<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="36">
<package pkgid="aa8298fa5d398bea3d268670b8c5db0a245767d7" name="clusterssh" arch="noarch">
  <version epoch="0" ver="3.27" rel="1.1"/>
  <changelog author="Duncan Ferguson &lt;duncan_ferguson@users.sf.net&gt; - 3.0" date="1114430400">- Please see ChangeLog in documentation area</changelog>
  <changelog author="Duncan Ferguson &lt;duncan_ferguson@users.sf.net&gt; - 3.17.1-2" date="1125403200">- spec file tidyups</changelog>
  <changelog author="Duncan Ferguson &lt;duncan_ferguson@users.sf.net&gt; - 3.18.1-1" date="1133179200">- Updates and bugfixes to cssh
- Updates to man page
- Re-engineer spec file</changelog>
  <changelog author="Duncan Ferguson &lt;duncan_ferguson@users.sf.net&gt; - 3.18.2.10-1" date="1153137600">- Lots of amendments and fixes to clusterssh code
- Added icons and desktop file
- Submitted to Fedora Extras for review</changelog>
  <changelog author="Duncan Ferguson &lt;duncan_ferguson@users.sf.net&gt; - 3.18.2.10-2" date="1153224000">- Correct download URL (Source0)</changelog>
  <changelog author="Duncan Ferguson &lt;duncan_ferguson@users.sf.net&gt; - 3.19.1-1" date="1153742400">- Update Changelog, commit all branch changes and release</changelog>
</package>
<package pkgid="34ed783e35b250d4b21d257d74699a6c4ac0f464" name="clusterssh" arch="src">
  <version epoch="0" ver="3.27" rel="1.1"/>
  <changelog author="Duncan Ferguson &lt;duncan_ferguson@users.sf.net&gt; - 3.0" date="1114430400">- Please see ChangeLog in documentation area</changelog>
  <changelog author="Duncan Ferguson &lt;duncan_ferguson@users.sf.net&gt; - 3.17.1-2" date="1125403200">- spec file tidyups</changelog>
  <changelog author="Duncan Ferguson &lt;duncan_ferguson@users.sf.net&gt; - 3.18.1-1" date="1133179200">- Updates and bugfixes to cssh
- Updates to man page
- Re-engineer spec file</changelog>
  <changelog author="Duncan Ferguson &lt;duncan_ferguson@users.sf.net&gt; - 3.18.2.10-1" date="1153137600">- Lots of amendments and fixes to clusterssh code
- Added icons and desktop file
- Submitted to Fedora Extras for review</changelog>
  <changelog author="Duncan Ferguson &lt;duncan_ferguson@users.sf.net&gt; - 3.18.2.10-2" date="1153224000">- Correct download URL (Source0)</changelog>
  <changelog author="Duncan Ferguson &lt;duncan_ferguson@users.sf.net&gt; - 3.19.1-1" date="1153742400">- Update Changelog, commit all branch changes and release</changelog>
</package>
<package pkgid="ca6463b7a69dfa517bea6418152e07aded32f650" name="dovecot22" arch="src">
  <version epoch="0" ver="2.2.16" rel="35.1"/>
  <changelog author="mrueckert@suse.de" date="1409918400">- guard the new %pre/%post snippets against missing dovecot package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- no longer obsolete older packages. module packages require
  their base package with version. the main package has a conflicts
  on other providers of dovecot-implementation.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918404">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- update to version 2.2.14
  * lmtp: Delivered-To: header no longer contains &lt;&gt; around the
    email address.  Other MDAs don't have it either.
  * "Out of disk space" errors are now treated as temporary errors
    (not the same as "Out of disk quota").
  * replication plugin: Use replication only for users who have a
    non-empty mail_replica setting.
  + lmtp proxy: Log a line about each mail delivery.
  + Added login_source_ips setting. This can be used to set the
    source IP address round-robin from a pool of IPs (in case you
    run out of TCP ports).
  + Rawlog settings can use tcp:&lt;host&gt;:&lt;port&gt; as the path.
  + virtual plugin: Don't keep more than virtual_max_open_mailboxes
    (default 64) number of backend mailboxes open.
  + SSL/TLS compression can be disabled with
    ssl_options=no_compression
  + acl: Global ACL file now supports "quotes" around patterns.
  + Added last-login plugin to set user's last-login timestamp on
    login.
  + LDAP auth: Allow passdb credentials lookup also with
    auth_bind=yes
  - IMAP: MODSEQ was sent in FETCH reply even if CONDSTORE/QRESYNC
    wasn't enabled. This broke at least old Outlooks.
  - passdb static treated missing password field the same as an
    empty password field.
  - mdbox: Fixed potential infinite looping when scanning a broken
    mdbox file.
  - imap-login, pop3-login: Fixed potential crashes when client
    disconnected unexpectedly.
  - imap proxy: The connection was hanging in some usage patterns.
    This mainly affected older Outlooks.
  - lmtp proxy: The proxy sometimes delivered empty mails in error
    situations or potentially delivered truncated mails.
  - fts-lucene: If whitespace_chars was set, we may have ended up
    indexing some garbage words, growing the index size
    unnecessarily.
  - -c and -i parameters for dovecot/doveadm commands were ignored
    if the config socket was readable.
  - quota: Quota recalculation didn't include INBOX in some setups.
  - Mail headers were sometimes added to dovecot.index.cache in
    wrong order.  The main problem this caused was with dsync+imapc
    incremental syncing when the second sync thought the local
    mailbox had changed.
  - Fixed several race conditions with dovecot.index.cache handling
    that may have caused unnecessary "cache is corrupted" errors.
  - doveadm backup didn't notice if emails were missing from the
    middle of the destination mailbox. Now it deletes and resyncs
    the mailbox.
  - auth: If auth client listed userdb and disconnected before
    finishing, the auth worker process got stuck (and eventually
    all workers could get used up and requests would start
    failing).
- update dovecot pigeonhole to 0.4.3
  * Editheader extension: Made control characters allowed for
    editheader, except NUL. Before, this would cause a runtime
    error.
  + Upgraded Dovecot-specific Sieve "vnd.dovecot.duplicate"
    extension to match the new draft "duplicate" extension.
  - Fixed sieve_result_global_log_error to log only as i_info in
    administrator log (syslog) if executed from multiscript
    context.
  - Sieve redirect extension: Adjusted loop detection to show
    leniency to resent messages.
  - Sieve include extension: Fixed problem with handling of
    duplicate includes with different parameters :once or
    :optional.
  - Sieve spamtest/virustest extensions: Tests were erroneously
    performed against the original message. When used together with
    extprograms filter to add the spam headers, the changes were
    not being used by the spamtest and virustest extensions.
  - Deprecated Sieve notify extension: Fixed segfault problems in
    message string substitution.
  - ManageSieve: Fixed active link verification to handle redundant
    path slashes correctly.
  - Sieve vacation extension:
  - Fixed interaction of sieve_vacation_dont_check_recipient with
    sieve_vacation_send_from_recipient setting.
  - Fixed log message for discarded response.
  - Sieve extprograms plugin:
  - Forgot to disable the alarm() timeouts set for script
    execution.
  - Fixed fd leak and handling of output shutdown.
  - Fixed 'Bad filedescriptor' error occurring when disconnecting
    script client.
  - Made sure that programs are never forked with root
    privileges.</changelog>
  <changelog author="mrueckert@suse.de" date="1414324800">- update to version 2.2.15
  * Plugins can now print a banner comment in doveconf output
    (typically the plugin version)
  * Replication plugin now triggers low (instead of high) priority
    for mail copying operations.
  * IMAP/POP3/ManageSieve proxy: If destination server can't be
    connected to, retry connecting once per second up to the value
    of proxy_timeout. This allows quick restarts/upgrades on the
    backend server without returning login failures.
  * Internal passdb lookups (e.g. done by lmtp/doveadm proxy)
    wasn't returning failure in some situations where it should
    have (e.g. allow_nets mismatch)
  * LMTP uses mail_log_prefix now for logging mail deliveries
    instead of a hardcoded prefix. The non-delivery log prefix is
    still hardcoded though.
  + passdb allow_nets=local matches lookups that don't contain an
    IP address (internally done by Dovecot services)
  + Various debug logging and error logging improvements
  - Various race condition fixes to LAYOUT=index
  - v2.2.14 virtual plugin crashed in some situations
- added dovecot-2.2-pigeonhole-0.4.3_adapt_to_2.2.15.patch
  Adjusted to datastack-related changes in Dovecot lib-storage.
  Patch can be removed when we upgrade to pigeonhole 0.4.4</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="mrueckert@suse.de" date="1418644800">- update to dovecot-pigeonhole 0.4.6
  - After make distclean the distributed tarball would fail to
    recompile.  This causes problems for some distribution builds.
- changes in dovecot-pigeonhole 0.4.5
  + Added a Pigeonhole version banner to doveconf output. This way,
    future bug reports will also include Pigeonhole version
    information.
  - Fixed handling of implicit keep. Last version erroneously
    reported that implicit keep succeeded after an earlier failure,
    while it in fact had failed. Particularly occurred for mailbox
    quota errors.
  - Fixed segfault occurring on SunOS systems when there is no
    active script.
- changes in dovecot-pigeonhole 0.4.4
  * Added support for Japanese mail addresses with dots at
    non-standard places in localpart.
  * Changed handling of ENOSPACE into a normal temporary failure
    and added handling of ENOQUOTA as a user error.
  * Restructured result execution, so that all actions which
    involve mail storage are always committed before all others.
  + Implemented support for generic Sieve storages. Using
    alternative storages now also possible for
    sieve_before/sieve_after.
  + Implemented storage driver for retrieving Sieve scripts from
    LDAP. This currently cannot be used with ManageSieve.
  + Implemented sieve_redirect_envelope_from setting, which allows
    configuring the envelope sender of redirected messages.
  - Fixed handling of mail storage errors occurring while
    evaluating the input message.
  - managesieve-login:
  - Removed bogus ALERT response code returned for AUTHENTICATE
    command.
  - Fixed handling of invalid initial response argument to
    AUTHENTICATE command.
  - Fixed handling of stream errors in lexical scanner.
  - Fixed handling of SMTP errors. Permanent and temporary errors
    were mixed up.
  - Fixed several problems reported by CLang 3.4.
  - duplicate extension: Fixed erroneous compile error about
    conflicting tags when `:handle' argument was used last.
  - relational extension: Fixed error handling of `:value' match.
  - editheader extension: Fixed header unfolding and header
    iteration.
  - mailbox extension: Fixed the `:create' tag, which erroneously
    subscribed an existing folder.
  - extprograms plugin: Fixed handling of error codes.
  - doveadm-sieve plugin: Fixed several bugs. Synchronization of
    symbolic link in the file storage should now also work
    properly.
- drop dovecot-2.2-pigeonhole-0.4.3_adapt_to_2.2.15.patch:
  included in release
- enable ldap storage for sieve scripts</changelog>
  <changelog author="mrueckert@suse.de" date="1429790400">- update to 2.2.16
  * dbox: Resyncing (e.g. doveadm force-resync) no longer deletes
    dovecot.index.cache file. The cache file was rarely the problem
    so this just caused unnecessary slowness.
  * Mailbox name limits changed during mailbox creation: Each part
    of a hierarchical name (e.g. "x" or "y" in "x/y") can now be up
    to 255 chars long (instead of 200). This also reduces the max
    number of hierarchical levels to 16 (instead of 20) to keep the
    maximum name length 4096 (a common PATH_MAX limit). The 255
    char limit is hopefully large enough for migrations from all
    existing systems.  It's also the limit on many filesystems.
  + director: Added director_consistent_hashing setting to enable
    consistent hashing (instead of the mostly-random MD5 hashing).
    This causes fewer user moves between backends when backend
    counts are changed, which may improve performance (mainly due
    to caching).
  + director: Added support for "tags", which allows one director
    ring to serve multiple backend clusters with different sets of
    users.
  + LMTP server: Added lmtp_user_concurrency_limit setting to limit
    how many LMTP deliveries can be done concurrently for a single
    user.
  + LMTP server: Added support for STARTTLS command.
  + If logging data is generated faster than it can be written, log
    a warning about it and show information about it in log
    process's process title in ps output. Also don't allow a single
    service to flood too long at the cost of delaying other
    services' logging.
  + stats: Added support for getting global statistics.
  + stats: Use the same session IDs as the rest of Dovecot.
  + stats: Plugins can now create their own statistics fields
  + doveadm server: Non-mail related commands can now also be used
    via doveadm server (TCP socket).
  + doveadm proxying: passdb lookup can now override doveadm_port
    and change the username.
  + doveadm: Search query supports now "oldestonly" parameter to
    stop immediately on the first non-match. This can be used to
    optimize: doveadm expunge mailbox Trash savedbefore 30d
    oldestonly
  + doveadm: Added "save" command to directly save mails to
    specified mailbox (bypassing Sieve).
  + doveadm fetch: Added body.snippet field, which returns the
    first 100 chars of a message without whitespace or HTML tags.
    The result is stored into dovecot.index.cache, so it can be
    fetched efficiently.
  + dsync: Added -t &lt;timestamp&gt; parameter to sync only mails newer
    than the given received-timestamp.
  + dsync: Added -F [-]&lt;flag&gt; parameter to sync only mails
    with[out] the given flag/keyword.
  + dsync: Added -a &lt;mailbox&gt; parameter to specify the virtual
    mailbox containing user's all mails. If this mailbox is already
    found to contain the wanted mail (by its GUID), the message is
    copied from there instead of being re-saved. (This isn't
    efficient enough yet for incremental replication.)
  + dsync: -m parameter can now specify \Special-use names for
    mailboxes.
  + imapc: Added imapc_features=gmail-migration to help migrations
    from GMail. See http://wiki2.dovecot.org/Migration/Gmail
  + imapc: Added imapc_features=search to support IMAP SEARCH
    command.  (Currently requires ESEARCH support from remote
    server.)
  + expire plugin: Added expire_cache=yes setting to cache most of
    the database lookups in dovecot index files.
  + quota: If overquota-flag in userdb doesn't match the current
    quota usage, execute a configured script.
  + redis dict: Added support for expiring keys (:expire_secs=n)
    and specifying the database number (:db=n)
  - auth: Don't crash if master user login is attempted without any
    configured master=yes passdbs
  - Parsing UTF-8 text for mails could have caused broken results
    sometimes if buffering was split in the middle of a UTF-8
    character.  This affected at least searching messages.
  - String sanitization for some logged output wasn't done
    properly: UTF-8 text could have been truncated wrongly or the
    truncation may not have happened at all.
  - fts-lucene: Lookups from virtual mailbox consisting of over 32
    physical mailboxes could have caused crashes.
- update to dovecot-pigeonhole 0.4.7
  * editheader extension: Made protection against addition and
    deletion of headers configurable separately. Also, the
    `Received' and `Auto-Submitted' headers are no longer protected
    against addition by default.
  * Turned message envelope address parse errors into warnings.
  * The interpreter now accepts non-standard domain names, e.g.
    containing '_'.
  + Implemented the Sieve index extension (RFC 5260).
  + Implemented support for the mboxmetadata and servermetadata
    extensions (RFC 5490).
  + Implemented new sieve commands for the doveadm command line
    utility. These commands are currently limited to ManageSieve
    operations, but the other current sieve tools will be migrated
    to doveadm in the near future as well.
  + Added more debug output about binary up-to-date checking.
  + Added script metadata to binary dump output.
  - Fixed Sieve script binary up-to-date checking by normalizing
    the script location.
  - The Sieve interpreter now flushes the duplicate database during
    start phase of result execution rather than commit phase. This
    makes sure locks on the duplicate database are released as soon
    as possible, preventing contention.
  - Performed a few optimizations in the lexical scanner of the
    language.
  - Fixed bug in `:matches' match-type that made a pattern without
    wildcards match as if there were a '*' at the beginning.
  - Fixed crash in validation of the string parameter of the
    comparator tag.
  - extprograms extension: Made sure supplemental group privileges
    are also dropped. This was a problem reported by Debian
    lintian.
  - Fixed bug in handling of binary errors for action side-effects
    and message overrides.
  - file script storage: Restructured storage initialization to
    address backwards compatibility issues.
  - dict script storage: Fixed small memory allocation bug.
- reordered files section a little</changelog>
  <changelog author="mrueckert@suse.de" date="1429790401">- enable lz4 on 13.2 and newer
- added cyrus-sasl-devel to enable sasl support for ldap</changelog>
</package>
<package pkgid="3dbb1a95d48460a661967a117f2bd93982757197" name="dovecot22" arch="x86_64">
  <version epoch="0" ver="2.2.16" rel="35.1"/>
  <changelog author="mrueckert@suse.de" date="1409918400">- guard the new %pre/%post snippets against missing dovecot package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- no longer obsolete older packages. module packages require
  their base package with version. the main package has a conflicts
  on other providers of dovecot-implementation.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918404">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- update to version 2.2.14
  * lmtp: Delivered-To: header no longer contains &lt;&gt; around the
    email address.  Other MDAs don't have it either.
  * "Out of disk space" errors are now treated as temporary errors
    (not the same as "Out of disk quota").
  * replication plugin: Use replication only for users who have a
    non-empty mail_replica setting.
  + lmtp proxy: Log a line about each mail delivery.
  + Added login_source_ips setting. This can be used to set the
    source IP address round-robin from a pool of IPs (in case you
    run out of TCP ports).
  + Rawlog settings can use tcp:&lt;host&gt;:&lt;port&gt; as the path.
  + virtual plugin: Don't keep more than virtual_max_open_mailboxes
    (default 64) number of backend mailboxes open.
  + SSL/TLS compression can be disabled with
    ssl_options=no_compression
  + acl: Global ACL file now supports "quotes" around patterns.
  + Added last-login plugin to set user's last-login timestamp on
    login.
  + LDAP auth: Allow passdb credentials lookup also with
    auth_bind=yes
  - IMAP: MODSEQ was sent in FETCH reply even if CONDSTORE/QRESYNC
    wasn't enabled. This broke at least old Outlooks.
  - passdb static treated missing password field the same as an
    empty password field.
  - mdbox: Fixed potential infinite looping when scanning a broken
    mdbox file.
  - imap-login, pop3-login: Fixed potential crashes when client
    disconnected unexpectedly.
  - imap proxy: The connection was hanging in some usage patterns.
    This mainly affected older Outlooks.
  - lmtp proxy: The proxy sometimes delivered empty mails in error
    situations or potentially delivered truncated mails.
  - fts-lucene: If whitespace_chars was set, we may have ended up
    indexing some garbage words, growing the index size
    unnecessarily.
  - -c and -i parameters for dovecot/doveadm commands were ignored
    if the config socket was readable.
  - quota: Quota recalculation didn't include INBOX in some setups.
  - Mail headers were sometimes added to dovecot.index.cache in
    wrong order.  The main problem this caused was with dsync+imapc
    incremental syncing when the second sync thought the local
    mailbox had changed.
  - Fixed several race conditions with dovecot.index.cache handling
    that may have caused unnecessary "cache is corrupted" errors.
  - doveadm backup didn't notice if emails were missing from the
    middle of the destination mailbox. Now it deletes and resyncs
    the mailbox.
  - auth: If auth client listed userdb and disconnected before
    finishing, the auth worker process got stuck (and eventually
    all workers could get used up and requests would start
    failing).
- update dovecot pigeonhole to 0.4.3
  * Editheader extension: Made control characters allowed for
    editheader, except NUL. Before, this would cause a runtime
    error.
  + Upgraded Dovecot-specific Sieve "vnd.dovecot.duplicate"
    extension to match the new draft "duplicate" extension.
  - Fixed sieve_result_global_log_error to log only as i_info in
    administrator log (syslog) if executed from multiscript
    context.
  - Sieve redirect extension: Adjusted loop detection to show
    leniency to resent messages.
  - Sieve include extension: Fixed problem with handling of
    duplicate includes with different parameters :once or
    :optional.
  - Sieve spamtest/virustest extensions: Tests were erroneously
    performed against the original message. When used together with
    extprograms filter to add the spam headers, the changes were
    not being used by the spamtest and virustest extensions.
  - Deprecated Sieve notify extension: Fixed segfault problems in
    message string substitution.
  - ManageSieve: Fixed active link verification to handle redundant
    path slashes correctly.
  - Sieve vacation extension:
  - Fixed interaction of sieve_vacation_dont_check_recipient with
    sieve_vacation_send_from_recipient setting.
  - Fixed log message for discarded response.
  - Sieve extprograms plugin:
  - Forgot to disable the alarm() timeouts set for script
    execution.
  - Fixed fd leak and handling of output shutdown.
  - Fixed 'Bad filedescriptor' error occurring when disconnecting
    script client.
  - Made sure that programs are never forked with root
    privileges.</changelog>
  <changelog author="mrueckert@suse.de" date="1414324800">- update to version 2.2.15
  * Plugins can now print a banner comment in doveconf output
    (typically the plugin version)
  * Replication plugin now triggers low (instead of high) priority
    for mail copying operations.
  * IMAP/POP3/ManageSieve proxy: If destination server can't be
    connected to, retry connecting once per second up to the value
    of proxy_timeout. This allows quick restarts/upgrades on the
    backend server without returning login failures.
  * Internal passdb lookups (e.g. done by lmtp/doveadm proxy)
    wasn't returning failure in some situations where it should
    have (e.g. allow_nets mismatch)
  * LMTP uses mail_log_prefix now for logging mail deliveries
    instead of a hardcoded prefix. The non-delivery log prefix is
    still hardcoded though.
  + passdb allow_nets=local matches lookups that don't contain an
    IP address (internally done by Dovecot services)
  + Various debug logging and error logging improvements
  - Various race condition fixes to LAYOUT=index
  - v2.2.14 virtual plugin crashed in some situations
- added dovecot-2.2-pigeonhole-0.4.3_adapt_to_2.2.15.patch
  Adjusted to datastack-related changes in Dovecot lib-storage.
  Patch can be removed when we upgrade to pigeonhole 0.4.4</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="mrueckert@suse.de" date="1418644800">- update to dovecot-pigeonhole 0.4.6
  - After make distclean the distributed tarball would fail to
    recompile.  This causes problems for some distribution builds.
- changes in dovecot-pigeonhole 0.4.5
  + Added a Pigeonhole version banner to doveconf output. This way,
    future bug reports will also include Pigeonhole version
    information.
  - Fixed handling of implicit keep. Last version erroneously
    reported that implicit keep succeeded after an earlier failure,
    while it in fact had failed. Particularly occurred for mailbox
    quota errors.
  - Fixed segfault occurring on SunOS systems when there is no
    active script.
- changes in dovecot-pigeonhole 0.4.4
  * Added support for Japanese mail addresses with dots at
    non-standard places in localpart.
  * Changed handling of ENOSPACE into a normal temporary failure
    and added handling of ENOQUOTA as a user error.
  * Restructured result execution, so that all actions which
    involve mail storage are always committed before all others.
  + Implemented support for generic Sieve storages. Using
    alternative storages now also possible for
    sieve_before/sieve_after.
  + Implemented storage driver for retrieving Sieve scripts from
    LDAP. This currently cannot be used with ManageSieve.
  + Implemented sieve_redirect_envelope_from setting, which allows
    configuring the envelope sender of redirected messages.
  - Fixed handling of mail storage errors occurring while
    evaluating the input message.
  - managesieve-login:
  - Removed bogus ALERT response code returned for AUTHENTICATE
    command.
  - Fixed handling of invalid initial response argument to
    AUTHENTICATE command.
  - Fixed handling of stream errors in lexical scanner.
  - Fixed handling of SMTP errors. Permanent and temporary errors
    were mixed up.
  - Fixed several problems reported by CLang 3.4.
  - duplicate extension: Fixed erroneous compile error about
    conflicting tags when `:handle' argument was used last.
  - relational extension: Fixed error handling of `:value' match.
  - editheader extension: Fixed header unfolding and header
    iteration.
  - mailbox extension: Fixed the `:create' tag, which erroneously
    subscribed an existing folder.
  - extprograms plugin: Fixed handling of error codes.
  - doveadm-sieve plugin: Fixed several bugs. Synchronization of
    symbolic link in the file storage should now also work
    properly.
- drop dovecot-2.2-pigeonhole-0.4.3_adapt_to_2.2.15.patch:
  included in release
- enable ldap storage for sieve scripts</changelog>
  <changelog author="mrueckert@suse.de" date="1429790400">- update to 2.2.16
  * dbox: Resyncing (e.g. doveadm force-resync) no longer deletes
    dovecot.index.cache file. The cache file was rarely the problem
    so this just caused unnecessary slowness.
  * Mailbox name limits changed during mailbox creation: Each part
    of a hierarchical name (e.g. "x" or "y" in "x/y") can now be up
    to 255 chars long (instead of 200). This also reduces the max
    number of hierarchical levels to 16 (instead of 20) to keep the
    maximum name length 4096 (a common PATH_MAX limit). The 255
    char limit is hopefully large enough for migrations from all
    existing systems.  It's also the limit on many filesystems.
  + director: Added director_consistent_hashing setting to enable
    consistent hashing (instead of the mostly-random MD5 hashing).
    This causes fewer user moves between backends when backend
    counts are changed, which may improve performance (mainly due
    to caching).
  + director: Added support for "tags", which allows one director
    ring to serve multiple backend clusters with different sets of
    users.
  + LMTP server: Added lmtp_user_concurrency_limit setting to limit
    how many LMTP deliveries can be done concurrently for a single
    user.
  + LMTP server: Added support for STARTTLS command.
  + If logging data is generated faster than it can be written, log
    a warning about it and show information about it in log
    process's process title in ps output. Also don't allow a single
    service to flood too long at the cost of delaying other
    services' logging.
  + stats: Added support for getting global statistics.
  + stats: Use the same session IDs as the rest of Dovecot.
  + stats: Plugins can now create their own statistics fields
  + doveadm server: Non-mail related commands can now also be used
    via doveadm server (TCP socket).
  + doveadm proxying: passdb lookup can now override doveadm_port
    and change the username.
  + doveadm: Search query supports now "oldestonly" parameter to
    stop immediately on the first non-match. This can be used to
    optimize: doveadm expunge mailbox Trash savedbefore 30d
    oldestonly
  + doveadm: Added "save" command to directly save mails to
    specified mailbox (bypassing Sieve).
  + doveadm fetch: Added body.snippet field, which returns the
    first 100 chars of a message without whitespace or HTML tags.
    The result is stored into dovecot.index.cache, so it can be
    fetched efficiently.
  + dsync: Added -t &lt;timestamp&gt; parameter to sync only mails newer
    than the given received-timestamp.
  + dsync: Added -F [-]&lt;flag&gt; parameter to sync only mails
    with[out] the given flag/keyword.
  + dsync: Added -a &lt;mailbox&gt; parameter to specify the virtual
    mailbox containing user's all mails. If this mailbox is already
    found to contain the wanted mail (by its GUID), the message is
    copied from there instead of being re-saved. (This isn't
    efficient enough yet for incremental replication.)
  + dsync: -m parameter can now specify \Special-use names for
    mailboxes.
  + imapc: Added imapc_features=gmail-migration to help migrations
    from GMail. See http://wiki2.dovecot.org/Migration/Gmail
  + imapc: Added imapc_features=search to support IMAP SEARCH
    command.  (Currently requires ESEARCH support from remote
    server.)
  + expire plugin: Added expire_cache=yes setting to cache most of
    the database lookups in dovecot index files.
  + quota: If overquota-flag in userdb doesn't match the current
    quota usage, execute a configured script.
  + redis dict: Added support for expiring keys (:expire_secs=n)
    and specifying the database number (:db=n)
  - auth: Don't crash if master user login is attempted without any
    configured master=yes passdbs
  - Parsing UTF-8 text for mails could have caused broken results
    sometimes if buffering was split in the middle of a UTF-8
    character.  This affected at least searching messages.
  - String sanitization for some logged output wasn't done
    properly: UTF-8 text could have been truncated wrongly or the
    truncation may not have happened at all.
  - fts-lucene: Lookups from virtual mailbox consisting of over 32
    physical mailboxes could have caused crashes.
- update to dovecot-pigeonhole 0.4.7
  * editheader extension: Made protection against addition and
    deletion of headers configurable separately. Also, the
    `Received' and `Auto-Submitted' headers are no longer protected
    against addition by default.
  * Turned message envelope address parse errors into warnings.
  * The interpreter now accepts non-standard domain names, e.g.
    containing '_'.
  + Implemented the Sieve index extension (RFC 5260).
  + Implemented support for the mboxmetadata and servermetadata
    extensions (RFC 5490).
  + Implemented new sieve commands for the doveadm command line
    utility. These commands are currently limited to ManageSieve
    operations, but the other current sieve tools will be migrated
    to doveadm in the near future as well.
  + Added more debug output about binary up-to-date checking.
  + Added script metadata to binary dump output.
  - Fixed Sieve script binary up-to-date checking by normalizing
    the script location.
  - The Sieve interpreter now flushes the duplicate database during
    start phase of result execution rather than commit phase. This
    makes sure locks on the duplicate database are released as soon
    as possible, preventing contention.
  - Performed a few optimizations in the lexical scanner of the
    language.
  - Fixed bug in `:matches' match-type that made a pattern without
    wildcards match as if there were a '*' at the beginning.
  - Fixed crash in validation of the string parameter of the
    comparator tag.
  - extprograms extension: Made sure supplemental group privileges
    are also dropped. This was a problem reported by Debian
    lintian.
  - Fixed bug in handling of binary errors for action side-effects
    and message overrides.
  - file script storage: Restructured storage initialization to
    address backwards compatibility issues.
  - dict script storage: Fixed small memory allocation bug.
- reordered files section a little</changelog>
  <changelog author="mrueckert@suse.de" date="1429790401">- enable lz4 on 13.2 and newer
- added cyrus-sasl-devel to enable sasl support for ldap</changelog>
</package>
<package pkgid="6313163f8125625780d91466aca2d83d88c1c40d" name="dovecot22" arch="i586">
  <version epoch="0" ver="2.2.31" rel="100.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="3eb8631c3f926697dd09062f9dd9caae5252b88a" name="dovecot22" arch="src">
  <version epoch="0" ver="2.2.31" rel="100.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="644a87cfeaa1519ba65101940efb0872a0b34076" name="dovecot22-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.2.16" rel="35.1"/>
  <changelog author="mrueckert@suse.de" date="1409918400">- guard the new %pre/%post snippets against missing dovecot package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- no longer obsolete older packages. module packages require
  their base package with version. the main package has a conflicts
  on other providers of dovecot-implementation.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918404">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- update to version 2.2.14
  * lmtp: Delivered-To: header no longer contains &lt;&gt; around the
    email address.  Other MDAs don't have it either.
  * "Out of disk space" errors are now treated as temporary errors
    (not the same as "Out of disk quota").
  * replication plugin: Use replication only for users who have a
    non-empty mail_replica setting.
  + lmtp proxy: Log a line about each mail delivery.
  + Added login_source_ips setting. This can be used to set the
    source IP address round-robin from a pool of IPs (in case you
    run out of TCP ports).
  + Rawlog settings can use tcp:&lt;host&gt;:&lt;port&gt; as the path.
  + virtual plugin: Don't keep more than virtual_max_open_mailboxes
    (default 64) number of backend mailboxes open.
  + SSL/TLS compression can be disabled with
    ssl_options=no_compression
  + acl: Global ACL file now supports "quotes" around patterns.
  + Added last-login plugin to set user's last-login timestamp on
    login.
  + LDAP auth: Allow passdb credentials lookup also with
    auth_bind=yes
  - IMAP: MODSEQ was sent in FETCH reply even if CONDSTORE/QRESYNC
    wasn't enabled. This broke at least old Outlooks.
  - passdb static treated missing password field the same as an
    empty password field.
  - mdbox: Fixed potential infinite looping when scanning a broken
    mdbox file.
  - imap-login, pop3-login: Fixed potential crashes when client
    disconnected unexpectedly.
  - imap proxy: The connection was hanging in some usage patterns.
    This mainly affected older Outlooks.
  - lmtp proxy: The proxy sometimes delivered empty mails in error
    situations or potentially delivered truncated mails.
  - fts-lucene: If whitespace_chars was set, we may have ended up
    indexing some garbage words, growing the index size
    unnecessarily.
  - -c and -i parameters for dovecot/doveadm commands were ignored
    if the config socket was readable.
  - quota: Quota recalculation didn't include INBOX in some setups.
  - Mail headers were sometimes added to dovecot.index.cache in
    wrong order.  The main problem this caused was with dsync+imapc
    incremental syncing when the second sync thought the local
    mailbox had changed.
  - Fixed several race conditions with dovecot.index.cache handling
    that may have caused unnecessary "cache is corrupted" errors.
  - doveadm backup didn't notice if emails were missing from the
    middle of the destination mailbox. Now it deletes and resyncs
    the mailbox.
  - auth: If auth client listed userdb and disconnected before
    finishing, the auth worker process got stuck (and eventually
    all workers could get used up and requests would start
    failing).
- update dovecot pigeonhole to 0.4.3
  * Editheader extension: Made control characters allowed for
    editheader, except NUL. Before, this would cause a runtime
    error.
  + Upgraded Dovecot-specific Sieve "vnd.dovecot.duplicate"
    extension to match the new draft "duplicate" extension.
  - Fixed sieve_result_global_log_error to log only as i_info in
    administrator log (syslog) if executed from multiscript
    context.
  - Sieve redirect extension: Adjusted loop detection to show
    leniency to resent messages.
  - Sieve include extension: Fixed problem with handling of
    duplicate includes with different parameters :once or
    :optional.
  - Sieve spamtest/virustest extensions: Tests were erroneously
    performed against the original message. When used together with
    extprograms filter to add the spam headers, the changes were
    not being used by the spamtest and virustest extensions.
  - Deprecated Sieve notify extension: Fixed segfault problems in
    message string substitution.
  - ManageSieve: Fixed active link verification to handle redundant
    path slashes correctly.
  - Sieve vacation extension:
  - Fixed interaction of sieve_vacation_dont_check_recipient with
    sieve_vacation_send_from_recipient setting.
  - Fixed log message for discarded response.
  - Sieve extprograms plugin:
  - Forgot to disable the alarm() timeouts set for script
    execution.
  - Fixed fd leak and handling of output shutdown.
  - Fixed 'Bad filedescriptor' error occurring when disconnecting
    script client.
  - Made sure that programs are never forked with root
    privileges.</changelog>
  <changelog author="mrueckert@suse.de" date="1414324800">- update to version 2.2.15
  * Plugins can now print a banner comment in doveconf output
    (typically the plugin version)
  * Replication plugin now triggers low (instead of high) priority
    for mail copying operations.
  * IMAP/POP3/ManageSieve proxy: If destination server can't be
    connected to, retry connecting once per second up to the value
    of proxy_timeout. This allows quick restarts/upgrades on the
    backend server without returning login failures.
  * Internal passdb lookups (e.g. done by lmtp/doveadm proxy)
    wasn't returning failure in some situations where it should
    have (e.g. allow_nets mismatch)
  * LMTP uses mail_log_prefix now for logging mail deliveries
    instead of a hardcoded prefix. The non-delivery log prefix is
    still hardcoded though.
  + passdb allow_nets=local matches lookups that don't contain an
    IP address (internally done by Dovecot services)
  + Various debug logging and error logging improvements
  - Various race condition fixes to LAYOUT=index
  - v2.2.14 virtual plugin crashed in some situations
- added dovecot-2.2-pigeonhole-0.4.3_adapt_to_2.2.15.patch
  Adjusted to datastack-related changes in Dovecot lib-storage.
  Patch can be removed when we upgrade to pigeonhole 0.4.4</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="mrueckert@suse.de" date="1418644800">- update to dovecot-pigeonhole 0.4.6
  - After make distclean the distributed tarball would fail to
    recompile.  This causes problems for some distribution builds.
- changes in dovecot-pigeonhole 0.4.5
  + Added a Pigeonhole version banner to doveconf output. This way,
    future bug reports will also include Pigeonhole version
    information.
  - Fixed handling of implicit keep. Last version erroneously
    reported that implicit keep succeeded after an earlier failure,
    while it in fact had failed. Particularly occurred for mailbox
    quota errors.
  - Fixed segfault occurring on SunOS systems when there is no
    active script.
- changes in dovecot-pigeonhole 0.4.4
  * Added support for Japanese mail addresses with dots at
    non-standard places in localpart.
  * Changed handling of ENOSPACE into a normal temporary failure
    and added handling of ENOQUOTA as a user error.
  * Restructured result execution, so that all actions which
    involve mail storage are always committed before all others.
  + Implemented support for generic Sieve storages. Using
    alternative storages now also possible for
    sieve_before/sieve_after.
  + Implemented storage driver for retrieving Sieve scripts from
    LDAP. This currently cannot be used with ManageSieve.
  + Implemented sieve_redirect_envelope_from setting, which allows
    configuring the envelope sender of redirected messages.
  - Fixed handling of mail storage errors occurring while
    evaluating the input message.
  - managesieve-login:
  - Removed bogus ALERT response code returned for AUTHENTICATE
    command.
  - Fixed handling of invalid initial response argument to
    AUTHENTICATE command.
  - Fixed handling of stream errors in lexical scanner.
  - Fixed handling of SMTP errors. Permanent and temporary errors
    were mixed up.
  - Fixed several problems reported by CLang 3.4.
  - duplicate extension: Fixed erroneous compile error about
    conflicting tags when `:handle' argument was used last.
  - relational extension: Fixed error handling of `:value' match.
  - editheader extension: Fixed header unfolding and header
    iteration.
  - mailbox extension: Fixed the `:create' tag, which erroneously
    subscribed an existing folder.
  - extprograms plugin: Fixed handling of error codes.
  - doveadm-sieve plugin: Fixed several bugs. Synchronization of
    symbolic link in the file storage should now also work
    properly.
- drop dovecot-2.2-pigeonhole-0.4.3_adapt_to_2.2.15.patch:
  included in release
- enable ldap storage for sieve scripts</changelog>
  <changelog author="mrueckert@suse.de" date="1429790400">- update to 2.2.16
  * dbox: Resyncing (e.g. doveadm force-resync) no longer deletes
    dovecot.index.cache file. The cache file was rarely the problem
    so this just caused unnecessary slowness.
  * Mailbox name limits changed during mailbox creation: Each part
    of a hierarchical name (e.g. "x" or "y" in "x/y") can now be up
    to 255 chars long (instead of 200). This also reduces the max
    number of hierarchical levels to 16 (instead of 20) to keep the
    maximum name length 4096 (a common PATH_MAX limit). The 255
    char limit is hopefully large enough for migrations from all
    existing systems.  It's also the limit on many filesystems.
  + director: Added director_consistent_hashing setting to enable
    consistent hashing (instead of the mostly-random MD5 hashing).
    This causes fewer user moves between backends when backend
    counts are changed, which may improve performance (mainly due
    to caching).
  + director: Added support for "tags", which allows one director
    ring to serve multiple backend clusters with different sets of
    users.
  + LMTP server: Added lmtp_user_concurrency_limit setting to limit
    how many LMTP deliveries can be done concurrently for a single
    user.
  + LMTP server: Added support for STARTTLS command.
  + If logging data is generated faster than it can be written, log
    a warning about it and show information about it in log
    process's process title in ps output. Also don't allow a single
    service to flood too long at the cost of delaying other
    services' logging.
  + stats: Added support for getting global statistics.
  + stats: Use the same session IDs as the rest of Dovecot.
  + stats: Plugins can now create their own statistics fields
  + doveadm server: Non-mail related commands can now also be used
    via doveadm server (TCP socket).
  + doveadm proxying: passdb lookup can now override doveadm_port
    and change the username.
  + doveadm: Search query supports now "oldestonly" parameter to
    stop immediately on the first non-match. This can be used to
    optimize: doveadm expunge mailbox Trash savedbefore 30d
    oldestonly
  + doveadm: Added "save" command to directly save mails to
    specified mailbox (bypassing Sieve).
  + doveadm fetch: Added body.snippet field, which returns the
    first 100 chars of a message without whitespace or HTML tags.
    The result is stored into dovecot.index.cache, so it can be
    fetched efficiently.
  + dsync: Added -t &lt;timestamp&gt; parameter to sync only mails newer
    than the given received-timestamp.
  + dsync: Added -F [-]&lt;flag&gt; parameter to sync only mails
    with[out] the given flag/keyword.
  + dsync: Added -a &lt;mailbox&gt; parameter to specify the virtual
    mailbox containing user's all mails. If this mailbox is already
    found to contain the wanted mail (by its GUID), the message is
    copied from there instead of being re-saved. (This isn't
    efficient enough yet for incremental replication.)
  + dsync: -m parameter can now specify \Special-use names for
    mailboxes.
  + imapc: Added imapc_features=gmail-migration to help migrations
    from GMail. See http://wiki2.dovecot.org/Migration/Gmail
  + imapc: Added imapc_features=search to support IMAP SEARCH
    command.  (Currently requires ESEARCH support from remote
    server.)
  + expire plugin: Added expire_cache=yes setting to cache most of
    the database lookups in dovecot index files.
  + quota: If overquota-flag in userdb doesn't match the current
    quota usage, execute a configured script.
  + redis dict: Added support for expiring keys (:expire_secs=n)
    and specifying the database number (:db=n)
  - auth: Don't crash if master user login is attempted without any
    configured master=yes passdbs
  - Parsing UTF-8 text for mails could have caused broken results
    sometimes if buffering was split in the middle of a UTF-8
    character.  This affected at least searching messages.
  - String sanitization for some logged output wasn't done
    properly: UTF-8 text could have been truncated wrongly or the
    truncation may not have happened at all.
  - fts-lucene: Lookups from virtual mailbox consisting of over 32
    physical mailboxes could have caused crashes.
- update to dovecot-pigeonhole 0.4.7
  * editheader extension: Made protection against addition and
    deletion of headers configurable separately. Also, the
    `Received' and `Auto-Submitted' headers are no longer protected
    against addition by default.
  * Turned message envelope address parse errors into warnings.
  * The interpreter now accepts non-standard domain names, e.g.
    containing '_'.
  + Implemented the Sieve index extension (RFC 5260).
  + Implemented support for the mboxmetadata and servermetadata
    extensions (RFC 5490).
  + Implemented new sieve commands for the doveadm command line
    utility. These commands are currently limited to ManageSieve
    operations, but the other current sieve tools will be migrated
    to doveadm in the near future as well.
  + Added more debug output about binary up-to-date checking.
  + Added script metadata to binary dump output.
  - Fixed Sieve script binary up-to-date checking by normalizing
    the script location.
  - The Sieve interpreter now flushes the duplicate database during
    start phase of result execution rather than commit phase. This
    makes sure locks on the duplicate database are released as soon
    as possible, preventing contention.
  - Performed a few optimizations in the lexical scanner of the
    language.
  - Fixed bug in `:matches' match-type that made a pattern without
    wildcards match as if there were a '*' at the beginning.
  - Fixed crash in validation of the string parameter of the
    comparator tag.
  - extprograms extension: Made sure supplemental group privileges
    are also dropped. This was a problem reported by Debian
    lintian.
  - Fixed bug in handling of binary errors for action side-effects
    and message overrides.
  - file script storage: Restructured storage initialization to
    address backwards compatibility issues.
  - dict script storage: Fixed small memory allocation bug.
- reordered files section a little</changelog>
  <changelog author="mrueckert@suse.de" date="1429790401">- enable lz4 on 13.2 and newer
- added cyrus-sasl-devel to enable sasl support for ldap</changelog>
</package>
<package pkgid="448b8843fec688997d813bbc8d9cd1e159becadf" name="dovecot22-backend-mysql" arch="i586">
  <version epoch="0" ver="2.2.31" rel="100.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="9b8a270c85657ccf627e05c734bc11f6d4169286" name="dovecot22-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.2.16" rel="35.1"/>
  <changelog author="mrueckert@suse.de" date="1409918400">- guard the new %pre/%post snippets against missing dovecot package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- no longer obsolete older packages. module packages require
  their base package with version. the main package has a conflicts
  on other providers of dovecot-implementation.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918404">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- update to version 2.2.14
  * lmtp: Delivered-To: header no longer contains &lt;&gt; around the
    email address.  Other MDAs don't have it either.
  * "Out of disk space" errors are now treated as temporary errors
    (not the same as "Out of disk quota").
  * replication plugin: Use replication only for users who have a
    non-empty mail_replica setting.
  + lmtp proxy: Log a line about each mail delivery.
  + Added login_source_ips setting. This can be used to set the
    source IP address round-robin from a pool of IPs (in case you
    run out of TCP ports).
  + Rawlog settings can use tcp:&lt;host&gt;:&lt;port&gt; as the path.
  + virtual plugin: Don't keep more than virtual_max_open_mailboxes
    (default 64) number of backend mailboxes open.
  + SSL/TLS compression can be disabled with
    ssl_options=no_compression
  + acl: Global ACL file now supports "quotes" around patterns.
  + Added last-login plugin to set user's last-login timestamp on
    login.
  + LDAP auth: Allow passdb credentials lookup also with
    auth_bind=yes
  - IMAP: MODSEQ was sent in FETCH reply even if CONDSTORE/QRESYNC
    wasn't enabled. This broke at least old Outlooks.
  - passdb static treated missing password field the same as an
    empty password field.
  - mdbox: Fixed potential infinite looping when scanning a broken
    mdbox file.
  - imap-login, pop3-login: Fixed potential crashes when client
    disconnected unexpectedly.
  - imap proxy: The connection was hanging in some usage patterns.
    This mainly affected older Outlooks.
  - lmtp proxy: The proxy sometimes delivered empty mails in error
    situations or potentially delivered truncated mails.
  - fts-lucene: If whitespace_chars was set, we may have ended up
    indexing some garbage words, growing the index size
    unnecessarily.
  - -c and -i parameters for dovecot/doveadm commands were ignored
    if the config socket was readable.
  - quota: Quota recalculation didn't include INBOX in some setups.
  - Mail headers were sometimes added to dovecot.index.cache in
    wrong order.  The main problem this caused was with dsync+imapc
    incremental syncing when the second sync thought the local
    mailbox had changed.
  - Fixed several race conditions with dovecot.index.cache handling
    that may have caused unnecessary "cache is corrupted" errors.
  - doveadm backup didn't notice if emails were missing from the
    middle of the destination mailbox. Now it deletes and resyncs
    the mailbox.
  - auth: If auth client listed userdb and disconnected before
    finishing, the auth worker process got stuck (and eventually
    all workers could get used up and requests would start
    failing).
- update dovecot pigeonhole to 0.4.3
  * Editheader extension: Made control characters allowed for
    editheader, except NUL. Before, this would cause a runtime
    error.
  + Upgraded Dovecot-specific Sieve "vnd.dovecot.duplicate"
    extension to match the new draft "duplicate" extension.
  - Fixed sieve_result_global_log_error to log only as i_info in
    administrator log (syslog) if executed from multiscript
    context.
  - Sieve redirect extension: Adjusted loop detection to show
    leniency to resent messages.
  - Sieve include extension: Fixed problem with handling of
    duplicate includes with different parameters :once or
    :optional.
  - Sieve spamtest/virustest extensions: Tests were erroneously
    performed against the original message. When used together with
    extprograms filter to add the spam headers, the changes were
    not being used by the spamtest and virustest extensions.
  - Deprecated Sieve notify extension: Fixed segfault problems in
    message string substitution.
  - ManageSieve: Fixed active link verification to handle redundant
    path slashes correctly.
  - Sieve vacation extension:
  - Fixed interaction of sieve_vacation_dont_check_recipient with
    sieve_vacation_send_from_recipient setting.
  - Fixed log message for discarded response.
  - Sieve extprograms plugin:
  - Forgot to disable the alarm() timeouts set for script
    execution.
  - Fixed fd leak and handling of output shutdown.
  - Fixed 'Bad filedescriptor' error occurring when disconnecting
    script client.
  - Made sure that programs are never forked with root
    privileges.</changelog>
  <changelog author="mrueckert@suse.de" date="1414324800">- update to version 2.2.15
  * Plugins can now print a banner comment in doveconf output
    (typically the plugin version)
  * Replication plugin now triggers low (instead of high) priority
    for mail copying operations.
  * IMAP/POP3/ManageSieve proxy: If destination server can't be
    connected to, retry connecting once per second up to the value
    of proxy_timeout. This allows quick restarts/upgrades on the
    backend server without returning login failures.
  * Internal passdb lookups (e.g. done by lmtp/doveadm proxy)
    wasn't returning failure in some situations where it should
    have (e.g. allow_nets mismatch)
  * LMTP uses mail_log_prefix now for logging mail deliveries
    instead of a hardcoded prefix. The non-delivery log prefix is
    still hardcoded though.
  + passdb allow_nets=local matches lookups that don't contain an
    IP address (internally done by Dovecot services)
  + Various debug logging and error logging improvements
  - Various race condition fixes to LAYOUT=index
  - v2.2.14 virtual plugin crashed in some situations
- added dovecot-2.2-pigeonhole-0.4.3_adapt_to_2.2.15.patch
  Adjusted to datastack-related changes in Dovecot lib-storage.
  Patch can be removed when we upgrade to pigeonhole 0.4.4</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="mrueckert@suse.de" date="1418644800">- update to dovecot-pigeonhole 0.4.6
  - After make distclean the distributed tarball would fail to
    recompile.  This causes problems for some distribution builds.
- changes in dovecot-pigeonhole 0.4.5
  + Added a Pigeonhole version banner to doveconf output. This way,
    future bug reports will also include Pigeonhole version
    information.
  - Fixed handling of implicit keep. Last version erroneously
    reported that implicit keep succeeded after an earlier failure,
    while it in fact had failed. Particularly occurred for mailbox
    quota errors.
  - Fixed segfault occurring on SunOS systems when there is no
    active script.
- changes in dovecot-pigeonhole 0.4.4
  * Added support for Japanese mail addresses with dots at
    non-standard places in localpart.
  * Changed handling of ENOSPACE into a normal temporary failure
    and added handling of ENOQUOTA as a user error.
  * Restructured result execution, so that all actions which
    involve mail storage are always committed before all others.
  + Implemented support for generic Sieve storages. Using
    alternative storages now also possible for
    sieve_before/sieve_after.
  + Implemented storage driver for retrieving Sieve scripts from
    LDAP. This currently cannot be used with ManageSieve.
  + Implemented sieve_redirect_envelope_from setting, which allows
    configuring the envelope sender of redirected messages.
  - Fixed handling of mail storage errors occurring while
    evaluating the input message.
  - managesieve-login:
  - Removed bogus ALERT response code returned for AUTHENTICATE
    command.
  - Fixed handling of invalid initial response argument to
    AUTHENTICATE command.
  - Fixed handling of stream errors in lexical scanner.
  - Fixed handling of SMTP errors. Permanent and temporary errors
    were mixed up.
  - Fixed several problems reported by CLang 3.4.
  - duplicate extension: Fixed erroneous compile error about
    conflicting tags when `:handle' argument was used last.
  - relational extension: Fixed error handling of `:value' match.
  - editheader extension: Fixed header unfolding and header
    iteration.
  - mailbox extension: Fixed the `:create' tag, which erroneously
    subscribed an existing folder.
  - extprograms plugin: Fixed handling of error codes.
  - doveadm-sieve plugin: Fixed several bugs. Synchronization of
    symbolic link in the file storage should now also work
    properly.
- drop dovecot-2.2-pigeonhole-0.4.3_adapt_to_2.2.15.patch:
  included in release
- enable ldap storage for sieve scripts</changelog>
  <changelog author="mrueckert@suse.de" date="1429790400">- update to 2.2.16
  * dbox: Resyncing (e.g. doveadm force-resync) no longer deletes
    dovecot.index.cache file. The cache file was rarely the problem
    so this just caused unnecessary slowness.
  * Mailbox name limits changed during mailbox creation: Each part
    of a hierarchical name (e.g. "x" or "y" in "x/y") can now be up
    to 255 chars long (instead of 200). This also reduces the max
    number of hierarchical levels to 16 (instead of 20) to keep the
    maximum name length 4096 (a common PATH_MAX limit). The 255
    char limit is hopefully large enough for migrations from all
    existing systems.  It's also the limit on many filesystems.
  + director: Added director_consistent_hashing setting to enable
    consistent hashing (instead of the mostly-random MD5 hashing).
    This causes fewer user moves between backends when backend
    counts are changed, which may improve performance (mainly due
    to caching).
  + director: Added support for "tags", which allows one director
    ring to serve multiple backend clusters with different sets of
    users.
  + LMTP server: Added lmtp_user_concurrency_limit setting to limit
    how many LMTP deliveries can be done concurrently for a single
    user.
  + LMTP server: Added support for STARTTLS command.
  + If logging data is generated faster than it can be written, log
    a warning about it and show information about it in log
    process's process title in ps output. Also don't allow a single
    service to flood too long at the cost of delaying other
    services' logging.
  + stats: Added support for getting global statistics.
  + stats: Use the same session IDs as the rest of Dovecot.
  + stats: Plugins can now create their own statistics fields
  + doveadm server: Non-mail related commands can now also be used
    via doveadm server (TCP socket).
  + doveadm proxying: passdb lookup can now override doveadm_port
    and change the username.
  + doveadm: Search query supports now "oldestonly" parameter to
    stop immediately on the first non-match. This can be used to
    optimize: doveadm expunge mailbox Trash savedbefore 30d
    oldestonly
  + doveadm: Added "save" command to directly save mails to
    specified mailbox (bypassing Sieve).
  + doveadm fetch: Added body.snippet field, which returns the
    first 100 chars of a message without whitespace or HTML tags.
    The result is stored into dovecot.index.cache, so it can be
    fetched efficiently.
  + dsync: Added -t &lt;timestamp&gt; parameter to sync only mails newer
    than the given received-timestamp.
  + dsync: Added -F [-]&lt;flag&gt; parameter to sync only mails
    with[out] the given flag/keyword.
  + dsync: Added -a &lt;mailbox&gt; parameter to specify the virtual
    mailbox containing user's all mails. If this mailbox is already
    found to contain the wanted mail (by its GUID), the message is
    copied from there instead of being re-saved. (This isn't
    efficient enough yet for incremental replication.)
  + dsync: -m parameter can now specify \Special-use names for
    mailboxes.
  + imapc: Added imapc_features=gmail-migration to help migrations
    from GMail. See http://wiki2.dovecot.org/Migration/Gmail
  + imapc: Added imapc_features=search to support IMAP SEARCH
    command.  (Currently requires ESEARCH support from remote
    server.)
  + expire plugin: Added expire_cache=yes setting to cache most of
    the database lookups in dovecot index files.
  + quota: If overquota-flag in userdb doesn't match the current
    quota usage, execute a configured script.
  + redis dict: Added support for expiring keys (:expire_secs=n)
    and specifying the database number (:db=n)
  - auth: Don't crash if master user login is attempted without any
    configured master=yes passdbs
  - Parsing UTF-8 text for mails could have caused broken results
    sometimes if buffering was split in the middle of a UTF-8
    character.  This affected at least searching messages.
  - String sanitization for some logged output wasn't done
    properly: UTF-8 text could have been truncated wrongly or the
    truncation may not have happened at all.
  - fts-lucene: Lookups from virtual mailbox consisting of over 32
    physical mailboxes could have caused crashes.
- update to dovecot-pigeonhole 0.4.7
  * editheader extension: Made protection against addition and
    deletion of headers configurable separately. Also, the
    `Received' and `Auto-Submitted' headers are no longer protected
    against addition by default.
  * Turned message envelope address parse errors into warnings.
  * The interpreter now accepts non-standard domain names, e.g.
    containing '_'.
  + Implemented the Sieve index extension (RFC 5260).
  + Implemented support for the mboxmetadata and servermetadata
    extensions (RFC 5490).
  + Implemented new sieve commands for the doveadm command line
    utility. These commands are currently limited to ManageSieve
    operations, but the other current sieve tools will be migrated
    to doveadm in the near future as well.
  + Added more debug output about binary up-to-date checking.
  + Added script metadata to binary dump output.
  - Fixed Sieve script binary up-to-date checking by normalizing
    the script location.
  - The Sieve interpreter now flushes the duplicate database during
    start phase of result execution rather than commit phase. This
    makes sure locks on the duplicate database are released as soon
    as possible, preventing contention.
  - Performed a few optimizations in the lexical scanner of the
    language.
  - Fixed bug in `:matches' match-type that made a pattern without
    wildcards match as if there were a '*' at the beginning.
  - Fixed crash in validation of the string parameter of the
    comparator tag.
  - extprograms extension: Made sure supplemental group privileges
    are also dropped. This was a problem reported by Debian
    lintian.
  - Fixed bug in handling of binary errors for action side-effects
    and message overrides.
  - file script storage: Restructured storage initialization to
    address backwards compatibility issues.
  - dict script storage: Fixed small memory allocation bug.
- reordered files section a little</changelog>
  <changelog author="mrueckert@suse.de" date="1429790401">- enable lz4 on 13.2 and newer
- added cyrus-sasl-devel to enable sasl support for ldap</changelog>
</package>
<package pkgid="822f780681382ceff608b516f63d4b90df7b1ae8" name="dovecot22-backend-pgsql" arch="i586">
  <version epoch="0" ver="2.2.31" rel="100.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="85c261d462a8657d1118e8a5707bb063a9ee192d" name="dovecot22-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.2.16" rel="35.1"/>
  <changelog author="mrueckert@suse.de" date="1409918400">- guard the new %pre/%post snippets against missing dovecot package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- no longer obsolete older packages. module packages require
  their base package with version. the main package has a conflicts
  on other providers of dovecot-implementation.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918404">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- update to version 2.2.14
  * lmtp: Delivered-To: header no longer contains &lt;&gt; around the
    email address.  Other MDAs don't have it either.
  * "Out of disk space" errors are now treated as temporary errors
    (not the same as "Out of disk quota").
  * replication plugin: Use replication only for users who have a
    non-empty mail_replica setting.
  + lmtp proxy: Log a line about each mail delivery.
  + Added login_source_ips setting. This can be used to set the
    source IP address round-robin from a pool of IPs (in case you
    run out of TCP ports).
  + Rawlog settings can use tcp:&lt;host&gt;:&lt;port&gt; as the path.
  + virtual plugin: Don't keep more than virtual_max_open_mailboxes
    (default 64) number of backend mailboxes open.
  + SSL/TLS compression can be disabled with
    ssl_options=no_compression
  + acl: Global ACL file now supports "quotes" around patterns.
  + Added last-login plugin to set user's last-login timestamp on
    login.
  + LDAP auth: Allow passdb credentials lookup also with
    auth_bind=yes
  - IMAP: MODSEQ was sent in FETCH reply even if CONDSTORE/QRESYNC
    wasn't enabled. This broke at least old Outlooks.
  - passdb static treated missing password field the same as an
    empty password field.
  - mdbox: Fixed potential infinite looping when scanning a broken
    mdbox file.
  - imap-login, pop3-login: Fixed potential crashes when client
    disconnected unexpectedly.
  - imap proxy: The connection was hanging in some usage patterns.
    This mainly affected older Outlooks.
  - lmtp proxy: The proxy sometimes delivered empty mails in error
    situations or potentially delivered truncated mails.
  - fts-lucene: If whitespace_chars was set, we may have ended up
    indexing some garbage words, growing the index size
    unnecessarily.
  - -c and -i parameters for dovecot/doveadm commands were ignored
    if the config socket was readable.
  - quota: Quota recalculation didn't include INBOX in some setups.
  - Mail headers were sometimes added to dovecot.index.cache in
    wrong order.  The main problem this caused was with dsync+imapc
    incremental syncing when the second sync thought the local
    mailbox had changed.
  - Fixed several race conditions with dovecot.index.cache handling
    that may have caused unnecessary "cache is corrupted" errors.
  - doveadm backup didn't notice if emails were missing from the
    middle of the destination mailbox. Now it deletes and resyncs
    the mailbox.
  - auth: If auth client listed userdb and disconnected before
    finishing, the auth worker process got stuck (and eventually
    all workers could get used up and requests would start
    failing).
- update dovecot pigeonhole to 0.4.3
  * Editheader extension: Made control characters allowed for
    editheader, except NUL. Before, this would cause a runtime
    error.
  + Upgraded Dovecot-specific Sieve "vnd.dovecot.duplicate"
    extension to match the new draft "duplicate" extension.
  - Fixed sieve_result_global_log_error to log only as i_info in
    administrator log (syslog) if executed from multiscript
    context.
  - Sieve redirect extension: Adjusted loop detection to show
    leniency to resent messages.
  - Sieve include extension: Fixed problem with handling of
    duplicate includes with different parameters :once or
    :optional.
  - Sieve spamtest/virustest extensions: Tests were erroneously
    performed against the original message. When used together with
    extprograms filter to add the spam headers, the changes were
    not being used by the spamtest and virustest extensions.
  - Deprecated Sieve notify extension: Fixed segfault problems in
    message string substitution.
  - ManageSieve: Fixed active link verification to handle redundant
    path slashes correctly.
  - Sieve vacation extension:
  - Fixed interaction of sieve_vacation_dont_check_recipient with
    sieve_vacation_send_from_recipient setting.
  - Fixed log message for discarded response.
  - Sieve extprograms plugin:
  - Forgot to disable the alarm() timeouts set for script
    execution.
  - Fixed fd leak and handling of output shutdown.
  - Fixed 'Bad filedescriptor' error occurring when disconnecting
    script client.
  - Made sure that programs are never forked with root
    privileges.</changelog>
  <changelog author="mrueckert@suse.de" date="1414324800">- update to version 2.2.15
  * Plugins can now print a banner comment in doveconf output
    (typically the plugin version)
  * Replication plugin now triggers low (instead of high) priority
    for mail copying operations.
  * IMAP/POP3/ManageSieve proxy: If destination server can't be
    connected to, retry connecting once per second up to the value
    of proxy_timeout. This allows quick restarts/upgrades on the
    backend server without returning login failures.
  * Internal passdb lookups (e.g. done by lmtp/doveadm proxy)
    wasn't returning failure in some situations where it should
    have (e.g. allow_nets mismatch)
  * LMTP uses mail_log_prefix now for logging mail deliveries
    instead of a hardcoded prefix. The non-delivery log prefix is
    still hardcoded though.
  + passdb allow_nets=local matches lookups that don't contain an
    IP address (internally done by Dovecot services)
  + Various debug logging and error logging improvements
  - Various race condition fixes to LAYOUT=index
  - v2.2.14 virtual plugin crashed in some situations
- added dovecot-2.2-pigeonhole-0.4.3_adapt_to_2.2.15.patch
  Adjusted to datastack-related changes in Dovecot lib-storage.
  Patch can be removed when we upgrade to pigeonhole 0.4.4</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="mrueckert@suse.de" date="1418644800">- update to dovecot-pigeonhole 0.4.6
  - After make distclean the distributed tarball would fail to
    recompile.  This causes problems for some distribution builds.
- changes in dovecot-pigeonhole 0.4.5
  + Added a Pigeonhole version banner to doveconf output. This way,
    future bug reports will also include Pigeonhole version
    information.
  - Fixed handling of implicit keep. Last version erroneously
    reported that implicit keep succeeded after an earlier failure,
    while it in fact had failed. Particularly occurred for mailbox
    quota errors.
  - Fixed segfault occurring on SunOS systems when there is no
    active script.
- changes in dovecot-pigeonhole 0.4.4
  * Added support for Japanese mail addresses with dots at
    non-standard places in localpart.
  * Changed handling of ENOSPACE into a normal temporary failure
    and added handling of ENOQUOTA as a user error.
  * Restructured result execution, so that all actions which
    involve mail storage are always committed before all others.
  + Implemented support for generic Sieve storages. Using
    alternative storages now also possible for
    sieve_before/sieve_after.
  + Implemented storage driver for retrieving Sieve scripts from
    LDAP. This currently cannot be used with ManageSieve.
  + Implemented sieve_redirect_envelope_from setting, which allows
    configuring the envelope sender of redirected messages.
  - Fixed handling of mail storage errors occurring while
    evaluating the input message.
  - managesieve-login:
  - Removed bogus ALERT response code returned for AUTHENTICATE
    command.
  - Fixed handling of invalid initial response argument to
    AUTHENTICATE command.
  - Fixed handling of stream errors in lexical scanner.
  - Fixed handling of SMTP errors. Permanent and temporary errors
    were mixed up.
  - Fixed several problems reported by CLang 3.4.
  - duplicate extension: Fixed erroneous compile error about
    conflicting tags when `:handle' argument was used last.
  - relational extension: Fixed error handling of `:value' match.
  - editheader extension: Fixed header unfolding and header
    iteration.
  - mailbox extension: Fixed the `:create' tag, which erroneously
    subscribed an existing folder.
  - extprograms plugin: Fixed handling of error codes.
  - doveadm-sieve plugin: Fixed several bugs. Synchronization of
    symbolic link in the file storage should now also work
    properly.
- drop dovecot-2.2-pigeonhole-0.4.3_adapt_to_2.2.15.patch:
  included in release
- enable ldap storage for sieve scripts</changelog>
  <changelog author="mrueckert@suse.de" date="1429790400">- update to 2.2.16
  * dbox: Resyncing (e.g. doveadm force-resync) no longer deletes
    dovecot.index.cache file. The cache file was rarely the problem
    so this just caused unnecessary slowness.
  * Mailbox name limits changed during mailbox creation: Each part
    of a hierarchical name (e.g. "x" or "y" in "x/y") can now be up
    to 255 chars long (instead of 200). This also reduces the max
    number of hierarchical levels to 16 (instead of 20) to keep the
    maximum name length 4096 (a common PATH_MAX limit). The 255
    char limit is hopefully large enough for migrations from all
    existing systems.  It's also the limit on many filesystems.
  + director: Added director_consistent_hashing setting to enable
    consistent hashing (instead of the mostly-random MD5 hashing).
    This causes fewer user moves between backends when backend
    counts are changed, which may improve performance (mainly due
    to caching).
  + director: Added support for "tags", which allows one director
    ring to serve multiple backend clusters with different sets of
    users.
  + LMTP server: Added lmtp_user_concurrency_limit setting to limit
    how many LMTP deliveries can be done concurrently for a single
    user.
  + LMTP server: Added support for STARTTLS command.
  + If logging data is generated faster than it can be written, log
    a warning about it and show information about it in log
    process's process title in ps output. Also don't allow a single
    service to flood too long at the cost of delaying other
    services' logging.
  + stats: Added support for getting global statistics.
  + stats: Use the same session IDs as the rest of Dovecot.
  + stats: Plugins can now create their own statistics fields
  + doveadm server: Non-mail related commands can now also be used
    via doveadm server (TCP socket).
  + doveadm proxying: passdb lookup can now override doveadm_port
    and change the username.
  + doveadm: Search query supports now "oldestonly" parameter to
    stop immediately on the first non-match. This can be used to
    optimize: doveadm expunge mailbox Trash savedbefore 30d
    oldestonly
  + doveadm: Added "save" command to directly save mails to
    specified mailbox (bypassing Sieve).
  + doveadm fetch: Added body.snippet field, which returns the
    first 100 chars of a message without whitespace or HTML tags.
    The result is stored into dovecot.index.cache, so it can be
    fetched efficiently.
  + dsync: Added -t &lt;timestamp&gt; parameter to sync only mails newer
    than the given received-timestamp.
  + dsync: Added -F [-]&lt;flag&gt; parameter to sync only mails
    with[out] the given flag/keyword.
  + dsync: Added -a &lt;mailbox&gt; parameter to specify the virtual
    mailbox containing user's all mails. If this mailbox is already
    found to contain the wanted mail (by its GUID), the message is
    copied from there instead of being re-saved. (This isn't
    efficient enough yet for incremental replication.)
  + dsync: -m parameter can now specify \Special-use names for
    mailboxes.
  + imapc: Added imapc_features=gmail-migration to help migrations
    from GMail. See http://wiki2.dovecot.org/Migration/Gmail
  + imapc: Added imapc_features=search to support IMAP SEARCH
    command.  (Currently requires ESEARCH support from remote
    server.)
  + expire plugin: Added expire_cache=yes setting to cache most of
    the database lookups in dovecot index files.
  + quota: If overquota-flag in userdb doesn't match the current
    quota usage, execute a configured script.
  + redis dict: Added support for expiring keys (:expire_secs=n)
    and specifying the database number (:db=n)
  - auth: Don't crash if master user login is attempted without any
    configured master=yes passdbs
  - Parsing UTF-8 text for mails could have caused broken results
    sometimes if buffering was split in the middle of a UTF-8
    character.  This affected at least searching messages.
  - String sanitization for some logged output wasn't done
    properly: UTF-8 text could have been truncated wrongly or the
    truncation may not have happened at all.
  - fts-lucene: Lookups from virtual mailbox consisting of over 32
    physical mailboxes could have caused crashes.
- update to dovecot-pigeonhole 0.4.7
  * editheader extension: Made protection against addition and
    deletion of headers configurable separately. Also, the
    `Received' and `Auto-Submitted' headers are no longer protected
    against addition by default.
  * Turned message envelope address parse errors into warnings.
  * The interpreter now accepts non-standard domain names, e.g.
    containing '_'.
  + Implemented the Sieve index extension (RFC 5260).
  + Implemented support for the mboxmetadata and servermetadata
    extensions (RFC 5490).
  + Implemented new sieve commands for the doveadm command line
    utility. These commands are currently limited to ManageSieve
    operations, but the other current sieve tools will be migrated
    to doveadm in the near future as well.
  + Added more debug output about binary up-to-date checking.
  + Added script metadata to binary dump output.
  - Fixed Sieve script binary up-to-date checking by normalizing
    the script location.
  - The Sieve interpreter now flushes the duplicate database during
    start phase of result execution rather than commit phase. This
    makes sure locks on the duplicate database are released as soon
    as possible, preventing contention.
  - Performed a few optimizations in the lexical scanner of the
    language.
  - Fixed bug in `:matches' match-type that made a pattern without
    wildcards match as if there were a '*' at the beginning.
  - Fixed crash in validation of the string parameter of the
    comparator tag.
  - extprograms extension: Made sure supplemental group privileges
    are also dropped. This was a problem reported by Debian
    lintian.
  - Fixed bug in handling of binary errors for action side-effects
    and message overrides.
  - file script storage: Restructured storage initialization to
    address backwards compatibility issues.
  - dict script storage: Fixed small memory allocation bug.
- reordered files section a little</changelog>
  <changelog author="mrueckert@suse.de" date="1429790401">- enable lz4 on 13.2 and newer
- added cyrus-sasl-devel to enable sasl support for ldap</changelog>
</package>
<package pkgid="bf2f5c0f5a61493b050594ae3d103a4fb5f78432" name="dovecot22-backend-sqlite" arch="i586">
  <version epoch="0" ver="2.2.31" rel="100.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="eafacdd6bc9d8031d7f54b52d5360771ac78d8f5" name="dovecot22-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.16" rel="35.1"/>
  <changelog author="mrueckert@suse.de" date="1409918400">- guard the new %pre/%post snippets against missing dovecot package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- no longer obsolete older packages. module packages require
  their base package with version. the main package has a conflicts
  on other providers of dovecot-implementation.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918404">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- update to version 2.2.14
  * lmtp: Delivered-To: header no longer contains &lt;&gt; around the
    email address.  Other MDAs don't have it either.
  * "Out of disk space" errors are now treated as temporary errors
    (not the same as "Out of disk quota").
  * replication plugin: Use replication only for users who have a
    non-empty mail_replica setting.
  + lmtp proxy: Log a line about each mail delivery.
  + Added login_source_ips setting. This can be used to set the
    source IP address round-robin from a pool of IPs (in case you
    run out of TCP ports).
  + Rawlog settings can use tcp:&lt;host&gt;:&lt;port&gt; as the path.
  + virtual plugin: Don't keep more than virtual_max_open_mailboxes
    (default 64) number of backend mailboxes open.
  + SSL/TLS compression can be disabled with
    ssl_options=no_compression
  + acl: Global ACL file now supports "quotes" around patterns.
  + Added last-login plugin to set user's last-login timestamp on
    login.
  + LDAP auth: Allow passdb credentials lookup also with
    auth_bind=yes
  - IMAP: MODSEQ was sent in FETCH reply even if CONDSTORE/QRESYNC
    wasn't enabled. This broke at least old Outlooks.
  - passdb static treated missing password field the same as an
    empty password field.
  - mdbox: Fixed potential infinite looping when scanning a broken
    mdbox file.
  - imap-login, pop3-login: Fixed potential crashes when client
    disconnected unexpectedly.
  - imap proxy: The connection was hanging in some usage patterns.
    This mainly affected older Outlooks.
  - lmtp proxy: The proxy sometimes delivered empty mails in error
    situations or potentially delivered truncated mails.
  - fts-lucene: If whitespace_chars was set, we may have ended up
    indexing some garbage words, growing the index size
    unnecessarily.
  - -c and -i parameters for dovecot/doveadm commands were ignored
    if the config socket was readable.
  - quota: Quota recalculation didn't include INBOX in some setups.
  - Mail headers were sometimes added to dovecot.index.cache in
    wrong order.  The main problem this caused was with dsync+imapc
    incremental syncing when the second sync thought the local
    mailbox had changed.
  - Fixed several race conditions with dovecot.index.cache handling
    that may have caused unnecessary "cache is corrupted" errors.
  - doveadm backup didn't notice if emails were missing from the
    middle of the destination mailbox. Now it deletes and resyncs
    the mailbox.
  - auth: If auth client listed userdb and disconnected before
    finishing, the auth worker process got stuck (and eventually
    all workers could get used up and requests would start
    failing).
- update dovecot pigeonhole to 0.4.3
  * Editheader extension: Made control characters allowed for
    editheader, except NUL. Before, this would cause a runtime
    error.
  + Upgraded Dovecot-specific Sieve "vnd.dovecot.duplicate"
    extension to match the new draft "duplicate" extension.
  - Fixed sieve_result_global_log_error to log only as i_info in
    administrator log (syslog) if executed from multiscript
    context.
  - Sieve redirect extension: Adjusted loop detection to show
    leniency to resent messages.
  - Sieve include extension: Fixed problem with handling of
    duplicate includes with different parameters :once or
    :optional.
  - Sieve spamtest/virustest extensions: Tests were erroneously
    performed against the original message. When used together with
    extprograms filter to add the spam headers, the changes were
    not being used by the spamtest and virustest extensions.
  - Deprecated Sieve notify extension: Fixed segfault problems in
    message string substitution.
  - ManageSieve: Fixed active link verification to handle redundant
    path slashes correctly.
  - Sieve vacation extension:
  - Fixed interaction of sieve_vacation_dont_check_recipient with
    sieve_vacation_send_from_recipient setting.
  - Fixed log message for discarded response.
  - Sieve extprograms plugin:
  - Forgot to disable the alarm() timeouts set for script
    execution.
  - Fixed fd leak and handling of output shutdown.
  - Fixed 'Bad filedescriptor' error occurring when disconnecting
    script client.
  - Made sure that programs are never forked with root
    privileges.</changelog>
  <changelog author="mrueckert@suse.de" date="1414324800">- update to version 2.2.15
  * Plugins can now print a banner comment in doveconf output
    (typically the plugin version)
  * Replication plugin now triggers low (instead of high) priority
    for mail copying operations.
  * IMAP/POP3/ManageSieve proxy: If destination server can't be
    connected to, retry connecting once per second up to the value
    of proxy_timeout. This allows quick restarts/upgrades on the
    backend server without returning login failures.
  * Internal passdb lookups (e.g. done by lmtp/doveadm proxy)
    wasn't returning failure in some situations where it should
    have (e.g. allow_nets mismatch)
  * LMTP uses mail_log_prefix now for logging mail deliveries
    instead of a hardcoded prefix. The non-delivery log prefix is
    still hardcoded though.
  + passdb allow_nets=local matches lookups that don't contain an
    IP address (internally done by Dovecot services)
  + Various debug logging and error logging improvements
  - Various race condition fixes to LAYOUT=index
  - v2.2.14 virtual plugin crashed in some situations
- added dovecot-2.2-pigeonhole-0.4.3_adapt_to_2.2.15.patch
  Adjusted to datastack-related changes in Dovecot lib-storage.
  Patch can be removed when we upgrade to pigeonhole 0.4.4</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="mrueckert@suse.de" date="1418644800">- update to dovecot-pigeonhole 0.4.6
  - After make distclean the distributed tarball would fail to
    recompile.  This causes problems for some distribution builds.
- changes in dovecot-pigeonhole 0.4.5
  + Added a Pigeonhole version banner to doveconf output. This way,
    future bug reports will also include Pigeonhole version
    information.
  - Fixed handling of implicit keep. Last version erroneously
    reported that implicit keep succeeded after an earlier failure,
    while it in fact had failed. Particularly occurred for mailbox
    quota errors.
  - Fixed segfault occurring on SunOS systems when there is no
    active script.
- changes in dovecot-pigeonhole 0.4.4
  * Added support for Japanese mail addresses with dots at
    non-standard places in localpart.
  * Changed handling of ENOSPACE into a normal temporary failure
    and added handling of ENOQUOTA as a user error.
  * Restructured result execution, so that all actions which
    involve mail storage are always committed before all others.
  + Implemented support for generic Sieve storages. Using
    alternative storages now also possible for
    sieve_before/sieve_after.
  + Implemented storage driver for retrieving Sieve scripts from
    LDAP. This currently cannot be used with ManageSieve.
  + Implemented sieve_redirect_envelope_from setting, which allows
    configuring the envelope sender of redirected messages.
  - Fixed handling of mail storage errors occurring while
    evaluating the input message.
  - managesieve-login:
  - Removed bogus ALERT response code returned for AUTHENTICATE
    command.
  - Fixed handling of invalid initial response argument to
    AUTHENTICATE command.
  - Fixed handling of stream errors in lexical scanner.
  - Fixed handling of SMTP errors. Permanent and temporary errors
    were mixed up.
  - Fixed several problems reported by CLang 3.4.
  - duplicate extension: Fixed erroneous compile error about
    conflicting tags when `:handle' argument was used last.
  - relational extension: Fixed error handling of `:value' match.
  - editheader extension: Fixed header unfolding and header
    iteration.
  - mailbox extension: Fixed the `:create' tag, which erroneously
    subscribed an existing folder.
  - extprograms plugin: Fixed handling of error codes.
  - doveadm-sieve plugin: Fixed several bugs. Synchronization of
    symbolic link in the file storage should now also work
    properly.
- drop dovecot-2.2-pigeonhole-0.4.3_adapt_to_2.2.15.patch:
  included in release
- enable ldap storage for sieve scripts</changelog>
  <changelog author="mrueckert@suse.de" date="1429790400">- update to 2.2.16
  * dbox: Resyncing (e.g. doveadm force-resync) no longer deletes
    dovecot.index.cache file. The cache file was rarely the problem
    so this just caused unnecessary slowness.
  * Mailbox name limits changed during mailbox creation: Each part
    of a hierarchical name (e.g. "x" or "y" in "x/y") can now be up
    to 255 chars long (instead of 200). This also reduces the max
    number of hierarchical levels to 16 (instead of 20) to keep the
    maximum name length 4096 (a common PATH_MAX limit). The 255
    char limit is hopefully large enough for migrations from all
    existing systems.  It's also the limit on many filesystems.
  + director: Added director_consistent_hashing setting to enable
    consistent hashing (instead of the mostly-random MD5 hashing).
    This causes fewer user moves between backends when backend
    counts are changed, which may improve performance (mainly due
    to caching).
  + director: Added support for "tags", which allows one director
    ring to serve multiple backend clusters with different sets of
    users.
  + LMTP server: Added lmtp_user_concurrency_limit setting to limit
    how many LMTP deliveries can be done concurrently for a single
    user.
  + LMTP server: Added support for STARTTLS command.
  + If logging data is generated faster than it can be written, log
    a warning about it and show information about it in log
    process's process title in ps output. Also don't allow a single
    service to flood too long at the cost of delaying other
    services' logging.
  + stats: Added support for getting global statistics.
  + stats: Use the same session IDs as the rest of Dovecot.
  + stats: Plugins can now create their own statistics fields
  + doveadm server: Non-mail related commands can now also be used
    via doveadm server (TCP socket).
  + doveadm proxying: passdb lookup can now override doveadm_port
    and change the username.
  + doveadm: Search query supports now "oldestonly" parameter to
    stop immediately on the first non-match. This can be used to
    optimize: doveadm expunge mailbox Trash savedbefore 30d
    oldestonly
  + doveadm: Added "save" command to directly save mails to
    specified mailbox (bypassing Sieve).
  + doveadm fetch: Added body.snippet field, which returns the
    first 100 chars of a message without whitespace or HTML tags.
    The result is stored into dovecot.index.cache, so it can be
    fetched efficiently.
  + dsync: Added -t &lt;timestamp&gt; parameter to sync only mails newer
    than the given received-timestamp.
  + dsync: Added -F [-]&lt;flag&gt; parameter to sync only mails
    with[out] the given flag/keyword.
  + dsync: Added -a &lt;mailbox&gt; parameter to specify the virtual
    mailbox containing user's all mails. If this mailbox is already
    found to contain the wanted mail (by its GUID), the message is
    copied from there instead of being re-saved. (This isn't
    efficient enough yet for incremental replication.)
  + dsync: -m parameter can now specify \Special-use names for
    mailboxes.
  + imapc: Added imapc_features=gmail-migration to help migrations
    from GMail. See http://wiki2.dovecot.org/Migration/Gmail
  + imapc: Added imapc_features=search to support IMAP SEARCH
    command.  (Currently requires ESEARCH support from remote
    server.)
  + expire plugin: Added expire_cache=yes setting to cache most of
    the database lookups in dovecot index files.
  + quota: If overquota-flag in userdb doesn't match the current
    quota usage, execute a configured script.
  + redis dict: Added support for expiring keys (:expire_secs=n)
    and specifying the database number (:db=n)
  - auth: Don't crash if master user login is attempted without any
    configured master=yes passdbs
  - Parsing UTF-8 text for mails could have caused broken results
    sometimes if buffering was split in the middle of a UTF-8
    character.  This affected at least searching messages.
  - String sanitization for some logged output wasn't done
    properly: UTF-8 text could have been truncated wrongly or the
    truncation may not have happened at all.
  - fts-lucene: Lookups from virtual mailbox consisting of over 32
    physical mailboxes could have caused crashes.
- update to dovecot-pigeonhole 0.4.7
  * editheader extension: Made protection against addition and
    deletion of headers configurable separately. Also, the
    `Received' and `Auto-Submitted' headers are no longer protected
    against addition by default.
  * Turned message envelope address parse errors into warnings.
  * The interpreter now accepts non-standard domain names, e.g.
    containing '_'.
  + Implemented the Sieve index extension (RFC 5260).
  + Implemented support for the mboxmetadata and servermetadata
    extensions (RFC 5490).
  + Implemented new sieve commands for the doveadm command line
    utility. These commands are currently limited to ManageSieve
    operations, but the other current sieve tools will be migrated
    to doveadm in the near future as well.
  + Added more debug output about binary up-to-date checking.
  + Added script metadata to binary dump output.
  - Fixed Sieve script binary up-to-date checking by normalizing
    the script location.
  - The Sieve interpreter now flushes the duplicate database during
    start phase of result execution rather than commit phase. This
    makes sure locks on the duplicate database are released as soon
    as possible, preventing contention.
  - Performed a few optimizations in the lexical scanner of the
    language.
  - Fixed bug in `:matches' match-type that made a pattern without
    wildcards match as if there were a '*' at the beginning.
  - Fixed crash in validation of the string parameter of the
    comparator tag.
  - extprograms extension: Made sure supplemental group privileges
    are also dropped. This was a problem reported by Debian
    lintian.
  - Fixed bug in handling of binary errors for action side-effects
    and message overrides.
  - file script storage: Restructured storage initialization to
    address backwards compatibility issues.
  - dict script storage: Fixed small memory allocation bug.
- reordered files section a little</changelog>
  <changelog author="mrueckert@suse.de" date="1429790401">- enable lz4 on 13.2 and newer
- added cyrus-sasl-devel to enable sasl support for ldap</changelog>
</package>
<package pkgid="fa5f8dd9d1b49f2baea1aadce2ca396295a25f63" name="dovecot22-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.31" rel="100.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="82781f32438397611746149e34fa122df33b9de4" name="dovecot22-devel" arch="x86_64">
  <version epoch="0" ver="2.2.16" rel="35.1"/>
  <changelog author="mrueckert@suse.de" date="1409918400">- guard the new %pre/%post snippets against missing dovecot package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- no longer obsolete older packages. module packages require
  their base package with version. the main package has a conflicts
  on other providers of dovecot-implementation.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918404">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- update to version 2.2.14
  * lmtp: Delivered-To: header no longer contains &lt;&gt; around the
    email address.  Other MDAs don't have it either.
  * "Out of disk space" errors are now treated as temporary errors
    (not the same as "Out of disk quota").
  * replication plugin: Use replication only for users who have a
    non-empty mail_replica setting.
  + lmtp proxy: Log a line about each mail delivery.
  + Added login_source_ips setting. This can be used to set the
    source IP address round-robin from a pool of IPs (in case you
    run out of TCP ports).
  + Rawlog settings can use tcp:&lt;host&gt;:&lt;port&gt; as the path.
  + virtual plugin: Don't keep more than virtual_max_open_mailboxes
    (default 64) number of backend mailboxes open.
  + SSL/TLS compression can be disabled with
    ssl_options=no_compression
  + acl: Global ACL file now supports "quotes" around patterns.
  + Added last-login plugin to set user's last-login timestamp on
    login.
  + LDAP auth: Allow passdb credentials lookup also with
    auth_bind=yes
  - IMAP: MODSEQ was sent in FETCH reply even if CONDSTORE/QRESYNC
    wasn't enabled. This broke at least old Outlooks.
  - passdb static treated missing password field the same as an
    empty password field.
  - mdbox: Fixed potential infinite looping when scanning a broken
    mdbox file.
  - imap-login, pop3-login: Fixed potential crashes when client
    disconnected unexpectedly.
  - imap proxy: The connection was hanging in some usage patterns.
    This mainly affected older Outlooks.
  - lmtp proxy: The proxy sometimes delivered empty mails in error
    situations or potentially delivered truncated mails.
  - fts-lucene: If whitespace_chars was set, we may have ended up
    indexing some garbage words, growing the index size
    unnecessarily.
  - -c and -i parameters for dovecot/doveadm commands were ignored
    if the config socket was readable.
  - quota: Quota recalculation didn't include INBOX in some setups.
  - Mail headers were sometimes added to dovecot.index.cache in
    wrong order.  The main problem this caused was with dsync+imapc
    incremental syncing when the second sync thought the local
    mailbox had changed.
  - Fixed several race conditions with dovecot.index.cache handling
    that may have caused unnecessary "cache is corrupted" errors.
  - doveadm backup didn't notice if emails were missing from the
    middle of the destination mailbox. Now it deletes and resyncs
    the mailbox.
  - auth: If auth client listed userdb and disconnected before
    finishing, the auth worker process got stuck (and eventually
    all workers could get used up and requests would start
    failing).
- update dovecot pigeonhole to 0.4.3
  * Editheader extension: Made control characters allowed for
    editheader, except NUL. Before, this would cause a runtime
    error.
  + Upgraded Dovecot-specific Sieve "vnd.dovecot.duplicate"
    extension to match the new draft "duplicate" extension.
  - Fixed sieve_result_global_log_error to log only as i_info in
    administrator log (syslog) if executed from multiscript
    context.
  - Sieve redirect extension: Adjusted loop detection to show
    leniency to resent messages.
  - Sieve include extension: Fixed problem with handling of
    duplicate includes with different parameters :once or
    :optional.
  - Sieve spamtest/virustest extensions: Tests were erroneously
    performed against the original message. When used together with
    extprograms filter to add the spam headers, the changes were
    not being used by the spamtest and virustest extensions.
  - Deprecated Sieve notify extension: Fixed segfault problems in
    message string substitution.
  - ManageSieve: Fixed active link verification to handle redundant
    path slashes correctly.
  - Sieve vacation extension:
  - Fixed interaction of sieve_vacation_dont_check_recipient with
    sieve_vacation_send_from_recipient setting.
  - Fixed log message for discarded response.
  - Sieve extprograms plugin:
  - Forgot to disable the alarm() timeouts set for script
    execution.
  - Fixed fd leak and handling of output shutdown.
  - Fixed 'Bad filedescriptor' error occurring when disconnecting
    script client.
  - Made sure that programs are never forked with root
    privileges.</changelog>
  <changelog author="mrueckert@suse.de" date="1414324800">- update to version 2.2.15
  * Plugins can now print a banner comment in doveconf output
    (typically the plugin version)
  * Replication plugin now triggers low (instead of high) priority
    for mail copying operations.
  * IMAP/POP3/ManageSieve proxy: If destination server can't be
    connected to, retry connecting once per second up to the value
    of proxy_timeout. This allows quick restarts/upgrades on the
    backend server without returning login failures.
  * Internal passdb lookups (e.g. done by lmtp/doveadm proxy)
    wasn't returning failure in some situations where it should
    have (e.g. allow_nets mismatch)
  * LMTP uses mail_log_prefix now for logging mail deliveries
    instead of a hardcoded prefix. The non-delivery log prefix is
    still hardcoded though.
  + passdb allow_nets=local matches lookups that don't contain an
    IP address (internally done by Dovecot services)
  + Various debug logging and error logging improvements
  - Various race condition fixes to LAYOUT=index
  - v2.2.14 virtual plugin crashed in some situations
- added dovecot-2.2-pigeonhole-0.4.3_adapt_to_2.2.15.patch
  Adjusted to datastack-related changes in Dovecot lib-storage.
  Patch can be removed when we upgrade to pigeonhole 0.4.4</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="mrueckert@suse.de" date="1418644800">- update to dovecot-pigeonhole 0.4.6
  - After make distclean the distributed tarball would fail to
    recompile.  This causes problems for some distribution builds.
- changes in dovecot-pigeonhole 0.4.5
  + Added a Pigeonhole version banner to doveconf output. This way,
    future bug reports will also include Pigeonhole version
    information.
  - Fixed handling of implicit keep. Last version erroneously
    reported that implicit keep succeeded after an earlier failure,
    while it in fact had failed. Particularly occurred for mailbox
    quota errors.
  - Fixed segfault occurring on SunOS systems when there is no
    active script.
- changes in dovecot-pigeonhole 0.4.4
  * Added support for Japanese mail addresses with dots at
    non-standard places in localpart.
  * Changed handling of ENOSPACE into a normal temporary failure
    and added handling of ENOQUOTA as a user error.
  * Restructured result execution, so that all actions which
    involve mail storage are always committed before all others.
  + Implemented support for generic Sieve storages. Using
    alternative storages now also possible for
    sieve_before/sieve_after.
  + Implemented storage driver for retrieving Sieve scripts from
    LDAP. This currently cannot be used with ManageSieve.
  + Implemented sieve_redirect_envelope_from setting, which allows
    configuring the envelope sender of redirected messages.
  - Fixed handling of mail storage errors occurring while
    evaluating the input message.
  - managesieve-login:
  - Removed bogus ALERT response code returned for AUTHENTICATE
    command.
  - Fixed handling of invalid initial response argument to
    AUTHENTICATE command.
  - Fixed handling of stream errors in lexical scanner.
  - Fixed handling of SMTP errors. Permanent and temporary errors
    were mixed up.
  - Fixed several problems reported by CLang 3.4.
  - duplicate extension: Fixed erroneous compile error about
    conflicting tags when `:handle' argument was used last.
  - relational extension: Fixed error handling of `:value' match.
  - editheader extension: Fixed header unfolding and header
    iteration.
  - mailbox extension: Fixed the `:create' tag, which erroneously
    subscribed an existing folder.
  - extprograms plugin: Fixed handling of error codes.
  - doveadm-sieve plugin: Fixed several bugs. Synchronization of
    symbolic link in the file storage should now also work
    properly.
- drop dovecot-2.2-pigeonhole-0.4.3_adapt_to_2.2.15.patch:
  included in release
- enable ldap storage for sieve scripts</changelog>
  <changelog author="mrueckert@suse.de" date="1429790400">- update to 2.2.16
  * dbox: Resyncing (e.g. doveadm force-resync) no longer deletes
    dovecot.index.cache file. The cache file was rarely the problem
    so this just caused unnecessary slowness.
  * Mailbox name limits changed during mailbox creation: Each part
    of a hierarchical name (e.g. "x" or "y" in "x/y") can now be up
    to 255 chars long (instead of 200). This also reduces the max
    number of hierarchical levels to 16 (instead of 20) to keep the
    maximum name length 4096 (a common PATH_MAX limit). The 255
    char limit is hopefully large enough for migrations from all
    existing systems.  It's also the limit on many filesystems.
  + director: Added director_consistent_hashing setting to enable
    consistent hashing (instead of the mostly-random MD5 hashing).
    This causes fewer user moves between backends when backend
    counts are changed, which may improve performance (mainly due
    to caching).
  + director: Added support for "tags", which allows one director
    ring to serve multiple backend clusters with different sets of
    users.
  + LMTP server: Added lmtp_user_concurrency_limit setting to limit
    how many LMTP deliveries can be done concurrently for a single
    user.
  + LMTP server: Added support for STARTTLS command.
  + If logging data is generated faster than it can be written, log
    a warning about it and show information about it in log
    process's process title in ps output. Also don't allow a single
    service to flood too long at the cost of delaying other
    services' logging.
  + stats: Added support for getting global statistics.
  + stats: Use the same session IDs as the rest of Dovecot.
  + stats: Plugins can now create their own statistics fields
  + doveadm server: Non-mail related commands can now also be used
    via doveadm server (TCP socket).
  + doveadm proxying: passdb lookup can now override doveadm_port
    and change the username.
  + doveadm: Search query supports now "oldestonly" parameter to
    stop immediately on the first non-match. This can be used to
    optimize: doveadm expunge mailbox Trash savedbefore 30d
    oldestonly
  + doveadm: Added "save" command to directly save mails to
    specified mailbox (bypassing Sieve).
  + doveadm fetch: Added body.snippet field, which returns the
    first 100 chars of a message without whitespace or HTML tags.
    The result is stored into dovecot.index.cache, so it can be
    fetched efficiently.
  + dsync: Added -t &lt;timestamp&gt; parameter to sync only mails newer
    than the given received-timestamp.
  + dsync: Added -F [-]&lt;flag&gt; parameter to sync only mails
    with[out] the given flag/keyword.
  + dsync: Added -a &lt;mailbox&gt; parameter to specify the virtual
    mailbox containing user's all mails. If this mailbox is already
    found to contain the wanted mail (by its GUID), the message is
    copied from there instead of being re-saved. (This isn't
    efficient enough yet for incremental replication.)
  + dsync: -m parameter can now specify \Special-use names for
    mailboxes.
  + imapc: Added imapc_features=gmail-migration to help migrations
    from GMail. See http://wiki2.dovecot.org/Migration/Gmail
  + imapc: Added imapc_features=search to support IMAP SEARCH
    command.  (Currently requires ESEARCH support from remote
    server.)
  + expire plugin: Added expire_cache=yes setting to cache most of
    the database lookups in dovecot index files.
  + quota: If overquota-flag in userdb doesn't match the current
    quota usage, execute a configured script.
  + redis dict: Added support for expiring keys (:expire_secs=n)
    and specifying the database number (:db=n)
  - auth: Don't crash if master user login is attempted without any
    configured master=yes passdbs
  - Parsing UTF-8 text for mails could have caused broken results
    sometimes if buffering was split in the middle of a UTF-8
    character.  This affected at least searching messages.
  - String sanitization for some logged output wasn't done
    properly: UTF-8 text could have been truncated wrongly or the
    truncation may not have happened at all.
  - fts-lucene: Lookups from virtual mailbox consisting of over 32
    physical mailboxes could have caused crashes.
- update to dovecot-pigeonhole 0.4.7
  * editheader extension: Made protection against addition and
    deletion of headers configurable separately. Also, the
    `Received' and `Auto-Submitted' headers are no longer protected
    against addition by default.
  * Turned message envelope address parse errors into warnings.
  * The interpreter now accepts non-standard domain names, e.g.
    containing '_'.
  + Implemented the Sieve index extension (RFC 5260).
  + Implemented support for the mboxmetadata and servermetadata
    extensions (RFC 5490).
  + Implemented new sieve commands for the doveadm command line
    utility. These commands are currently limited to ManageSieve
    operations, but the other current sieve tools will be migrated
    to doveadm in the near future as well.
  + Added more debug output about binary up-to-date checking.
  + Added script metadata to binary dump output.
  - Fixed Sieve script binary up-to-date checking by normalizing
    the script location.
  - The Sieve interpreter now flushes the duplicate database during
    start phase of result execution rather than commit phase. This
    makes sure locks on the duplicate database are released as soon
    as possible, preventing contention.
  - Performed a few optimizations in the lexical scanner of the
    language.
  - Fixed bug in `:matches' match-type that made a pattern without
    wildcards match as if there were a '*' at the beginning.
  - Fixed crash in validation of the string parameter of the
    comparator tag.
  - extprograms extension: Made sure supplemental group privileges
    are also dropped. This was a problem reported by Debian
    lintian.
  - Fixed bug in handling of binary errors for action side-effects
    and message overrides.
  - file script storage: Restructured storage initialization to
    address backwards compatibility issues.
  - dict script storage: Fixed small memory allocation bug.
- reordered files section a little</changelog>
  <changelog author="mrueckert@suse.de" date="1429790401">- enable lz4 on 13.2 and newer
- added cyrus-sasl-devel to enable sasl support for ldap</changelog>
</package>
<package pkgid="b75f7adb58413ef140d86d6afa244712c077625e" name="dovecot22-devel" arch="i586">
  <version epoch="0" ver="2.2.31" rel="100.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="d4db90169f1e0dbe246b7bc2a544cae75126abb3" name="dovecot22-fts" arch="i586">
  <version epoch="0" ver="2.2.31" rel="100.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="5c2d5a6185508c736f93dcf3b9a589b2ba5ae544" name="dovecot22-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.2.16" rel="35.1"/>
  <changelog author="mrueckert@suse.de" date="1409918400">- guard the new %pre/%post snippets against missing dovecot package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- no longer obsolete older packages. module packages require
  their base package with version. the main package has a conflicts
  on other providers of dovecot-implementation.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918404">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- update to version 2.2.14
  * lmtp: Delivered-To: header no longer contains &lt;&gt; around the
    email address.  Other MDAs don't have it either.
  * "Out of disk space" errors are now treated as temporary errors
    (not the same as "Out of disk quota").
  * replication plugin: Use replication only for users who have a
    non-empty mail_replica setting.
  + lmtp proxy: Log a line about each mail delivery.
  + Added login_source_ips setting. This can be used to set the
    source IP address round-robin from a pool of IPs (in case you
    run out of TCP ports).
  + Rawlog settings can use tcp:&lt;host&gt;:&lt;port&gt; as the path.
  + virtual plugin: Don't keep more than virtual_max_open_mailboxes
    (default 64) number of backend mailboxes open.
  + SSL/TLS compression can be disabled with
    ssl_options=no_compression
  + acl: Global ACL file now supports "quotes" around patterns.
  + Added last-login plugin to set user's last-login timestamp on
    login.
  + LDAP auth: Allow passdb credentials lookup also with
    auth_bind=yes
  - IMAP: MODSEQ was sent in FETCH reply even if CONDSTORE/QRESYNC
    wasn't enabled. This broke at least old Outlooks.
  - passdb static treated missing password field the same as an
    empty password field.
  - mdbox: Fixed potential infinite looping when scanning a broken
    mdbox file.
  - imap-login, pop3-login: Fixed potential crashes when client
    disconnected unexpectedly.
  - imap proxy: The connection was hanging in some usage patterns.
    This mainly affected older Outlooks.
  - lmtp proxy: The proxy sometimes delivered empty mails in error
    situations or potentially delivered truncated mails.
  - fts-lucene: If whitespace_chars was set, we may have ended up
    indexing some garbage words, growing the index size
    unnecessarily.
  - -c and -i parameters for dovecot/doveadm commands were ignored
    if the config socket was readable.
  - quota: Quota recalculation didn't include INBOX in some setups.
  - Mail headers were sometimes added to dovecot.index.cache in
    wrong order.  The main problem this caused was with dsync+imapc
    incremental syncing when the second sync thought the local
    mailbox had changed.
  - Fixed several race conditions with dovecot.index.cache handling
    that may have caused unnecessary "cache is corrupted" errors.
  - doveadm backup didn't notice if emails were missing from the
    middle of the destination mailbox. Now it deletes and resyncs
    the mailbox.
  - auth: If auth client listed userdb and disconnected before
    finishing, the auth worker process got stuck (and eventually
    all workers could get used up and requests would start
    failing).
- update dovecot pigeonhole to 0.4.3
  * Editheader extension: Made control characters allowed for
    editheader, except NUL. Before, this would cause a runtime
    error.
  + Upgraded Dovecot-specific Sieve "vnd.dovecot.duplicate"
    extension to match the new draft "duplicate" extension.
  - Fixed sieve_result_global_log_error to log only as i_info in
    administrator log (syslog) if executed from multiscript
    context.
  - Sieve redirect extension: Adjusted loop detection to show
    leniency to resent messages.
  - Sieve include extension: Fixed problem with handling of
    duplicate includes with different parameters :once or
    :optional.
  - Sieve spamtest/virustest extensions: Tests were erroneously
    performed against the original message. When used together with
    extprograms filter to add the spam headers, the changes were
    not being used by the spamtest and virustest extensions.
  - Deprecated Sieve notify extension: Fixed segfault problems in
    message string substitution.
  - ManageSieve: Fixed active link verification to handle redundant
    path slashes correctly.
  - Sieve vacation extension:
  - Fixed interaction of sieve_vacation_dont_check_recipient with
    sieve_vacation_send_from_recipient setting.
  - Fixed log message for discarded response.
  - Sieve extprograms plugin:
  - Forgot to disable the alarm() timeouts set for script
    execution.
  - Fixed fd leak and handling of output shutdown.
  - Fixed 'Bad filedescriptor' error occurring when disconnecting
    script client.
  - Made sure that programs are never forked with root
    privileges.</changelog>
  <changelog author="mrueckert@suse.de" date="1414324800">- update to version 2.2.15
  * Plugins can now print a banner comment in doveconf output
    (typically the plugin version)
  * Replication plugin now triggers low (instead of high) priority
    for mail copying operations.
  * IMAP/POP3/ManageSieve proxy: If destination server can't be
    connected to, retry connecting once per second up to the value
    of proxy_timeout. This allows quick restarts/upgrades on the
    backend server without returning login failures.
  * Internal passdb lookups (e.g. done by lmtp/doveadm proxy)
    wasn't returning failure in some situations where it should
    have (e.g. allow_nets mismatch)
  * LMTP uses mail_log_prefix now for logging mail deliveries
    instead of a hardcoded prefix. The non-delivery log prefix is
    still hardcoded though.
  + passdb allow_nets=local matches lookups that don't contain an
    IP address (internally done by Dovecot services)
  + Various debug logging and error logging improvements
  - Various race condition fixes to LAYOUT=index
  - v2.2.14 virtual plugin crashed in some situations
- added dovecot-2.2-pigeonhole-0.4.3_adapt_to_2.2.15.patch
  Adjusted to datastack-related changes in Dovecot lib-storage.
  Patch can be removed when we upgrade to pigeonhole 0.4.4</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="mrueckert@suse.de" date="1418644800">- update to dovecot-pigeonhole 0.4.6
  - After make distclean the distributed tarball would fail to
    recompile.  This causes problems for some distribution builds.
- changes in dovecot-pigeonhole 0.4.5
  + Added a Pigeonhole version banner to doveconf output. This way,
    future bug reports will also include Pigeonhole version
    information.
  - Fixed handling of implicit keep. Last version erroneously
    reported that implicit keep succeeded after an earlier failure,
    while it in fact had failed. Particularly occurred for mailbox
    quota errors.
  - Fixed segfault occurring on SunOS systems when there is no
    active script.
- changes in dovecot-pigeonhole 0.4.4
  * Added support for Japanese mail addresses with dots at
    non-standard places in localpart.
  * Changed handling of ENOSPACE into a normal temporary failure
    and added handling of ENOQUOTA as a user error.
  * Restructured result execution, so that all actions which
    involve mail storage are always committed before all others.
  + Implemented support for generic Sieve storages. Using
    alternative storages now also possible for
    sieve_before/sieve_after.
  + Implemented storage driver for retrieving Sieve scripts from
    LDAP. This currently cannot be used with ManageSieve.
  + Implemented sieve_redirect_envelope_from setting, which allows
    configuring the envelope sender of redirected messages.
  - Fixed handling of mail storage errors occurring while
    evaluating the input message.
  - managesieve-login:
  - Removed bogus ALERT response code returned for AUTHENTICATE
    command.
  - Fixed handling of invalid initial response argument to
    AUTHENTICATE command.
  - Fixed handling of stream errors in lexical scanner.
  - Fixed handling of SMTP errors. Permanent and temporary errors
    were mixed up.
  - Fixed several problems reported by CLang 3.4.
  - duplicate extension: Fixed erroneous compile error about
    conflicting tags when `:handle' argument was used last.
  - relational extension: Fixed error handling of `:value' match.
  - editheader extension: Fixed header unfolding and header
    iteration.
  - mailbox extension: Fixed the `:create' tag, which erroneously
    subscribed an existing folder.
  - extprograms plugin: Fixed handling of error codes.
  - doveadm-sieve plugin: Fixed several bugs. Synchronization of
    symbolic link in the file storage should now also work
    properly.
- drop dovecot-2.2-pigeonhole-0.4.3_adapt_to_2.2.15.patch:
  included in release
- enable ldap storage for sieve scripts</changelog>
  <changelog author="mrueckert@suse.de" date="1429790400">- update to 2.2.16
  * dbox: Resyncing (e.g. doveadm force-resync) no longer deletes
    dovecot.index.cache file. The cache file was rarely the problem
    so this just caused unnecessary slowness.
  * Mailbox name limits changed during mailbox creation: Each part
    of a hierarchical name (e.g. "x" or "y" in "x/y") can now be up
    to 255 chars long (instead of 200). This also reduces the max
    number of hierarchical levels to 16 (instead of 20) to keep the
    maximum name length 4096 (a common PATH_MAX limit). The 255
    char limit is hopefully large enough for migrations from all
    existing systems.  It's also the limit on many filesystems.
  + director: Added director_consistent_hashing setting to enable
    consistent hashing (instead of the mostly-random MD5 hashing).
    This causes fewer user moves between backends when backend
    counts are changed, which may improve performance (mainly due
    to caching).
  + director: Added support for "tags", which allows one director
    ring to serve multiple backend clusters with different sets of
    users.
  + LMTP server: Added lmtp_user_concurrency_limit setting to limit
    how many LMTP deliveries can be done concurrently for a single
    user.
  + LMTP server: Added support for STARTTLS command.
  + If logging data is generated faster than it can be written, log
    a warning about it and show information about it in log
    process's process title in ps output. Also don't allow a single
    service to flood too long at the cost of delaying other
    services' logging.
  + stats: Added support for getting global statistics.
  + stats: Use the same session IDs as the rest of Dovecot.
  + stats: Plugins can now create their own statistics fields
  + doveadm server: Non-mail related commands can now also be used
    via doveadm server (TCP socket).
  + doveadm proxying: passdb lookup can now override doveadm_port
    and change the username.
  + doveadm: Search query supports now "oldestonly" parameter to
    stop immediately on the first non-match. This can be used to
    optimize: doveadm expunge mailbox Trash savedbefore 30d
    oldestonly
  + doveadm: Added "save" command to directly save mails to
    specified mailbox (bypassing Sieve).
  + doveadm fetch: Added body.snippet field, which returns the
    first 100 chars of a message without whitespace or HTML tags.
    The result is stored into dovecot.index.cache, so it can be
    fetched efficiently.
  + dsync: Added -t &lt;timestamp&gt; parameter to sync only mails newer
    than the given received-timestamp.
  + dsync: Added -F [-]&lt;flag&gt; parameter to sync only mails
    with[out] the given flag/keyword.
  + dsync: Added -a &lt;mailbox&gt; parameter to specify the virtual
    mailbox containing user's all mails. If this mailbox is already
    found to contain the wanted mail (by its GUID), the message is
    copied from there instead of being re-saved. (This isn't
    efficient enough yet for incremental replication.)
  + dsync: -m parameter can now specify \Special-use names for
    mailboxes.
  + imapc: Added imapc_features=gmail-migration to help migrations
    from GMail. See http://wiki2.dovecot.org/Migration/Gmail
  + imapc: Added imapc_features=search to support IMAP SEARCH
    command.  (Currently requires ESEARCH support from remote
    server.)
  + expire plugin: Added expire_cache=yes setting to cache most of
    the database lookups in dovecot index files.
  + quota: If overquota-flag in userdb doesn't match the current
    quota usage, execute a configured script.
  + redis dict: Added support for expiring keys (:expire_secs=n)
    and specifying the database number (:db=n)
  - auth: Don't crash if master user login is attempted without any
    configured master=yes passdbs
  - Parsing UTF-8 text for mails could have caused broken results
    sometimes if buffering was split in the middle of a UTF-8
    character.  This affected at least searching messages.
  - String sanitization for some logged output wasn't done
    properly: UTF-8 text could have been truncated wrongly or the
    truncation may not have happened at all.
  - fts-lucene: Lookups from virtual mailbox consisting of over 32
    physical mailboxes could have caused crashes.
- update to dovecot-pigeonhole 0.4.7
  * editheader extension: Made protection against addition and
    deletion of headers configurable separately. Also, the
    `Received' and `Auto-Submitted' headers are no longer protected
    against addition by default.
  * Turned message envelope address parse errors into warnings.
  * The interpreter now accepts non-standard domain names, e.g.
    containing '_'.
  + Implemented the Sieve index extension (RFC 5260).
  + Implemented support for the mboxmetadata and servermetadata
    extensions (RFC 5490).
  + Implemented new sieve commands for the doveadm command line
    utility. These commands are currently limited to ManageSieve
    operations, but the other current sieve tools will be migrated
    to doveadm in the near future as well.
  + Added more debug output about binary up-to-date checking.
  + Added script metadata to binary dump output.
  - Fixed Sieve script binary up-to-date checking by normalizing
    the script location.
  - The Sieve interpreter now flushes the duplicate database during
    start phase of result execution rather than commit phase. This
    makes sure locks on the duplicate database are released as soon
    as possible, preventing contention.
  - Performed a few optimizations in the lexical scanner of the
    language.
  - Fixed bug in `:matches' match-type that made a pattern without
    wildcards match as if there were a '*' at the beginning.
  - Fixed crash in validation of the string parameter of the
    comparator tag.
  - extprograms extension: Made sure supplemental group privileges
    are also dropped. This was a problem reported by Debian
    lintian.
  - Fixed bug in handling of binary errors for action side-effects
    and message overrides.
  - file script storage: Restructured storage initialization to
    address backwards compatibility issues.
  - dict script storage: Fixed small memory allocation bug.
- reordered files section a little</changelog>
  <changelog author="mrueckert@suse.de" date="1429790401">- enable lz4 on 13.2 and newer
- added cyrus-sasl-devel to enable sasl support for ldap</changelog>
</package>
<package pkgid="57af99e7e65f4217cc28273434bc8543be225683" name="dovecot22-fts-solr" arch="i586">
  <version epoch="0" ver="2.2.31" rel="100.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="54f6261da63dec684c83b3d5edb28e3ec626422d" name="dovecot22-fts-squat" arch="i586">
  <version epoch="0" ver="2.2.31" rel="100.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="d5397e0c2b4ef9059d494f0f987f71cf8e31e373" name="imapsync" arch="noarch">
  <version epoch="0" ver="1.32" rel="27.1"/>
  <changelog author="&lt;p.heinlein@heinlein-support.de&gt;" date="1263643200">- initial spec-file for openSUSE build service</changelog>
</package>
<package pkgid="9672e9bdde1b38f3dae9ee6ba3645e706703f03e" name="imapsync" arch="src">
  <version epoch="0" ver="1.32" rel="27.1"/>
  <changelog author="&lt;p.heinlein@heinlein-support.de&gt;" date="1263643200">- initial spec-file for openSUSE build service</changelog>
</package>
<package pkgid="6db628a187e196390fc0b39c220aec5ff286a5fb" name="ocsinventory-agent" arch="i586">
  <version epoch="0" ver="2.0" rel="11.1"/>
  <changelog author="Remi Collet &lt;Fedora@famillecollet.com&gt; 1.1.2.1-1" date="1286971200">- security update for CVE-2009-0667
  http://bugs.debian.org/590879
  http://www.debian.org/security/2009/dsa-1828</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.1.2.1-2" date="1297166400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Sebastian Hetze &lt;she@lunetix.de&gt; - 2.0-2" date="1309262400">- update to new upstream version 2.0</changelog>
</package>
<package pkgid="850583ea8737477ef256875c84d58db847ef7468" name="ocsinventory-agent" arch="src">
  <version epoch="0" ver="2.0" rel="11.1"/>
  <changelog author="Remi Collet &lt;Fedora@famillecollet.com&gt; 1.1.2.1-1" date="1286971200">- security update for CVE-2009-0667
  http://bugs.debian.org/590879
  http://www.debian.org/security/2009/dsa-1828</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.1.2.1-2" date="1297166400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Sebastian Hetze &lt;she@lunetix.de&gt; - 2.0-2" date="1309262400">- update to new upstream version 2.0</changelog>
</package>
<package pkgid="a7d92955a1883b29f0023e159de5d2a62800cb57" name="ocsinventory-agent" arch="x86_64">
  <version epoch="0" ver="2.0" rel="11.1"/>
  <changelog author="Remi Collet &lt;Fedora@famillecollet.com&gt; 1.1.2.1-1" date="1286971200">- security update for CVE-2009-0667
  http://bugs.debian.org/590879
  http://www.debian.org/security/2009/dsa-1828</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.1.2.1-2" date="1297166400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Sebastian Hetze &lt;she@lunetix.de&gt; - 2.0-2" date="1309262400">- update to new upstream version 2.0</changelog>
</package>
<package pkgid="554e542f9089224d61b4925423f043b50eaae0ab" name="ocsinventory-agent-debuginfo" arch="i586">
  <version epoch="0" ver="2.0" rel="11.1"/>
  <changelog author="Remi Collet &lt;Fedora@famillecollet.com&gt; 1.1.2.1-1" date="1286971200">- security update for CVE-2009-0667
  http://bugs.debian.org/590879
  http://www.debian.org/security/2009/dsa-1828</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.1.2.1-2" date="1297166400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Sebastian Hetze &lt;she@lunetix.de&gt; - 2.0-2" date="1309262400">- update to new upstream version 2.0</changelog>
</package>
<package pkgid="f635b7a27bab40bcaff03533e8bd7c77688874c2" name="ocsinventory-agent-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0" rel="11.1"/>
  <changelog author="Remi Collet &lt;Fedora@famillecollet.com&gt; 1.1.2.1-1" date="1286971200">- security update for CVE-2009-0667
  http://bugs.debian.org/590879
  http://www.debian.org/security/2009/dsa-1828</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.1.2.1-2" date="1297166400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Sebastian Hetze &lt;she@lunetix.de&gt; - 2.0-2" date="1309262400">- update to new upstream version 2.0</changelog>
</package>
<package pkgid="9a458d96ff1f9ecd1acbf5a79751a1e4d8c57c9f" name="policyd-weight" arch="noarch">
  <version epoch="0" ver="0.1.15b2" rel="17.1"/>
  <changelog author="p.heinlein@heinlein-support.de" date="1226750400">- initial version 0.1.14-beta-17 1.0</changelog>
</package>
<package pkgid="d6754679963628a74e34a7b850cb7bd62660e53b" name="policyd-weight" arch="src">
  <version epoch="0" ver="0.1.15b2" rel="17.1"/>
  <changelog author="p.heinlein@heinlein-support.de" date="1226750400">- initial version 0.1.14-beta-17 1.0</changelog>
</package>
<package pkgid="8d6e17d07810dec12b83c572895bf522cd94a2d1" name="qtop" arch="noarch">
  <version epoch="0" ver="1.1" rel="1.1"/>
  <changelog author="p.heinlein@heinlein-support.de" date="1226836800">- initial version 1.0</changelog>
  <changelog author="p.heinlein@heinlein-support.de" date="1233662400">- Support for Mailman, version 1.1</changelog>
</package>
<package pkgid="376cec1821e03a7ec513f173cab7ae8f04cf037a" name="qtop" arch="src">
  <version epoch="0" ver="1.1" rel="1.1"/>
  <changelog author="p.heinlein@heinlein-support.de" date="1226836800">- initial version 1.0</changelog>
  <changelog author="p.heinlein@heinlein-support.de" date="1233662400">- Support for Mailman, version 1.1</changelog>
</package>
<package pkgid="6f96de2871f8c1334c5ab2f9d75b33df25840c3f" name="rinetd" arch="i586">
  <version epoch="0" ver="0.62" rel="13.2.1"/>
  <changelog author="grimmer@suse.de" date="975412800">- moved init script to /etc/init.d and use system facility names
- moved convenience link rcrinetd to /usr/sbin/</changelog>
  <changelog author="grimmer@suse.de" date="976881600">- init script fixes (added $remote_fs to Required-Start, removed
  run level 2 from Default-Start, added check if binary exists)</changelog>
  <changelog author="grimmer@suse.de" date="977140800">- added Sourceadress extension by Lutz Pressler &lt;lp@SerNet.DE&gt;</changelog>
  <changelog author="olh@suse.de" date="978436800">- use script name in %post</changelog>
  <changelog author="grimmer@suse.de" date="984139200">- fixed typo in manpage (#6572)</changelog>
  <changelog author="grimmer@suse.de" date="987681600">- Updated init file according to new skeleton</changelog>
  <changelog author="grimmer@suse.de" date="1008590400">- removed rc.config variable and adjusted init script and spec file</changelog>
  <changelog author="mmj@suse.de" date="1015243200">- Split rinetd.dif into smaller patches for convienience and
  clarity [BUG #10255]</changelog>
  <changelog author="adrian@suse.de" date="1027771200">- do not source rc.config anymore</changelog>
  <changelog author="mmj@suse.de" date="1028116800">- Add %fillup_and_insserv PreReq</changelog>
  <changelog author="ro@suse.de" date="1032264000">- removed bogus self-provides</changelog>
  <changelog author="ro@suse.de" date="1042632000">- added logrotate config</changelog>
  <changelog author="mmj@suse.de" date="1061812800">- add patch for a potential buffer overrun caused by failure to
  reallocate one array when reallocating memory to accommodate
  more than the initially allocated capacity of 64 connections.</changelog>
  <changelog author="mmj@suse.de" date="1066305600">- Don't build as root
- Tiny cleanup of specfile</changelog>
  <changelog author="mmj@suse.de" date="1082116800">- Don't remove buildroot
- Compile with -fno-strict-aliasing</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="cthiel@suse.de" date="1219924800">- fix init script</changelog>
  <changelog author="coolo@novell.com" date="1245240000">- fix build</changelog>
  <changelog author="max@suse.de" date="1252411200">- Use version 0.62, obsoleting rinetd-secfix.diff
- Removed Windows binaries from the source tarball.
- Re-add -DLINUX to fix a performance problem (bnc#483381).
- Sanitized naming of patches.</changelog>
  <changelog author="max@suse.de" date="1289563200">- Fix a segfault during shutdown when there is no syslog directive
  in the config file (bnc#651178).</changelog>
</package>
<package pkgid="8ac37a272a96ba6db3c053d5692c6fac8cfcb592" name="rinetd" arch="src">
  <version epoch="0" ver="0.62" rel="13.2.1"/>
  <changelog author="grimmer@suse.de" date="975412800">- moved init script to /etc/init.d and use system facility names
- moved convenience link rcrinetd to /usr/sbin/</changelog>
  <changelog author="grimmer@suse.de" date="976881600">- init script fixes (added $remote_fs to Required-Start, removed
  run level 2 from Default-Start, added check if binary exists)</changelog>
  <changelog author="grimmer@suse.de" date="977140800">- added Sourceadress extension by Lutz Pressler &lt;lp@SerNet.DE&gt;</changelog>
  <changelog author="olh@suse.de" date="978436800">- use script name in %post</changelog>
  <changelog author="grimmer@suse.de" date="984139200">- fixed typo in manpage (#6572)</changelog>
  <changelog author="grimmer@suse.de" date="987681600">- Updated init file according to new skeleton</changelog>
  <changelog author="grimmer@suse.de" date="1008590400">- removed rc.config variable and adjusted init script and spec file</changelog>
  <changelog author="mmj@suse.de" date="1015243200">- Split rinetd.dif into smaller patches for convienience and
  clarity [BUG #10255]</changelog>
  <changelog author="adrian@suse.de" date="1027771200">- do not source rc.config anymore</changelog>
  <changelog author="mmj@suse.de" date="1028116800">- Add %fillup_and_insserv PreReq</changelog>
  <changelog author="ro@suse.de" date="1032264000">- removed bogus self-provides</changelog>
  <changelog author="ro@suse.de" date="1042632000">- added logrotate config</changelog>
  <changelog author="mmj@suse.de" date="1061812800">- add patch for a potential buffer overrun caused by failure to
  reallocate one array when reallocating memory to accommodate
  more than the initially allocated capacity of 64 connections.</changelog>
  <changelog author="mmj@suse.de" date="1066305600">- Don't build as root
- Tiny cleanup of specfile</changelog>
  <changelog author="mmj@suse.de" date="1082116800">- Don't remove buildroot
- Compile with -fno-strict-aliasing</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="cthiel@suse.de" date="1219924800">- fix init script</changelog>
  <changelog author="coolo@novell.com" date="1245240000">- fix build</changelog>
  <changelog author="max@suse.de" date="1252411200">- Use version 0.62, obsoleting rinetd-secfix.diff
- Removed Windows binaries from the source tarball.
- Re-add -DLINUX to fix a performance problem (bnc#483381).
- Sanitized naming of patches.</changelog>
  <changelog author="max@suse.de" date="1289563200">- Fix a segfault during shutdown when there is no syslog directive
  in the config file (bnc#651178).</changelog>
</package>
<package pkgid="0a65bf09b9a8eeee60f3829c88fa0dad7780d280" name="rinetd" arch="x86_64">
  <version epoch="0" ver="0.62" rel="13.2.1"/>
  <changelog author="grimmer@suse.de" date="975412800">- moved init script to /etc/init.d and use system facility names
- moved convenience link rcrinetd to /usr/sbin/</changelog>
  <changelog author="grimmer@suse.de" date="976881600">- init script fixes (added $remote_fs to Required-Start, removed
  run level 2 from Default-Start, added check if binary exists)</changelog>
  <changelog author="grimmer@suse.de" date="977140800">- added Sourceadress extension by Lutz Pressler &lt;lp@SerNet.DE&gt;</changelog>
  <changelog author="olh@suse.de" date="978436800">- use script name in %post</changelog>
  <changelog author="grimmer@suse.de" date="984139200">- fixed typo in manpage (#6572)</changelog>
  <changelog author="grimmer@suse.de" date="987681600">- Updated init file according to new skeleton</changelog>
  <changelog author="grimmer@suse.de" date="1008590400">- removed rc.config variable and adjusted init script and spec file</changelog>
  <changelog author="mmj@suse.de" date="1015243200">- Split rinetd.dif into smaller patches for convienience and
  clarity [BUG #10255]</changelog>
  <changelog author="adrian@suse.de" date="1027771200">- do not source rc.config anymore</changelog>
  <changelog author="mmj@suse.de" date="1028116800">- Add %fillup_and_insserv PreReq</changelog>
  <changelog author="ro@suse.de" date="1032264000">- removed bogus self-provides</changelog>
  <changelog author="ro@suse.de" date="1042632000">- added logrotate config</changelog>
  <changelog author="mmj@suse.de" date="1061812800">- add patch for a potential buffer overrun caused by failure to
  reallocate one array when reallocating memory to accommodate
  more than the initially allocated capacity of 64 connections.</changelog>
  <changelog author="mmj@suse.de" date="1066305600">- Don't build as root
- Tiny cleanup of specfile</changelog>
  <changelog author="mmj@suse.de" date="1082116800">- Don't remove buildroot
- Compile with -fno-strict-aliasing</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="cthiel@suse.de" date="1219924800">- fix init script</changelog>
  <changelog author="coolo@novell.com" date="1245240000">- fix build</changelog>
  <changelog author="max@suse.de" date="1252411200">- Use version 0.62, obsoleting rinetd-secfix.diff
- Removed Windows binaries from the source tarball.
- Re-add -DLINUX to fix a performance problem (bnc#483381).
- Sanitized naming of patches.</changelog>
  <changelog author="max@suse.de" date="1289563200">- Fix a segfault during shutdown when there is no syslog directive
  in the config file (bnc#651178).</changelog>
</package>
<package pkgid="49e39d96483c611dc236b7a237d1ccd1433e0362" name="rinetd-debuginfo" arch="i586">
  <version epoch="0" ver="0.62" rel="13.2.1"/>
  <changelog author="grimmer@suse.de" date="975412800">- moved init script to /etc/init.d and use system facility names
- moved convenience link rcrinetd to /usr/sbin/</changelog>
  <changelog author="grimmer@suse.de" date="976881600">- init script fixes (added $remote_fs to Required-Start, removed
  run level 2 from Default-Start, added check if binary exists)</changelog>
  <changelog author="grimmer@suse.de" date="977140800">- added Sourceadress extension by Lutz Pressler &lt;lp@SerNet.DE&gt;</changelog>
  <changelog author="olh@suse.de" date="978436800">- use script name in %post</changelog>
  <changelog author="grimmer@suse.de" date="984139200">- fixed typo in manpage (#6572)</changelog>
  <changelog author="grimmer@suse.de" date="987681600">- Updated init file according to new skeleton</changelog>
  <changelog author="grimmer@suse.de" date="1008590400">- removed rc.config variable and adjusted init script and spec file</changelog>
  <changelog author="mmj@suse.de" date="1015243200">- Split rinetd.dif into smaller patches for convienience and
  clarity [BUG #10255]</changelog>
  <changelog author="adrian@suse.de" date="1027771200">- do not source rc.config anymore</changelog>
  <changelog author="mmj@suse.de" date="1028116800">- Add %fillup_and_insserv PreReq</changelog>
  <changelog author="ro@suse.de" date="1032264000">- removed bogus self-provides</changelog>
  <changelog author="ro@suse.de" date="1042632000">- added logrotate config</changelog>
  <changelog author="mmj@suse.de" date="1061812800">- add patch for a potential buffer overrun caused by failure to
  reallocate one array when reallocating memory to accommodate
  more than the initially allocated capacity of 64 connections.</changelog>
  <changelog author="mmj@suse.de" date="1066305600">- Don't build as root
- Tiny cleanup of specfile</changelog>
  <changelog author="mmj@suse.de" date="1082116800">- Don't remove buildroot
- Compile with -fno-strict-aliasing</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="cthiel@suse.de" date="1219924800">- fix init script</changelog>
  <changelog author="coolo@novell.com" date="1245240000">- fix build</changelog>
  <changelog author="max@suse.de" date="1252411200">- Use version 0.62, obsoleting rinetd-secfix.diff
- Removed Windows binaries from the source tarball.
- Re-add -DLINUX to fix a performance problem (bnc#483381).
- Sanitized naming of patches.</changelog>
  <changelog author="max@suse.de" date="1289563200">- Fix a segfault during shutdown when there is no syslog directive
  in the config file (bnc#651178).</changelog>
</package>
<package pkgid="ce0be9e128b693cf70177c2073fc026a0d333853" name="rinetd-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.62" rel="13.2.1"/>
  <changelog author="grimmer@suse.de" date="975412800">- moved init script to /etc/init.d and use system facility names
- moved convenience link rcrinetd to /usr/sbin/</changelog>
  <changelog author="grimmer@suse.de" date="976881600">- init script fixes (added $remote_fs to Required-Start, removed
  run level 2 from Default-Start, added check if binary exists)</changelog>
  <changelog author="grimmer@suse.de" date="977140800">- added Sourceadress extension by Lutz Pressler &lt;lp@SerNet.DE&gt;</changelog>
  <changelog author="olh@suse.de" date="978436800">- use script name in %post</changelog>
  <changelog author="grimmer@suse.de" date="984139200">- fixed typo in manpage (#6572)</changelog>
  <changelog author="grimmer@suse.de" date="987681600">- Updated init file according to new skeleton</changelog>
  <changelog author="grimmer@suse.de" date="1008590400">- removed rc.config variable and adjusted init script and spec file</changelog>
  <changelog author="mmj@suse.de" date="1015243200">- Split rinetd.dif into smaller patches for convienience and
  clarity [BUG #10255]</changelog>
  <changelog author="adrian@suse.de" date="1027771200">- do not source rc.config anymore</changelog>
  <changelog author="mmj@suse.de" date="1028116800">- Add %fillup_and_insserv PreReq</changelog>
  <changelog author="ro@suse.de" date="1032264000">- removed bogus self-provides</changelog>
  <changelog author="ro@suse.de" date="1042632000">- added logrotate config</changelog>
  <changelog author="mmj@suse.de" date="1061812800">- add patch for a potential buffer overrun caused by failure to
  reallocate one array when reallocating memory to accommodate
  more than the initially allocated capacity of 64 connections.</changelog>
  <changelog author="mmj@suse.de" date="1066305600">- Don't build as root
- Tiny cleanup of specfile</changelog>
  <changelog author="mmj@suse.de" date="1082116800">- Don't remove buildroot
- Compile with -fno-strict-aliasing</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="cthiel@suse.de" date="1219924800">- fix init script</changelog>
  <changelog author="coolo@novell.com" date="1245240000">- fix build</changelog>
  <changelog author="max@suse.de" date="1252411200">- Use version 0.62, obsoleting rinetd-secfix.diff
- Removed Windows binaries from the source tarball.
- Re-add -DLINUX to fix a performance problem (bnc#483381).
- Sanitized naming of patches.</changelog>
  <changelog author="max@suse.de" date="1289563200">- Fix a segfault during shutdown when there is no syslog directive
  in the config file (bnc#651178).</changelog>
</package>
</otherdata>