File cyrus-imapd.changes of Package cyrus-imapd
-------------------------------------------------------------------
Fri Jan 31 07:10:00 UTC 2025 - Matthias Fehring <buschmann23@opensuse.org> - 3.6.7
- only require libopenssl-1_1-devel for build instead of
pkgconfig(opensll) as this might get OpenSSL 3 that only has
preliminary support by Cyrus 3.6.x
-------------------------------------------------------------------
Wed Jan 22 08:15:26 UTC 2025 - Matthias Fehring <buschmann23@opensuse.org> - 3.6.7
- update to version 3.6.7
* Build changes
+ Fixed: check for unexpected extra tiny-tests directories
(gh#cyrusimap/cyrus-imapd#5029)
+ Fixed: added --enable-release-checks configure option for use
when building releases (gh#cyrusimap/cyrus-imapd#5148)
* Bug fixes
+ Fixed: relocate_by_id - fatal error: Unknown meta file requested
(gh#cyrusimap/cyrus-imapd#4848)
+ Fixed: iTIP line endings (gh#cyrusimap/cyrus-imapd#5050)
+ Fixed: iMIP line endings (gh#cyrusimap/cyrus-imapd#5052)
+ Fixed: http_cgi use after free (gh#cyrusimap/cyrus-imapd#5072)
+ Fixed: broken language checks for "zr-hant" and "sr-me"
(gh#cyrusimap/cyrus-imapd#5118)
- update patches
* cyrus-imapd-3.6.6-rename.patch to cyrus-imapd-3.6.7-rename.patch
-------------------------------------------------------------------
Mon Jul 29 12:56:54 UTC 2024 - Matthias Fehring <buschmann23@opensuse.org> - 3.6.6
- update to version 3.6.6
* Fixed: LITERAL+ broken in mupdate (gh#cyrusimap/cyrus-imapd#4932)
* Fixed: updating a script on a pre-sieve mailbox server resulted
in an empty script on a sieve-mailbox replica
(gh#cyrusimap/cyrus-imapd#4947)
- update patches
* cyrus-imapd-3.6.5-rename.patch to cyrus-imapd-3.6.6-rename.patch
-------------------------------------------------------------------
Tue Jun 18 13:24:06 UTC 2024 - Matthias Fehring <buschmann23@opensuse.org> - 3.6.5
- use correct sbin and libexec directories: previously all was
installed into %%{_libexecdir}/cyrus/bin, now internal used executables
are installed into %%{_libexecdir}/cyrus and sbin binaries go into
%%{_sbindir}
- rename some conflicting binaries and their man pages that are also
provided by other packages
* %%{_sbindir}/fetchnews -> %%{_sbindir}/cyr_fetchnews
* %%{_sbindir}/restore -> %%{_sbindir}/cyr_restore
* %%{_sbindir}/quota -> %%{_sbindir}/cyr_quota
* add cyrus-imapd-3.6.5-rename.patch
- create more directories in the config diretory and mail partition
that would also be created by mkimap tool
- use systemd-sysusers to create user cyrus
* add cyrus-user.conf source file
- update SUSE specific files to version 3 (cyrus-imapd-rc-3.tar.gz)
* set correct path for backup script
- clean up spec file
* dropped package conflicts for *cyrus-*-kolab; those packages
weren't build in a really, really long time, since they were
obsoleted with cyrus-imapd 2.4
-------------------------------------------------------------------
Mon Jun 17 15:47:17 UTC 2024 - Matthias Fehring <buschmann23@opensuse.org> - 3.6.5
- fix perl linking: add linking for PCRE2 and libcap
* cyrus-imapd-3.6.4-fix-perl-linking.patch to
cyrus-imapd-3.6.5-fix-perl-linking.patch
-------------------------------------------------------------------
Wed Jun 5 07:00:20 UTC 2024 - Matthias Fehring <buschmann23@opensuse.org> - 3.6.5
- update to version 3.6.5
* Fixed: Cyrus-IMAP through 3.8.2 and 3.10.0-beta2 allow authenticated
attackers to cause unbounded memory allocation by sending many
LITERALs in a single command.
The IMAP protocol allows for command arguments to be LITERALs of
negotiated length, and for these the server allocates memory to
receive the content before instructing the client to proceed.
The allocated memory is released when the whole command has been
received and processed.
The IMAP protocol has a number commands that specify an unlimited
number of arguments, for example SEARCH. Each of these arguments
can be a LITERAL, for which memory will be allocated and not
released until the entire command has been received and processed.
This can run a server out of memory, with varying consequences
depending on the server’s OOM policy.
Two limits, with corresponding imapd.conf(5) options, have been
added to address this:
+ maxargssize (default: unlimited): limits the overall length of
a single IMAP command. Deployments should configure this to a
size that suits their system resources and client usage patterns
+ maxliteral (default: 128K): limits the length of individual
IMAP LITERALs
Connections sending commands that would exceed these limits will
see the command fail, or the connection closed, depending on the
specific context. The error message will contain the [TOOBIG]
response code.
These limits may be set small without affecting message uploads,
as the APPEND command’s message literal is limited by
maxmessagesize, not by these new options. (CVE-2024-34055)
- spec file changes
* remove obsolete dependencies for documentation generation as we
are usin the pre built documentation from the release tarball
* remove obsolete cyrus-imapd-3.6.4-fix-newer-sphinx.patch
-------------------------------------------------------------------
Wed Mar 27 17:59:08 UTC 2024 - Matthias Fehring <buschmann23@opensuse.org> - 3.6.4
- update and rename patch cyrus-imapd-3.3.1-fix-perl-linking.patch
to cyrus-imapd-3.6.4-fix-perl-linking.patch
-------------------------------------------------------------------
Sun Mar 17 14:36:23 UTC 2024 - Matthias Fehring <buschmann23@opensuse.org> - 3.6.4
- spec file changes
* disable Link Time Optimization because Cyruso does not support it
* remove unnecessary build requirements
+ autoconf
+ automake
* update build requirements
+ pkgconfig(libnghttp2) minimum requirement 1.5 -> 1.34.0
* no need to run autoreconf on release tarballs
-------------------------------------------------------------------
Sun Mar 17 09:41:27 UTC 2024 - Matthias Fehring <buschmann23@opensuse.org> - 3.6.4
- update to version 3.6.4
* Build changes
+ Fixed: cunit crash when built with newer compilers
(gh#cyrusimap/cyrus-imapd#3974)
+ PCRE2 is now supported and detected with pkg-config (used by
this package)
+ Fixed: build failure when ssl.h unavailable
(gh#cyrusimap/cyrus-imapd#4770)
* Bug fixes
+ Fixed: sieve tester jmapquery
+ Fixed: ctl_mboxlist(8) crash (gh#cyrusimap/cyrus-imapd#4570)
+ Fixed: squat db reindexes are no longer always incremental
+ Fixed: squat db corruption from unintentional indexing of
fields intended to be skipped. Squat search databases may
benefit from a full (non-incremental) reindex
+ Fixed: squat db out of bounds access in incremental reindex
docID map (gh#cyrusimap/cyrus-imapd#4660)
+ Fixed: squat db searches now handle unindexed messages correctly
again (gh#cyrusimap/cyrus-imapd#4692)
+ Fixed: crash on copy/append fail in mailbox with custom user
flags (gh#cyrusimap/cyrus-imapd#4710)
+ Fixed: GETMETADATA no longer shows internal DAV mailboxes (unless
imapmagicplus is enabled and the user is authenticated as
username+dav@domain)
+ Fixed: pop3d now avoids splitting ".\r\n" across packet boundaries,
which can confuse some clients (gh#cyrusimap/cyrus-imapd#4717)
+ Fixed: lmtpd(8) processimip sieve action now correctly strips known
timezones from iCalendar objects (gh#cyrusimap/cyrus-imapd#4663)
+ Fixed: potential uninitialized access in extract_convdata
(gh#cyrusimap/cyrus-imapd#4756)
+ Fixed: potential invalid read in message_parse_received_date
(gh#cyrusimap/cyrus-imapd#4771)
+ Fixed: DAV requests now respond with 507 rather than 500 when
mailbox_maxmessages limits exceeded (gh#cyrusimap/cyrus-imapd#4424)
+ Fixed: mailbox_maxmessages limits now applied correctly
(gh#cyrusimap/cyrus-imapd#4804)
+ Fixed: PREVIEW message attribute must be qstring/literal, not an
atom (gh#cyrusimap/cyrus-imapd#4820)
+ Fixed: the default addressbook can no longer be deleted
(gh#cyrusimap/cyrus-imapd#4828)
* Other changes
+ Fixed: some man pages were missing from distribution tarballs
(gh#cyrusimap/cyrus-imapd#4790)
- spec file changes
* enable JMAP support
* use autosetup macro in prep script
* change arch for package cyradm to noarch
* use PCRE2 instead of PCRE
- fix build with newer Sphinx
* add cyrus-imapd-3.6.4-fix-newer-sphinx.patch
-------------------------------------------------------------------
Mon Sep 11 07:09:41 UTC 2023 - Matthias Fehring <buschmann23@opensuse.org> - 3.6.3
- update to version 3.6.3
* Fixed: incorrect error code used for JMAP invalidResultReference
errors (gh#cyrusimap/cyrus-imapd#4309)
* Fixed: fixed use of uninitialised value
(gh#cyrusimap/cyrus-imapd#4577)
* Fixed: timsieved shut_down crash (gh#cyrusimap/cyrus-imapd#4537)
* Fixed: leaked SSL_SESSION during backend disconnect
(gh#cyrusimap/cyrus-imapd#4544)
* Fixed: cyr_cd.sh is bash, not sh (gh#cyrusimap/cyrus-imapd#4293)
* Fixed: lock ordering fixes (gh#cyrusimap/cyrus-imapd#4359)
(gh#cyrusimap/cyrus-imapd#4611)
* Fixed: XFER did not fully remove source mailbox
(gh#cyrusimap/cyrus-imapd#4370)
* Fixed: potential crash in jmap_email_parse
(gh#cyrusimap/cyrus-imapd#4574)
* Fixed: assertion when setting sharedseen on a shared mailbox
(gh#cyrusimap/cyrus-imapd#4611)
* Fixed: invalid FETCH BINARY response for sections with unknown
Content-Transfer-Encoding (gh#cyrusimap/cyrus-imapd#4567)
* Fixed: better cyrusdb / ctl_cyrusdb -r UX
(gh#cyrusimap/cyrus-imapd#4558)
-------------------------------------------------------------------
Fri Jun 2 06:03:28 UTC 2023 - Matthias Fehring <buschmann23@opensuse.org>
- update to version 3.6.2
* Fixed: XFER to 3.4 destination no longer loses specialuse annotations
(gh#cyrusimap/cyrus-imapd#3771)
* Fixed: squatter(8) no longer crashes on invalid mailbox names
(gh#cyrusimap/cyrus-imapd#3892)
* Fixed: squatter(8) in rolling mode now periodically compacts
databases, rather than only at shutdown
(gh#cyrusimap/cyrus-imapd#4383)
* Fixed: JMAP no longer permits moving a mailbox under a deleted one
(gh#cyrusimap/cyrus-imapd#4401)
* Fixed: sieve path lookup errors no longer lead to writes to root
directory (gh#cyrusimap/cyrus-imapd#4415)
* Fixed: deleting mailboxes no longer leaves behind orphan I records
in mailboxes.db (gh#cyrusimap/cyrus-imapd#4426)
* Fixed: murder frontends now proxy DAV PUT correctly
(gh#cyrusimap/cyrus-imapd#4437)
* Fixed: murder frontends now proxy GETMETADATA correctly
(gh#cyrusimap/cyrus-imapd#4439)
* Fixed: httpd(8) no longer crashes on precondition failure during
deletion of calendar collection (gh#cyrusimap/cyrus-imapd#4442)
* Fixed: uninitialized value warning from cyradm(8) listmailbox command
(gh#cyrusimap/cyrus-imapd#4440)
* Fixed: missing calls to mailbox_iter_done()
(gh#cyrusimap/cyrus-imapd#4465)
* Fixed: ctl_mboxlist(8) -v option now detects and reports broken
UUID mailboxes (gh#cyrusimap/cyrus-imapd#4187)
- add python3-six to the BuildRequires to fix building docs on
Tumbleweed
-------------------------------------------------------------------
Mon Feb 13 18:54:22 UTC 2023 - Matthias Fehring <buschmann23@opensuse.org>
- update to version 3.6.1
* Fixed: backend_version() now properly parses the remote server's
version string, and can recognise when it is newer than the local
server. This means XFER to a newer backend no longer requires a
local software update to recognise the new version number first.
(gh#cyrusimap/cyrus-imapd#4380)
- require OpenSSL 1.1 on Tumbleweed as OpenSSL 3 is not supported yet
-------------------------------------------------------------------
Mon Dec 12 12:56:10 UTC 2022 - Matthias Fehring <buschmann23@opensuse.org> - 3.6.0
- initial package version 3.6.0
- changes from 3.4.0
* https://www.cyrusimap.org/3.6/imap/download/release-notes/3.6/x/3.6.0.html
- before upgrading from previous versions please read
https://www.cyrusimap.org/3.6/imap/download/upgrade.html
