New release. Fixes a off-by-one buffer overflow in cache file handling.

The code is executed only with mmap_disable=yes and only if index files
are used (ie. INDEX=MEMORY is safe).
Package-Manager: portage-2.1.2_rc1-r7

diff --git a/net-mail/dovecot/ChangeLog b/net-mail/dovecot/ChangeLog
index cd1fe5749e313406067d971ee44e2ce476e5fd16..53f93e1accc1f2aeec2a50d05b3f46222c6754c5 100644 (file)
--- a/net-mail/dovecot/ChangeLog
+++ b/net-mail/dovecot/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for net-mail/dovecot
 # Copyright 2000-2006 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-mail/dovecot/ChangeLog,v 1.71 2006/11/12 20:35:23 uberlord Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-mail/dovecot/ChangeLog,v 1.72 2006/11/19 11:37:11 uberlord Exp $
+
+*dovecot-1.0_rc15 (19 Nov 2006)
+
+  19 Nov 2006; Roy Marples <uberlord@gentoo.org> +dovecot-1.0_rc15.ebuild:
+  New release. Fixes a off-by-one buffer overflow in cache file handling.
+  The code is executed only with mmap_disable=yes and only if index files
+  are used (ie. INDEX=MEMORY is safe).
 
 *dovecot-1.0_rc14 (12 Nov 2006)
 

diff --git a/net-mail/dovecot/Manifest b/net-mail/dovecot/Manifest
index f8557559b1e9f827168f256c3bb1cfbb6821adb3..b9e170ab010df88696a990c4a1862fe9bd6f9bf1 100644 (file)
--- a/net-mail/dovecot/Manifest
+++ b/net-mail/dovecot/Manifest
@@ -8,6 +8,7 @@ DIST dovecot-1.0.rc11.tar.gz 1457850 RMD160 08d469378639998d587e04b700c3a7398718
 DIST dovecot-1.0.rc12.tar.gz 1457955 RMD160 8b34078472b38164bfc26c675740076a43ba7af1 SHA1 a537064551f48987729bb6707db8505aa4d84978 SHA256 250085d706f978960ee501c9bf2bd01f5b3de6e6855660c1bb9a97aa5680b985
 DIST dovecot-1.0.rc13.tar.gz 1459922 RMD160 89bf059c4922ba744e29b3a077cd33b67354cd22 SHA1 2264979e131ffbec2767b4d77ca8ceee12300f46 SHA256 a653939eae55a6ddea7c97e6ddfcdafdfcbdb56727640d61761fc9bbfca62834
 DIST dovecot-1.0.rc14.tar.gz 1461773 RMD160 6147bb86afc529b1bf7826324e622b5b7347c1b8 SHA1 0ff156ef9a548a33d65aaa6aca56074788974301 SHA256 3489e5a8a0eea149e39694ee6c38c2e2509bac95fb5f174855caf28fb4234532
+DIST dovecot-1.0.rc15.tar.gz 1463069 RMD160 904ef7d1f0fbfe8055f13d9036f7107f498b522e SHA1 9b618d0c1562aa64bd1e055ffa9fe5f2412514af SHA256 e1e42e5c808301c5a709d54c5949cd8c1d3c43861e4e918548ded5841865487f
 EBUILD dovecot-1.0_beta8.ebuild 4639 RMD160 6355e1c5fd0e12eea869543ab7084e6e9acb0f44 SHA1 f6119c5d1b4ba2a93ca88da701f8c5be4d8154fd SHA256 90bb9d6833f574e16fd58da5bac9339f33fb5e2c7a8aa47d6f246b71febd547f
 MD5 5cb271c421fee4cdcac364b89eeb7148 dovecot-1.0_beta8.ebuild 4639
 RMD160 6355e1c5fd0e12eea869543ab7084e6e9acb0f44 dovecot-1.0_beta8.ebuild 4639
@@ -32,10 +33,14 @@ EBUILD dovecot-1.0_rc14.ebuild 5321 RMD160 8dcad790cf9569ca27d51fee8949f4c69a5cf
 MD5 5b3ee9e7a2e4628c8b3cd512bbc715a6 dovecot-1.0_rc14.ebuild 5321
 RMD160 8dcad790cf9569ca27d51fee8949f4c69a5cfa05 dovecot-1.0_rc14.ebuild 5321
 SHA256 9f1f4e6c774c40cf02f227ab4f7415113aae732e7e7af1844b70c945fcd478ea dovecot-1.0_rc14.ebuild 5321
-MISC ChangeLog 12574 RMD160 658452198432115449fb93686aa37ceb0db242a4 SHA1 7adf83c53bd01b274e584e9d26e378358eb6146d SHA256 15edf0bf72ce2db6e0c14d39e378059576cb68e0ea0b3e21d3e4b481f666c9f5
-MD5 600929867eb21e06d14103d9b438ea85 ChangeLog 12574
-RMD160 658452198432115449fb93686aa37ceb0db242a4 ChangeLog 12574
-SHA256 15edf0bf72ce2db6e0c14d39e378059576cb68e0ea0b3e21d3e4b481f666c9f5 ChangeLog 12574
+EBUILD dovecot-1.0_rc15.ebuild 5321 RMD160 100f9de52ba8b67d8228a5a50fc5cad27adcb7af SHA1 4c417b28f9a42c1e736776c25a46ce9d721d2016 SHA256 73d0fac9dc176d543bd077a4dd605b6fc46a15333cded73f08a06f793aab1c3f
+MD5 8bad0b8cb553ef0787d78112bbc2dcbd dovecot-1.0_rc15.ebuild 5321
+RMD160 100f9de52ba8b67d8228a5a50fc5cad27adcb7af dovecot-1.0_rc15.ebuild 5321
+SHA256 73d0fac9dc176d543bd077a4dd605b6fc46a15333cded73f08a06f793aab1c3f dovecot-1.0_rc15.ebuild 5321
+MISC ChangeLog 12870 RMD160 f0dcf635420920788b851eee488a36c30bd1e236 SHA1 dcbc28f291abb892c9975e66a5abb411945c977f SHA256 208a851d5d75f6e66f1733d0a4015a31e123f227588f781709552ef3b26eee6f
+MD5 af8653e3246e34836ce787a30bdea3a6 ChangeLog 12870
+RMD160 f0dcf635420920788b851eee488a36c30bd1e236 ChangeLog 12870
+SHA256 208a851d5d75f6e66f1733d0a4015a31e123f227588f781709552ef3b26eee6f ChangeLog 12870
 MISC metadata.xml 252 RMD160 97c0c41abc4b61586ab48653ced79067cb964aa6 SHA1 57de811cfb02936b35c4bef2108018e6b2697a99 SHA256 419ffa57f459d89a62dd42ee4bb01934f03e6913b470323f5b2b8a7c89e2dc66
 MD5 b6ff89c08602229bdd234da83a89df77 metadata.xml 252
 RMD160 97c0c41abc4b61586ab48653ced79067cb964aa6 metadata.xml 252
@@ -58,3 +63,6 @@ SHA256 37c862fa50f4cb8122e9522a8d65435638f7fa94b008e9b7b8801df2c01cb7a6 files/di
 MD5 794cd34ba1fdeecc9cea35ab0a388fd1 files/digest-dovecot-1.0_rc14 253
 RMD160 d89f70259c5b484b7c04d9878b8c8deebc92f07c files/digest-dovecot-1.0_rc14 253
 SHA256 df4c0a9ace6e85668fcb2595361f1f25faa1be98e5cae2f178f2b30d3b1b3d2d files/digest-dovecot-1.0_rc14 253
+MD5 2c27eb8bc7a2d4ac15db038e2c32f3dd files/digest-dovecot-1.0_rc15 253
+RMD160 0c75375b63a906552c7c31aabe46cf07c93492f0 files/digest-dovecot-1.0_rc15 253
+SHA256 0c0d306c2bac1ed1f287123160612db5f9c959afa54dac80c9db3794a258c197 files/digest-dovecot-1.0_rc15 253

diff --git a/net-mail/dovecot/dovecot-1.0_rc15.ebuild b/net-mail/dovecot/dovecot-1.0_rc15.ebuild
new file mode 100644 (file)
index 0000000..af10091
--- /dev/null
+++ b/net-mail/dovecot/dovecot-1.0_rc15.ebuild
@@ -0,0 +1,178 @@
+# Copyright 1999-2006 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-mail/dovecot/dovecot-1.0_rc15.ebuild,v 1.1 2006/11/19 11:37:11 uberlord Exp $
+
+inherit autotools eutils
+
+DESCRIPTION="An IMAP and POP3 server written with security primarily in mind"
+HOMEPAGE="http://dovecot.org/"
+MY_P="${P/_/.}"
+S="${WORKDIR}/${MY_P}"
+SRC_URI="http://dovecot.org/releases/${MY_P}.tar.gz"
+
+SLOT="0"
+LICENSE="LGPL-2.1"
+KEYWORDS="~alpha ~amd64 ~ppc ~sparc ~x86"
+
+IUSE="debug doc ipv6 kerberos ldap mbox mysql pop3d pam postgres ssl vpopmail"
+
+# Developer documentation, controlled by the doc USE flag
+DEVDOCS="auth-protocol index multiaccess securecoding"
+
+DEPEND=">=sys-apps/sed-4
+       kerberos? ( virtual/krb5 )
+       ldap? ( net-nds/openldap )
+       pam? ( virtual/pam )
+       ssl? ( dev-libs/openssl )
+       postgres? ( dev-db/postgresql )
+       mysql? ( dev-db/mysql )
+       vpopmail? ( net-mail/vpopmail )"
+
+RDEPEND="${DEPEND}
+       >=net-mail/mailbase-0.00-r8"
+
+pkg_setup() {
+       # Add user and group for login process (same as for fedora/redhat)
+       enewgroup dovecot 97
+       enewuser dovecot 97 -1 /dev/null dovecot
+}
+
+src_compile() {
+       local myconf="--sysconfdir=/etc/dovecot --with-ioloop=best --with-poll=best"
+       use ssl && myconf="${myconf} --with-ssl=openssl" \
+               || myconf="${myconf} --without-ssl"
+
+       econf --localstatedir=/var \
+               $(use_enable debug) \
+               $(use_enable ipv6) \
+               $(use_with kerberos gssapi) \
+               $(use_with ldap) \
+               $(use_with mysql) \
+               $(use_with pam) \
+               $(use_with pop3d) \
+               $(use_with postgres pgsql) \
+               $(use_with vpopmail) \
+               ${myconf} || die "configure failed"
+       emake || die "make failed"
+}
+
+src_install () {
+       make DESTDIR="${D}" install || die "make install failed"
+
+       newinitd "${FILESDIR}"/dovecot.init dovecot
+
+       # Documentation
+       rm -rf "${D}"/usr/share/doc/dovecot
+       dodoc AUTHORS NEWS README TODO dovecot-example.conf
+       if use doc ; then
+               dodoc doc/*.txt
+       else
+               local x= n=
+               for x in doc/*.txt ; do
+                       n=$(basename "${x}" .txt)
+                       [[ " ${DEVDOCS} " != *" ${n} "* ]] && dodoc "${x}"
+               done
+       fi
+
+       # Create the dovecot.conf file from the dovecot-example.conf file that
+       # the dovecot folks nicely left for us....
+       local conf="${D}/etc/dovecot/dovecot.conf"
+       mv "${D}"/etc/dovecot/dovecot-example.conf "${D}"/etc/dovecot/dovecot.conf
+       fperms 0600 /etc/dovecot/dovecot.conf
+
+       # .maildir is the Gentoo default, but we need to support mbox to
+       local mail_location="maildir:~/.maildir"
+       if use mbox ; then
+               mail_loctation="mbox:/var/spool/mail/%u:INDEX=/var/dovecot/%u"
+               keepdir /var/dovecot
+               sed -i -e 's|#mail_extra_groups =|mail_extra_groups = mail|' "${conf}"
+       fi
+       sed -i -e \
+               "s|#mail_location =|mail_location = ${mail_location}|" "${conf}" || die
+
+       # We're using pam files (imap and pop3) provided by mailbase
+       if use pam ; then
+               sed -i -e '/passdb pam/, /^[ \t]*}/ s|#args = dovecot|args = "\*"|' \
+                       "${conf}" || die
+       fi
+
+       # Listen on ipv6 and ipv4
+       if use ipv6 ; then
+               sed -i -e 's/^#listen = \*/listen = \[::\]/g' "${conf}" || die
+       fi
+
+       # Install SQL configuration
+       if use mysql || use postgres ; then
+               cp doc/dovecot-sql.conf "${D}"/etc/dovecot
+               fperms 600 /etc/dovecot/dovecot-sql.conf
+               sed -i -e '/db sql/,/args/ s|=|= /etc/dovecot-sql.conf|' "${conf}"
+               dodoc doc/dovecot-sql.conf
+       fi
+
+       # Install LDAP configuration
+       if use ldap ; then
+               cp doc/dovecot-ldap.conf "${D}"/etc/dovecot
+               fperms 600 /etc/dovecot/dovecot-ldap.conf
+               sed -i -e '/db ldap/,/args/ s|=|= /etc/dovecot-ldap.conf|' "${conf}"
+               dodoc doc/dovecot-ldap.conf
+       fi
+
+
+       # Create SSL certificates
+       if use ssl ; then
+               dodir /etc/ssl/certs
+               dodir /etc/ssl/private
+               # Let's not make a new certificate if we already have one
+               if ! [[ -e /etc/ssl/certs/dovecot.pem && \
+                       -e /etc/ssl/private/dovecot.pem ]]; then
+                       einfo "Generating X.509 certificate for SSL"
+                       pushd doc >/dev/null && \
+                               SSLDIR="${D}"/etc/ssl sh mkcert.sh && \
+                               popd >/dev/null
+               fi
+               dodoc doc/*.cnf doc/mkcert.sh
+       fi
+
+       dodir /var/run/dovecot
+       fowners root:0 /var/run/dovecot
+       fperms 0700 /var/run/dovecot
+       keepdir /var/run/dovecot/login
+       fowners root:dovecot /var/run/dovecot/login
+       fperms 0750 /var/run/dovecot/login
+}
+
+get_config_var() {
+       sed -n 's/^[[:space:]]\?base_dir[[:space:]]*="*\([^#"]\+\)"*/\1/p' \
+               /etc/dovecot/dovecot.conf
+}
+
+pkg_postinst() {
+       einfo "The dovecot configuration has vastly changed since 0.99."
+       einfo "You are encouraged to start afresh with a new configuration file."
+       einfo "see http://wiki.dovecot.org/ for configuration examples."
+
+       if [[ -e ${ROOT}etc/dovecot.conf ]] ; then
+               ewarn
+               ewarn "dovecot configuration is now in ${ROOT}etc/dovecot"
+       fi
+
+       local base_dir="$(get_config_var base_dir)"
+       base_dir="${basedir:-/var/run/dovecot}"
+       if use ssl \
+               && [[ ! -e "${ROOT}/${base_dir}/login/ssl-parameters.dat" ]] ; then
+               einfo
+               einfo "Dovecot requires DH SSL Parameters if you use SSL connections"
+               einfo "These take some time to make, and dovecot will create them before"
+               einfo "it allows any SSL connections."
+               einfo "You can create them now before starting dovecot like so"
+               einfo "   emerge --config =${PF}"
+       fi
+}
+
+pkg_config() {
+       local base_dir="$(get_config_var base_dir)"
+       base_dir="${base_dir:-/var/run/dovecot}"
+
+       einfo "Regenerating SSL parameters. This will take some time."
+       /usr/libexec/dovecot/ssl-build-param "${base_dir}/login/ssl-parameters.dat"
+}

diff --git a/net-mail/dovecot/files/digest-dovecot-1.0_rc15 b/net-mail/dovecot/files/digest-dovecot-1.0_rc15
new file mode 100644 (file)
index 0000000..22003a4
--- /dev/null
+++ b/net-mail/dovecot/files/digest-dovecot-1.0_rc15
@@ -0,0 +1,3 @@
+MD5 26f3d2b075856b1b1d180146363819e6 dovecot-1.0.rc15.tar.gz 1463069
+RMD160 904ef7d1f0fbfe8055f13d9036f7107f498b522e dovecot-1.0.rc15.tar.gz 1463069
+SHA256 e1e42e5c808301c5a709d54c5949cd8c1d3c43861e4e918548ded5841865487f dovecot-1.0.rc15.tar.gz 1463069