lp:ubuntu/wily-proposed/dovecot-antispam

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

16. By Ron Lee <email address hidden> on 2015-07-04

Use T_BEGIN/T_END since t_push() changed its signature and broke API
in dovecot 2.2.14, and this is the interface to it that things were
supposed to switch to some time back. Closes: #765943

15. By Ron Lee <email address hidden> on 2015-02-22

Use the correct argc for pipe.ham_args

This fixes a typo bug, where if the number of arguments set for
antispam_pipe_program_spam_arg is not the same as what was set
for antispam_pipe_program_notspam_arg, then we'll either scribble
past the end of the allocated argv array, or populate it with
pointers to whatever followed the real ham_args.

Thanks to Peter Colberg who reported this, including a correct
patch to fix it, to the security team. The security implications
of this seem somewhat limited, since you need to edit a config
file as root to create the bad situation, and there is no path
for remote injection of crafted data (whether it overflows or
underflows) if you do, the argv array will just get some 'random'
extra pointers to existing internal data.

However it does pose a potential problem for a legitimate user
who does legitimately need or want to pass a different number of
arguments for the spam and ham cases, since that could crash
dovecot, or confuse the hell out of their pipe program when it
gets some random extra arguments. It's probably gone unnoticed
for this long because most uses will pass the same number of
arguments for both of them, but that's not a necessary condition
in the general case.

14. By Ron Lee <email address hidden> on 2014-10-04

* Merge upstreamed patches from the upstream branch,
  no new changes to the Debian package from this.
* Depend on dovecot ABI rather than a specific Dovecot package version.
  Many thanks to Jelmer Vernooij for both adding support for that to the
  dovecot package and providing a patch for this one to use it. Now we
  just need dovecot upstream to start bumping ABI less often than version :)
  Closes: #755432

13. By Ron Lee <email address hidden> on 2013-09-12

More updates for dovecot 2.2. Thanks again to Micah for really testing
it this time :)

12. By Ron Lee <email address hidden> on 2013-09-08

Update for compatibility with dovecot 2.2. Thanks to Micah for doing the
legwork of testing and getting things patched.

11. By Ron Lee <email address hidden> on 2012-06-20

Apply patch from Johannes for dovecot 2.1 Closes: #676007

10. By Ron Lee <email address hidden> on 2012-03-25

Try that again with a dependency range that allows for the Debian version.

9. By Ron Lee <email address hidden> on 2011-11-26

Dovecot modules are now installed in $moduledir, the /imap subdirectory
is gone with version 2.

8. By Ron Lee <email address hidden> on 2011-11-11

Now with support for the dovecot 2.0 release. Closes: #625188, #631143

7. By Ron Lee <email address hidden> on 2011-03-12

Update the antispam_backend docs for crm114 and dspam.
Reapply the mainline revert of the extra mail_plugins options,
which was swallowed in the v1.4-rc2 merge. Closes: #617273.