* Mon Feb 28 2022 Matthias Fehring <buschmann23@opensuse.org>
- Add cyrus-imapd-2.4.22-fix-cve-2021-33582.patch: Fix CVE-2021-33582
- Add cyrus-imapd-2.4.22-recognize-new-backends.patch: Recognize
backends of Cyrus versions 3.6 and 3.7
* Wed Jan 19 2022 Peter Varkoly <varkoly@suse.com>
- Add conflicts entry for mailutils-delivery
* Sun Oct 31 2021 Marcus Meissner <meissner@suse.com>
- disable cmu.mib url, which no longer exists.
* Fri May 14 2021 Jan Engelhardt <jengelh@inai.de>
- Fix Tumbleweed build: don't depend on insserv. In fact, just
drop all sysvinit blocks.
* Tue Mar 09 2021 Matthias Fehring <buschmann23@opensuse.org>
- Update to 2.4.22
* Fixed: use-after-free segfault in imapd and mupdate-client
(gh#cyrusimap/cyrus-imapd#3312)
* Fixed: XFER now recognises 3.4 and 3.5 backends
- change source URLs to GitHub
- set correct perl interpreter shebang in tools/rehash
* Wed Dec 16 2020 Matthias Fehring <buschmann23@opensuse.org>
- fix build with glibc 2.30+
* cyrus-imapd-2.4.21-fix-bdb-function-conflict.patch
- disable lto
* Wed Dec 16 2020 Matthias Fehring <buschmann23@opensuse.org>
- Update to 2.4.21
* Fixed: timsieved segfault (gh#cyrusimap/cyrus-imapd#885)
* Fixed: better recovery from mupdate failure
(gh#cyrusimap/cyrus-imapd#2199)
* Fixed: sync_client now replicates annotations in user/mailbox mode
* Fixed: build failure with LibreSSL 2.7
* Fixed: XFER now correctly distinguishes between 2.3.x releases
* Fixed: XFER now recognises 3.1, 3.2 and 3.3 backends
(gh#cyrusimap/cyrus-imapd#885)
* Fixed: XFER now syslogs a warning when it doesn't recognise the
backend Cyrus version
* Fri Jul 19 2019 matthias.gerstner@suse.com
- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
firewalld, see [1].
[1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html
* Wed Jan 23 2019 liedke@rz.uni-mannheim.de
- Update to 2.4.20
* Fixed: lmtpd crash
* Fixed: auth_pts will now error if its configured socket path is
too long for its buffer
- Removed cyrus-imapd-2.4.19-lmtpd_crash.patch
* Wed Jan 16 2019 Peter Varkoly <varkoly@suse.com>
- bsc#1119629 cyrus-imapd.service contains bogus User and Groupi
specification
- bsc#1115999 Please convert SysV init scripts by cyrus-imapd
into native systemd services
- Removed User and Group from the service file
* Tue Dec 04 2018 Jan Engelhardt <jengelh@inai.de>
- Avoid repeated emission of the %service_* boilerplate.
* Mon Dec 03 2018 Matthias Fehring <buschmann23@opensuse.org>
- Fixed startup of cyrus-imapd when using native systemd service
by setting RuntimeDirectory=cyrus-imapd in the service file
* Wed Nov 28 2018 Peter Varkoly <varkoly@suse.com>
- cyrus-imapd: migrate from cron to systemd timers
(bsc#1115438)
Created script service and timer replacing cron daily script
* Wed Nov 28 2018 Peter Varkoly <varkoly@suse.com>
- Please convert SysV init scripts by cyrus-imapd into native systemd services
(bsc#1115999)
Fixed using the with_systemd macro
Version: 2.4.19-bp150.1.3
* Thu Nov 23 2017 rbrown@suse.com
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
* Wed Oct 25 2017 rhafer@suse.de
- Removed "cyrus-imapd-2.4.19_drac_auth.patch" and dropped drac
from the BuildRequires. DRAC's upstream is bascially dead nowadays,
and the drac patch in cyrus-imapd is also largely unmaintained.
Rebased cyrus-imapd-2.4.17_openslp.patch and
cyrus-imapd-2.4.19_autocreate-0.10-0.patch as a result of the
removal.
* Mon Jul 10 2017 jengelh@inai.de
- Remove filler wording from description.
- Improve find commands.
* Sun Jun 25 2017 aj@ajaissle.de
- Add cyrus-imapd-2.4.19-lmtpd_crash.patch:
* lmtpd: fix uninitialised variable crash [boo#1045899]
* Wed Jun 21 2017 aj@ajaissle.de
- Rebased patch:
* cyrus-imapd-2.4.18-implicit_definitions.patch as cyrus-imapd-2.4.19-implicit_definitions.patch
Add fix for implicit-fortify-decl in ldap.c
* Wed Jun 14 2017 aj@ajaissle.de
- Update to 2.4.19
* Complete backport of the new (2.5 and later) IMAP IDLE implementation (thanks Thomas Jarosh). This fixes a bunch of bugs and race conditions that were inherent to the older implementation
* New option “imapidletimeout” overrides “timeout” specifically for connections in IDLE state
* OpenSSL 1.1.0 is now supported
* Fixed: imap ENABLED doesn’t print * ENABLED when nothing new enabled
* Fixed: mailbox lock management over rename (thanks Thomas Jarosh)
* Fixed: added overflow protection to urlfetch range checks
* Fixed: lmtpd can now deliver when mupdate server isn’t available (thanks Michael Menge)
* Fixed task 227: service processes no longer divide by zero when invoked with -T 0 argument (thanks Ian Batten and Jens Erat)
* Fixed task 229: ctl_cyrusdb now uses database paths from imapd.conf (thanks Simon Matter)
* Fixed bug #3862: mailbox database changes now rolled back on mupdate failure during rename (thanks Michael Menge)
* Fixed: XFER to 2.5 and later no longer downgrades index to oldest version
* Fixed: nonsensical “TEXT.MIME” section now handled as “HEADER”
* Fixed: added missing ‘auditlog: ‘ prefix to backend connections (thanks Wolfgang Breyha)
* Fixed: IMAP SEARCH crash on some platforms
* Fixed: memory leaks in IMAP SEARCH and IMAP APPEND
* Fixed Issue #1967: EXISTS count reported earlier if fetching past size of previous message set
- Rebased patches:
* cyrus-imapd-2.4.17_drac_auth.patch as cyrus-imapd-2.4.19_drac_auth.patch
* cyrus-imapd-2.4.17_autocreate-0.10-0.patch as cyrus-imapd-2.4.19_autocreate-0.10-0.patch
- Removed patches:
- cyrus-imapd-2.4.18-CVE-2015-8077.patch (upstream)
- cyrus-imapd-2.4.18-CVE-2015-8078.patch (upstream)
- Added cyrus-imapd-2.4.19.tar.gz.sig
* Fri May 27 2016 tchvatal@suse.com
- Try to cleanup with spec-cleaner
- Remove exit 0 in pre that stopped execution of the rest of the code
- Update pre/post requires to be acutally correct
- Disable stict-aliasing to avoid some problems
* Mon Dec 21 2015 aj@ajaissle.de
- Add cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch to add
Outlook 2013-compatible XLIST behaviour.
* Sun Nov 15 2015 aj@ajaissle.de
- Added cyrus-imapd-2.4.18-CVE-2015-8077.patch:
boo#954200, CVE-2015-8077: Integer overflow in range checks
- Added cyrus-imapd-2.4.18-CVE-2015-8078.patch:
boo#954201, CVE-2015-8078: Integer overflow in index_urlfetch
* Sun Aug 23 2015 aj@ajaissle.de
- Update to 2.4.18 [boo#945844]
* Security fix: handle urlfetch range starting outside message range
* A bunch of cleanups and fixes to compiling
* A bunch of sieve cleanups
* Enhanced SSL/TLS configuration options
* Disable use of SSLv2/SSLv3
* Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos)
* Fixed Task #116: correct LIST response for domains starting with ?inbox.?
* Fixed Task #76: fixed lmtpd userdeny db checks (thanks Leena Heino)
* Fixed bug #3856: lmtpd now performs userdeny checks
* Fixed bug #3848: support charset aliases in encoded headers
* Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha)
* Fixed bug #3415: fixed nntpd LIST/GROUP bug
* Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves
* Fixed bug #3757: don?t segfault on mailbox close with no user
* New ssl/tls configuration options
tls_compression: 0
Enable TLS compression. Disabled by default.
tls_eccurve: prime256v1
Select the elliptic curve used for ECDHE.
tls_prefer_server_ciphers: 0
Prefer the cipher order configured on the server-side.
tls_versions: tls1_0 tls1_1 tls1_2
Disable SSL/TLS protocols not in this list.
- Removed the following patches (included upstream):
- cyrus-imapd-2.4.17_tls-session-leak.patch
- cyrus-imapd.tls_options.patch
- Added patch cyrus-imapd-2.4.18-implicit_definitions.patch:
- Have the correct #include when using implicit definitions
* Mon Dec 08 2014 aj@ajaissle.de
- Changed cyrus-imapd-rc-2.tar.gz/cron.daily.cyrus to use 'su -s
/bin/bash - cyrus', as the default shell is now /sbin/nologin
[boo#908014]
- Changed cyrus-imapd-rc-2.tar.gz/rc.cyrus to set
/var/run/cyrus-master.pid as the PID file (was: /var/run/cyrus.pid)
[boo#908006]
* Fri Nov 21 2014 tchvatal@suse.com
- Drop unused patch:
* KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch
* Fri Nov 14 2014 rhafer@suse.com
- Replace the TLS/POODLE patch with what was merged into the upstream
git repo:
* cyrus-imapd.tls_options.patch
* Obsoletes patches cyrus-imapd.tls_tlsonly.patch and
cyrus-imapd.tls_ec.patch
- Add a default tls_versions settings to imapd.conf which disables
POODLE affected SSL versions.
* Sat Oct 18 2014 johannes@lst.de
- Add two patches from Kristian Kraemmer Nielsen found on the info-cyrus mailing list
(http://lists.andrew.cmu.edu/pipermail/info-cyrus/2014-October/037708.html)
* cyrus-imapd.tls_ec.patch - adding tls_ec for Perfect Forward Secrecy
* cyrus-imapd.tls_tlsonly.patch - add tlsonly config option to fix POODLE vulnerability
* Wed Jan 29 2014 aj@ajaissle.de
- Added -snmp and -snmp-mibs sub-packages
- Added README.SNMP to cyrus-imapd-rc-2.tar.gz
- Added sysconfig option to use SNMP
* TODO: convert to a yesno option
* Fri Jan 24 2014 aj@ajaissle.de
- Updated to upstream release 2.4.17 (fate#311137)
Changes to the Cyrus IMAP Server since 2.3.x:
* All databases are now default skiplist, and ctl_cyrusdb will automatically convert database type on startup.
* make_sha1 and make_md5 are removed (replaced by GUID and reconstruct changes)
* Charset subsystem rewritten - Unicode 5.2 rather than Unicode 2, and UTF-8 support in sieve.
* Core mailbox handling code largely rewritten with new APIs, CRC checksums, new locking mechanisms, merging of cyrus.index and cyrus.expunge, inclusion of user \Seen flag, and much more.
* Replication code largely rewritten to provide better performance, consistency checking, and recovery from "split-brain" scenarios.
* Added support for LIST-EXTENDED IMAP extension. Removed support for deprecated (compile-time) LISTEXT IMAP extension. Based on work by Martin Konold <martin.konold@erfrakon.de>
* Added support for ESEARCH IMAP extension.
* Added support for WITHIN extension to IMAP SEARCH.
* Added support for ENABLE IMAP extension.
* Added support for QRESYNC IMAP extension.
* Added support for URLAUTH=BINARY IMAP extension.
* Removed legacy IMAP[2|3|4] cruft. We now only support IMAPrev1 + extensions.
* Added support for marking QoS on traffic. (courtesy of Philip Prindeville <philipp@redfish-solutions.com>)
* Modified user_deny.db code to open database once at service startup time.
* ... and hundreds of tiny things too numerous to mention in a short change log ...
- Added the following patches:
- cyrus-imapd-2.4.17_drac_auth.patch -- this is a rebased version of contrib/drac_auth.patch
- cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch -- Allow a result attribute to be specified with ptclient/ldap.c
* Supersedes KOLAB_cyrus-imapd-2.3.18_UID.patch
- Renamed the following patches:
- syslog-facility-doc.patch to cyrus-imapd-2.3.16_syslog-facility-doc.patch
- Rebased the following patches for cyrus-imapd-2.4.17:
- cyrus-imapd-db6.diff as cyrus-imapd-2.4.17_db6.patch
- cyrus-imapd-openslp.patch as cyrus-imapd-2.4.17_openslp.patch
- luser_relay.patch as cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
* Option 'lmtp_luser_relay' was renamed to 'lmtp_catchall_mailbox'
* https://bugzilla.cyrusimap.org/show_bug.cgi?id=2360
- cyrus-imapd_tls-session-leak.dif as cyrus-imapd-2.4.17_tls-session-leak.patch
* https://bugzilla.cyrusimap.org/show_bug.cgi?id=3252
- cyrus-imapd-2.3.16-autocreate-0.10-0.drac.diff as cyrus-imapd-2.4.17_autocreate-0.10-0.patch
- pie.patch as cyrus-imapd-2.4.17_pie.patch
- Removed the following patches (unknown upstream status):
- KOLAB_cyrus-imapd-2.3.18_Folder-names.patch
* There is no need for us to extend the mailbox name restrictions
* https://bugzilla.cyrusimap.org/show_bug.cgi?id=2633
- KOLAB_cyrus-imapd-2.3.18_Groups2.patch
* optional/not needed
* https://bugzilla.cyrusimap.org/show_bug.cgi?id=2632
* https://bugzilla.cyrusimap.org/show_bug.cgi?id=3282
- KOLAB_cyrus-imapd-2.3.18_timsieved_starttls-sendcaps.patch
* Workaround for an issue with kontact/kio ~ KDE 3.5.9
- KOLAB_cyrus-imapd-2.3.18_UID.patch
* Superseded by cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
- Removed the following patches (upstream inclusion):
- charset.patch
- cyrus-imapd-perl-5.14.patch
- cyrus-imapd-perl-path.patch
- cyrus-imapd_references_header-dos.dif
- KOLAB_cyrus-imapd-2.3.18_Cyradm_Annotations.patch
* http://git.cyrusimap.org/cyrus-imapd/commit/?h=cyrus-imapd-2.4&id=98dd7a9130653ac848c0782a7688d26a090b494b
- KOLAB_cyrus-imapd-2.3.18_Logging.patch
* Use 'auditlog: 1' in imapd.conf
* https://bugzilla.cyrusimap.org/show_bug.cgi?id=2964
- user_deny_db-once.patch
- Changed cyrus-imapd-rc.tar.gz contents, now having cyrus-imapd-rc-2.tar.gz:
- dir name now is SUSE (was: SuSE)
- renamed README.SuSE -> README.SUSE
- added annotation definitions for groupware folders
- imapd.conf: added annotaion definitions and lmtp_fuzzy_mailbox_match
- imapd.conf: changed path to TLS certs form /usr/ssl/ to /etc/SSL_accept
- imapd.conf: set default 'delete_mode' and 'expunge_mode' to 'delayed'
- cyrus.conf: added more services, added deleteprune and expungeprune
- moved DB_CONFIG into cyrus-imapd-rc.tar.gz
- Spec file cleanup
- Prepared systemd support
* with systemd, we use cyrus-imapd as service name
* we have a symlink 'rccyrus-imapd' to '/usr/sbin/service'
* for compatibility, we have an alias 'rccyrus' = 'rccyrus-imapd'
- New package: cyrus-imapd-utils, which now contains tools to test mail servers
- New package: cyrus-imapd-cyradm, which now contains the cyradm tool
- TODO:
- Check KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch
* Patch is optional
* https://roundup.kolab.org/issue1141
- systemd service not yet working as expected, so we disabled it atm
* Thu Jun 20 2013 aj@ajaissle.de
- Move kolab tag from package name to version field
* Fri Jun 14 2013 jengelh@inai.de
- Add cyrus-imapd-db6.diff to fix compile abort with db >= 5
* Mon May 27 2013 werner@suse.de
- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
well as the package python-managesieve, therefore make them
conflicting
* Tue May 21 2013 aj@ajaissle.de
- Added /var/lib/imap/ptclient to %files section