Received: from mail.netbsd.org (mail.netbsd.org [204.152.190.11]) by narn.NetBSD.org (Postfix) with ESMTP id D902D63B88A for ; Sun, 2 Nov 2008 16:19:54 +0000 (UTC) Received: by mail.netbsd.org (Postfix, from userid 0) id 8B37B63B146; Sun, 2 Nov 2008 16:19:54 +0000 (UTC) Received: from cvs.netbsd.org (unknown [IPv6:2001:4f8:4:7:2e0:81ff:fe25:eab4]) by mail.netbsd.org (Postfix) with ESMTP id C0F9E63B144 for ; Sun, 2 Nov 2008 16:19:53 +0000 (UTC) Received: by cvs.netbsd.org (Postfix, from userid 500) id AD15E175D0; Sun, 2 Nov 2008 16:19:53 +0000 (UTC) From: Adrian Portelli Subject: CVS commit: pkgsrc/mail/dovecot To: pkgsrc-changes@NetBSD.org Reply-To: adrianp@netbsd.org Message-Id: <20081102161953.AD15E175D0@cvs.netbsd.org> Date: Sun, 2 Nov 2008 16:19:53 +0000 (UTC) Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes Precedence: list Module Name: pkgsrc Committed By: adrianp Date: Sun Nov 2 16:19:53 UTC 2008 Modified Files: pkgsrc/mail/dovecot: Makefile distinfo Log Message: Update to 1.1.6 Ok'ed geert@ The invalid message address parsing bug is pretty important since it allows a remote user to send broken mail headers and prevent the recipient from accessing the mailbox afterwards, because the process will always just crash trying to parse the header. This is assuming that the IMAP client uses FETCH ENVELOPE command, not all do. Note that it doesn't affect versions older than v1.1.4. + dovecot -n and -a now prints some system information at the top. + More error/debug message logging improvements. - pop3-login: Fixed assert-crash if a client sent USER+PASS+USER+PASS commands in the same IP packet. - Parsing an invalid message address like "From: (" caused an assert-crash in v1.1.4 and v1.1.5. - Folding whitespace wasn't handled correctly inside quoted-strings, causing some messages to be parsed incorrectly. - mbox: Fixed saving messages that begin with a valid From_-line. To generate a diff of this commit: cvs rdiff -r1.122 -r1.123 pkgsrc/mail/dovecot/Makefile cvs rdiff -r1.87 -r1.88 pkgsrc/mail/dovecot/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.