[pkgsrc/trunk]: pkgsrc/mail/dovecot Update to Dovecot 1.0.13.

[ghen <ghen%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/b72b41018df9
branches:  trunk
changeset: 539600:b72b41018df9
user:      ghen <ghen%pkgsrc.org@localhost>
date:      Sun Mar 09 11:58:17 2008 +0000

description:
Update to Dovecot 1.0.13.

Note that the changes for the security hole fix were quite large. I tested with
several auth configurations myself and they seemed to work, but it's possible I
left a bug somewhere in there breaking someone's configuration. So make sure to
test that it works after upgrading.

Of course it would be really nice if Dovecot had a proper test suite where
testing all configurations could be automated and run before each release. I've
already started this with my imaptest tool (http://imapwiki.org/ImapTest), but
it only does IMAP tests and a lot of things are still missing. Some help would
be nice here.

        * Fixed a security hole in blocking passdbs (MySQL always. PAM, passwd
          and shadow if blocking=yes) where user could specify extra fields
          in the password. The main problem here is when specifying
          "skip_password_check" introduced in v1.0.11 for fixing master user
          logins, allowing the user to log in as anyone without a valid
          password.

        - mail_privileged_group was broken in some systems (OS X, Solaris?)
        - IMAP THREAD: Fixed some correctness problems

diffstat:

 mail/dovecot/Makefile |  4 ++--
 mail/dovecot/distinfo |  8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diffs (28 lines):

diff -r b4ca6c850159 -r b72b41018df9 mail/dovecot/Makefile
--- a/mail/dovecot/Makefile     Sun Mar 09 11:17:27 2008 +0000
+++ b/mail/dovecot/Makefile     Sun Mar 09 11:58:17 2008 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.114 2008/03/05 08:23:37 ghen Exp $
+# $NetBSD: Makefile,v 1.115 2008/03/09 11:58:17 ghen Exp $
 
-DISTNAME=              dovecot-1.0.12
+DISTNAME=              dovecot-1.0.13
 CATEGORIES=            mail
 MASTER_SITES=          http://www.dovecot.org/releases/1.0/
 
diff -r b4ca6c850159 -r b72b41018df9 mail/dovecot/distinfo
--- a/mail/dovecot/distinfo     Sun Mar 09 11:17:27 2008 +0000
+++ b/mail/dovecot/distinfo     Sun Mar 09 11:58:17 2008 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.79 2008/03/05 08:23:37 ghen Exp $
+$NetBSD: distinfo,v 1.80 2008/03/09 11:58:17 ghen Exp $
 
-SHA1 (dovecot-1.0.12.tar.gz) = 421e0bcab996ce00cfeb0e69df626d53c3203d5a
-RMD160 (dovecot-1.0.12.tar.gz) = fffada77f69d6fcc794f8dc576a6f9e6675a247c
-Size (dovecot-1.0.12.tar.gz) = 1772998 bytes
+SHA1 (dovecot-1.0.13.tar.gz) = 8690b27d01e8a68edef5ed162681c79f4074c9c1
+RMD160 (dovecot-1.0.13.tar.gz) = 1ba2c6b14e41c9bc4d36c12ea90a0fad024409db
+Size (dovecot-1.0.13.tar.gz) = 1774025 bytes
 SHA1 (patch-aa) = 6258057d49add91f06d4dd51ded72e42f6774354
 SHA1 (patch-ab) = 5d45a1617dd5ee7ce07fe89b526a6fb273057bb5
 SHA1 (patch-ac) = 377da4719b5dca91a0b2fa7b3e11170cd2ea8d59