignored - Fix to work with OpenSSL v1.0.2f - systemd unit restrictions were too strict by default - Fix potential crashes when a lot of log output was produced - SMTP client may have assert-crashed when sending mail - IMAP COMPRESS: Send "end of compression" marker when disconnecting. - cassandra: Fix consistency=quorum to work - dsync: Lock file generation failed if home directory didn't exist - Snippet generation for HTML mails didn't ignore &entities inside blockquotes, producing strange looking snippets. - imapc: Fix assert-crash if getting disconnected and after reconnection all mails in the selected mailbox are gone. - pop3c: Handle unexpected server disconnections without assert-crash - fts: Fixes to indexing mails via virtual mailboxes. - fts: If mails contained NUL characters, the text around it wasn't indexed. - Obsolete dovecot.index.cache offsets were sometimes used. Trying to fetch a field that was just added to cache file may not have always found it.
2018-07-06Recursive revbump from audio/pulseaudioryoon2-3/+4
2018-07-04*: Move SUBST_STAGE from post-patch to pre-configurejperkin27-56/+56
Performing substitutions during post-patch breaks tools such as mkpatches, making it very difficult to regenerate correct patches after making changes, and often leading to substituted string replacements being committed.
2018-07-03neomutt: update to 20180622.wiz3-14/+10
2018-06-22 Richard Russon <rich@flatcap.org> * Features - Expand variables inside backticks - Honour SASL-IR IMAP capability in SASL PLAIN * Bug Fixes - Fix toggle-read - Do not truncate shell commands on ; or # - pager: index must be rebuilt on MUTT_REOPENED - Handle a BAD response in AUTH PLAIN w/o initial response - fcc_attach: Don't ask every time - Enlarge path buffers PATH_MAX (4096) - Move LSUB call from connection establishment to mailbox SELECTion * Translations - Update Chinese (Simplified): 100% - Update Czech: 100% - Update German: 100% - Update Lithuanian: 100% - Update Portuguese (Brazil): 100% - Update Slovak: 59% - Reduce duplication of messages * Code - Tidy up the mailbox API - Tidy up the header cache API - Tidy up the encryption API - Add doxygen docs for more functions - Refactor more structs to use STAILQ
2018-07-03extend PYTHON_VERSIONS_ for Python 3.7adam8-16/+16
2018-06-22Update to 0.53wen2-7/+7
Upstream changes: -- VERSION 0.53 -- 2018-05-27: Marc Bradshaw <marc@marcbradshaw.net> * Make tests less dependent on local resolver setup * Add thanks to Valimail
2018-06-22Update to 1.04wen2-7/+7
Upstream changes: 1.04 Sat Jun 09 18:20:28 2018 - fix docevot parser to disallow leading dot in dot-atom - fix generating and validating email addresses with empty user part - fix generating email address with leading or trailing dot in user part - try to parse invalid email addresses and mark them as invalid - when generating address do not escape an apostrophe character - fix formatting email addresses which contain nul bytes, TAB, LF or CR - fix formatting comments which contain nul bytes
2018-06-21Update to 2.21. From the changelog:schmonz2-7/+7
- Fixed crash bug in STARTTLS handling of loaded DH parameters. - Added $TLS_COMPAT flag to disable certain TLS (security) features for maximum compatibility with buggy clients.
2018-06-20Support emacs26ryoon1-2/+3
2018-06-19Update to 2.216wen2-7/+7
Upstream changes: 2.216 2018-06-06 11:47:52-04:00 America/New_York - no changes since v2.215 2.215 2018-05-04 16:21:28+10:00 Australia/Melbourne (TRIAL RELEASE) - do not re-fold folded lines (Marc Bradshaw)
2018-06-17notmuch: update to 0.27.wiz3-11/+32
Notmuch 0.27 (2018-06-13) ========================= General ------- Add support for thread:{} queries Queries of the form `thread:{foo} and thread:{bar}` match threads containing (possibly distinct) messages matching foo and bar. See `notmuch-search-terms(7)` for details. Command Line Interface ---------------------- Add the --full-scan option to `notmuch new` This option disables mtime based optimization of scanning for new mail. Add new --decrypt=stash option for `notmuch show` This facilitates a workflow for encrypted messages where message cleartext are indexed on first read, but the user's decryption key does not have to be available during message receipt. Documentation ------------- An initial manual for `notmuch-emacs` is now installed by default (in `info` format). Dependencies ------------ As of this release, support for versions of Xapian before 1.4.0 is deprecated, and may disappear in a future release of notmuch.
2018-06-07Update to 6.8ryoon2-7/+7
Changelog: * Mew now supports Emacs 24.3 or later only. * Supporting stunnel 5. * Supporting GnuPG 2.1.23 or later. The command name should be "gpg" instead of "gpg2". Put the following to your "~/.gnupg/gpg.conf". no-auto-key-retrieve auto-key-locate local * Using LibreOffice (soffice) on Unix by default
2018-06-04nmh: Add mhshow.marker, scan.curses and scan.highlighted to CONF_FILESleot1-2/+5
All of them were accidentally omitted during the nmh-1.6 update on Sep 2014 as part of PR pkg/49166, sorry! (spotted by reading mhshow(1) man page)
2018-06-02Oops, update PKG_SUGGESTED_OPTIONS as intended.schmonz1-2/+2
2018-06-02Update to 2.20. From the changelog:schmonz3-10/+18
- Added support for STARTTLS directly in the SMTP protocol. Adapted from contribution by John R. Levine. - Added support for "final ok" rules in mailrules plugin. - Added hook for debugging plugin invocation (set $MSG_DEBUG=1).
2018-06-01Update to 52.8.0ryoon2-235/+235
* Sync with mail/thunderbird-52.8.0
2018-06-01Update to 52.8.0ryoon2-8/+7
Changelog: #CVE-2018-5183: Backport critical security fixes in Skia #CVE-2018-5184: Full plaintext recovery in S/MIME via chosen-ciphertext attack #CVE-2018-5154: Use-after-free with SVG animations and clip paths #CVE-2018-5155: Use-after-free with SVG animations and text paths #CVE-2018-5159: Integer overflow and out-of-bounds write in Skia #CVE-2018-5161: Hang via malformed headers #CVE-2018-5162: Encrypted mail leaks plaintext through src attribute #CVE-2018-5170: Filename spoofing for external attachments #CVE-2018-5168: Lightweight themes can be installed without user interaction #CVE-2018-5174: Windows Defender SmartScreen UI runs with less secure behavior for downloaded files in Windows 10 April 2018 Update #CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension #CVE-2018-5185: Leaking plaintext through HTML forms #CVE-2018-5150: Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8, and Thunderbird 52.8
2018-05-28Remove vestiges of rejectutils patch, missed in previous.schmonz1-5/+1
2018-05-28Un-mention qmail-qfilter wrapper, no longer here.schmonz1-2/+2
2018-05-28Use SUBST_VARS shorthand.schmonz1-2/+2
2018-05-28Extract qmail-rejectutils to standalone package. Bump PKGREVISION.schmonz3-29/+5
2018-05-28Add and enable qmail-rejectutils.schmonz1-1/+2
2018-05-28Initial import of qmail-rejectutils, a set of standalone programs forschmonz4-0/+77
SMTP-rejecting messages according to multiple criteria without patching qmail-smtpd(8).
2018-05-26neomutt: update to 20180512.wiz3-11/+8
2018-05-12 Richard Russon <rich@flatcap.org> * Features - echo command - Add $browser_abbreviate_mailboxes - Add ~M pattern to match mime Content-Types - Add support for multipart/multilingual emails - Jump to a collapsed email - Add support for idn2 (IDNA2008) * Bug Fixes - Let mutt_ch_choose report conversion failure - minor IMAP string handling fixes * Translations - Chinese (Simplified) (100%) - Czech (100%) - German (100%) - Lithuanian (62%) - Portuguese (Brazil) (100%) * Coverity defects - match prototypes to their functions - make logic clearer - reduce scope of variables - fix coverity defects * Docs - development: analysis - development: easy tasks - development: roadmap * Code - start refactoring libconn - split out progress functions - split out window functions - split out terminal setting - convert MyVars to use TAILQ - split mutt_file_{lock,unlock} - Move IDN version string to mutt/idna.c - refactor: init_locale() - Eliminate static variable in mutt_file_dirname * Tidy - test int functions against 0 - rename lots of constants - rename lots of functions - sort lots of fields/definitions * Upstream - Increase account.user/login size to 128 - Fix comparison of flags with multiple bits set - Change mutt_error call in mutt_gpgme_set_sender() to dprint - Improve the error message when a signature is missing - pager specific "show incoming mailboxes list" macro - Improve gss debug printing of status_string - Remove trailing null count from gss_buffer_desc.length field - Add a comment in auth_gss about RFCs and null-termination - Change prompt string for $crypt_verify_sig
2018-05-23fetchmail: fix name of one licensewiz1-3/+2
2018-05-22dovecot2-pigeonhole: update to 0.5.1triaxx3-9/+9
Changes: v0.5.1 28-03-2018 Stephan Bosch <stephan@rename-it.nl> - Explicitly disallow UTF-8 in localpart in addresses parsed from Sieve script. - editheader extension: Corrected the stream position calculations performed while making the modified message available as a stream. Pigeonhole Sieve crashed in LMTP with an assertion panic when the Sieve editheader extension was used before the message was redirected. Experiments indicate that the problem occurred only with LMTP and that LDA is not affected. - fileinto extension: Fix assert panic occurring when fileinto is used without being listed in the require line, while the copy extension is listed there. This is a very old bug. - imapsieve plugin: Do not assert crash or log an error for messages that disappear concurrently while applying Sieve scripts. This event is now logged as a debug message. - Sieve extprograms plugin: Large output from "execute" command crashed delivery. Fixed buffering issue in code that handles output from the external program.
2018-05-22dovecot2: update to 2.3.1triaxx6-26/+21
Changes: * Submission server support improvements and bug fixes - Lots of bug fixes to submission server * API CHANGE: array_idx_modifiable will no longer allocate space - Particularly affects how you should check MODULE_CONTEXT result, or use REQUIRE_MODULE_CONTEXT. + mail_attachment_detection_options setting controls when $HasAttachment and $HasNoAttachment keywords are set for mails. + imap: Support fetching body snippets using FETCH (SNIPPET) or (SNIPPET (LAZY=FUZZY)) + fs-compress: Automatically detect whether input is compressed or not. Prefix the compression algorithm with "maybe-" to enable the detection, for example: "compress:maybe-gz:6:..." + Added settings to change dovecot.index* files' optimization behavior. See https://wiki2.dovecot.org/IndexFiles#Settings + Auth cache can now utilize auth workers to do password hash verification by setting auth_cache_verify_password_with_worker=yes. + Added charset_alias plugin. See https://wiki2.dovecot.org/Plugins/CharsetAlias + imap_logout_format and pop3_logout_format settings now support all of the generic variables (e.g. %{rip}, %{session}, etc.)
2018-05-22fetchmailconf: update to 6.3.26triaxx1-6/+5
Follow mail/fetchmail update
2018-05-22fetchmail: update to 6.3.26triaxx3-34/+22
* add licenses * remove kerberos conditional pre-configure rule (fixed in upstream) Changes: fetchmail-6.3.26 (released 2013-04-23, 26180 LoC): # NOTE THAT FETCHMAIL IS NO LONGER PUBLISHED THROUGH IBIBLIO. * They have stopped accepting submissions and consider themselves an archive. # CRITICAL BUG FIX for setups using "mimedecode": * The mimedecode feature failed to ship the last line of the body if it was encoded as quoted-printable and had a MIME soft line break in the very last line. Reported by Lars Hecking in June 2011. Bug introduced on 1998-03-20 when the mimedecode support was added by ESR before release 4.4.1 through code contributed by Henrik Storner. Workaround for older releases: do not use mimedecode feature. Earlier versions of this NEWS file claimed this bug fixed in fetchmail-6.3.23, but it was not. Fixes Launchpad Bug#1171818. fetchmail-6.3.25 (released 2013-03-18, 26149 LoC): # NOTE THAT FETCHMAIL IS NO LONGER PUBLISHED THROUGH IBIBLIO. * They have stopped accepting submissions and consider themselves an archive. # BUG FIXES * Fix a memory leak in out-of-memory error condition while handling plugins. Report and patch by John Beck (found with Parfait static code analyzer). * Fix a NULL pointer dereference in out-of-memory error condition while handling plugins. Report and patch by John Beck (found with Parfait static code analyzer). # CHANGES * Improved reporting when SSL/TLS X.509 certificate validation has failed, working around a not-so-recent swapping of two OpenSSL error codes, and a practical impossibility to distinguish broken certification chains from missing trust anchors (root certificates). * OpenSSL decoded errors are now reported through report(), rather than dumped to stderr, so that they should show up in logfiles and/or syslog. * The fetchmail manual page no longer claims that MD5 were the default OpenSSL hash format (for use with --sslfingerprint). Reported by Jakob Wilk, PARTIAL fix for Debian Bug#700266. * The fetchmail manual page now refers the user to --softbounce from the SMTP/ESMTP ERROR HANDLING section. Reported by Anton Shterenlikht. # WORKAROUNDS * Older systems that provide the older RFC-2553 implementation of getaddrinfo, rather than the current RFC-3493, and systems that do not provide this getaddrinfo() interface at all and thus use the replacement functions from libesmtp/getaddrinfo.?, might return EAI_NODATA when a host is registered in DNS as MX or similar, but without A or AAAA records. Handle this situation when checking for multidrop aliases and treat EAI_NODATA the same as EAI_NONAME, i. e. name cannot be resolved. The proper fix, however, is to upgrade the operating system. # TRANSLATION UPDATES [cs] Czech, by Petr Pisar [da] Danish, by Joe Hansen [de] German [eo] Esperanto, by Sian Mountbatten and Felipe Castro [fr] French, by Frédéric Marchal [ja] Japanese, by Takeshi Hamasaki [pl] Polish, by Jakub Bogusz [sv] Swedish, by Göran Uddeborg [vi] Vietnamese, by Trần Ngọc Quân
2018-05-21mail/postfix: update to 3.3.1taca4-11/+9
[An on-line version of this announcement will be available at http://www.postfix.org/announcements/postfix-3.3.1.html] Fixed in Postfix 3.3: * Postfix did not support running as a PID=1 process, which complicated Postfix deployment in containers. The "postfix start-fg" command will now run the Postfix master daemon as a PID=1 process if possible. Thanks for inputs from Andreas Schulze, Eray Aslan, and Viktor Dukhovni. * Segfault in the postconf(1) command after it could not open a Postfix database configuration file due to a file permission error (dereferencing a null pointer). Reported by Andreas Hasenack, fixed by Viktor Dukhovni. Fixed in Postfix 3.3, 3.2, 3.1, 3.0: * The luser_relay feature became a black hole, when the luser_relay parameter was set to a non-existent local address (i.e. mail disappeared silently). Reported by J?rgen Thomsen. * Missing error propagation in the tlsproxy(8) daemon could result in a segfault after TLS handshake error (dereferencing a 0xffff...ffff pointer). This daemon handles the TLS protocol when a non-whitelisted client sends a STARTTLS command to postscreen(8).
2018-05-20mutt: Update to version 1.10.0tron6-69/+18
This is a feature release. Changes since version 1.9.5: ! $reply_self is now respected for group-reply, even with $metoo unset. ! Enabled $imap_poll_timeout when $imap_idle is set. ! Added %R (number of read messages) expando for $status_format. + When $change_folder_next is set, the <change-folder> function mailbox suggestion will start at the next folder in your "mailboxes" list, instead of starting at the first folder in the list. + $new_mail_command specifies a command to run after a new message is received. + $pgp_default_key specifies the default key-pair to use for PGP operations. It will be used for both encryption and signing (unless $pgp_sign_as is set). See contrib/gpg.rc. ! $smime_default_key now specifies the default key-pair to use for both encryption and signing S/MIME operations. See contrib/smime.rc. + $smime_sign_as can be used to specify a sign-only key-pair for S/MIME operations. - $pgp_self_encrypt_as is now deprecated, and is an alias for $pgp_default_key. $smime_self_encrypt_as is also deprecated, and is an alias for $smime_default_key. ! $pgp_self_encrypt and $smime_self_encrypt now default to set. This makes setting $pgp_default_key or $smime_default_key all that is required to enable self-encryption (for both classic and GPGME mode). + The <history-search> function (default: ^R) will search history based on the text currently typed in. That is, type the search string first, then hit ^R. + The $abort_noattach quadoption controls whether to abort sending a message that matches $abort_noattach_regexp and has no attachments. + Mutt can now be configured --with-idn2. This requires the libidn1 compatibility layer present in libidn2 v2.0.0 or greater. + Unsetting $browser_abbreviate_mailboxes turns off '=' and '~' shortcuts for mailbox names in the browser mailbox list. ! $sort_browser now has 'count' and 'unread' options. + <error-history> will display the last $error_history count of error/informational messages generated. + The ~M pattern matches content-type headers. Note that this pattern may be slow because it reads each message in. + The "echo" command can be used to display a message, for instance when running a macro or sourcing a file.
2018-05-20mail/roundcube-plugin-password: fix interpretertaca1-2/+4
* Replace interpreter of perl script. * Do not set REPLACE_PYTHON but add to it. Bump PKGREVISION.
2018-05-20mail/roundcube-plugin-zipdownload: Fix PLISTtaca1-1/+5
Fix PLIST after update to 1.3.6.
2018-05-20mail/roundcube-plugin-password: Fix PLISTtaca1-1/+8
Fix PLIST after update to 1.3.6.
2018-05-19Update to new external pymsgauth-filter patch. The command name hasschmonz5-92/+14
changed, and a new environment variable can be set so that users who haven't configured pymsgauth can have their messages passed through (unchanged). Bump PKGREVISION.
2018-05-17Update to 2.15. From the changelog:schmonz2-7/+7
- Added support for "and" lines to mailrules plugin. - Modified rbl plugin to log all responses in a single line. - Fixed minor memory leak in the rbl plugin.
2018-05-17evolution-exchange: Fix build against current libical API.jperkin4-1/+121
2018-05-16mail/rspamd: Update to 1.7.4.fhajny5-26/+27
* [Conf] Major stock config updates: - Workers are now specified in a new format worker "type" { ... } - Enable fuzzy worker to simplify local fuzzy storages configuration - Bind all workers to localhost by default to avoid security flaws * [Conf] Make more sane fuzzy_check default settings * [CritFix] Fix ucl escape for bad symbols * [Feature] Add failure symbol for AV module * [Feature] Add lazy expiration mode for new classifier schema * [Feature] Add preliminary version of maps stats plugin * [Feature] Allow to block fuzzy requests from specific networks * [Feature] Allow to change `expire` of live statistics * [Feature] Distinguish AV failure from clean result * [Feature] Further improvements of language detector by using khash * [Feature] Further optimization of the lang_detection * [Feature] Implement cluster-aware bayes expiry * [Feature] Implement exclude patterns in rspamc * [Feature] Implement glob maps in addition to regexp maps * [Feature] Implement map statistics function for lua API * [Feature] Implement stop symbols for Clickhouse collection * [Feature] Support recipients separated by commas * [Feature] Try harder to upload scripts to the Redis server * [Feature] Upgrade t1ha distribution * [Feature] use_domain_sign_inbound * [Feature] Use scores from maps if `symbols_set` is not defined * [Fix] Add resolving version of radix map helper * [Fix] Check URL before adding implicit prefix * [Fix] Do not check pid/state when using PRNG * [Fix] Fix CentOS logrotate script for systemd * [Fix] Fix slash + dot in urls * [Fix] Fix systemd version of the logrotate script * [Fix] Propagate key when import implicit array from Lua * [Fix] Strip spaces from map keys and values * [Fix] Try to fix a specific case when processing milter protocol * [Fix] Try to fix crash when a tcp connection cannot be set * [Fix] Typo use_domain_local --> use_domain_sign_local * [Fix] Various fixes to once_received module * [Project] Store hits counters for map elements
2018-05-16evolution: Fix build against current libical API.jperkin15-10/+330
2018-05-16roundcube-plugin-zipdownload: update distinfo for 1.3.6triaxx1-5/+5
2018-05-16roundcube-plugin-password: update distinfo for 1.3.6triaxx1-5/+5
2018-05-16roundcube-plugin-enigma: update distinfo for 1.3.6triaxx3-7/+64