File cyrus-imapd.changes of Package cyrus-imapd
-------------------------------------------------------------------
Fri Jun 27 06:45:47 UTC 2025 - Matthias Fehring <buschmann23@opensuse.org> - 3.8.6
- update to version 3.8.6
* STARTTLS changes
The industry is deprecating STARTTLS (aka opportunistic TLS) in
favor of implicit TLS over a dedicated port. STARTTLS is now
disabled by default.
Installations that need to service clients that use opportunistic
TLS should enable the allowstarttls imapd.conf(5) option for the
services that need it. For example, for a service configured
with the name imap in cyrus.conf(5), set imap_allowstarttls: on
to enable STARTTLS.
* Security changes
+ master: tighten up pidfile/etc handling
* Build changes
* Fixed: fix zoneinfo_db code for GCC 15 (gh#cyrusimap/cyrus-imapd#5450)
* Bug fixes
+ Fixed: deadlock on shutdown (gh#cyrusimap/cyrus-imapd#5309)
+ Fixed: recognise service-specific SASL options in
cyr_info conf-lint (gh#cyrusimap/cyrus-imapd#5424)
+ Fixed: fix double-free in http_admin (gh#cyrusimap/cyrus-imapd#5420)
+ Fixed: pop3d: add basic prometheus support
(gh#cyrusimap/cyrus-imapd#5460)
+ Fixed: httpd fails to parse OpenSSL version for status string
(gh#cyrusimap/cyrus-imapd#5454)
- update patches
* cyrus-imapd-3.8.5-rename.patch to cyrus-imapd-3.8.6-rename.patch
-------------------------------------------------------------------
Wed Jan 22 09:08:44 UTC 2025 - Matthias Fehring <buschmann23@opensuse.org> - 3.8.5
- update to version 3.8.5
* Build changes
+ Fixed: check for unexpected extra tiny-tests directories
(gh#cyrusimap/cyrus-imapd#5029)
+ Fixed: added --enable-release-checks configure option for use
when building releases (gh#cyrusimap/cyrus-imapd#5148)
* Bug fixes
+ Fixed: calendar-color "changes" namespace
(gh#cyrusimap/cyrus-imapd#4489)
+ Fixed: various portability warnings and nits
(gh#cyrusimap/cyrus-imapd#5009)
+ Fixed: iTIP line endings (gh#cyrusimap/cyrus-imapd#5050)
+ Fixed: iMIP line endings (gh#cyrusimap/cyrus-imapd#5052)
+ Fixed: http_cgi use after free (gh#cyrusimap/cyrus-imapd#5072)
+ Fixed: httpd crash when PROPFIND url is /dav/calendars
(gh#cyrusimap/cyrus-imapd#5094)
+ Fixed: broken language checks for "zr-hant" and "sr-me"
(gh#cyrusimap/cyrus-imapd#5118)
+ Fixed: proxying UID SEARCH (gh#cyrusimap/cyrus-imapd#5047)
- update patches
* cyrus-imapd-3.8.4-rename.patch to cyrus-imapd-3.8.5-rename.patch
-------------------------------------------------------------------
Mon Jul 29 13:20:56 UTC 2024 - Matthias Fehring <buschmann23@opensuse.org> - 3.8.4
- update to version 3.8.4
* Fixed: LITERAL+ broken in mupdate (gh#cyrusimap/cyrus-imapd#4932)
* Fixed: email headers in iMIP messages were not correctly encoded
(gh#cyrusimap/cyrus-imapd#4955)
* Fixed: updating a script on a pre-sieve mailbox server resulted
in an empty script on a sieve-mailbox replica
(gh#cyrusimap/cyrus-imapd#4947)
- update patches
* cyrus-imapd-3.8.3-rename.patch to cyrus-imapd-3.8.4-rename.patch
-------------------------------------------------------------------
Tue Jun 18 15:04:50 UTC 2024 - Matthias Fehring <buschmann23@opensuse.org> - 3.8.3
- use correct sbin and libexec directories: previously all was
installed into %%{_libexecdir}/cyrus/bin, now internal used executables
are installed into %%{_libexecdir}/cyrus and sbin binaries go into
%%{_sbindir}
- rename some conflicting binaries and their man pages that are also
provided by other packages
* %%{_sbindir}/fetchnews -> %%{_sbindir}/cyr_fetchnews
* %%{_sbindir}/restore -> %%{_sbindir}/cyr_restore
* %%{_sbindir}/quota -> %%{_sbindir}/cyr_quota
* add cyrus-imapd-3.8.3-rename.patch
- create more directories in the config diretory and mail partition
that would also be created by mkimap tool
- use systemd-sysusers to create user cyrus
* add cyrus-user.conf source file
- update SUSE specific files to version 3 (cyrus-imapd-rc-3.tar.gz)
* set correct path for backup script
- clean up spec file
* dropped package conflicts for *cyrus-*-kolab; those packages
weren't build in a really, really long time, since they were
obsoleted with cyrus-imapd 2.4
-------------------------------------------------------------------
Mon Jun 17 16:13:04 UTC 2024 - Matthias Fehring <buschmann23@opensuse.org> - 3.8.3
- fix perl linking: add linking or PCRE2 and libcap
* update cyrus-imapd-3.8.2-fix-perl-linking.patch
to cyrus-imapd-3.8.3-fix-perl-linking.patch
- remove obsolete cyrus-imapd-3.8.2-fix-newer-sphinx.patch
-------------------------------------------------------------------
Wed Jun 5 07:23:05 UTC 2024 - Matthias Fehring <buschmann23@opensuse.org> - 3.8.3
- update to version 3.8.3
* Fixed: Cyrus-IMAP through 3.8.2 and 3.10.0-beta2 allow authenticated
attackers to cause unbounded memory allocation by sending many
LITERALs in a single command.
The IMAP protocol allows for command arguments to be LITERALs of
negotiated length, and for these the server allocates memory to
receive the content before instructing the client to proceed.
The allocated memory is released when the whole command has been
received and processed.
The IMAP protocol has a number commands that specify an unlimited
number of arguments, for example SEARCH. Each of these arguments
can be a LITERAL, for which memory will be allocated and not
released until the entire command has been received and processed.
This can run a server out of memory, with varying consequences
depending on the server’s OOM policy.
Two limits, with corresponding imapd.conf(5) options, have been
added to address this:
+ maxargssize (default: unlimited): limits the overall length of
a single IMAP command. Deployments should configure this to a
size that suits their system resources and client usage patterns
+ maxliteral (default: 128K): limits the length of individual
IMAP LITERALs
Connections sending commands that would exceed these limits will
see the command fail, or the connection closed, depending on the
specific context. The error message will contain the [TOOBIG]
response code.
These limits may be set small without affecting message uploads,
as the APPEND command’s message literal is limited by
maxmessagesize, not by these new options. (CVE-2024-34055)
- spec file changes
* remove obsolete dependencies for documentation generation as we
are usin the pre built documentation from the release tarball
* remove obsolete cyrus-imapd-3.8.2-fix-newer-sphinx.patch
-------------------------------------------------------------------
Wed Mar 27 18:05:50 UTC 2024 - Matthias Fehring <buschmann23@opensuse.org> - 3.8.2
- update and rename patch cyrus-imapd-3.3.1-fix-perl-linking.patch
to cyrus-imapd-3.8.2-fix-perl-linking.patch
-------------------------------------------------------------------
Sun Mar 17 14:19:35 UTC 2024 - Matthias Fehring <buschmann23@opensuse.org> - 3.8.2
- spec file changes
* disable Link Time Optimization as Cyrus does not support it
* remove unnecessary build requirements
+ autoconf
+ automake
* update build requirements
+ pkgconfig(jansson) minimum 2.3 -> 2.10
+ pkgconfig(libnghttp2) minimum 1.5 -> 1.34.0
* do not run autoreconf, it is not needed on release tarballs
-------------------------------------------------------------------
Sun Mar 17 10:54:47 UTC 2024 - Matthias Fehring <buschmann23@opensuse.org> - 3.8.2
- update to version 3.8.2
* Build changes
+ PCRE2 is now supported and detected with pkg-config (used
by this package)
+ Fixed: missing include when ssl unavailable
(gh#cyrusimap/cyrus-imapd#4770)
* Bug fixes
+ Fixed: cyr_info(8) conf, conf-all, and conf-default
subcommands no longer crash (gh#cyrusimap/cyrus-imapd#4650)
+ Fixed: squat db reindexes are no longer always incremental
+ Fixed: squat db corruption from unintentional indexing of
fields intended to be skipped. Squat search databases may
benefit from a full (non-incremental) reindex
+ Fixed: squat db out of bounds access in incremental reindex
docID map (gh#cyrusimap/cyrus-imapd#4660)
+ Fixed: squat db searches now handle unindexed messages
correctly again (gh#cyrusimap/cyrus-imapd#4692)
+ Fixed: crash on copy/append fail in mailbox with custom user
flags (gh#cyrusimap/cyrus-imapd#4710)
+ Fixed: GETMETADATA no longer shows internal DAV mailboxes
(unless imapmagicplus is enabled and the user is authenticated
as username+dav@domain)
+ Fixed: pop3d now avoids splitting ".\r\n" across packet boundaries,
which can confuse some clients (gh#cyrusimap/cyrus-imapd#4717)
+ Fixed: potential uninitialized access in extract_convdata
(gh#cyrusimap/cyrus-imapd#4756)
+ Fixed: potential invalid read in message_parse_received_date
(gh#cyrusimap/cyrus-imapd#4771)
+ Fixed: strip known-timezones from iCalendar object
(gh#cyrusimap/cyrus-imapd#4663)
+ Fixed: failure in dav_reconstruct(1) when last message in
mailbox was expunged (gh#cyrusimap/cyrus-imapd#4722)
+ Fixed: fix renaming mailbox between users
(gh#cyrusimap/cyrus-imapd#4758)
+ Fixed: DAV requests now respond with 507 rather than 500 when
mailbox_maxmessages limits exceeded (gh#cyrusimap/cyrus-imapd#4424)
+ Fixed: mailbox_maxmessages limits now applied correctly
(gh#cyrusimap/cyrus-imapd#4804)
+ Fixed: crashes during TLS shutdown (gh#cyrusimap/cyrus-imapd#4785)
+ Fixed: PREVIEW message attribute must be qstring/literal, not an
atom (gh#cyrusimap/cyrus-imapd#4820)
+ Fixed: the default addressbook can no longer be deleted
(gh#cyrusimap/cyrus-imapd#4828)
* Other changes
+ Fixed: leniently handle unencoded valid UTF-8 strings in MIME
headers (gh#cyrusimap/cyrus-imapd#4671)
+ Fixed: some man pages were missing from distribution tarballs
(gh#cyrusimap/cyrus-imapd#4790)
- spec file changes
* enable support for JMAP
* use PCRE2 instead of PCRE
* change arch for package cyradm to noarch
- fix build with newer Sphinx
* cyrus-imapd-3.8.2-fix-newer-sphinx.patch
- removed patches now included upstream
* cyrus-imapd-3.8.1-fix-cyr_info.patch
- new rpmlint filters
* cyrus-imapd.* obsolete-not-provided cyrus-imapd-snmp.*
* cyrus-imapd.* non-standard-dir-in-var adm
* cyrus-imapd.* files-duplicate /etc/pam.d/.*
* cyradm.* bin-sh-syntax-error /usr/bin/cyradm
* cyrus-imapd.* bin-sh-syntax-error /usr/libexec/cyrus/tools/translatesieve
* perl-Cyrus-SIEVE-managesieve.* bin-sh-syntax-error /usr/bin/installsieve
-------------------------------------------------------------------
Fri Jan 19 08:25:32 UTC 2024 - Matthias Fehring <buschmann23@opensuse.org> - 3.8.1
- fix crash in cyr_info command because of missing handling for new
BYTESIZE option data type (gh#cyrusimap/cyrus-imapd#4650)
(gh#cyrusimap/cyrus-imapd#4723)
* add cyrus-imapd-3.8.1-fix-cyr_info.patch
-------------------------------------------------------------------
Mon Sep 11 07:56:58 UTC 2023 - Matthias Fehring <buschmann23@opensuse.org> - 3.8.1
- update to version 3.8.1
* Build changes
+ Fixed: libical >= 3.0.10 is required (gh#cyrusimap/cyrus-imapd#4071)
+ Fixed: retired custom manpage generator (gh#cyrusimap/cyrus-imapd#4561)
* Bug fixes
+ Fixed: incorrect error code used for JMAP invalidResultReference
errors (gh#cyrusimap/cyrus-imapd#4309)
+ Fixed: httpd crash with SIGSEGV when listing calendar
(gh#cyrusimap/cyrus-imapd#4523)
+ Fixed: leaked SSL_SESSION during backend disconnect
(gh#cyrusimap/cyrus-imapd#4544)
+ Fixed: cyr_cd.sh is bash, not sh (gh#cyrusimap/cyrus-imapd#4293)
+ Fixed: potential crash in jmap_email_parse (gh#cyrusimap/cyrus-imapd#4574)
+ Fixed: invalid FETCH BINARY response for sections with unknown
Content-Transfer-Encoding (gh#cyrusimap/cyrus-imapd#4567)
+ Fixed: XFER did not fully remove source mailbox
(gh#cyrusimap/cyrus-imapd#4370)
* Other changes
+ Fixed: better cyrusdb / ctl_cyrusdb -r UX (gh#cyrusimap/cyrus-imapd#4558)
-------------------------------------------------------------------
Mon Jun 5 08:55:52 UTC 2023 - Matthias Fehring <buschmann23@opensuse.org> - 3.8.0
- initial package version 3.8.0
- changes from 3.6.0
* https://www.cyrusimap.org/3.8/imap/download/release-notes/3.8/x/3.8.0.html
- before upgrading from previous versions please read
https://www.cyrusimap.org/3.8/imap/download/upgrade.html
