10:09 Kurt Jaeger (pi)  Author: Juraj Lutter

mail/dovecot-*: update 2.3.13 -> 2.3.15 and related ports

PR:			256860
Approved by:		fluffy (ports-secteam)
Submitted by:		otis
Relnotes:		https://dovecot.org/pipermail/dovecot-news/2021-June/000457.html
			https://dovecot.org/pipermail/dovecot-news/2021-March/000455.html
			https://dovecot.org/pipermail/dovecot-news/2021-March/000456.html
			https://dovecot.org/pipermail/dovecot-news/2021-June/000458.html
Security:		CVE-2021-29157, CVE-2021-33515, CVE-2020-28200
Differential Revision:	https://reviews.freebsd.org/D30866
MFH:			2021Q3

    21a797e

01:52 ler 

mail/dovecot: include mention of security.bsd.hardlink_check_{g,u}id in
pkg-message.

PR:		242223
Submitted by:	tphilipp@potion-studios.com

 

22:29 mat 

onvert to UCL & cleanup pkg-message (categories l-m)

 

17:10 adamw 

Update dovecot to 2.3.1, and dovecot-pigeonhole to 0.5.1

This is a very large update, and it WILL require manually
updating existing conf files, though the changes to do so
are not extensive. Updating instructions are here:

	https://wiki2.dovecot.org/Upgrading/2.3

Additionally there are various cleanups to the dovecot rc(8)
script, and support for a LUA scripting interface for dovecot.

The decision was made not to import the 2.3.0 or 2.3.0.1 releases
here, due to the number of existing bugs. ler and I have been
dogfooding it for months now, and all of the bugs I've encountered
are fixed in this 2.3.1 release.

This update is the result of many, many hours of collborative work
between ler and me, and the input of many people on the freebsd-ports
list.

 

20:05 adamw 

Improve clarity of dovecot's pkg-message

Change an ambigious "enable" to the actual value that causes a problem,
and fix spelling of "gid".

No PORTREVISION bump---there's a major update coming shortly, and this
change will get picked up then.

PR:		218392
Submitted by:	Jeremy Chadwick

 

11:09 amdmi3 

- Fix trailing whitespace in pkg-messages

Approved by:	portmgr blanket

 

13:52 olgeni 

Fix typo in pkg-message.

Feature safe:   yes

06:56 beech 

- Patch to facilitate multi-instance configurations

PR:             ports/129274
Submitted by:   Darren Pilgrim <phi@evilphi.com>
Approved by:    Yarema <yds@coolrat.org> (maintainer)

06:42 beech 

- Update to 1.1.3
- Add support for Berkeley DB used by the expire plugin.
- Install more DOCS.
- Move the SCRIPT_ENV substitutions to SUB_FILES
  otherwise DOVECOT_[UG]ID settings do not propagate to the binary package.
- Change from .if defined(WITHOUT_*)to .if defined(WITH_*) &&
!defined(WITHOUT_*)
- Make the PROTOCOLS substitution include all the protocols which are built
  into the example config file.
- Clean up patch-dovecot-example.conf and perform some post-patch processing
  to reflect more closely how this port actually installs. This is necessary
  because of the optional ManageSieve patch.
- Modify files/dovecot.sh.in to ensure runtime directories exist with correct
  permissions.
- Rework the install so all the example config files get installed into
  EXAMPLESDIR as per hier(7) independent of the NOPORTDOCS tunable. Install
  the relevant config files into etc/ if no prior version exists.
- Ensure that 'make install' and pkg_add(1) produce identical installs and
  that everything is accounted for in the PLIST.

PR:             ports/127200
Submitted by:   Yarema <yds@CoolRat.org> (maintainer)

16:29 stefan 

Update to dovecot-1.0.rc2, see
http://www.dovecot.org/list/dovecot-news/2006-July/000010.html.

PR:             100037
Submitted by:   maintainer
Approved by:    arved

16:43 itetcu 

Update the mail/dovecot to 1.0.b8, which addresses numerous problems
(including proper kqueue support -- that means us, BSD folks! ;) ),
the most important of which is a security hole (individuals are
allowed to list other users' mailboxes). [1]

Also move pkg-message --> files/pkg-message.in, list it in SUB_FILES and get
rid of custom hack in Makefile [2]

PR:             ports/97193 [1]
Submitted by:   Jeremy Chadwick <freebsd@jdc.parodius.com> [1]
                itetcu (me) [2]
Approved by:    Robin Breathe <robin@isometry.net> (maintainer),
                lawrance (mentor)
Security:       http://www.securityfocus.com/archive/1/433878 [1]
Security:       http://www.dovecot.org/list/dovecot-news/2006-May/000006.html
[1]