Fedora 15 Update: dovecot-2.0.15-1.fc15

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-12987
2011-09-19 22:28:54
--------------------------------------------------------------------------------

Name        : dovecot
Product     : Fedora 15
Version     : 2.0.15
Release     : 1.fc15
URL         : http://www.dovecot.org/
Summary     : Secure imap and pop3 server
Description :
Dovecot is an IMAP server for Linux/UNIX-like systems, written with security
primarily in mind.  It also contains a small POP3 server.  It supports mail
in either of maildir or mbox formats.

The SQL drivers and authentication plug-ins are in their subpackages.

--------------------------------------------------------------------------------
Update Information:

- dovecot updated to 2.0.15
- v2.0.14: Index reading could have eaten a lot of memory in some
  situations
- mbox: Fixed crash during mail delivery when mailbox didn't yet have
  GUID assigned to it.
- zlib+mbox: Fetching last message from compressed mailboxes crashed.

- do not enable insecure connections by default
- userdb extra fields can now return name+=value to append to an existing name - script-login attempted an unnecessary config lookup, which usually failed with "Permission denied". 
- lmtp: Fixed parsing quoted strings with spaces as local-part for MAIL FROM and RCPT TO.
- imap: FETCH BODY[HEADER.FIELDS (..)] may have crashed or not returned all data sometimes. 
- ldap: Fixed random assert-crashing with with sasl_bind=yes. 
- Fixes to handling mail chroots 
- Fixed renaming mailboxes under different parent with FS layout when using separate ALT, INDEX or CONTROL paths. 
- zlib: Fixed reading concatenated .gz files.
- userdb extra fields can now return name+=value to append to an existing name - script-login attempted an unnecessary config lookup, which usually failed with "Permission denied". 
- lmtp: Fixed parsing quoted strings with spaces as local-part for MAIL FROM and RCPT TO.
- imap: FETCH BODY[HEADER.FIELDS (..)] may have crashed or not returned all data sometimes. 
- ldap: Fixed random assert-crashing with with sasl_bind=yes. 
- Fixes to handling mail chroots 
- Fixed renaming mailboxes under different parent with FS layout when using separate ALT, INDEX or CONTROL paths. 
- zlib: Fixed reading concatenated .gz files.
- userdb extra fields can now return name+=value to append to an existing name - script-login attempted an unnecessary config lookup, which usually failed with "Permission denied". 
- lmtp: Fixed parsing quoted strings with spaces as local-part for MAIL FROM and RCPT TO.
- imap: FETCH BODY[HEADER.FIELDS (..)] may have crashed or not returned all data sometimes. 
- ldap: Fixed random assert-crashing with with sasl_bind=yes. 
- Fixes to handling mail chroots 
- Fixed renaming mailboxes under different parent with FS layout when using separate ALT, INDEX or CONTROL paths. 
- zlib: Fixed reading concatenated .gz files.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Sep 19 2011 Michal Hlavinka <mhlavink at redhat.com> - 1:2.0.15-1
- dovecot updated to 2.0.15
- v2.0.14: Index reading could have eaten a lot of memory in some
  situations
- mbox: Fixed crash during mail delivery when mailbox didn't yet have
  GUID assigned to it.
- zlib+mbox: Fetching last message from compressed mailboxes crashed.
* Mon Aug 29 2011 Michal Hlavinka <mhlavink at redhat.com> - 1:2.0.14-1
- dovecot updated to 2.0.14
- userdb extra fields can now return name+=value to append to an
  existing name
- script-login attempted an unnecessary config lookup, which usually
  failed with "Permission denied".
- lmtp: Fixed parsing quoted strings with spaces as local-part for
  MAIL FROM and RCPT TO.
- imap: FETCH BODY[HEADER.FIELDS (..)] may have crashed or not
  returned all data sometimes.
- ldap: Fixed random assert-crashing with with sasl_bind=yes.
- Fixes to handling mail chroots
- Fixed renaming mailboxes under different parent with FS layout when
  using separate ALT, INDEX or CONTROL paths.
- zlib: Fixed reading concatenated .gz files.
* Thu May 12 2011 Michal Hlavinka <mhlavink at redhat.com> - 1:2.0.13-1
- dovecot updated to 2.0.13
- mdbox purge: Fixed wrong warning about corrupted extrefs.
- script-login binary wasn't actually dropping privileges to the
  user/group/chroot specified by its service settings.
- Fixed potential crashes and other problems when parsing header names
  that contained NUL characters.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #737416 - Upgrade to Fedora 15 enabled insecure login
        https://bugzilla.redhat.com/show_bug.cgi?id=737416
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update dovecot' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------