notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Port details
dovecot-pigeonhole Sieve plugin for the Dovecot 'deliver' LDA and LMTP
0.5.8 mail on this many watch lists=13 search for ports that depend on this port An older version of this port was marked as vulnerable. Find issues related to this port Report an issue related to this port 0.5.7.2Version of this port present on the latest quarterly branch.
Maintainer: ler@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2017-08-07 21:44:12
Last Update: 2019-10-08 22:56:52
SVN Revision: 514106
License: LGPL21
Description:
SVNWeb : Homepage
pkg-plist: as obtained via: make generate-plist
Expand this list (96 items)
  1. @ldconfig
  2. /usr/local/share/licenses/dovecot-pigeonhole-0.5.8/catalog.mk
  3. /usr/local/share/licenses/dovecot-pigeonhole-0.5.8/LICENSE
  4. /usr/local/share/licenses/dovecot-pigeonhole-0.5.8/LGPL21
  5. share/doc/dovecot-pigeonhole/example-config/conf.d/20-managesieve.conf
  6. share/doc/dovecot-pigeonhole/example-config/conf.d/90-sieve-extprograms.conf
  7. share/doc/dovecot-pigeonhole/example-config/conf.d/90-sieve.conf
  8. share/doc/dovecot-pigeonhole/example-config/sieve-ldap.conf
  9. bin/sieve-dump
  10. bin/sieve-filter
  11. bin/sieve-test
  12. bin/sievec
  13. include/dovecot-2.3-pigeonhole/sieve/edit-mail.h
  14. include/dovecot-2.3-pigeonhole/sieve/mail-raw.h
  15. include/dovecot-2.3-pigeonhole/sieve/pigeonhole-config.h
  16. include/dovecot-2.3-pigeonhole/sieve/pigeonhole-version.h
  17. include/dovecot-2.3-pigeonhole/sieve/rfc2822.h
  18. include/dovecot-2.3-pigeonhole/sieve/sieve-actions.h
  19. include/dovecot-2.3-pigeonhole/sieve/sieve-address-parts.h
  20. include/dovecot-2.3-pigeonhole/sieve/sieve-address-source.h
  21. include/dovecot-2.3-pigeonhole/sieve/sieve-address.h
  22. include/dovecot-2.3-pigeonhole/sieve/sieve-ast.h
  23. include/dovecot-2.3-pigeonhole/sieve/sieve-binary-dumper.h
  24. include/dovecot-2.3-pigeonhole/sieve/sieve-binary-private.h
  25. include/dovecot-2.3-pigeonhole/sieve/sieve-binary.h
  26. include/dovecot-2.3-pigeonhole/sieve/sieve-code-dumper.h
  27. include/dovecot-2.3-pigeonhole/sieve/sieve-code.h
  28. include/dovecot-2.3-pigeonhole/sieve/sieve-commands.h
  29. include/dovecot-2.3-pigeonhole/sieve/sieve-common.h
  30. include/dovecot-2.3-pigeonhole/sieve/sieve-comparators.h
  31. include/dovecot-2.3-pigeonhole/sieve/sieve-config.h
  32. include/dovecot-2.3-pigeonhole/sieve/sieve-dump.h
  33. include/dovecot-2.3-pigeonhole/sieve/sieve-error-private.h
  34. include/dovecot-2.3-pigeonhole/sieve/sieve-error.h
  35. include/dovecot-2.3-pigeonhole/sieve/sieve-ext-copy.h
  36. include/dovecot-2.3-pigeonhole/sieve/sieve-ext-enotify.h
  37. include/dovecot-2.3-pigeonhole/sieve/sieve-ext-environment.h
  38. include/dovecot-2.3-pigeonhole/sieve/sieve-ext-imap4flags.h
  39. include/dovecot-2.3-pigeonhole/sieve/sieve-ext-mailbox.h
  40. include/dovecot-2.3-pigeonhole/sieve/sieve-ext-variables.h
  41. include/dovecot-2.3-pigeonhole/sieve/sieve-extensions.h
  42. include/dovecot-2.3-pigeonhole/sieve/sieve-generator.h
  43. include/dovecot-2.3-pigeonhole/sieve/sieve-interpreter.h
  44. include/dovecot-2.3-pigeonhole/sieve/sieve-lexer.h
  45. include/dovecot-2.3-pigeonhole/sieve/sieve-limits.h
  46. include/dovecot-2.3-pigeonhole/sieve/sieve-match-types.h
  47. include/dovecot-2.3-pigeonhole/sieve/sieve-match.h
  48. include/dovecot-2.3-pigeonhole/sieve/sieve-message.h
  49. include/dovecot-2.3-pigeonhole/sieve/sieve-objects.h
  50. include/dovecot-2.3-pigeonhole/sieve/sieve-parser.h
  51. include/dovecot-2.3-pigeonhole/sieve/sieve-plugins.h
  52. include/dovecot-2.3-pigeonhole/sieve/sieve-result.h
  53. include/dovecot-2.3-pigeonhole/sieve/sieve-runtime-trace.h
  54. include/dovecot-2.3-pigeonhole/sieve/sieve-runtime.h
  55. include/dovecot-2.3-pigeonhole/sieve/sieve-script-private.h
  56. include/dovecot-2.3-pigeonhole/sieve/sieve-script.h
  57. include/dovecot-2.3-pigeonhole/sieve/sieve-settings.h
  58. include/dovecot-2.3-pigeonhole/sieve/sieve-smtp.h
  59. include/dovecot-2.3-pigeonhole/sieve/sieve-storage-private.h
  60. include/dovecot-2.3-pigeonhole/sieve/sieve-storage.h
  61. include/dovecot-2.3-pigeonhole/sieve/sieve-stringlist.h
  62. include/dovecot-2.3-pigeonhole/sieve/sieve-types.h
  63. include/dovecot-2.3-pigeonhole/sieve/sieve-validator.h
  64. include/dovecot-2.3-pigeonhole/sieve/sieve.h
  65. lib/dovecot-2.3-pigeonhole/libdovecot-sieve.a
  66. lib/dovecot-2.3-pigeonhole/libdovecot-sieve.so
  67. lib/dovecot-2.3-pigeonhole/libdovecot-sieve.so.0
  68. lib/dovecot-2.3-pigeonhole/libdovecot-sieve.so.0.0.0
  69. lib/dovecot/doveadm/lib10_doveadm_sieve_plugin.a
  70. lib/dovecot/doveadm/lib10_doveadm_sieve_plugin.so
  71. lib/dovecot/lib95_imap_filter_sieve_plugin.a
  72. lib/dovecot/lib95_imap_filter_sieve_plugin.so
  73. lib/dovecot/lib95_imap_sieve_plugin.a
  74. lib/dovecot/lib95_imap_sieve_plugin.so
  75. lib/dovecot/sieve/lib90_sieve_imapsieve_plugin.a
  76. lib/dovecot/sieve/lib90_sieve_imapsieve_plugin.so
  77. lib/dovecot/lib90_sieve_plugin.a
  78. lib/dovecot/lib90_sieve_plugin.so
  79. lib/dovecot/settings/libmanagesieve_login_settings.a
  80. lib/dovecot/settings/libmanagesieve_login_settings.so
  81. lib/dovecot/settings/libmanagesieve_settings.a
  82. lib/dovecot/settings/libmanagesieve_settings.so
  83. lib/dovecot/settings/libpigeonhole_settings.a
  84. lib/dovecot/settings/libpigeonhole_settings.so
  85. lib/dovecot/sieve/lib90_sieve_extprograms_plugin.a
  86. lib/dovecot/sieve/lib90_sieve_extprograms_plugin.so
  87. libexec/dovecot/managesieve
  88. libexec/dovecot/managesieve-login
  89. man/man1/doveadm-sieve.1.gz
  90. man/man1/sieve-dump.1.gz
  91. man/man1/sieve-filter.1.gz
  92. man/man1/sieve-test.1.gz
  93. man/man1/sievec.1.gz
  94. man/man1/sieved.1.gz
  95. man/man7/pigeonhole.7.gz
  96. share/aclocal/dovecot-pigeonhole.m4
Collapse this list.
Dependency lines:
  • dovecot-pigeonhole>0:mail/dovecot-pigeonhole
Conflicts:
CONFLICTS_INSTALL:
  • dovecot-pigeonhole04
Conflicts Matches:
There are no Conflicts Matches for this port. This is usually an error.
To install the port: cd /usr/ports/mail/dovecot-pigeonhole/ && make install clean
To add the package: pkg install dovecot-pigeonhole
PKGNAME: dovecot-pigeonhole
Flavors: there is no flavor information for this port.
distinfo:

Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. dovecot>=2.3.8 : mail/dovecot
Runtime dependencies:
  1. dovecot>=2.3.8 : mail/dovecot
There are no ports dependent upon this port

Configuration Options

USES:

pkg-message:
If installing:
Master Sites:
  1. http://pigeonhole.dovecot.org/releases/2.3/
Notes from UPDATING
These upgrade notes are taken from /usr/ports/UPDATING
  • 2018-04-01
    Affects: users of mail/dovecot and mail/dovecot-pigeonhole
    Author: adamw@FreeBSD.org
    Reason: 
      Dovecot has been upgraded to 2.3.1, and pigeonhole to 0.5.1. Most
      existing dovecot installations MUST be modified for 2.3, but for
      most users the modifications are simple.
    
      Modify your Dovecot conf.d/ files before spinning up 2.3.1. The
      upgrading instructions are detailed here:
    
      	https://wiki2.dovecot.org/Upgrading/2.3
    
    
Port Moves
  • port moved here from mail/dovecot-pigeonhole04 on 2019-02-04
    REASON: Has expired: End of Life upstream, use mail/dovecot-pigeonhole instead

  • port moved here from mail/dovecot2-pigeonhole on 2017-08-07
    REASON: Renamed to mail/dovecot-pigeonhole

  • port moved here from mail/dovecot2-antispam-plugin on 2017-07-31
    REASON: Has expired: Use pigeonhole instead. See https://wiki2.dovecot.org/HowTo/AntispamWithSieve

  • port moved here from mail/dovecot-antispam on 2017-07-31
    REASON: Has expired: Dovecot-1.x is deprecated. Use dovecot2 and dovecot2-antispam-plugin instead

  • port moved here from mail/dovecot-sieve on 2017-07-31
    REASON: Has expired: Dovecot-1.x is deprecated. Use dovecot2 and dovecot-pigeonhole instead

  • port moved here from mail/dovecot-managesieve on 2017-07-31
    REASON: Has expired: Dovecot-1.x is deprecated. Use dovecot2 and dovecot-pigeonhole instead

Number of commits found: 30

Commit History - (may be incomplete: see SVNWeb link above for full details)
DateByDescription
08 Oct 2019 21:56:52
Original commit files touched by this commit  0.5.8
Revision:514106
ler search for other commits by this committer
mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.8 and 0.5.8 respectively.

release notes:
dovecot:
Changes

+ Added mail_delivery_started and mail_delivery_finished events, see
https://doc.dovecot.org/admin_manual/list_of_events/ for details.
+ dsync-replication: Don't replicate users who have "noreplicate" extra
field in userdb.
+ doveadm service status: Show total number of processes created.
+ When logging to syslog, use instance_name setting's value for the
ident. This commonly is added as a log prefix.
+ Base64 encoding/decoding code was rewritten with additional features.
It shouldn't cause any user visible changes.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
28 Aug 2019 15:59:59
Original commit files touched by this commit  0.5.7.2
Revision:510075
ler search for other commits by this committer
mail/dovecot,mail/dovecot-pigeonhole: fix CVE-2019-11500

Changes
-------
* CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes. Found by Nick Roessler and Rafi Rubin.

MFH:		2019Q3
Security:	CVE-2019-11500
13 Aug 2019 22:29:43
Original commit files touched by this commit  0.5.7.1_1
Revision:508882 This port version is marked as vulnerable.
mat search for other commits by this committer
onvert to UCL & cleanup pkg-message (categories l-m)
26 Jul 2019 20:46:57
Original commit files touched by this commit  0.5.7.1_1
Revision:507372 This port version is marked as vulnerable.
gerald search for other commits by this committer
Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
23 Jul 2019 14:26:56
Original commit files touched by this commit  0.5.7.1
Revision:507215 This port version is marked as vulnerable.
ler search for other commits by this committer
mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.7.1 and 0.5.7.1
respectively.

These releases fix the reported regressions in v2.3.7 & v0.5.7.

Dovecot core:
        - Fix TCP_NODELAY errors being logged on non-Linux OSes
        - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
        - Remove wrongly added checks in namespace prefix checking

Pigeonhole:
        - dsync: Sieve script syncing failed if mailbox attributes weren't
          enabled.
12 Jul 2019 13:20:30
Original commit files touched by this commit  0.5.7
Revision:506460 This port version is marked as vulnerable.
ler search for other commits by this committer
mail/dovecot, mail/dovecot-pigeonhole: Update to 2.3.7 and 0.5.7 respectively.

dovecot changelog:
* fts-solr: Removed break-imap-search parameter
+ Added more events for the new statistics, see
  https://doc.dovecot.org/admin_manual/list_of_events/
+ mail-lua: Add IMAP metadata accessors, see
  https://doc.dovecot.org/admin_manual/lua/
+ Add event exporters that allow exporting raw events to log files and
  external systems, see
  https://doc.dovecot.org/configuration_manual/event_export/
+ SNIPPET is now PREVIEW and size has been increased to 200 characters.
+ Add body option to fts_enforced. This triggers building FTS index only
  on body search, and an error using FTS index fails the search rather
  than reads through all the mails.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
30 Apr 2019 21:33:30
Original commit files touched by this commit  0.5.6
Revision:500569 This port version is marked as vulnerable.
ler search for other commits by this committer
mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.6, 0.5.6 respectively.

Dovecot changelog:
* CVE-2019-11494: Submission-login crashed with signal 11 due to null pointer
access when authentication was aborted by disconnecting.
* CVE-2019-11499: Submission-login crashed when authentication was started over
TLS secured channel and invalid authentication message was sent.
* auth: Support password grant with passdb oauth2.
+ Use system default CAs for outbound TLS connections.
+ Simplify array handling with new helper macros.
+ fts_solr: Enable configuring batch_size and soft_commit features.
- lmtp/submission: Fixed various bugs in XCLIENT handling, including a hang when
XCLIENT commands were sent infinitely to the remote server.
- lmtp/submission: Forwarded multi-line replies were erroneously sent as two
replies to the client.
- lib-smtp: client: Message was not guaranteed to contain CRLF consistently when
CHUNKING was used.
- fts_solr: Plugin was no longer compatible with Solr 7.
- Make it possible to disable certificate checking without setting
ssl_client_ca_* settings.
- pop3c: SSL support was broken.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
05 Mar 2019 23:34:13
Original commit files touched by this commit  0.5.5
Revision:494752 This port version is marked as vulnerable.
ler search for other commits by this committer
mail/dovecot and mail/dovecot-pigeonhole upgrade to 2.3.5 and 0.5.5 respectively

dovecot changelog:
+ Lua push notification driver: mail keywords and flags are provided in
MessageNew and MessageAppend events.
+ submission: Implement support for plugins.
+ auth: When auth_policy_log_only=yes, only log what the policy server response
would do without actually doing it.
+ auth: Always log policy server decisions with auth_verbose=yes
- v2.3.[34]: doveadm log errors: Output was missing user/session
- lda: Debug log lines could have shown slightly corrupted
- login proxy: Login processes may have crashed in various ways when
login_proxy_max_disconnect_delay was set.
- imap: Fix crash with Maildir+zlib if client disconnects during APPEND
- lmtp proxy: Fix potential assert-crash
- lmtp/submission: Fix crash when SMTP client transaction times out
- submission: Split large XCLIENT commands to 512 bytes per command, so Postfix
accepts them.
- submission: Fix crash when client sends invalid BURL command
(Only the first 15 lines of the commit message are shown above View all of this commit message)
12 Dec 2018 01:35:36
Original commit files touched by this commit  0.5.4_1
Revision:487272 This port version is marked as vulnerable.
gerald search for other commits by this committer
Bump PORTREVISION for ports depending on the canonical version of GCC
defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t
GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
23 Nov 2018 15:12:44
Original commit files touched by this commit  0.5.4
Revision:485675 This port version is marked as vulnerable.
ler search for other commits by this committer
mail/dovecot update to 2.3.4, mail/dovecot-pigeonhole to 0.5.4

dovecot change log:
* The default postmaster_address is now "postmaster@<user domain or
   server hostname>". If username contains the @domain part, that's
   used. If not, then the server's hostname is used.
* "doveadm stats dump" now returns two decimals for the "avg" field.

+ Added push notification driver that uses a Lua script
+ Added new SQL, DNS and connection events.
   See https://wiki2.dovecot.org/Events
+ Added "doveadm mailbox cache purge" command.
+ Added events API support for Lua scripts
+ doveadm force-resync -f parameter performs "index fsck" while opening
   the index. This may be useful to fix some types of broken index files.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
01 Oct 2018 23:18:30
Original commit files touched by this commit  0.5.3
Revision:481076 This port version is marked as vulnerable.
ler search for other commits by this committer
mail/dovecot upgrade to 2.3.3, mail/dovecot-pigeonhole upgrade to 0.5.3.

dovecot changelog:
* doveconf hides more secrets now in the default output.
* ssl_dh setting is no longer enforced at startup. If it's not set and
   non-ECC DH key exchange happens, error is logged and client is
   disconnected.

+ Added log_debug=<filter> setting.
+ Added log_core_filter=<log filter> setting.
+ quota-clone: Write to dict asynchronously
+ --enable-hardening attempts to use retpoline Spectre 2 mitigations
+ lmtp proxy: Support source_ip passdb extra field.
+ doveadm stats dump: Support more fields and output stddev by default.
+ push-notification: Add SSL support for OX backend.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
29 Jul 2018 22:18:46
Original commit files touched by this commit  0.5.2_3
Revision:475857 This port version is marked as vulnerable.
gerald search for other commits by this committer
Bump PORTREVISION for ports depending on the canonical version of GCC
in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which
has now moved from GCC 6 to GCC 7 by default.

This includes ports
 - featuring USE_GCC=yes or USE_GCC=any,
 - featuring USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and those
 - with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
   c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.

PR:		222542
29 Jun 2018 19:05:16
Original commit files touched by this commit  0.5.2_2
Revision:473575 This port version is marked as vulnerable.
ler search for other commits by this committer
mail/dovecot-pigeonhole: bump PORTREVISION.
29 Jun 2018 19:03:59
Original commit files touched by this commit  0.5.2_1
Revision:473574 This port version is marked as vulnerable.
ler search for other commits by this committer
mail/dovecot-pigeonhole: add imap_filter_sieve.txt to Makefile(s)
29 Jun 2018 18:44:50
Original commit files touched by this commit  0.5.2_1
Revision:473572 This port version is marked as vulnerable.
ler search for other commits by this committer
mail/dovecot-pigeonhole: add missing doc file

Obtained from:	upstream github
29 Jun 2018 16:36:04
Original commit files touched by this commit  0.5.2
Revision:473557 This port version is marked as vulnerable.
ler search for other commits by this committer
mail/dovecot, mail/dovecot-pigeonhole: upgrade to 2.3.2 and 0.5.2 respectively

dovecot changelog:
v2.3.2 is mainly a bugfix release. It contains all the changes in v2.2.36, as
well as a bunch of other fixes (mainly for v2.3-only bugs). Binary packages are
already in https://repo.dovecot.org/

* old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE while
   opening /proc/self/io. This may still cause security problems if the
   process is ptrace()d at the same time. Instead, open it while still
   running as root.
+ doveadm: Added mailbox cache decision&remove commands. See
   doveadm-mailbox(1) man page for details.
+ doveadm: Added rebuild attachments command for rebuilding
   $HasAttachment or $HasNoAttachment flags for matching mails. See
   doveadm-rebuild(1) man page for details.
+ cassandra: Use fallback_consistency on more types of errors
(Only the first 15 lines of the commit message are shown above View all of this commit message)
22 Apr 2018 21:35:38
Original commit files touched by this commit  0.5.1
Revision:468060 This port version is marked as vulnerable.
dbaio search for other commits by this committer
Add mail/dovecot22 (v2.2.35) and mail/dovecot-pigeonhole04 (v0.4.23)

This brings back Dovecot 2.2.35 to the tree because there is an issue
with version 2.3.1 and replication in some scenarios [1].

Keep this version until this problem gets fixed upstream.

1 - https://www.dovecot.org/list/dovecot/2018-April/111477.html

Approved by:	adamw (maintainer of mail/dovecot)
Approved by:	ler   (maintainer of mail/dovecot-pigeonhole)
01 Apr 2018 17:10:31
Original commit files touched by this commit  0.5.1
Revision:466172 This port version is marked as vulnerable.
adamw search for other commits by this committer
Update dovecot to 2.3.1, and dovecot-pigeonhole to 0.5.1

This is a very large update, and it WILL require manually
updating existing conf files, though the changes to do so
are not extensive. Updating instructions are here:

	https://wiki2.dovecot.org/Upgrading/2.3

Additionally there are various cleanups to the dovecot rc(8)
script, and support for a LUA scripting interface for dovecot.

The decision was made not to import the 2.3.0 or 2.3.0.1 releases
here, due to the number of existing bugs. ler and I have been
dogfooding it for months now, and all of the bugs I've encountered
are fixed in this 2.3.1 release.

This update is the result of many, many hours of collborative work
between ler and me, and the input of many people on the freebsd-ports
list.
20 Mar 2018 00:25:28
Original commit files touched by this commit  0.4.23
Revision:465041 This port version is marked as vulnerable.
ler search for other commits by this committer
mail/dovecot-pigeonhole: upgrade to 0.4.23:
- editheader extension: Corrected the stream position calculations
  performed while making the modified message available as a stream.
  Pigeonhole Sieve crashed in LMTP with an assertion panic when the
  Sieve editheader extension was used before the message was redirected.
  Experiments indicate that the problem occurred only with LMTP and that
  LDA is not affected.
- fileinto extension: Fix assert panic occurring when fileinto is used
  without being listed in the require line, while the copy extension is
  listed there. This is a very old bug.
- imapsieve plugin: Do not log an error for messages that disappear
  concurrently while applying Sieve scripts. This is a further
  improvement on the imapsieve fix in the previous release (which fixed
  a panic). This event is now logged as a debug message.
19 Mar 2018 15:06:05
Original commit files touched by this commit  0.4.22_1
Revision:465012 This port version is marked as vulnerable.
adamw search for other commits by this committer
Update dovecot to 2.2.35, and bump pigeonhole

    - charset_alias: compile fails with Solaris Studio, reported by
      John Woods.
    - Fix local name handling in v2.2.34 SNI code, bug found by cPanel.
    - imapc: Don't try to add mails to index if they already exist there.
    - imapc: If email is modified in istream_opened hook, mail size isn't
      updated.
    - lib-dcrypt: When reading encrypted data, more data would not be
      read if buffer was not consumed causing panic or hang.
    - notify: When notify plugin is used and transaction commit fails in
      dsync, crash occurs.
    - sdbox: When delivering to a mailbox that is over quota, temp files
      are not cleaned up when saving or copying fails.
02 Mar 2018 18:05:18
Original commit files touched by this commit  0.4.22
Revision:463423 This port version is marked as vulnerable.
ler search for other commits by this committer
mail/dovecot-pigeonhole: upgrade to v0.4.22.

Changelog:
- Fixed filesystem path handling problem: sieve plugin could have
  assert-crashed with specific path lengths with: "Panic: file
  realpath.c: line 86 (path_normalize): assertion failed: (npath_pos +
  1 < npath + asize)".
- Sieve extprograms plugin: Large output from "execute" command crashed
  delivery. Fixed buffering issue in code that handles output from the
  external program.
- editheader extension: Extensively reworked the low-level
  implementation of adding and removing headers. This solves a few
  integer arithmetic problems reported by Clang runtime checks, but also
  improves code structure and reliability in general.
- imapsieve: Fix assert crash occurring when selected messages are
  expunged concurrently by the time Sieve filter is to be applied.
- imap4flags extension: Fix binary byte-code corruption occurring when
  the setflag, addflag, or removeflag command's flag-list is a variable.
- enotify extension: mailto method: Fixed parsing of mailto URI with
  only a header part.
- enotify extension: mailto method: Make sure "From:" header is set to a
  usable address and not "(null)".
- Fixed writing address headers to outgoing messages. It sometimes
  erroneously applied another layer of MIME header encoding.
28 Feb 2018 23:12:44
Original commit files touched by this commit  0.4.21_2
Revision:463271 This port version is marked as vulnerable.
adamw search for other commits by this committer
Update dovecot to 2.2.34, and bump pigeonhole.

 * CVE-2017-15130: TLS SNI config lookups may lead to excessive
   memory usage, causing imap-login/pop3-login VSZ limit to be reached
   and the process restarted. This happens only if Dovecot config has
   local_name { } or local { } configuration blocks and attacker uses
   randomly generated SNI servernames.
 * CVE-2017-14461: Parsing invalid email addresses may cause a crash or
   leak memory contents to attacker. For example, these memory contents
   might contain parts of an email from another user if the same imap
   process is reused for multiple users. First discovered by Aleksandar
   Nikolic of Cisco Talos. Independently also discovered by "flxflndy"
   via HackerOne.
 * CVE-2017-15132: Aborted SASL authentication leaks memory in login
   process.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
20 Oct 2017 15:00:36
Original commit files touched by this commit  0.4.21_1
Revision:452533 This port version is marked as vulnerable.
ler search for other commits by this committer
mail/dovecot: update to 2.2.33.2.

One more patch release with some fixes:

- doveadm: Fix crash in proxying (or dsync replication) if remote is
  running older than v2.2.33
- auth: Fix memory leak in %{ldap_dn}
- dict-sql: Fix data types to work correctly with Cassandra

bump dovecot-pigeonhole PORTREVISION as well.
12 Oct 2017 21:16:04
Original commit files touched by this commit  0.4.21
Revision:451929 This port version is marked as vulnerable.
ler search for other commits by this committer
mail/dovecot-pigeonhole: update to 0.4.21.

Changelog v0.4.21:

* redirect action: Always set the X-Sieve-Redirected-From header to
  sieve_user_email if configured. Before, it would use the envelope
  recipient instead if available, which makes no sense if the primary
  e-mail address is available.
+ vacation extension: Allow ignoring the envelope sender while composing
  the "To:" header for the reply. Normally, the "To:" header is composed
  from the address found in the "Sender", "Resent-From" or "From"
  headers that is equal to the envelope sender. If none is then found,
  the bare envelope sender is used. This change adds a new setting
  "sieve_vacation_to_header_ignore_envelope". With this setting enabled,
  the "To:" header is always composed from those headers in the source
(Only the first 15 lines of the commit message are shown above View all of this commit message)
11 Oct 2017 17:15:52
Original commit files touched by this commit  0.4.20_3
Revision:451765 This port version is marked as vulnerable.
ler search for other commits by this committer
mail/dovecot: upgrade to 2.2.33.1.

- dovecot-lda was logging to stderr instead of to the log file.
10 Oct 2017 15:45:35
Original commit files touched by this commit  0.4.20_2
Revision:451707 This port version is marked as vulnerable.
adamw search for other commits by this committer
Update dovecot to 2.2.33, and bump pigeonhole.

* doveadm director commands wait for the changes to be visible in the
  whole ring before they return. This is especially useful in testing.
* Environments listed in import_environment setting are now set or
  preserved when executing standalone commands (e.g. doveadm)

+ doveadm proxy: Support proxying logs. Previously the logs were
  visible only in the backend's logs.
+ Added %{if}, see https://wiki2.dovecot.org/Variables#Conditionals
+ Added a new notify_status plugin, which can be used to update dict
  with current status of a mailbox when it changes. See
  https://wiki2.dovecot.org/Plugins/NotifyStatus
+ Mailbox list index can be disabled for a namespace by appending
  ":LISTINDEX=" to location setting.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
10 Sep 2017 20:55:39
Original commit files touched by this commit  0.4.20_1
Revision:449591 This port version is marked as vulnerable.
gerald search for other commits by this committer
Bump PORTREVISION for ports depending on the canonical version of GCC
(via Mk/bsd.default-versions.mk and lang/gcc) which has moved from
GCC 5.4 to GCC 6.4 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++11-lang,
   c++14-lang, c++0x, c11, or gcc-c++11-lib.

PR:		219275
27 Aug 2017 14:34:22
Original commit files touched by this commit  0.4.20
Revision:448822 This port version is marked as vulnerable.
ler search for other commits by this committer
mail/dovecot-pigeonhole: upgrade to 0.4.20.
Changelog v0.4.20:

+ Made the retention period for redirect duplicate identifiers
  configurable. For accounts that perform many redirects, the lda-dupes
  database could grow to impractical sizes. Changed the default
  retention period from 24 to 12 hours.
- sieve-filter: Fixed memory leak: forgot to clean up script binary at
  end of execution. Normally, this would merely be an inconsequential
  memory leak. However, when the script comes from an LDAP storage, this
  would cause io leak warnings.
- managesieve-login: Fixed handling of AUTHENTICATE command. A second
  authenticate command would be parsed wrong. This problem was caused by
  changes in the previous release.
- LDA Sieve plugin: Fixed minor memory leak caused by not cleaning up
  the sieve_discard script.
24 Aug 2017 16:49:23
Original commit files touched by this commit  0.4.19_2
Revision:448697 This port version is marked as vulnerable.
adamw search for other commits by this committer
Update dovecot to 2.2.32, and bump pigeonhole.

* imapc: Info-level line is logged every time when successfully
  connected to the remote server. This includes local/remote IP/port,
  which can be useful for matching against external logs.
* config: Log a warning if plugin { key=no } is used explicitly.
  v2.3 will support "no" properly in plugin settings, but for now
  any value at all for a boolean plugin setting is treated as "yes",
  even if it's written as explicit "no". This change will now warn
  that it most likely won't work as intended.

+ Various optimizations to avoid accessing files/directories when it's
  not necessary. Especially avoid accessing mail root directories when
  INDEX directories point to a different filesystem.
+ mail_location can now include ITERINDEX parameter. This tells Dovecot
(Only the first 15 lines of the commit message are shown above View all of this commit message)
07 Aug 2017 21:44:01
Original commit files touched by this commit  0.4.19_1
Revision:447519 This port version is marked as vulnerable.
adamw search for other commits by this committer
Rename dovecot2/dovecot2-pigeonhole to dovecot/dovecot-pigeonhole.

It might be necessary to manually remove and reinstall the package under
the new name.

Discussed with:	ler

Number of commits found: 30

Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD

This site
What is FreshPorts?
About the authors
Issues
FAQ
How big is it?
The latest upgrade!
Privacy
Forums
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
python37Oct 19
py-pillowOct 15
mod_perl2Oct 09
xpdfOct 06
xpdf3Oct 06
xpdf4Oct 06
unboundOct 03
cactiOct 02
gitlab-ceOct 02
gitlab-ceOct 02
ruby24Oct 02
ruby25Oct 02
mongodb34Sep 30
mongodb34Sep 30
mongodb36Sep 30

4 vulnerabilities affecting 12 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities

Last updated:
2019-10-19 10:52:46


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds

Statistics
Graphs
NEW Graphs (Javascript)
Traffic

Calculated hourly:
Port count 37693
Broken 75
Deprecated 100
Ignore 340
Forbidden 3
Restricted 156
No CDROM 73
Vulnerable 26
Expired 15
Set to expire 71
Interactive 0
new 24 hours 2
new 48 hours4
new 7 days18
new fortnight42
new month154

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD
Valid HTML, CSS, and RSS.
Copyright © 2000-2019 Dan Langille. All rights reserved.