Branches for Precise

Author: James Page
Revision Date: 2012-04-04 14:56:38 UTC

* New upstream release (LP: #970782).
* Merge from Debian testing, remaining changes:
  + Add mail-stack-delivery package:
    - Update d/rules
    - d/control: convert existing dovecot-postfix package to a dummy
      package and add new mail-stack-delivery package.
    - Update maintainer scripts.
    - Rename d/dovecot-postfix.* to debian/mail-stack-delivery.*
    - d/mail-stack-delivery.preinst: Move previously installed backups and
      config files to a new package namespace.
    - d/mail-stack-delivery.prerm: Added to handle downgrades.
  + Use Snakeoil SSL certificates by default:
    - d/control: Depend on ssl-cert.
    - d/dovecot-core.postinst: Relax grep for SSL_* a bit.
  + Add autopkgtest to debian/tests/*.
  + Add ufw integration:
    - d/dovecot-core.ufw.profile: new ufw profile.
    - d/rules: install profile in dovecot-core.
    - d/control: dovecot-core - suggest ufw.
  + d/{control,rules}: enable PIE hardening.
  + d/dovecot-core.dirs: Added usr/share/doc/dovecot-core
  + Add apport hook:
    - d/rules, d/source_dovecot.py
  + Add upstart job:
    - d/rules, d/dovecot-core.dovecot.upstart, d/control,
      d/dovecot-core.dirs, dovecot-imapd.{postrm, postinst, prerm},
      d/dovecot-pop3d.{postinst, postrm, prerm}.
      d/mail-stack-deliver.postinst:
      Convert init script to upstart.
  + d/patches/fix-racey-restart.patch: Backported patch from current
    development release which ensures all child processes terminate prior
    to the main dovecot process.
  + debian/patches/CVE-2011-4318.patch: Dropped - applied upstream
  + d/control: Added Pre-Depends: dpkg (>= 1.15.6) to dovecot-dbg to support
    xz compression in Ubuntu.
  + d/control: Demote dovecot-common Recommends: to Suggests: to prevent
    install of extra packages on upgrade.
* d/patches/dovecot-drac.patch: Updated with version for dovecot >= 2.0.0.

Author: Marc Deslauriers
Revision Date: 2014-10-27 12:46:22 UTC

* Backport support for the ssl_protocols setting to easily allow
  disabling SSLv3. (LP: #1381537)
  - debian/patches/backport_ssl_protocols.patch: added new setting to
    src/login-common/login-settings.c, src/login-common/login-settings.h,
    src/login-common/ssl-proxy-openssl.c, src/config/all-settings.c.

Author: Marc Deslauriers
Revision Date: 2014-05-14 13:18:55 UTC

* SECURITY UPDATE: denial of service via SSL connection exhaustion
  - debian/patches/CVE-2014-3430.patch: properly close connections in
    src/login-common/client-common.c,
    src/login-common/ssl-proxy-openssl.c,
    src/login-common/ssl-proxy.*.
  - CVE-2014-3430

Author: Marc Deslauriers
Revision Date: 2014-10-27 12:46:22 UTC

* Backport support for the ssl_protocols setting to easily allow
  disabling SSLv3. (LP: #1381537)
  - debian/patches/backport_ssl_protocols.patch: added new setting to
    src/login-common/login-settings.c, src/login-common/login-settings.h,
    src/login-common/ssl-proxy-openssl.c, src/config/all-settings.c.

Author: James Page
Revision Date: 2012-04-04 14:48:30 UTC

* New upstream release (LP: #970782).
* Merge from Debian testing, remaining changes:
* d/patches/dovecot-drac.patch: Updated with version for dovecot >= 2.0.0.