dovecot (1:2.2.22-1ubuntu2.4) xenial-security; urgency=medium * REGRESSION UPDATE: Revert CVE-2017-2669 fix as this version of dovecot is not affected by the security flaw and the change caused a regression in passdb and userdb dictionary authentication backends debian/patches/CVE-2017-2669.patch: Remove the patch -- Tyler Hicks Tue, 11 Apr 2017 14:29:20 +0000 dovecot (1:2.2.22-1ubuntu2.3) xenial-security; urgency=medium * SECURITY UPDATE: DoS via crafted username - debian/patches/CVE-2017-2669.patch: do not double-expand key in passdb dict when authenticating in src/auth/db-dict.c. - CVE-2017-2669 -- Marc Deslauriers Fri, 07 Apr 2017 13:34:12 -0400 dovecot (1:2.2.22-1ubuntu2.2) xenial; urgency=medium * d/p/fix-sieve-pigeonhole-crash-on-huge-mails.patch: Fix sieve-pigeonhole crash when filtering too much data (LP: #1633220) -- Christian Ehrhardt Wed, 09 Nov 2016 13:13:08 +0100 dovecot (1:2.2.22-1ubuntu2.1) xenial; urgency=medium * Disable dovecot-lucene plugin as it had various issues, universe dependencies and is deprecated in favor of solr (LP: #1524526). - make dovecot-lucene an empty package. - disable building lucene, now --without-lucene. - remove libclucene-dev build dependency. - drop debian/dovecot-lucene.links, debian/dovecot-lucene.dirs and drop debian/dovecot-lucene.lintian-overrides. - add dovecot-lucene.README.Debian and dovecot-lucene.NEWS to explain to users why it is empty. -- Christian Ehrhardt Wed, 21 Sep 2016 10:26:44 +0200 dovecot (1:2.2.22-1ubuntu2) xenial; urgency=medium * Rebuild against libmysqlclient20. -- Robie Basak Tue, 05 Apr 2016 12:19:25 +0000 dovecot (1:2.2.22-1ubuntu1) xenial; urgency=medium * Merge with Debian; remaining changes: + Add mail-stack-delivery package: - Update d/rules - d/control: convert existing dovecot-postfix package to a dummy package and add new mail-stack-delivery package. - Update maintainer scripts. - Rename d/dovecot-postfix.* to debian/mail-stack-delivery.* - d/mail-stack-delivery.preinst: Move previously installed backups and config files to a new package namespace. - d/mail-stack-delivery.prerm: Added to handle downgrades. + Use Snakeoil SSL certificates by default: - d/control: Depend on ssl-cert. + Add autopkgtest to debian/tests/*. + Add ufw integration: - d/dovecot-core.ufw.profile: new ufw profile. - d/rules: install profile in dovecot-core. - d/control: dovecot-core - suggest ufw. + d/dovecot-core.dirs: Added usr/share/doc/dovecot-core + Add apport hook: - d/rules, d/source_dovecot.py + Add upstart job: - d/rules, d/dovecot-core.dovecot.upstart, d/control, d/dovecot-core.dirs, dovecot-imapd.{postrm, postinst, prerm}, d/dovecot-pop3d.{postinst, postrm, prerm}. d/mail-stack-deliver.postinst: Convert init script to upstart. + d/control: Drop dovecot-postfix package as its no longer required. + Drop build dependency on libstemmer-dev (universe). -- Matthias Klose Mon, 21 Mar 2016 19:44:11 +0100 dovecot (1:2.2.22-1) unstable; urgency=medium [ Jaldhar H. Vyas ] * [2321581] Imported Upstream version 2.2.22 * [3fa8a62] Updated pigeonhole patch to 0.4.13 -- Jaldhar H. Vyas Fri, 18 Mar 2016 19:18:34 -0400 dovecot (1:2.2.21-1) unstable; urgency=medium [ Jaldhar H. Vyas ] * [d9c0630] Imported Upstream version 2.2.21 (Closes: #809666, #708539, #801346, 803223) * [5360548] Updated pigeonhole patch to 0.4.12 * [5e6783f] Fixed typo in dovecot-core.README.Debian. Thanks to Ingo Wichmann (Closes: #809717) * [d00d0c7] Create /var/lib/dovecot in the package. (Closes: #801752) * [6510373] Upstream patch for sync problem which could cause expunged messages to keep reappearing. (Closes: #684499) * [040f7fa] dovecot-core: dovecot.socket not enabled on installation (Closes: #814999) * [fc29003] /etc/dovecot/10-ssl.conf no longer managed by ucf or modified by postinst. Thanks to Santiago Vila (Closes: #773237) * [0d16e16] Fixed some lintian warnings. * [801ba7e] Added Apollon to uploaders [ Apollon Oikonomopoulos ] * [99ef3d8] Build with lz4 support (Closes: #784321) * [92f68aa] Fix nss userdb (Closes: #712764) * [41b9bde] Disable dovecot.socket in existing installations. * [49c5b97] d/rules: specify systemd unit dir manually (Closes: #720854) * [a377ccb] Convert to dh sequencer * [48af954] B-D on debhelper >= 9 * [591c315] Bump standards to 3.9.7; no changes needed * [ceb629e] Use dh_installinit --name * [ef8d8ac] d/rules: refactor file installation * [a899bcc] dovecot-core: use dh_installman * [6159e00] d/rules: build in parallel if requested * [51014e6] d/control: use HTTPS Vcs-* URLs * [b385cf5] dovecot-sieve: replace Conflicts with Breaks * [b4a9e68] Add basic DEP-8 tests * [7452649] Add DEP-8 tests for systemd support * [e5101aa] Re-enable PIE and bindnow * [5717808] Fix invoke-rc.d calls and never call init.d directly * [3504241] Drop debconf remains -- Jaldhar H. Vyas Tue, 01 Mar 2016 19:31:42 -0500 dovecot (1:2.2.20-1) UNRELEASED; urgency=medium * [68d5038] Imported Upstream version 2.2.20 -- Jaldhar H. Vyas Sun, 13 Dec 2015 10:21:21 -0500 dovecot (1:2.2.19-1) UNRELEASED; urgency=medium * [146ef57] Imported Upstream version 2.2.19 * [3af7cad] Updated pigeonhole patch to 0.4.9 -- Jaldhar H. Vyas Sun, 13 Dec 2015 09:41:56 -0500 # For older changelog entries, run 'apt-get changelog dovecot-core'