[pkgsrc/trunk]: pkgsrc/mail/dovecot2 mail/dovecot2: update to 2.3.14

[taca <taca%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/12a0da06ae36
branches:  trunk
changeset: 448282:12a0da06ae36
user:      taca <taca%pkgsrc.org@localhost>
date:      Sun Mar 07 08:26:24 2021 +0000

description:
mail/dovecot2: update to 2.3.14

>From release announce:

        We have removed some components from the software, please
        review changelogs carefully prior upgrading.


V2.3.14 2021-03-04  Aki Tuomi <aki.tuomi%open-xchange.com@localhost>

* Added new aliases for some variables. Usage of the old ones is possible,
  but discouraged. (These were partially added already to v2.3.13.)
  See https://doc.dovecot.org/configuration_manual/config_file/config_variables/
  for more information.
* Optimize imap/pop3/submission/managesieve proxies to use less CPU at
  the cost of extra memory usage.
* Remove autocreate, expire, snarf and mail-filter plugins.
* Remove cydir storage driver.
* Remove XZ/LZMA write support. Read support will be removed in future release.
* doveadm -D: Add timestamps to debug output even when LOG_STDERR_TIMESTAMP
  environment variable is not set. Timestamp format is taken from
  log_timestamp setting.
* If BROKENCHAR or listescape plugin is used, the escaped folder names
  may be slightly different from before in some situations. This is
  unlikely to cause issues, although caching clients may redownload the
  folders.
* imapc: It now enables BROKENCHAR=~ by default to escape remote folder
  names if necessary. This also means that if there are any '~'
  characters in the remote folder names, they will be visible as "~7e".
* imapc: When using local index files folder names were escaped on
  filesystem a bit differently. This affects only if there are folder
  names that actually require escaping, which isn't so common. The old
  style folders will be automatically deleted from filesystem.
* stats: Update exported metrics to be compliant with OpenMetrics standard.
+ doveadm: Add an optional '-p' parameter to metadata list command. If
  enabled, "/private", and "/shared" metadata prefixes will be prepended
  to the keys in the list output.
+ doveconf: Support environment variables in config files. See
  https://doc.dovecot.org/configuration_manual/config_file/config_file_syntax/#environment-variables
  for more details.
+ indexer-worker: Change indexer to disconnect from indexer-worker
  after each request. This allows service indexer-worker's service_count &
  idle_kill settings to work. These can be used to restart indexer-worker
  processes once in a while to reduce their memory usage.
- auth: "nodelay" with various authentication mechanisms such as apop
  and digest-md5 crashed AUTH process if authentication failed.
- auth: Auth lua script generating an error triggered an assertion
  failure: Panic: file db-lua.c: line 630 (auth_lua_call_password_verify):
  assertion failed: (lua_gettop(script->L) == 0).
- configure: Fix libunwind detection to work on other than x86_64 systems.
- doveadm-server: Process could crash if logging was done outside command
  handling. For example http-client could have done debug logging
  afterwards, resulting in either segfault or Panic:
  file http-client.c: line 642 (http_client_context_close):
  assertion failed: (cctx->clients_list == NULL).
- dsync: Folder name escaping with BROKENCHAR didn't work completely
  correctly. This especially caused problems with dsync-migrations using
  imapc where some of the remote folder names may not have been accessible.
- dsync: doveadm sync + imapc doesn't always sync all mails when doing
  an incremental sync (-1), which could lead to mail loss when it's used
  for migration. This happens only when GUIDs aren't used (i.e.
  imapc without imapc_features=guid-forced).
- fts-tika: When tika server returns error, some mails cause Panic:
  file message-parser.c: line 802 (message_parser_deinit_from_parts):
  assertion failed: (ctx->nested_parts_count == 0 || i_stream_have_bytes_left(ctx->input))
- lib-imap: imapc parsing illegal BODYSTRUCTUREs with NILs could have
  resulted in crashes. This exposed that Dovecot was wrongly accepting
  atoms in "nstring" handling. Changed the IMAP parsing to be more
  strict about this now.
- lib-index: If dovecot.index.cache has corrupted message size, fetching
  BODY/BODYSTRUCTURE may cause assert-crash:
  Panic: file index-mail.c: line 1140 (index_mail_parse_body_finish):
  assertion failed: (mail->data.parts != NULL).
- lib-index: Minor error handling and race condition fixes related to
  rotating dovecot.index.log. These didn't usually cause problems,
  unless the log files were rotated rapidly.
- lib-lua: Lua scripts using coroutines or lua libraries using coroutines
  (e.g., cqueues) panicked.
- Message PREVIEW handled whitespace wrong so first space would get
  eaten from between words.
- FTS and message PREVIEW (snippet) parsed HTML &entities case-sensitively.
- lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
  was written in a way that may have caused confusion for IMAP clients
  and also Dovecot itself when parsing it. The truncated part is now
  written out using application/octet-stream MIME type.
- lib-oauth2: HS512 and HS384 JWT token algorithms crash when you try to
  use them: Panic: file hmac.c: line 26 (hmac_init): assertion failed:
  (meth->context_size <= MAC_MAX_CONTEXT_SIZE).
- event filters: NOT keyword did not have the correct associativity.
  NOT a AND b were getting parsed as NOT (a AND b) instead of
  (NOT a) AND b.
- Ignore ECONNRESET when closing socket. This avoids logging useless
  errors on systems like FreeBSD.
- event filters: event filter syntax error may lead to Panic:
  file event-filter.c: line 137 (event_filter_parse): assertion failed:
  (state.output == NULL)
- lib: timeval_cmp_margin() was broken on 32-bit systems. This could
  potentially have caused HTTP timeouts to be handled incorrectly.
- log: instance_name wasn't used as syslog ident by the log process.
- master: After a service reached process_limit and client_limit, it
  could have taken up to 1 second to realize that more client connections
  became available. During this time client connections could have been
  unnecessarily rejected and a warning logged:
  Warning: service(...): process_limit (...) reached, client connections are being dropped
- stats: Crash would occur when generating openmetrics data for metrics
  using aggregating functions.
- stats: Event filters comparing against empty strings crash the stats
  process.

diffstat:

 mail/dovecot2/Makefile.common |   4 ++--
 mail/dovecot2/PLIST           |  12 ++++--------
 mail/dovecot2/distinfo        |  10 +++++-----
 3 files changed, 11 insertions(+), 15 deletions(-)

diffs (104 lines):

diff -r 0f8f6c473322 -r 12a0da06ae36 mail/dovecot2/Makefile.common
--- a/mail/dovecot2/Makefile.common     Sun Mar 07 08:11:02 2021 +0000
+++ b/mail/dovecot2/Makefile.common     Sun Mar 07 08:26:24 2021 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.42 2021/01/04 14:57:18 taca Exp $
+# $NetBSD: Makefile.common,v 1.43 2021/03/07 08:26:24 taca Exp $
 #
 # when updating to a new release, update ABI depends in
 # the buildlink3.mk file as well, since the plugins' version
@@ -11,7 +11,7 @@
 # used by mail/dovecot2-pgsql/Makefile
 # used by mail/dovecot2-sqlite/Makefile
 
-DISTNAME=      dovecot-2.3.13
+DISTNAME=      dovecot-2.3.14
 CATEGORIES=    mail
 MASTER_SITES=  https://dovecot.org/releases/${PKGVERSION_NOREV:R}/
 
diff -r 0f8f6c473322 -r 12a0da06ae36 mail/dovecot2/PLIST
--- a/mail/dovecot2/PLIST       Sun Mar 07 08:11:02 2021 +0000
+++ b/mail/dovecot2/PLIST       Sun Mar 07 08:26:24 2021 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.71 2021/01/04 14:57:18 taca Exp $
+@comment $NetBSD: PLIST,v 1.72 2021/03/07 08:26:24 taca Exp $
 bin/doveadm
 bin/doveconf
 bin/dovecot-sysreport
@@ -58,8 +58,6 @@
 include/dovecot/config.h
 include/dovecot/connection.h
 include/dovecot/crc32.h
-include/dovecot/cydir-storage.h
-include/dovecot/cydir-sync.h
 include/dovecot/data-stack.h
 include/dovecot/db-checkpassword.h
 include/dovecot/db-dict.h
@@ -140,6 +138,7 @@
 include/dovecot/fts-tokenizer-private.h
 include/dovecot/fts-tokenizer.h
 include/dovecot/fts-user.h
+include/dovecot/fuzzer.h
 include/dovecot/guid.h
 include/dovecot/hash-decl.h
 include/dovecot/hash-format.h
@@ -574,6 +573,7 @@
 include/dovecot/subscription-file.h
 include/dovecot/syslog-util.h
 include/dovecot/test-common.h
+include/dovecot/test-mail-storage-common.h
 include/dovecot/test-subprocess.h
 include/dovecot/time-util.h
 include/dovecot/unichar.h
@@ -593,7 +593,6 @@
 lib/dovecot/auth/lib20_auth_var_expand_crypt.la
 lib/dovecot/auth/libauthdb_imap.la
 lib/dovecot/doveadm/lib10_doveadm_acl_plugin.la
-lib/dovecot/doveadm/lib10_doveadm_expire_plugin.la
 lib/dovecot/doveadm/lib10_doveadm_quota_plugin.la
 lib/dovecot/doveadm/lib20_doveadm_fts_plugin.la
 lib/dovecot/doveadm/libdoveadm_mail_crypt_plugin.la
@@ -603,17 +602,13 @@
 lib/dovecot/lib02_lazy_expunge_plugin.la
 lib/dovecot/lib05_mail_crypt_acl_plugin.la
 lib/dovecot/lib05_pop3_migration_plugin.la
-lib/dovecot/lib05_snarf_plugin.la
 lib/dovecot/lib10_last_login_plugin.la
 lib/dovecot/lib10_mail_crypt_plugin.la
-lib/dovecot/lib10_mail_filter_plugin.la
 lib/dovecot/lib10_quota_plugin.la
 lib/dovecot/lib11_imap_quota_plugin.la
 lib/dovecot/lib11_trash_plugin.la
 lib/dovecot/lib15_notify_plugin.la
-lib/dovecot/lib20_autocreate_plugin.la
 lib/dovecot/lib20_charset_alias_plugin.la
-lib/dovecot/lib20_expire_plugin.la
 lib/dovecot/lib20_fts_plugin.la
 lib/dovecot/lib20_listescape_plugin.la
 lib/dovecot/lib20_mail_log_plugin.la
@@ -1036,6 +1031,7 @@
 share/examples/dovecot/conf.d/10-logging.conf
 share/examples/dovecot/conf.d/10-mail.conf
 share/examples/dovecot/conf.d/10-master.conf
+share/examples/dovecot/conf.d/10-metrics.conf
 share/examples/dovecot/conf.d/10-ssl.conf
 share/examples/dovecot/conf.d/15-lda.conf
 share/examples/dovecot/conf.d/15-mailboxes.conf
diff -r 0f8f6c473322 -r 12a0da06ae36 mail/dovecot2/distinfo
--- a/mail/dovecot2/distinfo    Sun Mar 07 08:11:02 2021 +0000
+++ b/mail/dovecot2/distinfo    Sun Mar 07 08:26:24 2021 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.108 2021/01/09 11:23:18 schmonz Exp $
+$NetBSD: distinfo,v 1.109 2021/03/07 08:26:24 taca Exp $
 
-SHA1 (dovecot-2.3.13.tar.gz) = 252dc597e8c4b4b0c016916415fec0f80be2facb
-RMD160 (dovecot-2.3.13.tar.gz) = 2005b644abe43133070078188c6fa00fbf076e03
-SHA512 (dovecot-2.3.13.tar.gz) = 758a169fba8925637ed18fa7522a6f06c9fe01a1707b1ca0d0a4d8757c578a8e117c91733e8314403839f9a484bbcac71ce3532c82379eb583b480756d556a95
-Size (dovecot-2.3.13.tar.gz) = 7456073 bytes
+SHA1 (dovecot-2.3.14.tar.gz) = b908db7ce0ae234fa62c7bb60127152034b72732
+RMD160 (dovecot-2.3.14.tar.gz) = dcbb7bbfa77f3e9002df64c67cbdf8d730c68424
+SHA512 (dovecot-2.3.14.tar.gz) = 69df234cb739c7ee7ae3acfb9756bc22481e94c95463d32bfac315c7ec4b1ba0dfbff552b769f2ab7ee554087ca2ebbe331aa008d3af26417016612dc7cad103
+Size (dovecot-2.3.14.tar.gz) = 7483769 bytes
 SHA1 (patch-aa) = 3af01aa4a8cea1a3fb840b6243a744de77069611
 SHA1 (patch-ab) = 9db15fd853ba47ef4bf04f2adc9ab24f71ee4d1e
 SHA1 (patch-ae) = c795585df9f415ceabb28eec1ff691ee26168d3b