PaulHowarth/Blog/2019-03-06

Wednesday 6th March 2019

Fedora Project

  • Updated perl-IO-Socket-SSL to 2.066 in F-30 and Rawhide:

    • Make sure that Net::SSLeay::CTX_get0_param is defined before using X509_V_FLAG_PARTIAL_CHAIN; Net::SSLeay 1.85 defined only the second with LibreSSL 2.7.4 but not the first (CPAN RT#128716)

    • Prefer AES for server side cipher default since it is usually hardware-accelerated
    • Fix test t/verify_partial_chain.t by using the newly exposed function can_partial_chain instead of guessing (wrongly) if the functionality is available

  • Updated perl-JSON-XS to 4.02 in F-30 and Rawhide:

    • Undo the fix from 4.01, which breaks more things than it fixes
    • Try a proper fix this time

Local Packages

  • Updated dovecot (2.3.x):

    • Updated dovecot to 2.3.5:

      • Lua push notification driver: mail keywords and flags are provided in MessageNew and MessageAppend events

      • Submission: Implement support for plugins
      • auth: When auth_policy_log_only=yes, only log what the policy server response would do without actually doing it

      • auth: Always log policy server decisions with auth_verbose=yes

      • v2.3.[34]: doveadm log errors: Output was missing user/session
      • lda: Debug log lines could have shown slightly corrupted
      • login proxy: Login processes may have crashed in various ways when login_proxy_max_disconnect_delay was set

      • imap: Fix crash with Maildir+zlib if client disconnects during APPEND

      • lmtp proxy: Fix potential assert-crash

      • lmtp/submission: Fix crash when SMTP client transaction times out
      • Submission: Split large XCLIENT commands to 512 bytes per command, so Postfix accepts them

      • Submission: Fix crash when client sends invalid BURL command

      • Submission: relay backend: VRFY command: Avoid forwarding 500 and 502 replies back to client

      • lib-http: Fix potential assert-crash when DNS lookup fails

      • lib-fts: Fix search query generation when one language ignores a token (e.g. via stopwords)
    • Updated pigeonhole to 0.5.5:

      • IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting that causes messages discarded by an IMAPSieve script to be expunged immediately, rather than only being marked as "\Deleted" (which is still the default behaviour)

      • IMAPSieve: Fix panic crash occurring when a COPY command copies messages from a virtual mailbox where the source messages originate from more than a single real mailbox

      • imap4flags extension: Fix deleting all keywords; when the action resulted in all keywords being removed, no changes were actually applied
      • variables extension: Fix truncation of UTF-8 variable content; the maximum size of Sieve variables was enforced by truncating the variable string content bluntly at the limit, but this does not consider UTF-8 code point boundaries, which resulted in broken UTF-8 strings
      • IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message; Sieve scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that modify the message, stored the message a second time, rather than replacing the originally stored unmodified message

      • Fix segmentation fault occurring when both the sieve_extprograms plugin (for the Sieve interpreter) and the imap_filter_sieve plugin (for IMAP) are loaded at the same time; a symbol was defined by both plugins, causing a clash when both were loaded

  • Updated perl-IO-Socket-SSL to 2.066 as per the Fedora version

  • Updated perl-JSON-XS to 4.02 as per the Fedora version


Recent