[pkgsrc/pkgsrc-2019Q2]: pkgsrc/mail/dovecot2-pigeonhole Pullup ticket #6042 -...

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/5155a77cee33
branches:  pkgsrc-2019Q2
changeset: 339214:5155a77cee33
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Sun Sep 08 17:14:47 2019 +0000

description:
Pullup ticket #6042 - requested by taca
mail/dovecot2-pigeonhole: security fix

Revisions pulled up:
- mail/dovecot2-pigeonhole/Makefile                             1.49-1.52
- mail/dovecot2-pigeonhole/distinfo                             1.37-1.39

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu Jul 18 13:41:34 UTC 2019

   Modified Files:
        pkgsrc/mail/dovecot2-pigeonhole: Makefile distinfo

   Log Message:
   mail/dovecot2-pigeonhole: update to 0.5.7

   Update dovecot2-pigeonhole to 0.5.7.

   Changes
   -------
   + vacation: Made the subject for the automatic response message produced
     by the Sieve vacation action configurable. Both the default subject
     (if the script defines none) and the subject template (e.g. used to
     add a subject prefix) can be configured.
   - dsync: dsync-replication does not synchronize Sieve scripts.
   - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
   - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
     GCC 9

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Tue Jul 23 15:12:22 UTC 2019

   Modified Files:
        pkgsrc/mail/dovecot2-pigeonhole: Makefile distinfo

   Log Message:
   mail/dovecot2-pigeonhole: update to 0.5.7.1

   v0.5.7.1 2019-07-23  Timo Sirainen <timo.sirainen%open-xchange.com@localhost>

        - dsync: Sieve script syncing failed if mailbox attributes weren't
          enabled.

---
   Module Name: pkgsrc
   Committed By:        nia
   Date:                Wed Jul 24 18:14:42 UTC 2019

   Modified Files:
        pkgsrc/mail/dovecot2-pigeonhole: Makefile

   Log Message:
   Use https for dovecot.org.

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu Aug 29 01:07:24 UTC 2019

   Modified Files:
        pkgsrc/mail/dovecot2-pigeonhole: Makefile distinfo

   Log Message:
   mail/dovecot2-pigeonhole: update to 0.5.7.2

   Update dovecot2-pigeonhole to 0.5.7.2.

   Changes
   -------
   * CVE-2019-11500: ManageSieve protocol parser does not properly handle NUL byte
     when scanning data in quoted strings, leading to out of bounds heap
     memory writes. Found by Nick Roessler and Rafi Rubin.

diffstat:

 mail/dovecot2-pigeonhole/Makefile |   6 +++---
 mail/dovecot2-pigeonhole/distinfo |  10 +++++-----
 2 files changed, 8 insertions(+), 8 deletions(-)

diffs (35 lines):

diff -r 56b8ae136cc5 -r 5155a77cee33 mail/dovecot2-pigeonhole/Makefile
--- a/mail/dovecot2-pigeonhole/Makefile Sun Sep 08 17:11:50 2019 +0000
+++ b/mail/dovecot2-pigeonhole/Makefile Sun Sep 08 17:14:47 2019 +0000
@@ -1,12 +1,12 @@
-# $NetBSD: Makefile,v 1.48 2019/06/21 15:36:59 jperkin Exp $
+# $NetBSD: Makefile,v 1.48.2.1 2019/09/08 17:14:47 bsiegert Exp $
 
-DISTNAME=      dovecot-2.3-pigeonhole-0.5.6
+DISTNAME=      dovecot-2.3-pigeonhole-0.5.7.2
 PKGNAME=       ${DISTNAME:S/-2.3-/-/}
 CATEGORIES=    mail
 MASTER_SITES=  http://pigeonhole.dovecot.org/releases/2.3/
 
 MAINTAINER=    adam%NetBSD.org@localhost
-HOMEPAGE=      http://www.dovecot.org/
+HOMEPAGE=      https://www.dovecot.org/
 COMMENT=       Support for the Sieve language and the ManageSieve protocol
 LICENSE=       gnu-lgpl-v2.1
 
diff -r 56b8ae136cc5 -r 5155a77cee33 mail/dovecot2-pigeonhole/distinfo
--- a/mail/dovecot2-pigeonhole/distinfo Sun Sep 08 17:11:50 2019 +0000
+++ b/mail/dovecot2-pigeonhole/distinfo Sun Sep 08 17:14:47 2019 +0000
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.36 2019/04/30 15:22:22 taca Exp $
+$NetBSD: distinfo,v 1.36.2.1 2019/09/08 17:14:47 bsiegert Exp $
 
-SHA1 (dovecot-2.3-pigeonhole-0.5.6.tar.gz) = 4f1db1620910f40dc28172b4730945b7f85cbefc
-RMD160 (dovecot-2.3-pigeonhole-0.5.6.tar.gz) = 52cf01e7cb89a11401cdd04e18ad526d07e7cce4
-SHA512 (dovecot-2.3-pigeonhole-0.5.6.tar.gz) = 998a046d2eb5ff7bba615fd1a3efdfb1e7e1dabf191257f7fa2882074acc1735a0a4c11c5f31bab1e964b0118f1a8e9e51b3d5529b8fff6d1312c9a8257d9c20
-Size (dovecot-2.3-pigeonhole-0.5.6.tar.gz) = 1854287 bytes
+SHA1 (dovecot-2.3-pigeonhole-0.5.7.2.tar.gz) = 4e4336416b154380e9c53fe80b466d4324affcdf
+RMD160 (dovecot-2.3-pigeonhole-0.5.7.2.tar.gz) = e274011a5c9b44d496e835a6b09f00fd5a60e72a
+SHA512 (dovecot-2.3-pigeonhole-0.5.7.2.tar.gz) = 7fc8d89ee31c8e8c16a9aeaeffb591f4188de36fc80e3a30a9ae10bc5acd7ea5d5d91e077fda566e61d588d9221ec53044ce17a9cc0c9c219dbe6824558a1d60
+Size (dovecot-2.3-pigeonhole-0.5.7.2.tar.gz) = 1857602 bytes
 SHA1 (patch-aa) = 264399e166b5fece22bacd47b043c59f8f0f0a29