<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="438">
<package pkgid="b43d79fb061157f2357dd5884a3248bef0ad5f284f45325eea7d3f8b418ea267" name="MHonArc" arch="noarch">
  <version epoch="0" ver="2.6.19" rel="1.1"/>
  <changelog author="anschneider@exsuse.de" date="1279454400">- Rewrite specfile from scratch for version 2.6.16
  * Bug Fixes:
    o HTML mail does not get its charset converted (patch included);
    bug #14704.
    o qprint.pl should be able to handle a soft line break at the end
    of the string; bug #14713.
    o MIMEFILTERS settings not retained in database; bug #14813.
    o In urlize change %X to %02X; bug #16368.</changelog>
  <changelog author="asn@cryptomilk.org" date="1294660800">- Update to version 2.6.17
  * Security Fixes:
    o CVE-2010-4524: Improper escaping of certain HTML sequences (XSS);
    bug #32013.
    o CVE-2010-1677: DoS when processing html messages with deep tag
    nesting; bug #32014.
    o Specially crafted &lt;base href&gt; can lead to XSS exploit; bug #32080.
  * Bug Fixes:
    o Creation of archive with attachments writes over symlinks; bug #13853.
    o Major (10X) memory savings possible in some situations; bug #14747.
    o Relative attachmentdir is relative to current working dir, not
    outdir; bug #15433
    o Threaded index resource ordering doesn't allow well formed XML
    output; bug #17660.
    o Incorrect nested HTML Tags for references; bug #17860.
    o FieldOrder affects AddressModifyCode; bug #17904.
    o Inconsistant thread slices w/ poor man's windowing; bug #18113.
    o X-Subject data get split in separate lines; bug #18908.
    o extra space in subject; bug #20074.
    o strip backslash in rfc822 From: field; bug #20142.
    o Incorrect Setting Installation Directory; bug #23198.
    o iso2022jp.pl: unneeded ESC ( B remains in message body; bug #24247.
    o dir_create() fails to make temporary directories (PATCH); bug #25225.
    o Resource FieldStore causes .mhonarc.db to grow over bounds; bug #25486.
    o Changed semantic for unpack breaks UTF-8; bug #26577
    o TextEncode related resource information not saved correctly in db file;
    bug #32032.
  * Added FOLLOWSYMLINKS resource (Bug #13853).
  * When KEEPONRMM is enabled, messages that are removed from
    the archive do not cause linked messages to be updated.  This allows
    for pages that use $TSLICE$ to maintain thread links for messages
    that "fall off" of the maintained list of archived messages.
  * Added pre-extraction of From name and From address.  This
    provides a performance improvement for archives that make use of
    the $FROMADDR$ and $FROMADDRNAME$ resource variables along with
    author sorting.
  * Added mapping of message index keys to time stamp.  This should
    provide some performance gain since parsing out of time stamp from
    index is no longer required.
  * Cache last message number in db to avoid directory scan of archive
    each time an add operation is performed.  This provides a performance
    improvement for large archives and on file systems where directory
    reading with many files may not be optimal.  Thanks go to Christopher
    Lindsey for patch.
  * Added References and In-Reply-To to as-is fields list to avoid
    automatic modification of message IDs if address-rewriting is
    in effect.
  * Simplified regular expression for detecting addresses.
    New expression performs significantly better than the previous
    expression, but still matches the vast majority of addresses
    used today.</changelog>
  <changelog author="asn@cryptomilk.org" date="1294660801">- Update to version 2.6.18
  * Update to HTML filter to improve filtering of event-based
    attributes.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1353844800">- license tag follows spdx standard
- add needed perl modules as required
- small specfile cleanup</changelog>
  <changelog author="asn@cryptomilk.org" date="1354190400">- Fix perl path.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1403784000">- Update to version 2.6.19:
  * Security Fixes:
    o Bug 35388: commentized subjects allow PHP code injection
  * Bug Fixes:
    o Bug 32987: Lots of deprecation warnings with Perl 5.12
    o Bug 42155: MHonArc crashed with message/external-body
    and RFC 2231 encoded parameters</changelog>
</package>
<package pkgid="434103dc61359b64bb1c8f89d7c651030ccd2a02f9ba8eb6ac2f4e3c3fa384c1" name="MHonArc" arch="src">
  <version epoch="0" ver="2.6.19" rel="1.1"/>
  <changelog author="anschneider@exsuse.de" date="1279454400">- Rewrite specfile from scratch for version 2.6.16
  * Bug Fixes:
    o HTML mail does not get its charset converted (patch included);
    bug #14704.
    o qprint.pl should be able to handle a soft line break at the end
    of the string; bug #14713.
    o MIMEFILTERS settings not retained in database; bug #14813.
    o In urlize change %X to %02X; bug #16368.</changelog>
  <changelog author="asn@cryptomilk.org" date="1294660800">- Update to version 2.6.17
  * Security Fixes:
    o CVE-2010-4524: Improper escaping of certain HTML sequences (XSS);
    bug #32013.
    o CVE-2010-1677: DoS when processing html messages with deep tag
    nesting; bug #32014.
    o Specially crafted &lt;base href&gt; can lead to XSS exploit; bug #32080.
  * Bug Fixes:
    o Creation of archive with attachments writes over symlinks; bug #13853.
    o Major (10X) memory savings possible in some situations; bug #14747.
    o Relative attachmentdir is relative to current working dir, not
    outdir; bug #15433
    o Threaded index resource ordering doesn't allow well formed XML
    output; bug #17660.
    o Incorrect nested HTML Tags for references; bug #17860.
    o FieldOrder affects AddressModifyCode; bug #17904.
    o Inconsistant thread slices w/ poor man's windowing; bug #18113.
    o X-Subject data get split in separate lines; bug #18908.
    o extra space in subject; bug #20074.
    o strip backslash in rfc822 From: field; bug #20142.
    o Incorrect Setting Installation Directory; bug #23198.
    o iso2022jp.pl: unneeded ESC ( B remains in message body; bug #24247.
    o dir_create() fails to make temporary directories (PATCH); bug #25225.
    o Resource FieldStore causes .mhonarc.db to grow over bounds; bug #25486.
    o Changed semantic for unpack breaks UTF-8; bug #26577
    o TextEncode related resource information not saved correctly in db file;
    bug #32032.
  * Added FOLLOWSYMLINKS resource (Bug #13853).
  * When KEEPONRMM is enabled, messages that are removed from
    the archive do not cause linked messages to be updated.  This allows
    for pages that use $TSLICE$ to maintain thread links for messages
    that "fall off" of the maintained list of archived messages.
  * Added pre-extraction of From name and From address.  This
    provides a performance improvement for archives that make use of
    the $FROMADDR$ and $FROMADDRNAME$ resource variables along with
    author sorting.
  * Added mapping of message index keys to time stamp.  This should
    provide some performance gain since parsing out of time stamp from
    index is no longer required.
  * Cache last message number in db to avoid directory scan of archive
    each time an add operation is performed.  This provides a performance
    improvement for large archives and on file systems where directory
    reading with many files may not be optimal.  Thanks go to Christopher
    Lindsey for patch.
  * Added References and In-Reply-To to as-is fields list to avoid
    automatic modification of message IDs if address-rewriting is
    in effect.
  * Simplified regular expression for detecting addresses.
    New expression performs significantly better than the previous
    expression, but still matches the vast majority of addresses
    used today.</changelog>
  <changelog author="asn@cryptomilk.org" date="1294660801">- Update to version 2.6.18
  * Update to HTML filter to improve filtering of event-based
    attributes.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1353844800">- license tag follows spdx standard
- add needed perl modules as required
- small specfile cleanup</changelog>
  <changelog author="asn@cryptomilk.org" date="1354190400">- Fix perl path.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1403784000">- Update to version 2.6.19:
  * Security Fixes:
    o Bug 35388: commentized subjects allow PHP code injection
  * Bug Fixes:
    o Bug 32987: Lots of deprecation warnings with Perl 5.12
    o Bug 42155: MHonArc crashed with message/external-body
    and RFC 2231 encoded parameters</changelog>
</package>
<package pkgid="74b31cc807966a4c1cb11f86de0603fe30c1238cb2f1ecbae8f841a778793664" name="MailChariot" arch="noarch">
  <version epoch="0" ver="1.2" rel="2.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1304510400">- initial version (1.1)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1304856000">- update to 1.2:
  * recover from malformed UTF-8 messages</changelog>
</package>
<package pkgid="6d27e271bfe869dc63d4673c588a2cfd4802a296fa12a0fad2c2e5083d52ee8d" name="MailChariot" arch="src">
  <version epoch="0" ver="1.2" rel="2.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1304510400">- initial version (1.1)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1304856000">- update to 1.2:
  * recover from malformed UTF-8 messages</changelog>
</package>
<package pkgid="76a07192d5e384f11c8a2e29b2abe8806918c638df97f0080be2ac6964b685bc" name="abook" arch="src">
  <version epoch="0" ver="0.6.1" rel="28.1"/>
  <changelog author="wr@rosenauer.org" date="1209988800">- revive abook with version 0.6.0pre2</changelog>
  <changelog author="brandon@ifup.org" date="1229601600">- Use %{version} and make package version reflect upstream version</changelog>
  <changelog author="wr@rosenauer.org" date="1261483200">- use a hopefully better RPM group</changelog>
  <changelog author="asn@cryptomilk.org" date="1312891200">- add support for vcards</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1323432000">- COPYING says it's GPL-2.0+</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434628800">- Force GnU inline semantics, fix build with GCC5
- Do not use fstack-protector-all, but the builsystem default.</changelog>
  <changelog author="p.drouand@gmail.com" date="1445860800">- Update to version 0.6.1
  * support for mouse
  * scrolling now affects the viewport instead of the cursor
  * support for a colored UI
  * added "groups" as a default field
  * the UI now supports merging selected entries [key M]
    and removing duplicates [key U]
  * a "custom" output filter allows the specification of an output
    format using placeholders
  * search-next is now bound to "/" too
  * some output filters can now be used in the context
    of --mutt-query. This is the case of "vcard" and "custom"
    [ no --query option has been created and --mutt-query is fully
    backward compatible ]
  * ldif output filter has been fixed [output modified] in multiple
    ways, does not force output to latin1 anymore and supports input
    from stdin.
  * vcard input/output support:
    An original input filter implementation was provided soon
    after 0.6.0pre2.
    In 2012, an optional build-time option to link against libvformat
    was added for the very same task: parsing vcard.
  - It depends on the --enable-vformat ./configure switch
  - It's only used as an input filter, especially useful to
    deal with multi-valued fields and encoded characters.
  * when the UI requests a confirmation from the user before a
    destructive operation it does not treat unknown key as "yes" anymore.
  * allcsv output changes:
  - header line uses lowercase
  - "MOBILEPHONE" column name changed to "mobile" (consistent w.r.t.
    standard_fields)
  - defined custom fields as well are part of the output now
- Remove abook_vcard_import.patch; fixed on upstream release
- Split out language files into their own package
- Add autoconf and automake dependencies; automake is required by
  the configure script itself and autoconf is needed to run
  autoreconf</changelog>
</package>
<package pkgid="e8e3787456acb1e7658d5816eac316cffd19b47cd4e90d844d1fb69255c3309a" name="abook" arch="x86_64">
  <version epoch="0" ver="0.6.1" rel="28.1"/>
  <changelog author="wr@rosenauer.org" date="1209988800">- revive abook with version 0.6.0pre2</changelog>
  <changelog author="brandon@ifup.org" date="1229601600">- Use %{version} and make package version reflect upstream version</changelog>
  <changelog author="wr@rosenauer.org" date="1261483200">- use a hopefully better RPM group</changelog>
  <changelog author="asn@cryptomilk.org" date="1312891200">- add support for vcards</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1323432000">- COPYING says it's GPL-2.0+</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434628800">- Force GnU inline semantics, fix build with GCC5
- Do not use fstack-protector-all, but the builsystem default.</changelog>
  <changelog author="p.drouand@gmail.com" date="1445860800">- Update to version 0.6.1
  * support for mouse
  * scrolling now affects the viewport instead of the cursor
  * support for a colored UI
  * added "groups" as a default field
  * the UI now supports merging selected entries [key M]
    and removing duplicates [key U]
  * a "custom" output filter allows the specification of an output
    format using placeholders
  * search-next is now bound to "/" too
  * some output filters can now be used in the context
    of --mutt-query. This is the case of "vcard" and "custom"
    [ no --query option has been created and --mutt-query is fully
    backward compatible ]
  * ldif output filter has been fixed [output modified] in multiple
    ways, does not force output to latin1 anymore and supports input
    from stdin.
  * vcard input/output support:
    An original input filter implementation was provided soon
    after 0.6.0pre2.
    In 2012, an optional build-time option to link against libvformat
    was added for the very same task: parsing vcard.
  - It depends on the --enable-vformat ./configure switch
  - It's only used as an input filter, especially useful to
    deal with multi-valued fields and encoded characters.
  * when the UI requests a confirmation from the user before a
    destructive operation it does not treat unknown key as "yes" anymore.
  * allcsv output changes:
  - header line uses lowercase
  - "MOBILEPHONE" column name changed to "mobile" (consistent w.r.t.
    standard_fields)
  - defined custom fields as well are part of the output now
- Remove abook_vcard_import.patch; fixed on upstream release
- Split out language files into their own package
- Add autoconf and automake dependencies; automake is required by
  the configure script itself and autoconf is needed to run
  autoreconf</changelog>
</package>
<package pkgid="f222882ebdbca10826ca23f438fd9f0d1802cc988c372d93bfe11ba702494b44" name="abook-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.6.1" rel="28.1"/>
  <changelog author="wr@rosenauer.org" date="1209988800">- revive abook with version 0.6.0pre2</changelog>
  <changelog author="brandon@ifup.org" date="1229601600">- Use %{version} and make package version reflect upstream version</changelog>
  <changelog author="wr@rosenauer.org" date="1261483200">- use a hopefully better RPM group</changelog>
  <changelog author="asn@cryptomilk.org" date="1312891200">- add support for vcards</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1323432000">- COPYING says it's GPL-2.0+</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434628800">- Force GnU inline semantics, fix build with GCC5
- Do not use fstack-protector-all, but the builsystem default.</changelog>
  <changelog author="p.drouand@gmail.com" date="1445860800">- Update to version 0.6.1
  * support for mouse
  * scrolling now affects the viewport instead of the cursor
  * support for a colored UI
  * added "groups" as a default field
  * the UI now supports merging selected entries [key M]
    and removing duplicates [key U]
  * a "custom" output filter allows the specification of an output
    format using placeholders
  * search-next is now bound to "/" too
  * some output filters can now be used in the context
    of --mutt-query. This is the case of "vcard" and "custom"
    [ no --query option has been created and --mutt-query is fully
    backward compatible ]
  * ldif output filter has been fixed [output modified] in multiple
    ways, does not force output to latin1 anymore and supports input
    from stdin.
  * vcard input/output support:
    An original input filter implementation was provided soon
    after 0.6.0pre2.
    In 2012, an optional build-time option to link against libvformat
    was added for the very same task: parsing vcard.
  - It depends on the --enable-vformat ./configure switch
  - It's only used as an input filter, especially useful to
    deal with multi-valued fields and encoded characters.
  * when the UI requests a confirmation from the user before a
    destructive operation it does not treat unknown key as "yes" anymore.
  * allcsv output changes:
  - header line uses lowercase
  - "MOBILEPHONE" column name changed to "mobile" (consistent w.r.t.
    standard_fields)
  - defined custom fields as well are part of the output now
- Remove abook_vcard_import.patch; fixed on upstream release
- Split out language files into their own package
- Add autoconf and automake dependencies; automake is required by
  the configure script itself and autoconf is needed to run
  autoreconf</changelog>
</package>
<package pkgid="c27f334fa3d2c4aee3d75cab673d4c97323ba7d51ad899abf5e010af3f336fe8" name="abook-debugsource" arch="x86_64">
  <version epoch="0" ver="0.6.1" rel="28.1"/>
  <changelog author="wr@rosenauer.org" date="1209988800">- revive abook with version 0.6.0pre2</changelog>
  <changelog author="brandon@ifup.org" date="1229601600">- Use %{version} and make package version reflect upstream version</changelog>
  <changelog author="wr@rosenauer.org" date="1261483200">- use a hopefully better RPM group</changelog>
  <changelog author="asn@cryptomilk.org" date="1312891200">- add support for vcards</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1323432000">- COPYING says it's GPL-2.0+</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434628800">- Force GnU inline semantics, fix build with GCC5
- Do not use fstack-protector-all, but the builsystem default.</changelog>
  <changelog author="p.drouand@gmail.com" date="1445860800">- Update to version 0.6.1
  * support for mouse
  * scrolling now affects the viewport instead of the cursor
  * support for a colored UI
  * added "groups" as a default field
  * the UI now supports merging selected entries [key M]
    and removing duplicates [key U]
  * a "custom" output filter allows the specification of an output
    format using placeholders
  * search-next is now bound to "/" too
  * some output filters can now be used in the context
    of --mutt-query. This is the case of "vcard" and "custom"
    [ no --query option has been created and --mutt-query is fully
    backward compatible ]
  * ldif output filter has been fixed [output modified] in multiple
    ways, does not force output to latin1 anymore and supports input
    from stdin.
  * vcard input/output support:
    An original input filter implementation was provided soon
    after 0.6.0pre2.
    In 2012, an optional build-time option to link against libvformat
    was added for the very same task: parsing vcard.
  - It depends on the --enable-vformat ./configure switch
  - It's only used as an input filter, especially useful to
    deal with multi-valued fields and encoded characters.
  * when the UI requests a confirmation from the user before a
    destructive operation it does not treat unknown key as "yes" anymore.
  * allcsv output changes:
  - header line uses lowercase
  - "MOBILEPHONE" column name changed to "mobile" (consistent w.r.t.
    standard_fields)
  - defined custom fields as well are part of the output now
- Remove abook_vcard_import.patch; fixed on upstream release
- Split out language files into their own package
- Add autoconf and automake dependencies; automake is required by
  the configure script itself and autoconf is needed to run
  autoreconf</changelog>
</package>
<package pkgid="a5ebb7bef2c349025afff06f22eb166a50ac3cc3c103cd1e47a91148afa3c1b3" name="abook-lang" arch="noarch">
  <version epoch="0" ver="0.6.1" rel="28.1"/>
  <changelog author="wr@rosenauer.org" date="1209988800">- revive abook with version 0.6.0pre2</changelog>
  <changelog author="brandon@ifup.org" date="1229601600">- Use %{version} and make package version reflect upstream version</changelog>
  <changelog author="wr@rosenauer.org" date="1261483200">- use a hopefully better RPM group</changelog>
  <changelog author="asn@cryptomilk.org" date="1312891200">- add support for vcards</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1323432000">- COPYING says it's GPL-2.0+</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434628800">- Force GnU inline semantics, fix build with GCC5
- Do not use fstack-protector-all, but the builsystem default.</changelog>
  <changelog author="p.drouand@gmail.com" date="1445860800">- Update to version 0.6.1
  * support for mouse
  * scrolling now affects the viewport instead of the cursor
  * support for a colored UI
  * added "groups" as a default field
  * the UI now supports merging selected entries [key M]
    and removing duplicates [key U]
  * a "custom" output filter allows the specification of an output
    format using placeholders
  * search-next is now bound to "/" too
  * some output filters can now be used in the context
    of --mutt-query. This is the case of "vcard" and "custom"
    [ no --query option has been created and --mutt-query is fully
    backward compatible ]
  * ldif output filter has been fixed [output modified] in multiple
    ways, does not force output to latin1 anymore and supports input
    from stdin.
  * vcard input/output support:
    An original input filter implementation was provided soon
    after 0.6.0pre2.
    In 2012, an optional build-time option to link against libvformat
    was added for the very same task: parsing vcard.
  - It depends on the --enable-vformat ./configure switch
  - It's only used as an input filter, especially useful to
    deal with multi-valued fields and encoded characters.
  * when the UI requests a confirmation from the user before a
    destructive operation it does not treat unknown key as "yes" anymore.
  * allcsv output changes:
  - header line uses lowercase
  - "MOBILEPHONE" column name changed to "mobile" (consistent w.r.t.
    standard_fields)
  - defined custom fields as well are part of the output now
- Remove abook_vcard_import.patch; fixed on upstream release
- Split out language files into their own package
- Add autoconf and automake dependencies; automake is required by
  the configure script itself and autoconf is needed to run
  autoreconf</changelog>
</package>
<package pkgid="8c0daa62aad7174eb2cfd0457c207fe0f1ade21828f2386978b537fa05e8c1ff" name="alpine" arch="src">
  <version epoch="0" ver="2.21" rel="102.1"/>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1315051200">- Fix build with no-add-needed</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="max@suse.com" date="1318248000">- Explicitly set the ssl prefix dir to fix build on ARM.</changelog>
  <changelog author="max@suse.com" date="1318334400">- Fix and extend operation-may-be-undefined-warning.diff
  (bnc#558841)
- Overhaul RPM summary and description.
- Month names containing non-ASCII characters were rendered
  incorrectly in non-UTF8 locales (bnc#597744).</changelog>
  <changelog author="max@suse.com" date="1318852800">- Fix two instances of premature closedir() and a potential buffer
  overflow in the maildir handler (alpine-maildir-closedir.patch).</changelog>
  <changelog author="puzel@suse.com" date="1328702400">- clean up spec file</changelog>
  <changelog author="aj@suse.de" date="1343390400">- Include sys/resource.h for getrlimit.</changelog>
  <changelog author="jengelh@inai.de" date="1369224000">- Remove old SUSE definitions</changelog>
  <changelog author="jengelh@inai.de" date="1369224001">- Update to new upstream release 2.10
  * Quota report for IMAP folders that support it
  (press the "@" command in the index screen of such folder).
  * Search a folder for the content of any header with the ";"
  command.
  * Foreign characters are decoded correctly in IMAP folders.
  * Recognition of proper mime type for docx, xlsx, and pptx files.
  * When composing a message, Alpine will create a new thread when
  the subject is erased.
- Uncompress patches, since quilt does not like working with them
- Remove because merged upstream: chappa-filterflagbug.patch(.gz),
  chappa-nlinfobug.patch(.gz), chappa-replacebug.patch(.gz),
  chappa-searchheader.patch(.gz), chappa-streamlock.patch(.gz)
- Rediff to clear fuzz: alpine-no-add-needed.patch,
  pine-nonvoid-function.patch
- Remove because no longer applies and total lack of description
  as per Patch Guidelines:
  alpine-no-add-needed.patch</changelog>
  <changelog author="jengelh@inai.de" date="1378123200">- Update to new upstream release 2.11
  * Increase encryption of S/MIME encrypted messages.
  * Pico: Improvements in justification of paragraphs: lines that
  begin with a quote string, followed by a space were considered
  individual paragraphs, now they are considered part of a paragraph.
  * Unix Alpine: Allow local .pinerc file to be a symbolic link.
  * Experimental extended support of recognition of UTF-8 in urls
  * Added recognition of ws and wss URIs.
  * Add ability to color folder names, directory names, and text in
  the FOLDER SCREEN.
  * Add the ability to color any token used in the display of the
  INDEX SCREEN.
  * New option preserve-original-fields that adds the ability to
  preserve To: and Cc: fields when replying to a message, as
  specified by original sender.
  * Added Quota subcommands for printing, forwarding, saving, etc.
- Refresh from homepage (and save as unified): chappa-*.patch
- Refresh for -p1: operation-may-be-undefined-warning.diff,
  fix-implicit.patch, alpine-gcc44.diff
- Drop quilt-patches/alpine-2.00-as_needed.patch (merged upstream)</changelog>
  <changelog author="max@suse.com" date="1390392000">- Add alpine-mime-type-workaround.patch:
  Send mime type in lowercase to work around MUAs that can't cope
  with upper case mime type strings in the Content-Type header
  such as the webmailer of GMX.  This is a backport from the
  current development release and will become obsolete with the
  next version upgrade.</changelog>
  <changelog author="jengelh@inai.de" date="1393848000">- The pico and pilot standalone programs have version numbers of
  their own; expose these in the .spec file</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 2.20
  * Upgrade UW-IMAP to Panda IMAP from github.com/jonabbey/panda-imap
  * S/MIME: Add screen to manage certificates.
  * S/MIME: Signatures are validated using the user's certificates
  instead of the ones included in the message. Behavior can be
  disabled by disabling the option "Validate Using Certificate
  Store Only" which is enabled by default.
  * S/MIME: add the sender certificate to the list of certificates
  in encrypted messages to make it possible for the sender to
  decrypt the message they sent.
  * S/MIME: Forwarding a message will include the signed part as part
  of the text and not as a multipart message, just as the reply
  command does.
  * Add support to selective expunge through a subcommand of the
  select-apply commands.
  * Pico: New subcommand of the search command, allows to reverse the
  direction of search.
  * Add /tls1, /tls1_1, /tls1_2 and /dtls1 to the definition of a
  server to use different ways to connect using ssl, for example
  {server.com/tls1} will attempt to connect to server.com at the
  ssl imap port (port 993) and establish a connection using TLSv1.
  These flags can be used in conjunction with the /ssl flag, the
  ssl flag is redundant. Conversely, however, the /ssl flag does
  not imply any of these flags; the /ssl flag means SSLv3 or, if
  not available, SSLv2 in the SSL port.
  * Alpine does not attempt to automatically reopen a collection that
  was not opened due to cancellation by the user. Instead, the user
  must try to open it explicitly.
  * Experimental: Write the content-type of a message in lowercase,
  as some non-compliant servers do not understand uppercase
  content-type.
  * Opening a folder updates recent count in maildrops (this
  already works for other types of folders)
  * Pico: Justification works without need of a predefined quote
  string. This allows justification of blocks of text that are
  indented with spaces.
  * Decode the name of attachment names, so they can be written as
  part of the description of the part.
  * Replace tabs by spaces in From and Subject fields to control for
  size in screen of these fields. Change only in index screen
  display.
- Drop alpine-month_name-utf8.patch (solved differently upstream),
  drop alpine-mime-type-workaround.patch (merged upstream)
- Add lint.diff to workaround new source code problems</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from binary
  alpine-timestamp.patch</changelog>
  <changelog author="kukuk@suse.de" date="1459771200">- Remove BuildRequires for libgssglue (via libgssapi provides),
  unused since krb5_gssapi is used.</changelog>
  <changelog author="max@suse.com" date="1490097600">- New version 2.21:
  * New SHORTSUBJECT, SHORTSUBJKEY and SHORTSUBJKEYINIT token for
    index format
  * New SMARTTIME24 token for index screen.
  * Added support for RFC 2971 - IMAP ID extension.
  * SMIME: Upgrade the default signature digest from SHA-1 to
    SHA-256.
  * SMIME: Turn off automatic signing and encrypting of a message
    when bouncing.
  * The complete change list can be viewed by pressing "R"
    in the Alpine main menu.
- Updated "Chappa" patches to the latest version.
- Obsolete patches:
  * alpine-no-add-needed.patch
  * chappa-ignoresize.patch
  * chappa-unixnullbug.patch
  * pico-stripwhitespace.diff
  * pine-nonvoid-function.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1490097601">- add chappa patch to add own rules (chappa-rules.patch)
- add chappa patch to change from header (chappa-fromheader.patch)
- add chappa patch to better justify paragraphs (chappa-fillpara.patch)
- drop empty lint.diff</changelog>
  <changelog author="jengelh@inai.de" date="1499083200">- imap is bundled with alpine since a while, so there is no need
  for imap-devel anymore (whose removal is planned for
  openSUSE:Factory).</changelog>
</package>
<package pkgid="62065eccbb33c92b600e1a830e0843f367c22fd57a6bf72dd01836823a8dc2ae" name="alpine" arch="x86_64">
  <version epoch="0" ver="2.21" rel="102.1"/>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1315051200">- Fix build with no-add-needed</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="max@suse.com" date="1318248000">- Explicitly set the ssl prefix dir to fix build on ARM.</changelog>
  <changelog author="max@suse.com" date="1318334400">- Fix and extend operation-may-be-undefined-warning.diff
  (bnc#558841)
- Overhaul RPM summary and description.
- Month names containing non-ASCII characters were rendered
  incorrectly in non-UTF8 locales (bnc#597744).</changelog>
  <changelog author="max@suse.com" date="1318852800">- Fix two instances of premature closedir() and a potential buffer
  overflow in the maildir handler (alpine-maildir-closedir.patch).</changelog>
  <changelog author="puzel@suse.com" date="1328702400">- clean up spec file</changelog>
  <changelog author="aj@suse.de" date="1343390400">- Include sys/resource.h for getrlimit.</changelog>
  <changelog author="jengelh@inai.de" date="1369224000">- Remove old SUSE definitions</changelog>
  <changelog author="jengelh@inai.de" date="1369224001">- Update to new upstream release 2.10
  * Quota report for IMAP folders that support it
  (press the "@" command in the index screen of such folder).
  * Search a folder for the content of any header with the ";"
  command.
  * Foreign characters are decoded correctly in IMAP folders.
  * Recognition of proper mime type for docx, xlsx, and pptx files.
  * When composing a message, Alpine will create a new thread when
  the subject is erased.
- Uncompress patches, since quilt does not like working with them
- Remove because merged upstream: chappa-filterflagbug.patch(.gz),
  chappa-nlinfobug.patch(.gz), chappa-replacebug.patch(.gz),
  chappa-searchheader.patch(.gz), chappa-streamlock.patch(.gz)
- Rediff to clear fuzz: alpine-no-add-needed.patch,
  pine-nonvoid-function.patch
- Remove because no longer applies and total lack of description
  as per Patch Guidelines:
  alpine-no-add-needed.patch</changelog>
  <changelog author="jengelh@inai.de" date="1378123200">- Update to new upstream release 2.11
  * Increase encryption of S/MIME encrypted messages.
  * Pico: Improvements in justification of paragraphs: lines that
  begin with a quote string, followed by a space were considered
  individual paragraphs, now they are considered part of a paragraph.
  * Unix Alpine: Allow local .pinerc file to be a symbolic link.
  * Experimental extended support of recognition of UTF-8 in urls
  * Added recognition of ws and wss URIs.
  * Add ability to color folder names, directory names, and text in
  the FOLDER SCREEN.
  * Add the ability to color any token used in the display of the
  INDEX SCREEN.
  * New option preserve-original-fields that adds the ability to
  preserve To: and Cc: fields when replying to a message, as
  specified by original sender.
  * Added Quota subcommands for printing, forwarding, saving, etc.
- Refresh from homepage (and save as unified): chappa-*.patch
- Refresh for -p1: operation-may-be-undefined-warning.diff,
  fix-implicit.patch, alpine-gcc44.diff
- Drop quilt-patches/alpine-2.00-as_needed.patch (merged upstream)</changelog>
  <changelog author="max@suse.com" date="1390392000">- Add alpine-mime-type-workaround.patch:
  Send mime type in lowercase to work around MUAs that can't cope
  with upper case mime type strings in the Content-Type header
  such as the webmailer of GMX.  This is a backport from the
  current development release and will become obsolete with the
  next version upgrade.</changelog>
  <changelog author="jengelh@inai.de" date="1393848000">- The pico and pilot standalone programs have version numbers of
  their own; expose these in the .spec file</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 2.20
  * Upgrade UW-IMAP to Panda IMAP from github.com/jonabbey/panda-imap
  * S/MIME: Add screen to manage certificates.
  * S/MIME: Signatures are validated using the user's certificates
  instead of the ones included in the message. Behavior can be
  disabled by disabling the option "Validate Using Certificate
  Store Only" which is enabled by default.
  * S/MIME: add the sender certificate to the list of certificates
  in encrypted messages to make it possible for the sender to
  decrypt the message they sent.
  * S/MIME: Forwarding a message will include the signed part as part
  of the text and not as a multipart message, just as the reply
  command does.
  * Add support to selective expunge through a subcommand of the
  select-apply commands.
  * Pico: New subcommand of the search command, allows to reverse the
  direction of search.
  * Add /tls1, /tls1_1, /tls1_2 and /dtls1 to the definition of a
  server to use different ways to connect using ssl, for example
  {server.com/tls1} will attempt to connect to server.com at the
  ssl imap port (port 993) and establish a connection using TLSv1.
  These flags can be used in conjunction with the /ssl flag, the
  ssl flag is redundant. Conversely, however, the /ssl flag does
  not imply any of these flags; the /ssl flag means SSLv3 or, if
  not available, SSLv2 in the SSL port.
  * Alpine does not attempt to automatically reopen a collection that
  was not opened due to cancellation by the user. Instead, the user
  must try to open it explicitly.
  * Experimental: Write the content-type of a message in lowercase,
  as some non-compliant servers do not understand uppercase
  content-type.
  * Opening a folder updates recent count in maildrops (this
  already works for other types of folders)
  * Pico: Justification works without need of a predefined quote
  string. This allows justification of blocks of text that are
  indented with spaces.
  * Decode the name of attachment names, so they can be written as
  part of the description of the part.
  * Replace tabs by spaces in From and Subject fields to control for
  size in screen of these fields. Change only in index screen
  display.
- Drop alpine-month_name-utf8.patch (solved differently upstream),
  drop alpine-mime-type-workaround.patch (merged upstream)
- Add lint.diff to workaround new source code problems</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from binary
  alpine-timestamp.patch</changelog>
  <changelog author="kukuk@suse.de" date="1459771200">- Remove BuildRequires for libgssglue (via libgssapi provides),
  unused since krb5_gssapi is used.</changelog>
  <changelog author="max@suse.com" date="1490097600">- New version 2.21:
  * New SHORTSUBJECT, SHORTSUBJKEY and SHORTSUBJKEYINIT token for
    index format
  * New SMARTTIME24 token for index screen.
  * Added support for RFC 2971 - IMAP ID extension.
  * SMIME: Upgrade the default signature digest from SHA-1 to
    SHA-256.
  * SMIME: Turn off automatic signing and encrypting of a message
    when bouncing.
  * The complete change list can be viewed by pressing "R"
    in the Alpine main menu.
- Updated "Chappa" patches to the latest version.
- Obsolete patches:
  * alpine-no-add-needed.patch
  * chappa-ignoresize.patch
  * chappa-unixnullbug.patch
  * pico-stripwhitespace.diff
  * pine-nonvoid-function.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1490097601">- add chappa patch to add own rules (chappa-rules.patch)
- add chappa patch to change from header (chappa-fromheader.patch)
- add chappa patch to better justify paragraphs (chappa-fillpara.patch)
- drop empty lint.diff</changelog>
  <changelog author="jengelh@inai.de" date="1499083200">- imap is bundled with alpine since a while, so there is no need
  for imap-devel anymore (whose removal is planned for
  openSUSE:Factory).</changelog>
</package>
<package pkgid="31f1e4409cc347d9bac845854d96f5f3af877a8e798ea534f37c9ce8948296db" name="alpine-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="0" rel="22.1"/>
  <changelog author="jengelh@inai.de" date="1384344000">- Initial package (version 0) for build.opensuse.org</changelog>
  <changelog author="cfarrell@suse.com" date="1392120000">- license update: WTFPL-2.0
  We deleted SUSE-WTFPL-2.0 as WTFPL-2.0 was entered on the official
  spdx.org/licenses list</changelog>
  <changelog author="jengelh@inai.de" date="1392638400">- Add SUSE-WTFPL-2.0 back: required for Factory</changelog>
  <changelog author="jengelh@inai.de" date="1421150400">- Disable IMAP-over-SSH by defualt [bnc#912611]</changelog>
  <changelog author="jengelh@inai.de" date="1421755200">- Clear inbox-path, drop selected-in-boldface, include
  Cc/Attachment fields in default compose header list again.
  Use standard thread sorting.
- Demote Suggests to Enhances to work around zypper's suboptimal
  default preferences. [bnc#912611]</changelog>
</package>
<package pkgid="3798a58be40594daf191363e56e9eb5b75aa0a15bb89972a5412bfa916d3ea2c" name="alpine-branding-openSUSE" arch="src">
  <version epoch="0" ver="0" rel="22.1"/>
  <changelog author="jengelh@inai.de" date="1384344000">- Initial package (version 0) for build.opensuse.org</changelog>
  <changelog author="cfarrell@suse.com" date="1392120000">- license update: WTFPL-2.0
  We deleted SUSE-WTFPL-2.0 as WTFPL-2.0 was entered on the official
  spdx.org/licenses list</changelog>
  <changelog author="jengelh@inai.de" date="1392638400">- Add SUSE-WTFPL-2.0 back: required for Factory</changelog>
  <changelog author="jengelh@inai.de" date="1421150400">- Disable IMAP-over-SSH by defualt [bnc#912611]</changelog>
  <changelog author="jengelh@inai.de" date="1421755200">- Clear inbox-path, drop selected-in-boldface, include
  Cc/Attachment fields in default compose header list again.
  Use standard thread sorting.
- Demote Suggests to Enhances to work around zypper's suboptimal
  default preferences. [bnc#912611]</changelog>
</package>
<package pkgid="c4f6cb1d216ba3916ecad1a811285531d4ba12fbd63133307ea6431edadda609" name="alpine-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.21" rel="102.1"/>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1315051200">- Fix build with no-add-needed</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="max@suse.com" date="1318248000">- Explicitly set the ssl prefix dir to fix build on ARM.</changelog>
  <changelog author="max@suse.com" date="1318334400">- Fix and extend operation-may-be-undefined-warning.diff
  (bnc#558841)
- Overhaul RPM summary and description.
- Month names containing non-ASCII characters were rendered
  incorrectly in non-UTF8 locales (bnc#597744).</changelog>
  <changelog author="max@suse.com" date="1318852800">- Fix two instances of premature closedir() and a potential buffer
  overflow in the maildir handler (alpine-maildir-closedir.patch).</changelog>
  <changelog author="puzel@suse.com" date="1328702400">- clean up spec file</changelog>
  <changelog author="aj@suse.de" date="1343390400">- Include sys/resource.h for getrlimit.</changelog>
  <changelog author="jengelh@inai.de" date="1369224000">- Remove old SUSE definitions</changelog>
  <changelog author="jengelh@inai.de" date="1369224001">- Update to new upstream release 2.10
  * Quota report for IMAP folders that support it
  (press the "@" command in the index screen of such folder).
  * Search a folder for the content of any header with the ";"
  command.
  * Foreign characters are decoded correctly in IMAP folders.
  * Recognition of proper mime type for docx, xlsx, and pptx files.
  * When composing a message, Alpine will create a new thread when
  the subject is erased.
- Uncompress patches, since quilt does not like working with them
- Remove because merged upstream: chappa-filterflagbug.patch(.gz),
  chappa-nlinfobug.patch(.gz), chappa-replacebug.patch(.gz),
  chappa-searchheader.patch(.gz), chappa-streamlock.patch(.gz)
- Rediff to clear fuzz: alpine-no-add-needed.patch,
  pine-nonvoid-function.patch
- Remove because no longer applies and total lack of description
  as per Patch Guidelines:
  alpine-no-add-needed.patch</changelog>
  <changelog author="jengelh@inai.de" date="1378123200">- Update to new upstream release 2.11
  * Increase encryption of S/MIME encrypted messages.
  * Pico: Improvements in justification of paragraphs: lines that
  begin with a quote string, followed by a space were considered
  individual paragraphs, now they are considered part of a paragraph.
  * Unix Alpine: Allow local .pinerc file to be a symbolic link.
  * Experimental extended support of recognition of UTF-8 in urls
  * Added recognition of ws and wss URIs.
  * Add ability to color folder names, directory names, and text in
  the FOLDER SCREEN.
  * Add the ability to color any token used in the display of the
  INDEX SCREEN.
  * New option preserve-original-fields that adds the ability to
  preserve To: and Cc: fields when replying to a message, as
  specified by original sender.
  * Added Quota subcommands for printing, forwarding, saving, etc.
- Refresh from homepage (and save as unified): chappa-*.patch
- Refresh for -p1: operation-may-be-undefined-warning.diff,
  fix-implicit.patch, alpine-gcc44.diff
- Drop quilt-patches/alpine-2.00-as_needed.patch (merged upstream)</changelog>
  <changelog author="max@suse.com" date="1390392000">- Add alpine-mime-type-workaround.patch:
  Send mime type in lowercase to work around MUAs that can't cope
  with upper case mime type strings in the Content-Type header
  such as the webmailer of GMX.  This is a backport from the
  current development release and will become obsolete with the
  next version upgrade.</changelog>
  <changelog author="jengelh@inai.de" date="1393848000">- The pico and pilot standalone programs have version numbers of
  their own; expose these in the .spec file</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 2.20
  * Upgrade UW-IMAP to Panda IMAP from github.com/jonabbey/panda-imap
  * S/MIME: Add screen to manage certificates.
  * S/MIME: Signatures are validated using the user's certificates
  instead of the ones included in the message. Behavior can be
  disabled by disabling the option "Validate Using Certificate
  Store Only" which is enabled by default.
  * S/MIME: add the sender certificate to the list of certificates
  in encrypted messages to make it possible for the sender to
  decrypt the message they sent.
  * S/MIME: Forwarding a message will include the signed part as part
  of the text and not as a multipart message, just as the reply
  command does.
  * Add support to selective expunge through a subcommand of the
  select-apply commands.
  * Pico: New subcommand of the search command, allows to reverse the
  direction of search.
  * Add /tls1, /tls1_1, /tls1_2 and /dtls1 to the definition of a
  server to use different ways to connect using ssl, for example
  {server.com/tls1} will attempt to connect to server.com at the
  ssl imap port (port 993) and establish a connection using TLSv1.
  These flags can be used in conjunction with the /ssl flag, the
  ssl flag is redundant. Conversely, however, the /ssl flag does
  not imply any of these flags; the /ssl flag means SSLv3 or, if
  not available, SSLv2 in the SSL port.
  * Alpine does not attempt to automatically reopen a collection that
  was not opened due to cancellation by the user. Instead, the user
  must try to open it explicitly.
  * Experimental: Write the content-type of a message in lowercase,
  as some non-compliant servers do not understand uppercase
  content-type.
  * Opening a folder updates recent count in maildrops (this
  already works for other types of folders)
  * Pico: Justification works without need of a predefined quote
  string. This allows justification of blocks of text that are
  indented with spaces.
  * Decode the name of attachment names, so they can be written as
  part of the description of the part.
  * Replace tabs by spaces in From and Subject fields to control for
  size in screen of these fields. Change only in index screen
  display.
- Drop alpine-month_name-utf8.patch (solved differently upstream),
  drop alpine-mime-type-workaround.patch (merged upstream)
- Add lint.diff to workaround new source code problems</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from binary
  alpine-timestamp.patch</changelog>
  <changelog author="kukuk@suse.de" date="1459771200">- Remove BuildRequires for libgssglue (via libgssapi provides),
  unused since krb5_gssapi is used.</changelog>
  <changelog author="max@suse.com" date="1490097600">- New version 2.21:
  * New SHORTSUBJECT, SHORTSUBJKEY and SHORTSUBJKEYINIT token for
    index format
  * New SMARTTIME24 token for index screen.
  * Added support for RFC 2971 - IMAP ID extension.
  * SMIME: Upgrade the default signature digest from SHA-1 to
    SHA-256.
  * SMIME: Turn off automatic signing and encrypting of a message
    when bouncing.
  * The complete change list can be viewed by pressing "R"
    in the Alpine main menu.
- Updated "Chappa" patches to the latest version.
- Obsolete patches:
  * alpine-no-add-needed.patch
  * chappa-ignoresize.patch
  * chappa-unixnullbug.patch
  * pico-stripwhitespace.diff
  * pine-nonvoid-function.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1490097601">- add chappa patch to add own rules (chappa-rules.patch)
- add chappa patch to change from header (chappa-fromheader.patch)
- add chappa patch to better justify paragraphs (chappa-fillpara.patch)
- drop empty lint.diff</changelog>
  <changelog author="jengelh@inai.de" date="1499083200">- imap is bundled with alpine since a while, so there is no need
  for imap-devel anymore (whose removal is planned for
  openSUSE:Factory).</changelog>
</package>
<package pkgid="4e707e8899009bf05dc8572eed6f83ae25d57d2c8881a43267c93ba6e2cc3b66" name="alpine-debugsource" arch="x86_64">
  <version epoch="0" ver="2.21" rel="102.1"/>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1315051200">- Fix build with no-add-needed</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="max@suse.com" date="1318248000">- Explicitly set the ssl prefix dir to fix build on ARM.</changelog>
  <changelog author="max@suse.com" date="1318334400">- Fix and extend operation-may-be-undefined-warning.diff
  (bnc#558841)
- Overhaul RPM summary and description.
- Month names containing non-ASCII characters were rendered
  incorrectly in non-UTF8 locales (bnc#597744).</changelog>
  <changelog author="max@suse.com" date="1318852800">- Fix two instances of premature closedir() and a potential buffer
  overflow in the maildir handler (alpine-maildir-closedir.patch).</changelog>
  <changelog author="puzel@suse.com" date="1328702400">- clean up spec file</changelog>
  <changelog author="aj@suse.de" date="1343390400">- Include sys/resource.h for getrlimit.</changelog>
  <changelog author="jengelh@inai.de" date="1369224000">- Remove old SUSE definitions</changelog>
  <changelog author="jengelh@inai.de" date="1369224001">- Update to new upstream release 2.10
  * Quota report for IMAP folders that support it
  (press the "@" command in the index screen of such folder).
  * Search a folder for the content of any header with the ";"
  command.
  * Foreign characters are decoded correctly in IMAP folders.
  * Recognition of proper mime type for docx, xlsx, and pptx files.
  * When composing a message, Alpine will create a new thread when
  the subject is erased.
- Uncompress patches, since quilt does not like working with them
- Remove because merged upstream: chappa-filterflagbug.patch(.gz),
  chappa-nlinfobug.patch(.gz), chappa-replacebug.patch(.gz),
  chappa-searchheader.patch(.gz), chappa-streamlock.patch(.gz)
- Rediff to clear fuzz: alpine-no-add-needed.patch,
  pine-nonvoid-function.patch
- Remove because no longer applies and total lack of description
  as per Patch Guidelines:
  alpine-no-add-needed.patch</changelog>
  <changelog author="jengelh@inai.de" date="1378123200">- Update to new upstream release 2.11
  * Increase encryption of S/MIME encrypted messages.
  * Pico: Improvements in justification of paragraphs: lines that
  begin with a quote string, followed by a space were considered
  individual paragraphs, now they are considered part of a paragraph.
  * Unix Alpine: Allow local .pinerc file to be a symbolic link.
  * Experimental extended support of recognition of UTF-8 in urls
  * Added recognition of ws and wss URIs.
  * Add ability to color folder names, directory names, and text in
  the FOLDER SCREEN.
  * Add the ability to color any token used in the display of the
  INDEX SCREEN.
  * New option preserve-original-fields that adds the ability to
  preserve To: and Cc: fields when replying to a message, as
  specified by original sender.
  * Added Quota subcommands for printing, forwarding, saving, etc.
- Refresh from homepage (and save as unified): chappa-*.patch
- Refresh for -p1: operation-may-be-undefined-warning.diff,
  fix-implicit.patch, alpine-gcc44.diff
- Drop quilt-patches/alpine-2.00-as_needed.patch (merged upstream)</changelog>
  <changelog author="max@suse.com" date="1390392000">- Add alpine-mime-type-workaround.patch:
  Send mime type in lowercase to work around MUAs that can't cope
  with upper case mime type strings in the Content-Type header
  such as the webmailer of GMX.  This is a backport from the
  current development release and will become obsolete with the
  next version upgrade.</changelog>
  <changelog author="jengelh@inai.de" date="1393848000">- The pico and pilot standalone programs have version numbers of
  their own; expose these in the .spec file</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 2.20
  * Upgrade UW-IMAP to Panda IMAP from github.com/jonabbey/panda-imap
  * S/MIME: Add screen to manage certificates.
  * S/MIME: Signatures are validated using the user's certificates
  instead of the ones included in the message. Behavior can be
  disabled by disabling the option "Validate Using Certificate
  Store Only" which is enabled by default.
  * S/MIME: add the sender certificate to the list of certificates
  in encrypted messages to make it possible for the sender to
  decrypt the message they sent.
  * S/MIME: Forwarding a message will include the signed part as part
  of the text and not as a multipart message, just as the reply
  command does.
  * Add support to selective expunge through a subcommand of the
  select-apply commands.
  * Pico: New subcommand of the search command, allows to reverse the
  direction of search.
  * Add /tls1, /tls1_1, /tls1_2 and /dtls1 to the definition of a
  server to use different ways to connect using ssl, for example
  {server.com/tls1} will attempt to connect to server.com at the
  ssl imap port (port 993) and establish a connection using TLSv1.
  These flags can be used in conjunction with the /ssl flag, the
  ssl flag is redundant. Conversely, however, the /ssl flag does
  not imply any of these flags; the /ssl flag means SSLv3 or, if
  not available, SSLv2 in the SSL port.
  * Alpine does not attempt to automatically reopen a collection that
  was not opened due to cancellation by the user. Instead, the user
  must try to open it explicitly.
  * Experimental: Write the content-type of a message in lowercase,
  as some non-compliant servers do not understand uppercase
  content-type.
  * Opening a folder updates recent count in maildrops (this
  already works for other types of folders)
  * Pico: Justification works without need of a predefined quote
  string. This allows justification of blocks of text that are
  indented with spaces.
  * Decode the name of attachment names, so they can be written as
  part of the description of the part.
  * Replace tabs by spaces in From and Subject fields to control for
  size in screen of these fields. Change only in index screen
  display.
- Drop alpine-month_name-utf8.patch (solved differently upstream),
  drop alpine-mime-type-workaround.patch (merged upstream)
- Add lint.diff to workaround new source code problems</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from binary
  alpine-timestamp.patch</changelog>
  <changelog author="kukuk@suse.de" date="1459771200">- Remove BuildRequires for libgssglue (via libgssapi provides),
  unused since krb5_gssapi is used.</changelog>
  <changelog author="max@suse.com" date="1490097600">- New version 2.21:
  * New SHORTSUBJECT, SHORTSUBJKEY and SHORTSUBJKEYINIT token for
    index format
  * New SMARTTIME24 token for index screen.
  * Added support for RFC 2971 - IMAP ID extension.
  * SMIME: Upgrade the default signature digest from SHA-1 to
    SHA-256.
  * SMIME: Turn off automatic signing and encrypting of a message
    when bouncing.
  * The complete change list can be viewed by pressing "R"
    in the Alpine main menu.
- Updated "Chappa" patches to the latest version.
- Obsolete patches:
  * alpine-no-add-needed.patch
  * chappa-ignoresize.patch
  * chappa-unixnullbug.patch
  * pico-stripwhitespace.diff
  * pine-nonvoid-function.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1490097601">- add chappa patch to add own rules (chappa-rules.patch)
- add chappa patch to change from header (chappa-fromheader.patch)
- add chappa patch to better justify paragraphs (chappa-fillpara.patch)
- drop empty lint.diff</changelog>
  <changelog author="jengelh@inai.de" date="1499083200">- imap is bundled with alpine since a while, so there is no need
  for imap-devel anymore (whose removal is planned for
  openSUSE:Factory).</changelog>
</package>
<package pkgid="b854853112e42ee36812875c09b34998ed7490ac769f03a538a6214c287f05f3" name="amavisd-new" arch="src">
  <version epoch="0" ver="2.11.0" rel="134.3"/>
  <changelog author="wr@rosenauer.org" date="1356609600">- update to version 2.7.2
  * a generated Received header field was missing the 'IPv6:' prefix
    in the TCP-info component of a 'by' subfield (as required by RFC 5321,
    section 4.1.3) when amavisd received a message over an IPv6 protocol;
    (btw, the TCP-info component of a 'from' subfield was correct);
  * changed data type of an SNMP variable LogRetries from C32 to C64
    for consistency with the MIB;
  * updated AV entry 'AVG Anti-Virus' to consider status 403 continuation
    lines when searching for a virus name; suggested by Ralf Hildebrandt;
  * reduce a log level to 5 on a log message:
    Amavis::IO::RW: Error flushing on close: ...
    to avoid an innocent but sinister-looking warning when a pipe
    to a virus scanner is broken and needs to be re-established;
    reported by Stefan Jakobs
  * updated an AV entry for 'F-Secure Linux Security' to version 9.14;
    options updated by Mika Ilmaranta, a patch by Tuomo Soini;
  * fix a Unix socket compatibility issue with Net::Server versions 2.000,
    2.001 and 2.002, where a method NS_unix_path no longer exists.
    This method was re-introduced for compatibility reasons in 2.003.
    Reported by Paul MacKenzie;</changelog>
  <changelog author="aj@ajaissle.de" date="1360152000">- update to version 2.8.0
- COMPATIBILITY 2.8.0
  * removed an old compatibility measure: default value of @banned_admin_maps
    was changed from:
    @banned_admin_maps = (\$banned_admin, \%virus_admin, \$virus_admin);
    to a more consistent:
    @banned_admin_maps = (\$banned_admin);
    The previous default value of @banned_admin_maps tried to maintain
    compatibility with versions before the setting was separated from
    its companion @virus_admin_maps. Now this compatibility is no longer
    considered necessary and contributes to some confusion, so it was dropped.
    See 2.4.0 and 2.2.1 release notes for previous changes to this setting.
  * quarantining to an mbox format file used to include a local time in an
    mbox separator line, which differs from RFC 4155 and common practices
    of using an UTC timestamp; a time zone of a timestamp in separator lines
    is now changed to UTC;
- BUG FIXES 2.8.0
  * fixed initial evaluation of dynamic (i.e. per policy bank) values of
    $enable_dkim_verification, $enable_dkim_signing and $bypass_decode_parts
    across all declared policy banks; these policy bank entries may be scalars
    of references to such;
  * finely adjust a message size for de-stuffed dots according to a size
    definition in RFC 1870; avoids occasional message size mismatch when
    using an antispam interface module SpamdClient (implementing client-side
    of a spamc/spamd protocol);
  * updated LDAP.ldif to match LDAP.schema; provided by Quanah Gibson-Mount;
  * updated AMAVIS-MIB.txt and amavisd-snmp-subagent: changed type of
    SNMP variables *MsgsSize* in the group amavisStats 7 from Counter32
    to Counter64 for consistency with other *MsgsSize* variables in groups
    amavisStats 3 and amavisStats 9;
- NEW FEATURES SUMMARY 2.8.0
  * For monitoring and statistics gathering purposes a new set of utilities
    and service processes is available based on a message passing paradigm,
    using a 0MQ (a.k.a. ZMQ, ZeroMQ, or Crossroads I/O) library. This
    replaces a functionally similar set of utilities based on a shared
    BerkeleyDB database, with a benefit of avoiding lock contention
    altogether. This can bring sigificant speedups, most pronounced on
    a host with many busy amavisd child processes.
  * Applied numerous fine-grained optimizations based on a NYTProf profiler
    results. Optimizations include a reduction in a number of generated
    Perl opcodes and similar micro-optimizations. This accounts for a large
    amount of small changes in the code.
  * Our current statistics (Q4 2011) shows that 80 % of messages are below
    30.000 bytes, and 90 % of mail messages are below 100.000 bytes in
    size. As an optimization, messages below 100 KiB in size are now kept
    and processed in memory, including passing them more optimally to
    SpamAssassin 3.4.0. Some file activity is still there, but is much
    reduced. If $TEMPBASE also resides on an SSD disk (or a RAM disk),
    observed speedup between 2.7.2 and 2.8.0 was 3 to 8 percent on a
    busy host (with monitoring disabled, so as not to skew a measurement).
  * Use a module IO::Socket::IP if available, instead of dealing directly
    with low-level modules IO::Socket::INET and IO::Socket::INET6;
  * choose more appropriate defaults if running on an IPv6-only host
    (like connecting to ::1 instead of 127.0.0.1 which may not exist);
  * amavisd-release now also supports connecting to amavisd over IPv6;
  * as a debugging aid it is now possible that a late event triggers full
    logging of earlier events that occurred during processing of a current
    mail message;
  * $enable_ldap setting is now dynamic, i.e. can be changed by a policy
    bank, which makes it possible to selectively disable LDAP lookups
    per policy bank;
  * optionally avoid persistent connections to SQL and LDAP servers;
  * it is now possible to disable calling an external file(1) utility
    but still have MIME parts decoding enabled;
  * added support in Amavis::SpamControl::ExtProg for an external spam scanner
    Bogofilter;
  * added locking options to @spam_scanners entries, to be used with external
    scanners which need but do not implement locking of their resources
    by themselves;
  * added a global configuration setting $sa_userprefs_file, which is passed
    on to SpamAssassin as a 'userprefs_filename' parameter at initialization;
  * added a subroutine iso8601_weekday(), potentially useful with partitioning;
  * added several new macros available to logging and notification templates;</changelog>
  <changelog author="mlin@suse.com" date="1361793600">- Install amavisd.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
  <changelog author="meissner@suse.com" date="1367496000">- use %defattr correctly to make /var/spool/amavis not worldreadable.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369828800">- Fix multiple bugs in systemd unit, syslog.target should
  not be used and Wants must be used instead of requires in most
  cases.</changelog>
  <changelog author="wr@rosenauer.org" date="1379160000">- update to version 2.8.1
  COMPATIBILITY
  when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an
  internal messaging protocol, make sure to replace all 0MQ-enabled
  Amavis components on upgrading amavisd, as the internal protocol
  has changed slightly, taking advantage of 0MQ multi-part messages
  for better performance. Affected programs are: amavis-services,
  amavisd-status, amavisd-snmp-subagent-zmq, and amavisd.
  NOTE: The Crossroads I/O project (libxs) ceased development on
    July 2012, to be replaced by nanomsg eventually by the same author.
    The 0MQ library (libzmq) is currently (2013) the best choice,
    the preferred library version is 3.2.2 or later along with
    the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants.
    The older version 2 of the library, along with an older perl
    module ZeroMQ, should be fine too, but lacks support for IPv6.
  amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0
  NEW FEATURES SUMMARY
  * new Redis storage for the "pen pals" feature;
  * improved IPv6 support;
  * support for p0f v3;
  * new macros ip_trace_all and ip_trace_public;
  * amavisd-status now shows a bar graph display
    of the number of active processes;
  * the timing report log entry can show CPU usage
    at log level 2 if a module Unix::Getrusage is available;</changelog>
  <changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
  <changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
  <changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
  <changelog author="wr@rosenauer.org" date="1384257600">- Add real systemd support; add required macros in %post/postun sections
  and drop sysvinit support on openSUSE &gt;= 12.3</changelog>
  <changelog author="wr@rosenauer.org" date="1388577600">- add some recommended decoders (bnc#754852)
- fixed amavisd-milter invocation (bnc#809969)
- correctly set clamd socket to (/var/run/clamav/clamd-socket)
  (bnc#844575)
- some spec file cleanup including using optflags for native code</changelog>
  <changelog author="wr@rosenauer.org" date="1406462400">- update to version 2.9.1
  COMPATIBILITY
  There are no known incompatibilities between versions 2.9.0 and 2.9.1.
  Additional bugfixes and also:
  - updated decoding of RAR archives to recognize a changed format in output
    of 'unrar' utility version 5; based on a patch by amavis17(at)iotti.biz
  - avoid tempfailing a message if a redis server is down, just log the
    error and carry on;
  - some minor logging changes to facilitate troubleshooting;
- changes in 2.9
  COMPATIBILITY
  This version drops dependency on a Perl module Redis, and makes
  dependencies on modules Convert::TNEF and Convert::UUlib truly optional.
  The following change may affect third-party log parsers:
  To facilitate forensic log analysis and troubleshooting, log entries
  'FWD from' and 'SEND from' at level 1 now carry one additional
  prefixed information field which is the unique internal mail_id of
  the message, possibly followed by a parent_mail_id in parenthesis,
  No other incompatibilities with a previous version 2.8.1 are expected.
  NEW FEATURES SUMMARY
  - structured log/reporting to a Redis server in JSON format;
  - IP address reputation (uses a Redis server);
  - added two minor content categories to the major ccat CC_UNCHECKED
    (encrypted (=1) and over-limits/mail-bomb (=2) );
  - introduced a by-recipient setting %final_destiny_maps_by_ccat.
- update amavisd-milter to 1.6.0
  * New features:
    Added new amavisd-milter option -B which passes value of
    {daemon_name} milter macro as amavisd-new policy bank name.
  * Bug and compatibility fixes:
    Added amavisd-milter.spec for compilation with rpmbuild.
    Fixed typo which prevents using LDFLAGS on Debian.
    Fixed missing definition of true and false in libmilter/mfapi.h.
- upstream packages as tar.xz -&gt; added xz as BuildRequires to
  support building for older dists</changelog>
  <changelog author="ro@suse.de" date="1408190400">- add /bin/logger as prereq (util-linux split)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
</package>
<package pkgid="7db3e4fe505fa8d96b7e8bf49ee0f96e8d834546d1617f1beb5f8708a59de1ca" name="amavisd-new" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="134.3"/>
  <changelog author="wr@rosenauer.org" date="1356609600">- update to version 2.7.2
  * a generated Received header field was missing the 'IPv6:' prefix
    in the TCP-info component of a 'by' subfield (as required by RFC 5321,
    section 4.1.3) when amavisd received a message over an IPv6 protocol;
    (btw, the TCP-info component of a 'from' subfield was correct);
  * changed data type of an SNMP variable LogRetries from C32 to C64
    for consistency with the MIB;
  * updated AV entry 'AVG Anti-Virus' to consider status 403 continuation
    lines when searching for a virus name; suggested by Ralf Hildebrandt;
  * reduce a log level to 5 on a log message:
    Amavis::IO::RW: Error flushing on close: ...
    to avoid an innocent but sinister-looking warning when a pipe
    to a virus scanner is broken and needs to be re-established;
    reported by Stefan Jakobs
  * updated an AV entry for 'F-Secure Linux Security' to version 9.14;
    options updated by Mika Ilmaranta, a patch by Tuomo Soini;
  * fix a Unix socket compatibility issue with Net::Server versions 2.000,
    2.001 and 2.002, where a method NS_unix_path no longer exists.
    This method was re-introduced for compatibility reasons in 2.003.
    Reported by Paul MacKenzie;</changelog>
  <changelog author="aj@ajaissle.de" date="1360152000">- update to version 2.8.0
- COMPATIBILITY 2.8.0
  * removed an old compatibility measure: default value of @banned_admin_maps
    was changed from:
    @banned_admin_maps = (\$banned_admin, \%virus_admin, \$virus_admin);
    to a more consistent:
    @banned_admin_maps = (\$banned_admin);
    The previous default value of @banned_admin_maps tried to maintain
    compatibility with versions before the setting was separated from
    its companion @virus_admin_maps. Now this compatibility is no longer
    considered necessary and contributes to some confusion, so it was dropped.
    See 2.4.0 and 2.2.1 release notes for previous changes to this setting.
  * quarantining to an mbox format file used to include a local time in an
    mbox separator line, which differs from RFC 4155 and common practices
    of using an UTC timestamp; a time zone of a timestamp in separator lines
    is now changed to UTC;
- BUG FIXES 2.8.0
  * fixed initial evaluation of dynamic (i.e. per policy bank) values of
    $enable_dkim_verification, $enable_dkim_signing and $bypass_decode_parts
    across all declared policy banks; these policy bank entries may be scalars
    of references to such;
  * finely adjust a message size for de-stuffed dots according to a size
    definition in RFC 1870; avoids occasional message size mismatch when
    using an antispam interface module SpamdClient (implementing client-side
    of a spamc/spamd protocol);
  * updated LDAP.ldif to match LDAP.schema; provided by Quanah Gibson-Mount;
  * updated AMAVIS-MIB.txt and amavisd-snmp-subagent: changed type of
    SNMP variables *MsgsSize* in the group amavisStats 7 from Counter32
    to Counter64 for consistency with other *MsgsSize* variables in groups
    amavisStats 3 and amavisStats 9;
- NEW FEATURES SUMMARY 2.8.0
  * For monitoring and statistics gathering purposes a new set of utilities
    and service processes is available based on a message passing paradigm,
    using a 0MQ (a.k.a. ZMQ, ZeroMQ, or Crossroads I/O) library. This
    replaces a functionally similar set of utilities based on a shared
    BerkeleyDB database, with a benefit of avoiding lock contention
    altogether. This can bring sigificant speedups, most pronounced on
    a host with many busy amavisd child processes.
  * Applied numerous fine-grained optimizations based on a NYTProf profiler
    results. Optimizations include a reduction in a number of generated
    Perl opcodes and similar micro-optimizations. This accounts for a large
    amount of small changes in the code.
  * Our current statistics (Q4 2011) shows that 80 % of messages are below
    30.000 bytes, and 90 % of mail messages are below 100.000 bytes in
    size. As an optimization, messages below 100 KiB in size are now kept
    and processed in memory, including passing them more optimally to
    SpamAssassin 3.4.0. Some file activity is still there, but is much
    reduced. If $TEMPBASE also resides on an SSD disk (or a RAM disk),
    observed speedup between 2.7.2 and 2.8.0 was 3 to 8 percent on a
    busy host (with monitoring disabled, so as not to skew a measurement).
  * Use a module IO::Socket::IP if available, instead of dealing directly
    with low-level modules IO::Socket::INET and IO::Socket::INET6;
  * choose more appropriate defaults if running on an IPv6-only host
    (like connecting to ::1 instead of 127.0.0.1 which may not exist);
  * amavisd-release now also supports connecting to amavisd over IPv6;
  * as a debugging aid it is now possible that a late event triggers full
    logging of earlier events that occurred during processing of a current
    mail message;
  * $enable_ldap setting is now dynamic, i.e. can be changed by a policy
    bank, which makes it possible to selectively disable LDAP lookups
    per policy bank;
  * optionally avoid persistent connections to SQL and LDAP servers;
  * it is now possible to disable calling an external file(1) utility
    but still have MIME parts decoding enabled;
  * added support in Amavis::SpamControl::ExtProg for an external spam scanner
    Bogofilter;
  * added locking options to @spam_scanners entries, to be used with external
    scanners which need but do not implement locking of their resources
    by themselves;
  * added a global configuration setting $sa_userprefs_file, which is passed
    on to SpamAssassin as a 'userprefs_filename' parameter at initialization;
  * added a subroutine iso8601_weekday(), potentially useful with partitioning;
  * added several new macros available to logging and notification templates;</changelog>
  <changelog author="mlin@suse.com" date="1361793600">- Install amavisd.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
  <changelog author="meissner@suse.com" date="1367496000">- use %defattr correctly to make /var/spool/amavis not worldreadable.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369828800">- Fix multiple bugs in systemd unit, syslog.target should
  not be used and Wants must be used instead of requires in most
  cases.</changelog>
  <changelog author="wr@rosenauer.org" date="1379160000">- update to version 2.8.1
  COMPATIBILITY
  when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an
  internal messaging protocol, make sure to replace all 0MQ-enabled
  Amavis components on upgrading amavisd, as the internal protocol
  has changed slightly, taking advantage of 0MQ multi-part messages
  for better performance. Affected programs are: amavis-services,
  amavisd-status, amavisd-snmp-subagent-zmq, and amavisd.
  NOTE: The Crossroads I/O project (libxs) ceased development on
    July 2012, to be replaced by nanomsg eventually by the same author.
    The 0MQ library (libzmq) is currently (2013) the best choice,
    the preferred library version is 3.2.2 or later along with
    the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants.
    The older version 2 of the library, along with an older perl
    module ZeroMQ, should be fine too, but lacks support for IPv6.
  amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0
  NEW FEATURES SUMMARY
  * new Redis storage for the "pen pals" feature;
  * improved IPv6 support;
  * support for p0f v3;
  * new macros ip_trace_all and ip_trace_public;
  * amavisd-status now shows a bar graph display
    of the number of active processes;
  * the timing report log entry can show CPU usage
    at log level 2 if a module Unix::Getrusage is available;</changelog>
  <changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
  <changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
  <changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
  <changelog author="wr@rosenauer.org" date="1384257600">- Add real systemd support; add required macros in %post/postun sections
  and drop sysvinit support on openSUSE &gt;= 12.3</changelog>
  <changelog author="wr@rosenauer.org" date="1388577600">- add some recommended decoders (bnc#754852)
- fixed amavisd-milter invocation (bnc#809969)
- correctly set clamd socket to (/var/run/clamav/clamd-socket)
  (bnc#844575)
- some spec file cleanup including using optflags for native code</changelog>
  <changelog author="wr@rosenauer.org" date="1406462400">- update to version 2.9.1
  COMPATIBILITY
  There are no known incompatibilities between versions 2.9.0 and 2.9.1.
  Additional bugfixes and also:
  - updated decoding of RAR archives to recognize a changed format in output
    of 'unrar' utility version 5; based on a patch by amavis17(at)iotti.biz
  - avoid tempfailing a message if a redis server is down, just log the
    error and carry on;
  - some minor logging changes to facilitate troubleshooting;
- changes in 2.9
  COMPATIBILITY
  This version drops dependency on a Perl module Redis, and makes
  dependencies on modules Convert::TNEF and Convert::UUlib truly optional.
  The following change may affect third-party log parsers:
  To facilitate forensic log analysis and troubleshooting, log entries
  'FWD from' and 'SEND from' at level 1 now carry one additional
  prefixed information field which is the unique internal mail_id of
  the message, possibly followed by a parent_mail_id in parenthesis,
  No other incompatibilities with a previous version 2.8.1 are expected.
  NEW FEATURES SUMMARY
  - structured log/reporting to a Redis server in JSON format;
  - IP address reputation (uses a Redis server);
  - added two minor content categories to the major ccat CC_UNCHECKED
    (encrypted (=1) and over-limits/mail-bomb (=2) );
  - introduced a by-recipient setting %final_destiny_maps_by_ccat.
- update amavisd-milter to 1.6.0
  * New features:
    Added new amavisd-milter option -B which passes value of
    {daemon_name} milter macro as amavisd-new policy bank name.
  * Bug and compatibility fixes:
    Added amavisd-milter.spec for compilation with rpmbuild.
    Fixed typo which prevents using LDFLAGS on Debian.
    Fixed missing definition of true and false in libmilter/mfapi.h.
- upstream packages as tar.xz -&gt; added xz as BuildRequires to
  support building for older dists</changelog>
  <changelog author="ro@suse.de" date="1408190400">- add /bin/logger as prereq (util-linux split)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
</package>
<package pkgid="d7bf8db65e4488751fd30734d708f7d58ac54773120614b13bc2ab7a19a1fda1" name="amavisd-new-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="134.3"/>
  <changelog author="wr@rosenauer.org" date="1356609600">- update to version 2.7.2
  * a generated Received header field was missing the 'IPv6:' prefix
    in the TCP-info component of a 'by' subfield (as required by RFC 5321,
    section 4.1.3) when amavisd received a message over an IPv6 protocol;
    (btw, the TCP-info component of a 'from' subfield was correct);
  * changed data type of an SNMP variable LogRetries from C32 to C64
    for consistency with the MIB;
  * updated AV entry 'AVG Anti-Virus' to consider status 403 continuation
    lines when searching for a virus name; suggested by Ralf Hildebrandt;
  * reduce a log level to 5 on a log message:
    Amavis::IO::RW: Error flushing on close: ...
    to avoid an innocent but sinister-looking warning when a pipe
    to a virus scanner is broken and needs to be re-established;
    reported by Stefan Jakobs
  * updated an AV entry for 'F-Secure Linux Security' to version 9.14;
    options updated by Mika Ilmaranta, a patch by Tuomo Soini;
  * fix a Unix socket compatibility issue with Net::Server versions 2.000,
    2.001 and 2.002, where a method NS_unix_path no longer exists.
    This method was re-introduced for compatibility reasons in 2.003.
    Reported by Paul MacKenzie;</changelog>
  <changelog author="aj@ajaissle.de" date="1360152000">- update to version 2.8.0
- COMPATIBILITY 2.8.0
  * removed an old compatibility measure: default value of @banned_admin_maps
    was changed from:
    @banned_admin_maps = (\$banned_admin, \%virus_admin, \$virus_admin);
    to a more consistent:
    @banned_admin_maps = (\$banned_admin);
    The previous default value of @banned_admin_maps tried to maintain
    compatibility with versions before the setting was separated from
    its companion @virus_admin_maps. Now this compatibility is no longer
    considered necessary and contributes to some confusion, so it was dropped.
    See 2.4.0 and 2.2.1 release notes for previous changes to this setting.
  * quarantining to an mbox format file used to include a local time in an
    mbox separator line, which differs from RFC 4155 and common practices
    of using an UTC timestamp; a time zone of a timestamp in separator lines
    is now changed to UTC;
- BUG FIXES 2.8.0
  * fixed initial evaluation of dynamic (i.e. per policy bank) values of
    $enable_dkim_verification, $enable_dkim_signing and $bypass_decode_parts
    across all declared policy banks; these policy bank entries may be scalars
    of references to such;
  * finely adjust a message size for de-stuffed dots according to a size
    definition in RFC 1870; avoids occasional message size mismatch when
    using an antispam interface module SpamdClient (implementing client-side
    of a spamc/spamd protocol);
  * updated LDAP.ldif to match LDAP.schema; provided by Quanah Gibson-Mount;
  * updated AMAVIS-MIB.txt and amavisd-snmp-subagent: changed type of
    SNMP variables *MsgsSize* in the group amavisStats 7 from Counter32
    to Counter64 for consistency with other *MsgsSize* variables in groups
    amavisStats 3 and amavisStats 9;
- NEW FEATURES SUMMARY 2.8.0
  * For monitoring and statistics gathering purposes a new set of utilities
    and service processes is available based on a message passing paradigm,
    using a 0MQ (a.k.a. ZMQ, ZeroMQ, or Crossroads I/O) library. This
    replaces a functionally similar set of utilities based on a shared
    BerkeleyDB database, with a benefit of avoiding lock contention
    altogether. This can bring sigificant speedups, most pronounced on
    a host with many busy amavisd child processes.
  * Applied numerous fine-grained optimizations based on a NYTProf profiler
    results. Optimizations include a reduction in a number of generated
    Perl opcodes and similar micro-optimizations. This accounts for a large
    amount of small changes in the code.
  * Our current statistics (Q4 2011) shows that 80 % of messages are below
    30.000 bytes, and 90 % of mail messages are below 100.000 bytes in
    size. As an optimization, messages below 100 KiB in size are now kept
    and processed in memory, including passing them more optimally to
    SpamAssassin 3.4.0. Some file activity is still there, but is much
    reduced. If $TEMPBASE also resides on an SSD disk (or a RAM disk),
    observed speedup between 2.7.2 and 2.8.0 was 3 to 8 percent on a
    busy host (with monitoring disabled, so as not to skew a measurement).
  * Use a module IO::Socket::IP if available, instead of dealing directly
    with low-level modules IO::Socket::INET and IO::Socket::INET6;
  * choose more appropriate defaults if running on an IPv6-only host
    (like connecting to ::1 instead of 127.0.0.1 which may not exist);
  * amavisd-release now also supports connecting to amavisd over IPv6;
  * as a debugging aid it is now possible that a late event triggers full
    logging of earlier events that occurred during processing of a current
    mail message;
  * $enable_ldap setting is now dynamic, i.e. can be changed by a policy
    bank, which makes it possible to selectively disable LDAP lookups
    per policy bank;
  * optionally avoid persistent connections to SQL and LDAP servers;
  * it is now possible to disable calling an external file(1) utility
    but still have MIME parts decoding enabled;
  * added support in Amavis::SpamControl::ExtProg for an external spam scanner
    Bogofilter;
  * added locking options to @spam_scanners entries, to be used with external
    scanners which need but do not implement locking of their resources
    by themselves;
  * added a global configuration setting $sa_userprefs_file, which is passed
    on to SpamAssassin as a 'userprefs_filename' parameter at initialization;
  * added a subroutine iso8601_weekday(), potentially useful with partitioning;
  * added several new macros available to logging and notification templates;</changelog>
  <changelog author="mlin@suse.com" date="1361793600">- Install amavisd.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
  <changelog author="meissner@suse.com" date="1367496000">- use %defattr correctly to make /var/spool/amavis not worldreadable.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369828800">- Fix multiple bugs in systemd unit, syslog.target should
  not be used and Wants must be used instead of requires in most
  cases.</changelog>
  <changelog author="wr@rosenauer.org" date="1379160000">- update to version 2.8.1
  COMPATIBILITY
  when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an
  internal messaging protocol, make sure to replace all 0MQ-enabled
  Amavis components on upgrading amavisd, as the internal protocol
  has changed slightly, taking advantage of 0MQ multi-part messages
  for better performance. Affected programs are: amavis-services,
  amavisd-status, amavisd-snmp-subagent-zmq, and amavisd.
  NOTE: The Crossroads I/O project (libxs) ceased development on
    July 2012, to be replaced by nanomsg eventually by the same author.
    The 0MQ library (libzmq) is currently (2013) the best choice,
    the preferred library version is 3.2.2 or later along with
    the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants.
    The older version 2 of the library, along with an older perl
    module ZeroMQ, should be fine too, but lacks support for IPv6.
  amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0
  NEW FEATURES SUMMARY
  * new Redis storage for the "pen pals" feature;
  * improved IPv6 support;
  * support for p0f v3;
  * new macros ip_trace_all and ip_trace_public;
  * amavisd-status now shows a bar graph display
    of the number of active processes;
  * the timing report log entry can show CPU usage
    at log level 2 if a module Unix::Getrusage is available;</changelog>
  <changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
  <changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
  <changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
  <changelog author="wr@rosenauer.org" date="1384257600">- Add real systemd support; add required macros in %post/postun sections
  and drop sysvinit support on openSUSE &gt;= 12.3</changelog>
  <changelog author="wr@rosenauer.org" date="1388577600">- add some recommended decoders (bnc#754852)
- fixed amavisd-milter invocation (bnc#809969)
- correctly set clamd socket to (/var/run/clamav/clamd-socket)
  (bnc#844575)
- some spec file cleanup including using optflags for native code</changelog>
  <changelog author="wr@rosenauer.org" date="1406462400">- update to version 2.9.1
  COMPATIBILITY
  There are no known incompatibilities between versions 2.9.0 and 2.9.1.
  Additional bugfixes and also:
  - updated decoding of RAR archives to recognize a changed format in output
    of 'unrar' utility version 5; based on a patch by amavis17(at)iotti.biz
  - avoid tempfailing a message if a redis server is down, just log the
    error and carry on;
  - some minor logging changes to facilitate troubleshooting;
- changes in 2.9
  COMPATIBILITY
  This version drops dependency on a Perl module Redis, and makes
  dependencies on modules Convert::TNEF and Convert::UUlib truly optional.
  The following change may affect third-party log parsers:
  To facilitate forensic log analysis and troubleshooting, log entries
  'FWD from' and 'SEND from' at level 1 now carry one additional
  prefixed information field which is the unique internal mail_id of
  the message, possibly followed by a parent_mail_id in parenthesis,
  No other incompatibilities with a previous version 2.8.1 are expected.
  NEW FEATURES SUMMARY
  - structured log/reporting to a Redis server in JSON format;
  - IP address reputation (uses a Redis server);
  - added two minor content categories to the major ccat CC_UNCHECKED
    (encrypted (=1) and over-limits/mail-bomb (=2) );
  - introduced a by-recipient setting %final_destiny_maps_by_ccat.
- update amavisd-milter to 1.6.0
  * New features:
    Added new amavisd-milter option -B which passes value of
    {daemon_name} milter macro as amavisd-new policy bank name.
  * Bug and compatibility fixes:
    Added amavisd-milter.spec for compilation with rpmbuild.
    Fixed typo which prevents using LDFLAGS on Debian.
    Fixed missing definition of true and false in libmilter/mfapi.h.
- upstream packages as tar.xz -&gt; added xz as BuildRequires to
  support building for older dists</changelog>
  <changelog author="ro@suse.de" date="1408190400">- add /bin/logger as prereq (util-linux split)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
</package>
<package pkgid="78d0a9c60eb3ce7fbdd2d6ba5b342fb4b1a0d255be9f834924b61a25262d7f16" name="amavisd-new-debugsource" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="134.3"/>
  <changelog author="wr@rosenauer.org" date="1356609600">- update to version 2.7.2
  * a generated Received header field was missing the 'IPv6:' prefix
    in the TCP-info component of a 'by' subfield (as required by RFC 5321,
    section 4.1.3) when amavisd received a message over an IPv6 protocol;
    (btw, the TCP-info component of a 'from' subfield was correct);
  * changed data type of an SNMP variable LogRetries from C32 to C64
    for consistency with the MIB;
  * updated AV entry 'AVG Anti-Virus' to consider status 403 continuation
    lines when searching for a virus name; suggested by Ralf Hildebrandt;
  * reduce a log level to 5 on a log message:
    Amavis::IO::RW: Error flushing on close: ...
    to avoid an innocent but sinister-looking warning when a pipe
    to a virus scanner is broken and needs to be re-established;
    reported by Stefan Jakobs
  * updated an AV entry for 'F-Secure Linux Security' to version 9.14;
    options updated by Mika Ilmaranta, a patch by Tuomo Soini;
  * fix a Unix socket compatibility issue with Net::Server versions 2.000,
    2.001 and 2.002, where a method NS_unix_path no longer exists.
    This method was re-introduced for compatibility reasons in 2.003.
    Reported by Paul MacKenzie;</changelog>
  <changelog author="aj@ajaissle.de" date="1360152000">- update to version 2.8.0
- COMPATIBILITY 2.8.0
  * removed an old compatibility measure: default value of @banned_admin_maps
    was changed from:
    @banned_admin_maps = (\$banned_admin, \%virus_admin, \$virus_admin);
    to a more consistent:
    @banned_admin_maps = (\$banned_admin);
    The previous default value of @banned_admin_maps tried to maintain
    compatibility with versions before the setting was separated from
    its companion @virus_admin_maps. Now this compatibility is no longer
    considered necessary and contributes to some confusion, so it was dropped.
    See 2.4.0 and 2.2.1 release notes for previous changes to this setting.
  * quarantining to an mbox format file used to include a local time in an
    mbox separator line, which differs from RFC 4155 and common practices
    of using an UTC timestamp; a time zone of a timestamp in separator lines
    is now changed to UTC;
- BUG FIXES 2.8.0
  * fixed initial evaluation of dynamic (i.e. per policy bank) values of
    $enable_dkim_verification, $enable_dkim_signing and $bypass_decode_parts
    across all declared policy banks; these policy bank entries may be scalars
    of references to such;
  * finely adjust a message size for de-stuffed dots according to a size
    definition in RFC 1870; avoids occasional message size mismatch when
    using an antispam interface module SpamdClient (implementing client-side
    of a spamc/spamd protocol);
  * updated LDAP.ldif to match LDAP.schema; provided by Quanah Gibson-Mount;
  * updated AMAVIS-MIB.txt and amavisd-snmp-subagent: changed type of
    SNMP variables *MsgsSize* in the group amavisStats 7 from Counter32
    to Counter64 for consistency with other *MsgsSize* variables in groups
    amavisStats 3 and amavisStats 9;
- NEW FEATURES SUMMARY 2.8.0
  * For monitoring and statistics gathering purposes a new set of utilities
    and service processes is available based on a message passing paradigm,
    using a 0MQ (a.k.a. ZMQ, ZeroMQ, or Crossroads I/O) library. This
    replaces a functionally similar set of utilities based on a shared
    BerkeleyDB database, with a benefit of avoiding lock contention
    altogether. This can bring sigificant speedups, most pronounced on
    a host with many busy amavisd child processes.
  * Applied numerous fine-grained optimizations based on a NYTProf profiler
    results. Optimizations include a reduction in a number of generated
    Perl opcodes and similar micro-optimizations. This accounts for a large
    amount of small changes in the code.
  * Our current statistics (Q4 2011) shows that 80 % of messages are below
    30.000 bytes, and 90 % of mail messages are below 100.000 bytes in
    size. As an optimization, messages below 100 KiB in size are now kept
    and processed in memory, including passing them more optimally to
    SpamAssassin 3.4.0. Some file activity is still there, but is much
    reduced. If $TEMPBASE also resides on an SSD disk (or a RAM disk),
    observed speedup between 2.7.2 and 2.8.0 was 3 to 8 percent on a
    busy host (with monitoring disabled, so as not to skew a measurement).
  * Use a module IO::Socket::IP if available, instead of dealing directly
    with low-level modules IO::Socket::INET and IO::Socket::INET6;
  * choose more appropriate defaults if running on an IPv6-only host
    (like connecting to ::1 instead of 127.0.0.1 which may not exist);
  * amavisd-release now also supports connecting to amavisd over IPv6;
  * as a debugging aid it is now possible that a late event triggers full
    logging of earlier events that occurred during processing of a current
    mail message;
  * $enable_ldap setting is now dynamic, i.e. can be changed by a policy
    bank, which makes it possible to selectively disable LDAP lookups
    per policy bank;
  * optionally avoid persistent connections to SQL and LDAP servers;
  * it is now possible to disable calling an external file(1) utility
    but still have MIME parts decoding enabled;
  * added support in Amavis::SpamControl::ExtProg for an external spam scanner
    Bogofilter;
  * added locking options to @spam_scanners entries, to be used with external
    scanners which need but do not implement locking of their resources
    by themselves;
  * added a global configuration setting $sa_userprefs_file, which is passed
    on to SpamAssassin as a 'userprefs_filename' parameter at initialization;
  * added a subroutine iso8601_weekday(), potentially useful with partitioning;
  * added several new macros available to logging and notification templates;</changelog>
  <changelog author="mlin@suse.com" date="1361793600">- Install amavisd.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
  <changelog author="meissner@suse.com" date="1367496000">- use %defattr correctly to make /var/spool/amavis not worldreadable.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369828800">- Fix multiple bugs in systemd unit, syslog.target should
  not be used and Wants must be used instead of requires in most
  cases.</changelog>
  <changelog author="wr@rosenauer.org" date="1379160000">- update to version 2.8.1
  COMPATIBILITY
  when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an
  internal messaging protocol, make sure to replace all 0MQ-enabled
  Amavis components on upgrading amavisd, as the internal protocol
  has changed slightly, taking advantage of 0MQ multi-part messages
  for better performance. Affected programs are: amavis-services,
  amavisd-status, amavisd-snmp-subagent-zmq, and amavisd.
  NOTE: The Crossroads I/O project (libxs) ceased development on
    July 2012, to be replaced by nanomsg eventually by the same author.
    The 0MQ library (libzmq) is currently (2013) the best choice,
    the preferred library version is 3.2.2 or later along with
    the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants.
    The older version 2 of the library, along with an older perl
    module ZeroMQ, should be fine too, but lacks support for IPv6.
  amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0
  NEW FEATURES SUMMARY
  * new Redis storage for the "pen pals" feature;
  * improved IPv6 support;
  * support for p0f v3;
  * new macros ip_trace_all and ip_trace_public;
  * amavisd-status now shows a bar graph display
    of the number of active processes;
  * the timing report log entry can show CPU usage
    at log level 2 if a module Unix::Getrusage is available;</changelog>
  <changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
  <changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
  <changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
  <changelog author="wr@rosenauer.org" date="1384257600">- Add real systemd support; add required macros in %post/postun sections
  and drop sysvinit support on openSUSE &gt;= 12.3</changelog>
  <changelog author="wr@rosenauer.org" date="1388577600">- add some recommended decoders (bnc#754852)
- fixed amavisd-milter invocation (bnc#809969)
- correctly set clamd socket to (/var/run/clamav/clamd-socket)
  (bnc#844575)
- some spec file cleanup including using optflags for native code</changelog>
  <changelog author="wr@rosenauer.org" date="1406462400">- update to version 2.9.1
  COMPATIBILITY
  There are no known incompatibilities between versions 2.9.0 and 2.9.1.
  Additional bugfixes and also:
  - updated decoding of RAR archives to recognize a changed format in output
    of 'unrar' utility version 5; based on a patch by amavis17(at)iotti.biz
  - avoid tempfailing a message if a redis server is down, just log the
    error and carry on;
  - some minor logging changes to facilitate troubleshooting;
- changes in 2.9
  COMPATIBILITY
  This version drops dependency on a Perl module Redis, and makes
  dependencies on modules Convert::TNEF and Convert::UUlib truly optional.
  The following change may affect third-party log parsers:
  To facilitate forensic log analysis and troubleshooting, log entries
  'FWD from' and 'SEND from' at level 1 now carry one additional
  prefixed information field which is the unique internal mail_id of
  the message, possibly followed by a parent_mail_id in parenthesis,
  No other incompatibilities with a previous version 2.8.1 are expected.
  NEW FEATURES SUMMARY
  - structured log/reporting to a Redis server in JSON format;
  - IP address reputation (uses a Redis server);
  - added two minor content categories to the major ccat CC_UNCHECKED
    (encrypted (=1) and over-limits/mail-bomb (=2) );
  - introduced a by-recipient setting %final_destiny_maps_by_ccat.
- update amavisd-milter to 1.6.0
  * New features:
    Added new amavisd-milter option -B which passes value of
    {daemon_name} milter macro as amavisd-new policy bank name.
  * Bug and compatibility fixes:
    Added amavisd-milter.spec for compilation with rpmbuild.
    Fixed typo which prevents using LDFLAGS on Debian.
    Fixed missing definition of true and false in libmilter/mfapi.h.
- upstream packages as tar.xz -&gt; added xz as BuildRequires to
  support building for older dists</changelog>
  <changelog author="ro@suse.de" date="1408190400">- add /bin/logger as prereq (util-linux split)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
</package>
<package pkgid="34398503ddc2c0ba1a6d75c1f8cdca97ba28f72e76554ca1a994876edf86cfa2" name="amavisd-new-docs" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="134.3"/>
  <changelog author="wr@rosenauer.org" date="1356609600">- update to version 2.7.2
  * a generated Received header field was missing the 'IPv6:' prefix
    in the TCP-info component of a 'by' subfield (as required by RFC 5321,
    section 4.1.3) when amavisd received a message over an IPv6 protocol;
    (btw, the TCP-info component of a 'from' subfield was correct);
  * changed data type of an SNMP variable LogRetries from C32 to C64
    for consistency with the MIB;
  * updated AV entry 'AVG Anti-Virus' to consider status 403 continuation
    lines when searching for a virus name; suggested by Ralf Hildebrandt;
  * reduce a log level to 5 on a log message:
    Amavis::IO::RW: Error flushing on close: ...
    to avoid an innocent but sinister-looking warning when a pipe
    to a virus scanner is broken and needs to be re-established;
    reported by Stefan Jakobs
  * updated an AV entry for 'F-Secure Linux Security' to version 9.14;
    options updated by Mika Ilmaranta, a patch by Tuomo Soini;
  * fix a Unix socket compatibility issue with Net::Server versions 2.000,
    2.001 and 2.002, where a method NS_unix_path no longer exists.
    This method was re-introduced for compatibility reasons in 2.003.
    Reported by Paul MacKenzie;</changelog>
  <changelog author="aj@ajaissle.de" date="1360152000">- update to version 2.8.0
- COMPATIBILITY 2.8.0
  * removed an old compatibility measure: default value of @banned_admin_maps
    was changed from:
    @banned_admin_maps = (\$banned_admin, \%virus_admin, \$virus_admin);
    to a more consistent:
    @banned_admin_maps = (\$banned_admin);
    The previous default value of @banned_admin_maps tried to maintain
    compatibility with versions before the setting was separated from
    its companion @virus_admin_maps. Now this compatibility is no longer
    considered necessary and contributes to some confusion, so it was dropped.
    See 2.4.0 and 2.2.1 release notes for previous changes to this setting.
  * quarantining to an mbox format file used to include a local time in an
    mbox separator line, which differs from RFC 4155 and common practices
    of using an UTC timestamp; a time zone of a timestamp in separator lines
    is now changed to UTC;
- BUG FIXES 2.8.0
  * fixed initial evaluation of dynamic (i.e. per policy bank) values of
    $enable_dkim_verification, $enable_dkim_signing and $bypass_decode_parts
    across all declared policy banks; these policy bank entries may be scalars
    of references to such;
  * finely adjust a message size for de-stuffed dots according to a size
    definition in RFC 1870; avoids occasional message size mismatch when
    using an antispam interface module SpamdClient (implementing client-side
    of a spamc/spamd protocol);
  * updated LDAP.ldif to match LDAP.schema; provided by Quanah Gibson-Mount;
  * updated AMAVIS-MIB.txt and amavisd-snmp-subagent: changed type of
    SNMP variables *MsgsSize* in the group amavisStats 7 from Counter32
    to Counter64 for consistency with other *MsgsSize* variables in groups
    amavisStats 3 and amavisStats 9;
- NEW FEATURES SUMMARY 2.8.0
  * For monitoring and statistics gathering purposes a new set of utilities
    and service processes is available based on a message passing paradigm,
    using a 0MQ (a.k.a. ZMQ, ZeroMQ, or Crossroads I/O) library. This
    replaces a functionally similar set of utilities based on a shared
    BerkeleyDB database, with a benefit of avoiding lock contention
    altogether. This can bring sigificant speedups, most pronounced on
    a host with many busy amavisd child processes.
  * Applied numerous fine-grained optimizations based on a NYTProf profiler
    results. Optimizations include a reduction in a number of generated
    Perl opcodes and similar micro-optimizations. This accounts for a large
    amount of small changes in the code.
  * Our current statistics (Q4 2011) shows that 80 % of messages are below
    30.000 bytes, and 90 % of mail messages are below 100.000 bytes in
    size. As an optimization, messages below 100 KiB in size are now kept
    and processed in memory, including passing them more optimally to
    SpamAssassin 3.4.0. Some file activity is still there, but is much
    reduced. If $TEMPBASE also resides on an SSD disk (or a RAM disk),
    observed speedup between 2.7.2 and 2.8.0 was 3 to 8 percent on a
    busy host (with monitoring disabled, so as not to skew a measurement).
  * Use a module IO::Socket::IP if available, instead of dealing directly
    with low-level modules IO::Socket::INET and IO::Socket::INET6;
  * choose more appropriate defaults if running on an IPv6-only host
    (like connecting to ::1 instead of 127.0.0.1 which may not exist);
  * amavisd-release now also supports connecting to amavisd over IPv6;
  * as a debugging aid it is now possible that a late event triggers full
    logging of earlier events that occurred during processing of a current
    mail message;
  * $enable_ldap setting is now dynamic, i.e. can be changed by a policy
    bank, which makes it possible to selectively disable LDAP lookups
    per policy bank;
  * optionally avoid persistent connections to SQL and LDAP servers;
  * it is now possible to disable calling an external file(1) utility
    but still have MIME parts decoding enabled;
  * added support in Amavis::SpamControl::ExtProg for an external spam scanner
    Bogofilter;
  * added locking options to @spam_scanners entries, to be used with external
    scanners which need but do not implement locking of their resources
    by themselves;
  * added a global configuration setting $sa_userprefs_file, which is passed
    on to SpamAssassin as a 'userprefs_filename' parameter at initialization;
  * added a subroutine iso8601_weekday(), potentially useful with partitioning;
  * added several new macros available to logging and notification templates;</changelog>
  <changelog author="mlin@suse.com" date="1361793600">- Install amavisd.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
  <changelog author="meissner@suse.com" date="1367496000">- use %defattr correctly to make /var/spool/amavis not worldreadable.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369828800">- Fix multiple bugs in systemd unit, syslog.target should
  not be used and Wants must be used instead of requires in most
  cases.</changelog>
  <changelog author="wr@rosenauer.org" date="1379160000">- update to version 2.8.1
  COMPATIBILITY
  when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an
  internal messaging protocol, make sure to replace all 0MQ-enabled
  Amavis components on upgrading amavisd, as the internal protocol
  has changed slightly, taking advantage of 0MQ multi-part messages
  for better performance. Affected programs are: amavis-services,
  amavisd-status, amavisd-snmp-subagent-zmq, and amavisd.
  NOTE: The Crossroads I/O project (libxs) ceased development on
    July 2012, to be replaced by nanomsg eventually by the same author.
    The 0MQ library (libzmq) is currently (2013) the best choice,
    the preferred library version is 3.2.2 or later along with
    the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants.
    The older version 2 of the library, along with an older perl
    module ZeroMQ, should be fine too, but lacks support for IPv6.
  amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0
  NEW FEATURES SUMMARY
  * new Redis storage for the "pen pals" feature;
  * improved IPv6 support;
  * support for p0f v3;
  * new macros ip_trace_all and ip_trace_public;
  * amavisd-status now shows a bar graph display
    of the number of active processes;
  * the timing report log entry can show CPU usage
    at log level 2 if a module Unix::Getrusage is available;</changelog>
  <changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
  <changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
  <changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
  <changelog author="wr@rosenauer.org" date="1384257600">- Add real systemd support; add required macros in %post/postun sections
  and drop sysvinit support on openSUSE &gt;= 12.3</changelog>
  <changelog author="wr@rosenauer.org" date="1388577600">- add some recommended decoders (bnc#754852)
- fixed amavisd-milter invocation (bnc#809969)
- correctly set clamd socket to (/var/run/clamav/clamd-socket)
  (bnc#844575)
- some spec file cleanup including using optflags for native code</changelog>
  <changelog author="wr@rosenauer.org" date="1406462400">- update to version 2.9.1
  COMPATIBILITY
  There are no known incompatibilities between versions 2.9.0 and 2.9.1.
  Additional bugfixes and also:
  - updated decoding of RAR archives to recognize a changed format in output
    of 'unrar' utility version 5; based on a patch by amavis17(at)iotti.biz
  - avoid tempfailing a message if a redis server is down, just log the
    error and carry on;
  - some minor logging changes to facilitate troubleshooting;
- changes in 2.9
  COMPATIBILITY
  This version drops dependency on a Perl module Redis, and makes
  dependencies on modules Convert::TNEF and Convert::UUlib truly optional.
  The following change may affect third-party log parsers:
  To facilitate forensic log analysis and troubleshooting, log entries
  'FWD from' and 'SEND from' at level 1 now carry one additional
  prefixed information field which is the unique internal mail_id of
  the message, possibly followed by a parent_mail_id in parenthesis,
  No other incompatibilities with a previous version 2.8.1 are expected.
  NEW FEATURES SUMMARY
  - structured log/reporting to a Redis server in JSON format;
  - IP address reputation (uses a Redis server);
  - added two minor content categories to the major ccat CC_UNCHECKED
    (encrypted (=1) and over-limits/mail-bomb (=2) );
  - introduced a by-recipient setting %final_destiny_maps_by_ccat.
- update amavisd-milter to 1.6.0
  * New features:
    Added new amavisd-milter option -B which passes value of
    {daemon_name} milter macro as amavisd-new policy bank name.
  * Bug and compatibility fixes:
    Added amavisd-milter.spec for compilation with rpmbuild.
    Fixed typo which prevents using LDFLAGS on Debian.
    Fixed missing definition of true and false in libmilter/mfapi.h.
- upstream packages as tar.xz -&gt; added xz as BuildRequires to
  support building for older dists</changelog>
  <changelog author="ro@suse.de" date="1408190400">- add /bin/logger as prereq (util-linux split)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
</package>
<package pkgid="461996a89a6e174858662b0ce13d0b68f2d4c30d67faa7c302d8913f1089f6d6" name="apolicy" arch="noarch">
  <version epoch="0" ver="0.73" rel="1.1"/>
  <changelog author="mrueckert@suse.de" date="1164196800">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1169380800">- update to 0.62</changelog>
  <changelog author="chris@computersalat.de" date="1299758400">- update to 0.73
  * DEB and RPM packaging
  * New ''memcached'' backend for the greylisting ACL
  * New ''country'' ACL
  * New ''stress'' ACL
- == 0.72 ==
  * New ''protocol_name'' ACL
  * Improved debug log messages
  * In an ''access'' statement the ''action'' is now optional. If there
  is no ''action'' specified, the ''default'' action is used
  * New ''log'' ACL
  * Reduced the requirement for the ''size'' ACL from
  smtpd_end_of_data_restrictions to smtpd_sender_restrictions, thanks
  Manuel Mely for the suggestion
  * Better handling configuration errors
- == 0.71 ==
  * Code cleanup
  * Improved init scripts for Debian and Red Hat like distributions
  * Fixed a bug when loading ACL values from a file, thanks Sandra
  Patricia Casas for the report
  * greylisting ACL now has default values:
  time=5,lifetime=1440,backend=memory,root=/var/cache/apolicy
  * New ''timeout'' parameter available in main.conf.
  * New ''memcached'' backend for greylisting ACL (experimental)
  * Documentation update
- == 0.70 ==
  * Now use main.conf for daemon configuration and policy.conf for ACLs,
  Accesses and Actions
  * Removed MySQL support for now, it was very limited
  * apolicy is now a rock solid TCP server using Twisted!
  * New greylisting support, and it's an ACL too, check docs for more
  details
  * New ACLs: helo_name, sasl_user, sasl_sender, sasl_method,
  reverse_client_name
  * SPF verification is now an ACL, removed no_spf statement
  * Simplified and improved log configuration
  * Complete code refactoring
  * Removed pydns, IPy and pyspf from the source tree, now they should
  be installed separatedly
  * apolicyd *admin has been removed for now
- == 0.64 ==
  * Fixed broken import in apolicyd *admin
  * Fixed typos, and copyright notices
  * Log to syslog using /dev/log by default, thanks to Cassio
- == 0.63 ==
  * Fixed client_name missing parameter, closed bug #9385
- removed obsolete apolicy-0.5_no_bundled_libs patch
- fix license: GPLv2+
- remove author from description
- cleanup spec changelog
- noarch pkg for suse &gt;= 1120</changelog>
</package>
<package pkgid="c59ca5cf30f888b43cfd7dc971e7fa5255052dbad61733decd8cc0834449c3f4" name="apolicy" arch="src">
  <version epoch="0" ver="0.73" rel="1.1"/>
  <changelog author="mrueckert@suse.de" date="1164196800">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1169380800">- update to 0.62</changelog>
  <changelog author="chris@computersalat.de" date="1299758400">- update to 0.73
  * DEB and RPM packaging
  * New ''memcached'' backend for the greylisting ACL
  * New ''country'' ACL
  * New ''stress'' ACL
- == 0.72 ==
  * New ''protocol_name'' ACL
  * Improved debug log messages
  * In an ''access'' statement the ''action'' is now optional. If there
  is no ''action'' specified, the ''default'' action is used
  * New ''log'' ACL
  * Reduced the requirement for the ''size'' ACL from
  smtpd_end_of_data_restrictions to smtpd_sender_restrictions, thanks
  Manuel Mely for the suggestion
  * Better handling configuration errors
- == 0.71 ==
  * Code cleanup
  * Improved init scripts for Debian and Red Hat like distributions
  * Fixed a bug when loading ACL values from a file, thanks Sandra
  Patricia Casas for the report
  * greylisting ACL now has default values:
  time=5,lifetime=1440,backend=memory,root=/var/cache/apolicy
  * New ''timeout'' parameter available in main.conf.
  * New ''memcached'' backend for greylisting ACL (experimental)
  * Documentation update
- == 0.70 ==
  * Now use main.conf for daemon configuration and policy.conf for ACLs,
  Accesses and Actions
  * Removed MySQL support for now, it was very limited
  * apolicy is now a rock solid TCP server using Twisted!
  * New greylisting support, and it's an ACL too, check docs for more
  details
  * New ACLs: helo_name, sasl_user, sasl_sender, sasl_method,
  reverse_client_name
  * SPF verification is now an ACL, removed no_spf statement
  * Simplified and improved log configuration
  * Complete code refactoring
  * Removed pydns, IPy and pyspf from the source tree, now they should
  be installed separatedly
  * apolicyd *admin has been removed for now
- == 0.64 ==
  * Fixed broken import in apolicyd *admin
  * Fixed typos, and copyright notices
  * Log to syslog using /dev/log by default, thanks to Cassio
- == 0.63 ==
  * Fixed client_name missing parameter, closed bug #9385
- removed obsolete apolicy-0.5_no_bundled_libs patch
- fix license: GPLv2+
- remove author from description
- cleanup spec changelog
- noarch pkg for suse &gt;= 1120</changelog>
</package>
<package pkgid="5a7e5c457d379f9cc3e3229aeb95946387ecaf49fbfb61046f9ee4de2f2385c4" name="archivemail" arch="noarch">
  <version epoch="0" ver="0.9.0" rel="21.1"/>
  <changelog author="poeml@suse.de" date="1159531200">- fix build with python 2.5</changelog>
  <changelog author="poeml@suse.de" date="1162555200">- update to 0.7.0 (bug numbers below are in the sf.net tracker
  unless indicated otherwise)
  * Fixed long options --filter-append and --pwfile to accept their arguments.
    Closes: #1555935
  * Fixed From_ line generation to actually look for the 'Return-path' and
    'From' headers.  Closes: #1555797
  * Fixed IMAP authentication/URL parsing, which wasn't working at all in
    v0.6.2.  Require username encoded in URL, but be flexible with the password:
    handle both --pwfile and URL-encoded password, and fallback to querying the
    user if neither is present.  Closes: #1555951
  * Convert on-the-wire CRLF to native EOL when saving messages from an IMAP
    folder.  Closes: #1555803
  * Updated man page.  This also addresses #1555951
  * Fixed unittest failure by updating --suffix testcase.  Based on analysis by
    Peter Poeml.  Thanks, Peter.
  * Fixed invalid IMAP filter string for large messages (--size option).
    (Thanks to the anonymous bug reporter)  Closes: #863813
  * Fixed IMAP --dry-run so it doesn't download all messages that would be
    archived.
  * Fixed IMAP --delete which didn't work at all.  (Thanks Anand)
    Closes: Debian bug #203282
  * Terminate each message in newly written mbox with an empty line if the
    message source is not an mbox-format folder.  (Thanks  Chung-chieh Shan)
    Closes: Debian bug #250410
  * Mangle From_ in message body if the message source is not an mbox-format
    folder.  (Thanks Chung-chieh Shan)  Closes: Debian bug #250402
  * Added new option --dont-mangle to turn off From_ mangling.
  * Bumped Python dependency to version 2.3.
  * Fixed unittest TestMboxExclusiveLock which failed on Solaris.  (Thanks Paul
    Rodger)  Closes: #904652
  * Fixed unsafe creation of temporary files in the test suite.
    This addresses Debian bug #385253, and reading the BTS log, it seems this
    issue was assigned CVE-2006-4245, although I cannot find any further
    reference to that CVE.  Note that the bug was initially reported to affect
    archivemail itself, too.  This is not correct.  (Thanks Joey Hess)
    Closes: Debian bug #385253
  * Fixed cleanup of temporary files after test suite failures.
  * Fixed dotlocking race condition.
  * Stats are now working with IMAP.
  * Stats now report the total size of a mailbox and of the archived messages
    therefrom.
  * Always barf if the archive destination directory is world-writable.
  * Distributing man page with the tarball again and fixed distutils setup.
    Closes: #1574720 (Thanks Grant Goodyear)
  * Improved IMAP error reporting</changelog>
  <changelog author="poeml@suse.de" date="1194609600">- update to 0.7.1
  * Fixed incompatibility with Python 2.5 which broke Maildir handling.
  * Fixed IMAP message flag conversion which was completely broken.
  * Username and password in IMAP URLs can now be double-quoted, so it should be
    no longer a problem if they contain delimiters like the '@' character.
  * New option --copy: archive mail, but don't delete it from the mailbox.
    This is mainly useful for testing purposes, and complements --delete.
  * IMAP: if selecting the mailbox fails, archivemail detects the server's
    mailbox hierarchy delimiter, replaces slashes in the mailbox name with the
    delimiter and tries again.
  * When converting from other formats to mbox, archivemail used to preserve
    existing 'Status' and 'X-Status' mbox headers; these are now silently
    overwritten to ensure they have correct values.
  * Invalid messages/files in Maildirs caused archivemail to silently stop
    processing mails and claim it's all done.  Now skip these and go ahead.
  * The automatic seteuid feature of archivemail is insecure and thus
    deprecated; it will be removed from later versions.
  * archivemail now accepts --days=0</changelog>
  <changelog author="poeml@suse.de" date="1194609601">- update to 0.7.2
  * fix crash with Python &lt;&lt; 2.5, introduced with 0.7.1</changelog>
  <changelog author="guido+opensuse.org@berhoerster.name" date="1263988800">- cleanup
- build as noarch for opensuse &gt; 11.1
- backported two fixes resulting in exceptions when archiving empty maildirs
  or with --days=0</changelog>
  <changelog author="gber@opensuse.org" date="1282305600">- update to version 0.8.0
  * new option --debug-imap to dump the IMAP conversation to stdout
  * new option --all to archive all messages in a mailbox
  * new option --prefix/-p, to specify an archive name prefix
  * new option --archive-name/-a to hard-code an archive filename
  * archivemail now expands wildcards in IMAP mailbox names
  * many bugfixes
- dropped archivemail-0.7.2-fix-unnecessary-assertions.patch
- changed group to something more appropriate</changelog>
  <changelog author="gber@opensuse.org" date="1301659200">- update to version 0.8.2
  * bugfixes</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="gber@opensuse.org" date="1337169600">- update to version 0.9.0
  * IMAP: support for international mailbox names containing
    non-ASCII characters
- dropped obsolete archivemail-0.7.2-fix-paths.patch</changelog>
</package>
<package pkgid="572450d91c9430f8ced9779b5ba2cd684c2eb674277578e04c72662625373e61" name="archivemail" arch="src">
  <version epoch="0" ver="0.9.0" rel="21.1"/>
  <changelog author="poeml@suse.de" date="1151323200">- new package (0.6.2)
  * add -F/--filter-append option to append an arbitrary string to the IMAP
    filter string
  * don't delete more than a certain number of messages at a time. The max
    command len is limited. Fixes bug 942403 (Archiving large IMAP folders fails)
  * add SSL support per imaps URL (after patch by Tobias Gruetzmacher)
  * add -P/--pwfile option to supply the IMAP password, so it does not end up in
    the shell history
  * Fix SyntaxWarning: assignment to None (bug #843890)
  * Use the archive cut date rather than the actual time with the --suffix
    option. (Thanks Manuel Estrada Sainz)</changelog>
  <changelog author="poeml@suse.de" date="1159531200">- fix build with python 2.5</changelog>
  <changelog author="poeml@suse.de" date="1162555200">- update to 0.7.0 (bug numbers below are in the sf.net tracker
  unless indicated otherwise)
  * Fixed long options --filter-append and --pwfile to accept their arguments.
    Closes: #1555935
  * Fixed From_ line generation to actually look for the 'Return-path' and
    'From' headers.  Closes: #1555797
  * Fixed IMAP authentication/URL parsing, which wasn't working at all in
    v0.6.2.  Require username encoded in URL, but be flexible with the password:
    handle both --pwfile and URL-encoded password, and fallback to querying the
    user if neither is present.  Closes: #1555951
  * Convert on-the-wire CRLF to native EOL when saving messages from an IMAP
    folder.  Closes: #1555803
  * Updated man page.  This also addresses #1555951
  * Fixed unittest failure by updating --suffix testcase.  Based on analysis by
    Peter Poeml.  Thanks, Peter.
  * Fixed invalid IMAP filter string for large messages (--size option).
    (Thanks to the anonymous bug reporter)  Closes: #863813
  * Fixed IMAP --dry-run so it doesn't download all messages that would be
    archived.
  * Fixed IMAP --delete which didn't work at all.  (Thanks Anand)
    Closes: Debian bug #203282
  * Terminate each message in newly written mbox with an empty line if the
    message source is not an mbox-format folder.  (Thanks  Chung-chieh Shan)
    Closes: Debian bug #250410
  * Mangle From_ in message body if the message source is not an mbox-format
    folder.  (Thanks Chung-chieh Shan)  Closes: Debian bug #250402
  * Added new option --dont-mangle to turn off From_ mangling.
  * Bumped Python dependency to version 2.3.
  * Fixed unittest TestMboxExclusiveLock which failed on Solaris.  (Thanks Paul
    Rodger)  Closes: #904652
  * Fixed unsafe creation of temporary files in the test suite.
    This addresses Debian bug #385253, and reading the BTS log, it seems this
    issue was assigned CVE-2006-4245, although I cannot find any further
    reference to that CVE.  Note that the bug was initially reported to affect
    archivemail itself, too.  This is not correct.  (Thanks Joey Hess)
    Closes: Debian bug #385253
  * Fixed cleanup of temporary files after test suite failures.
  * Fixed dotlocking race condition.
  * Stats are now working with IMAP.
  * Stats now report the total size of a mailbox and of the archived messages
    therefrom.
  * Always barf if the archive destination directory is world-writable.
  * Distributing man page with the tarball again and fixed distutils setup.
    Closes: #1574720 (Thanks Grant Goodyear)
  * Improved IMAP error reporting</changelog>
  <changelog author="poeml@suse.de" date="1194609600">- update to 0.7.1
  * Fixed incompatibility with Python 2.5 which broke Maildir handling.
  * Fixed IMAP message flag conversion which was completely broken.
  * Username and password in IMAP URLs can now be double-quoted, so it should be
    no longer a problem if they contain delimiters like the '@' character.
  * New option --copy: archive mail, but don't delete it from the mailbox.
    This is mainly useful for testing purposes, and complements --delete.
  * IMAP: if selecting the mailbox fails, archivemail detects the server's
    mailbox hierarchy delimiter, replaces slashes in the mailbox name with the
    delimiter and tries again.
  * When converting from other formats to mbox, archivemail used to preserve
    existing 'Status' and 'X-Status' mbox headers; these are now silently
    overwritten to ensure they have correct values.
  * Invalid messages/files in Maildirs caused archivemail to silently stop
    processing mails and claim it's all done.  Now skip these and go ahead.
  * The automatic seteuid feature of archivemail is insecure and thus
    deprecated; it will be removed from later versions.
  * archivemail now accepts --days=0</changelog>
  <changelog author="poeml@suse.de" date="1194609601">- update to 0.7.2
  * fix crash with Python &lt;&lt; 2.5, introduced with 0.7.1</changelog>
  <changelog author="guido+opensuse.org@berhoerster.name" date="1263988800">- cleanup
- build as noarch for opensuse &gt; 11.1
- backported two fixes resulting in exceptions when archiving empty maildirs
  or with --days=0</changelog>
  <changelog author="gber@opensuse.org" date="1282305600">- update to version 0.8.0
  * new option --debug-imap to dump the IMAP conversation to stdout
  * new option --all to archive all messages in a mailbox
  * new option --prefix/-p, to specify an archive name prefix
  * new option --archive-name/-a to hard-code an archive filename
  * archivemail now expands wildcards in IMAP mailbox names
  * many bugfixes
- dropped archivemail-0.7.2-fix-unnecessary-assertions.patch
- changed group to something more appropriate</changelog>
  <changelog author="gber@opensuse.org" date="1301659200">- update to version 0.8.2
  * bugfixes</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="gber@opensuse.org" date="1337169600">- update to version 0.9.0
  * IMAP: support for international mailbox names containing
    non-ASCII characters
- dropped obsolete archivemail-0.7.2-fix-paths.patch</changelog>
</package>
<package pkgid="beb0b0ef8aa1361904a1ed85daca9fc02f7df880990aba7845014ffa3a73307b" name="automx" arch="noarch">
  <version epoch="0" ver="0.10.2" rel="5.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1330516800">- initial version (0.7.99+0.8beta1)</changelog>
  <changelog author="wr@rosenauer.org" date="1488196800">- update to 0.10.2
- updated apache2 config template for Apache 2.4
- created subpackage web</changelog>
  <changelog author="wr@rosenauer.org" date="1488369600">- clean up spec file and rpmlintrc
- add patch to support eMClient for OX App Suite (automx-ox.patch)
  by supporting CalDAV, CardDAV and X-OX-APPSUITE in autodiscover
- add apache configuration to enable the MacOS/iOS web provisioning
  if installed as automx-web</changelog>
  <changelog author="jengelh@inai.de" date="1489492800">- Trim storytelling from description</changelog>
  <changelog author="wr@rosenauer.org" date="1492171200">- allow build for RH-style distributions</changelog>
</package>
<package pkgid="b22207cfdd1a51a05d6bdf61c6ea8b90d0b0b119d7f14411af3022c2d1689817" name="automx" arch="src">
  <version epoch="0" ver="0.10.2" rel="5.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1330516800">- initial version (0.7.99+0.8beta1)</changelog>
  <changelog author="wr@rosenauer.org" date="1488196800">- update to 0.10.2
- updated apache2 config template for Apache 2.4
- created subpackage web</changelog>
  <changelog author="wr@rosenauer.org" date="1488369600">- clean up spec file and rpmlintrc
- add patch to support eMClient for OX App Suite (automx-ox.patch)
  by supporting CalDAV, CardDAV and X-OX-APPSUITE in autodiscover
- add apache configuration to enable the MacOS/iOS web provisioning
  if installed as automx-web</changelog>
  <changelog author="jengelh@inai.de" date="1489492800">- Trim storytelling from description</changelog>
  <changelog author="wr@rosenauer.org" date="1492171200">- allow build for RH-style distributions</changelog>
</package>
<package pkgid="7f84f782ad62e4bc50944dd9e63dcdc867d635cc6c0d693bd9c4d60a0d8ecc7b" name="automx-web" arch="noarch">
  <version epoch="0" ver="0.10.2" rel="5.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1330516800">- initial version (0.7.99+0.8beta1)</changelog>
  <changelog author="wr@rosenauer.org" date="1488196800">- update to 0.10.2
- updated apache2 config template for Apache 2.4
- created subpackage web</changelog>
  <changelog author="wr@rosenauer.org" date="1488369600">- clean up spec file and rpmlintrc
- add patch to support eMClient for OX App Suite (automx-ox.patch)
  by supporting CalDAV, CardDAV and X-OX-APPSUITE in autodiscover
- add apache configuration to enable the MacOS/iOS web provisioning
  if installed as automx-web</changelog>
  <changelog author="jengelh@inai.de" date="1489492800">- Trim storytelling from description</changelog>
  <changelog author="wr@rosenauer.org" date="1492171200">- allow build for RH-style distributions</changelog>
</package>
<package pkgid="1cf18b420532719709c691df6d9fab287132daee75822383a3d5b26db4d1f3a7" name="bogofilter" arch="src">
  <version epoch="0" ver="1.2.4" rel="60.1"/>
  <changelog author="lmuelle@suse.de" date="1138017600">- Update to version 1.0.1; CVE-2005-4591, CVE-2005-4592; [#142490].</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="lmuelle@suse.de" date="1157371200">- Update to version 1.1.1.
  + Fixed minor header/body multi-word token defect.
  + Add large file support for 32-bit systems.
    (_FILE_OFFSET_BITS/_LARGE_FILE).
  + Fix lexer_v3.l format string mismatch that broke debugging code on
    64-bit systems.
  + Add multi-word token support to bogoutil &amp; bogotune.
  + Clean up token prefixing.
  + Clean up queue-id processing.
  + Add max-multi-token-len checks.
  + Add min-token-len check (with exemption for 2 character
    money amounts which bogofilter has long accepted).
  + Add "short token" pattern to lexer
  + Add options for min/max token length, multi-token count, and
    max multi-token length.
  + Corrected option parsing in bogotune to support -n ham1 ham2
  - s spam1 spam2 as suggested by bogotune -h; broken since 0.93.2.
  + Corrected problem with bogotune's -D option (thanks to Jason Smith).
  + Flush output after writing spam header line and/or message body.
  + When database is near to maximum allowed size, allow reading
    it and disallow writing to it.
  + Fix formatting of Rtable output when in the message header,
    this keeps verbose passthrough modes RFC-822/2822 compliant.
  + Fixed --input-file and --output-file command line options.</changelog>
  <changelog author="ro@suse.de" date="1227268800">- update check-build.sh</changelog>
  <changelog author="lmuelle@suse.de" date="1234958400">- Update to version 1.1.7.
  + Updated sendmail milter contrib/bogofilter-milter.pl to v1.45
  + Added maildir training info to English and French FAQs.
  + Fix uninitialized variable in lexer.c when unicode is disabled.
  + In process_arg functions use the val parameter rather than optarg.
  + Function process_arg now has the same prototype for
    bogofilter, bogolexer, bogoutil, and bogotune.  The proper
    version is called by function read_config_file for all
    programs.
  + Fixed syntax errors in t.valgrind test
  + bf_compact now supports compacting databases that use QDBM, Tokyo
    Cabinet or SQLite3 and is covered by the test suite.
  + bf_compact now verifies databases before dumping them, to avoid
    getting into an unterminated loop and wasting all diskspace.
  + Bogoupgrade now verifies databases before dumping them, to avoid
    getting into an unterminated loop and burning all memory or disk
    space when the database is corrupt.
  + Bogoupgrade now uses Pod::Usage to print usage/help, prints error
    messages that are a bit more concise and validates arguments a bit
    stricter.
  + Bump required sqlite version to 3.5.4, earlier versions could
    sometimes corrupt the database. Update install-staticdblibs.sh.
    Bogofilter will complain when used with older versions.
  + bf_compact problem fixed.
- Update to version 1.1.6.
  + Transaction support added for TokyoCabinet datastore.
  + Bump required sqlite version to 3.4.2 and fix related compiler
    warnings. Bogofilter will complain when used with older versions.
  + Support for TokyoCabinet datastore added.
  + doc/README.db was updated to BerkeleyDB 4.6
  + doc/README.db: section 3.5 was added, with information on how to
    resolve "Logging region out of memory; you may need to increase its
    size", section 4.2 now documents set_lg_regionmax.
  + The install-staticdblibs.sh script was relicensed under GNU GPL v3,
    adjusted to download Berkeley DB 4.2 from oracle.com, adds patch #5,
    and updated to build SQLite 3.4.1. In order to for a rebuild of the
    updated library, do: rm -rf /opt/db-4.2-lean /opt/sqlite-3-lean
    and re-run the script.
  + The recommended minimum sqlite3 version is now 3.4.0, bogofilter will
    warn if used with older versions. Bugs that could cause database
    corruption in rare circumstances have been fixed in sqlite3.
    See doc/README.sqlite for details.
  + Updated sendmail milter contrib/bogofilter-milter.pl to v1.27
  + Add '--spam-header-place={header}' to specify header line
    before which the X-Bogosity line is placed.
  + Support --db-verify for sqlite3.
  + Fix defect where the database verification method would not be called
    for traditional Berkeley DB databases. Reported by Eric Wood.
  + Fix test suite for situations where there are blanks in the test or
    working directories' names.
  + Repair passthrough defect on systems whose standard system library
    makes a distinction between text and binary mode in stdio stuff.
- Update to version 1.1.5	2007-01-14 (released) 2007-01-25 (declared stable)
  + Fixed Makefile dependency problem.
  + Fixed block-on-subnets problem.
  + Added block-on-subnets regression test.
- Update to version 1.1.4	2007-01-01 (released)
  + Update copyright notices.
  + Add GSL dependency to bogofilter target to support parallel
    makes.
  + Fixed problem in flex-2.5.4 patch.
- Update to version 1.1.3	2006-12-03 (released) 2006-12-20 (declared stable)
  + Fixed typo in configure.ac.
- Update to version 1.1.2	2006-12-02 (released)
  + Revise install-staticlibs.sh's links for retrieving database
    tarball and patches.
  + Revise make rules for generating statically linked RPM.
  + Provide separate flex patches for 2.5.4 and 2.5.3x
  + Updated file comment for lexer_v3.l and removed unneeded
    rules T1, T12, SHORT_TOKEN, and TOKEN_12.
  + Miscellaneous minor cleanups of lexer_v3.l classes and rules.
  + Patch flex skeleton code problem which can cause a seg-fault.
  + Fix processing of "--unicode=no" option.
  + Fix prefixes for ip address and url tokens.  Restore colon
    that was dropped in token.c edit for bogofilter-1.1.0.
  + Fixed problem parsing message ids, which can cause a
    seg-fault on an x86_64.
  + Added '--ham-true' option for bogofilter (to match docs)
  + FAQ's updated to point to current sylpheed-claws wiki</changelog>
  <changelog author="lmuelle@suse.de" date="1241697600">- Update to version 1.2.0.
  + Flex-2.5.35 has fix for memory allocation problem in 2.5.4, 2.5.31, and
    2.5.33, making bogofilter's flex patch obsolete.
  + Bogofilter now uses listsort in place of qsort.
  + Added token-count=n, token-count-min=n, and token-count-max=n options.
  + Minor code cleanups.
  + spamitarium.pl updated to version 0.3.0
  + update bf_compact documentation by removing explicit Berkeley DB
    references, as it has been fixed to work with other database drivers in
    March 2008.
  + bf_compact, bf_copy and bf_tar now support transformed program names
  + Update sqlite3 adaptor to take advantage of sqlite3_prepare_v2() API
    function that appeared in SQLite 3.3.9. The new _v2 interface allows for
    more specific error messages when executing SQL statements.  Also enable
    extended result codes for more precise error reporting.
  + Update doc/integrating-with-postfix: the script now suggests sendmail -G
  - i (where -G will be ignored by Postfix before 2.3) to tell Postfix it's a
    gateway submission, not an original injection; the filter pipe(8) magic
    for master.cf now suggests flags=Rq (was flags=R), as per Postfix's
    FILTER_README.
  + Drop support for systems that reverse setvbuf arguments. The last systems
    to do that are reported to be shipped in 1987 by the autoconf manual, so
    ditch them.</changelog>
  <changelog author="bitshuffler@opensuse.org" date="1256644800">- Update to version 1.2.1.
  + Update configure to use "host" rather than "target", to match the
    newer autotools cross-build semantics. Untested.
    Developers changing the build system and users who build from SVN
    will now need automake 1.9 and autoconf 2.60.
  + Fix Christian Frommeyer's MIME decoding bug, Ubuntu/Launchpad Bug
    [#320829]. As a side effect, also fixes misattribution of MIME bodies
    as MIME headers with mime: tag.  Original bug report:
    https://bugs.launchpad.net/ubuntu/+source/bogofilter/+bug/320829
    Before this fix, bogofilter did not properly MIME-decode the first
    line in a body. This was especially bad with Christian's samples
    where the whole body was only one long base64 line.
  + Removed two scripts that are auto-built.
  + Added test case for Stephen Davies' Q-P EOL problem (see below).
  + Fixed EOL problem in quoted_printable text. Problem reported by
    Stephen Davies and identified by Pavel Kankovsky
  + Promoted to "stable"</changelog>
  <changelog author="coolo@novell.com" date="1263297600">- fix build on non-arm</changelog>
  <changelog author="lmuelle@suse.de" date="1278504000">- Fix a heap corruption in base64 decoder on invalid input; CVE-2010-2494;
  (bnc#619847).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="lmuelle@suse.com" date="1354536000">- Update to version 1.2.3.
  * Update configure.ac to avoid autoconf 2.68 warnings, by
    (a) quoting the first AC_RUN_IFELSE argument, an
    AC_LANG_PROGRAM(), with [ ], and
    (b) providing an explicit "true" assumption for Berkeley DB
    capabilities to avoid cross-compilation warnings.
  * Security bugfix; (CVE-2012-5468); (bnc#792939),
    Fix a heap corruption in base64 decoder on invalid input.
    http://bogofilter.sourceforge.net/security/bogofilter-SA-2012-01
  * Added bogofilter-faq-bg.html, a Bulgarian translation of the FAQ.
  * Mark "Berkeley DB 5.1.19: (August 27, 2010)" supported.
- Update to version 1.2.2.
  * Use a better PRNG for random sleeps. That is arc4random() where
    available, and drand48() elsewhere.
  * Assorted fixes for issues found with clang analyzer:
    + Fix a potential NULL deference
    + Fix a potential division by zero
    + Remove dead assignments and increments
  * Update Doxyfile and source contrib/bogogrep.c for docs, too.
  * Security bugfix, CVE-2010-2494:
    Fix a heap corruption in base64 decoder on invalid input.
    Analysis and patch by Julius Plenz &lt;plenz@cis.fu-berlin.de&gt;.
    Please see doc/bogofilter-SA-2010-01 for details.
  * Updated sendmail milter contrib/bogofilter-milter.pl to v1.??????
  * Bump supported/minimum SQLite3 versions and warning threshold.
    See doc/README.sqlite for details.
  * Mark BerkeleyDB 4.8.26 and 5.0.21 supported.
  * Make t.maint more robust; ignore .ENCODING token. To fix test
    failures on, for instance, FreeBSD with unicode enabled.
  * Fix several compiler warnings "array subscript has type 'char'", by
    casting the arguments to unsigned char.
  * Split error messages for ENOENT and EINVAL into new function.
  * Avoid divison by zero in robx computation by checking if there are at
    least one ham message and one spam message registered.
  * contrib/spamitarium.pl updated to version 0.4.0
  * Updated and integrated Ted Phelps's "Patch to prevent .ENCODING from
    being discarded by bogoutil -m" (SourceForge Patch #1743984).</changelog>
  <changelog author="lmuelle@suse.com" date="1374580800">- Update to version 1.2.4.
  * Fix three crashes in command line and environment variable parsers
    that caused NULL pointer dereferences with long option variants
    of bogofilter --syslog-tag, or bogoutil --timestamp-date, or when
    bogotune -M&lt;file&gt; cannot derive the bogofilter directory.
  * Add getopt_long_chk(), a getopt_long variant that checks if the
    overlapping short and long options agree on whether their argument
    is not required, mandatory, or optional.  If they disagree, the
    program aborts.
  * Fix a crash in command line parser that causes a NULL pointer
    dereference when --db-cachesize is used without argument.
    Found with getopt_long_chk().
  * Change lexer API/ABI a bit so as to work with flex 2.5.36 generated
    lexers (for instance, on Fedora 18 "Spherical Cow") that flip the
    type of yyleng from int to size_t. We use a signed long internally.
  * Fix XML form of Bulgarian FAQ so that it validates;
    and validate XHTML at build time.
  * Mark Berkeley DB 5.2.42 and 5.3.21 supported.</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update dependencies
  * use shared gsl
- Cleanup spec-file with spec-cleaner
- Change backend from libdb to sqlite3 for post-13.2 systems</changelog>
  <changelog author="mpluskal@suse.com" date="1429358400">- Build different backends
  * sqlite3 db and tokyocabinet
  * switch between them using update-alternatives
- Disable checks as they do not work with suffixed builds</changelog>
  <changelog author="lmuelle@suse.com" date="1430395200">- Provide and obsolete bogofilter from the db subpackage to ensure we stay
  with the same back-end in the update case.
- Require a backend package from the common package.
- Split of the documentation into an independent package.
- Tag the common and doc package as noarch post-11.1.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Add README.SUSE to the doc package.</changelog>
  <changelog author="p.drouand@gmail.com" date="1450872000">- Replace tokyocabinet with kyotocabinet following kyotocabinet
  upstream recommendations
  * Replace libtokyocabinet-devel with libkyotocabinet-devel
  * Add bogofilter-kyotocabinet.patch
  * Rename tokyocabinet with kyotocabinet
- Add autoconf and automake build dependencies; needed because of
  bogofilter-kyotocabinet.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package _docdir, fix build with rpm 4.13.</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Small spec file cleanup
- Adjust usage of update-alternatives</changelog>
</package>
<package pkgid="ca9687e2eb50befdcd2184d8bb6675c39a83891ec08b4f5bd103fad89af8a3ef" name="bogofilter-common" arch="noarch">
  <version epoch="0" ver="1.2.4" rel="60.1"/>
  <changelog author="lmuelle@suse.de" date="1241697600">- Update to version 1.2.0.
  + Flex-2.5.35 has fix for memory allocation problem in 2.5.4, 2.5.31, and
    2.5.33, making bogofilter's flex patch obsolete.
  + Bogofilter now uses listsort in place of qsort.
  + Added token-count=n, token-count-min=n, and token-count-max=n options.
  + Minor code cleanups.
  + spamitarium.pl updated to version 0.3.0
  + update bf_compact documentation by removing explicit Berkeley DB
    references, as it has been fixed to work with other database drivers in
    March 2008.
  + bf_compact, bf_copy and bf_tar now support transformed program names
  + Update sqlite3 adaptor to take advantage of sqlite3_prepare_v2() API
    function that appeared in SQLite 3.3.9. The new _v2 interface allows for
    more specific error messages when executing SQL statements.  Also enable
    extended result codes for more precise error reporting.
  + Update doc/integrating-with-postfix: the script now suggests sendmail -G
  - i (where -G will be ignored by Postfix before 2.3) to tell Postfix it's a
    gateway submission, not an original injection; the filter pipe(8) magic
    for master.cf now suggests flags=Rq (was flags=R), as per Postfix's
    FILTER_README.
  + Drop support for systems that reverse setvbuf arguments. The last systems
    to do that are reported to be shipped in 1987 by the autoconf manual, so
    ditch them.</changelog>
  <changelog author="bitshuffler@opensuse.org" date="1256644800">- Update to version 1.2.1.
  + Update configure to use "host" rather than "target", to match the
    newer autotools cross-build semantics. Untested.
    Developers changing the build system and users who build from SVN
    will now need automake 1.9 and autoconf 2.60.
  + Fix Christian Frommeyer's MIME decoding bug, Ubuntu/Launchpad Bug
    [#320829]. As a side effect, also fixes misattribution of MIME bodies
    as MIME headers with mime: tag.  Original bug report:
    https://bugs.launchpad.net/ubuntu/+source/bogofilter/+bug/320829
    Before this fix, bogofilter did not properly MIME-decode the first
    line in a body. This was especially bad with Christian's samples
    where the whole body was only one long base64 line.
  + Removed two scripts that are auto-built.
  + Added test case for Stephen Davies' Q-P EOL problem (see below).
  + Fixed EOL problem in quoted_printable text. Problem reported by
    Stephen Davies and identified by Pavel Kankovsky
  + Promoted to "stable"</changelog>
  <changelog author="coolo@novell.com" date="1263297600">- fix build on non-arm</changelog>
  <changelog author="lmuelle@suse.de" date="1278504000">- Fix a heap corruption in base64 decoder on invalid input; CVE-2010-2494;
  (bnc#619847).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="lmuelle@suse.com" date="1354536000">- Update to version 1.2.3.
  * Update configure.ac to avoid autoconf 2.68 warnings, by
    (a) quoting the first AC_RUN_IFELSE argument, an
    AC_LANG_PROGRAM(), with [ ], and
    (b) providing an explicit "true" assumption for Berkeley DB
    capabilities to avoid cross-compilation warnings.
  * Security bugfix; (CVE-2012-5468); (bnc#792939),
    Fix a heap corruption in base64 decoder on invalid input.
    http://bogofilter.sourceforge.net/security/bogofilter-SA-2012-01
  * Added bogofilter-faq-bg.html, a Bulgarian translation of the FAQ.
  * Mark "Berkeley DB 5.1.19: (August 27, 2010)" supported.
- Update to version 1.2.2.
  * Use a better PRNG for random sleeps. That is arc4random() where
    available, and drand48() elsewhere.
  * Assorted fixes for issues found with clang analyzer:
    + Fix a potential NULL deference
    + Fix a potential division by zero
    + Remove dead assignments and increments
  * Update Doxyfile and source contrib/bogogrep.c for docs, too.
  * Security bugfix, CVE-2010-2494:
    Fix a heap corruption in base64 decoder on invalid input.
    Analysis and patch by Julius Plenz &lt;plenz@cis.fu-berlin.de&gt;.
    Please see doc/bogofilter-SA-2010-01 for details.
  * Updated sendmail milter contrib/bogofilter-milter.pl to v1.??????
  * Bump supported/minimum SQLite3 versions and warning threshold.
    See doc/README.sqlite for details.
  * Mark BerkeleyDB 4.8.26 and 5.0.21 supported.
  * Make t.maint more robust; ignore .ENCODING token. To fix test
    failures on, for instance, FreeBSD with unicode enabled.
  * Fix several compiler warnings "array subscript has type 'char'", by
    casting the arguments to unsigned char.
  * Split error messages for ENOENT and EINVAL into new function.
  * Avoid divison by zero in robx computation by checking if there are at
    least one ham message and one spam message registered.
  * contrib/spamitarium.pl updated to version 0.4.0
  * Updated and integrated Ted Phelps's "Patch to prevent .ENCODING from
    being discarded by bogoutil -m" (SourceForge Patch #1743984).</changelog>
  <changelog author="lmuelle@suse.com" date="1374580800">- Update to version 1.2.4.
  * Fix three crashes in command line and environment variable parsers
    that caused NULL pointer dereferences with long option variants
    of bogofilter --syslog-tag, or bogoutil --timestamp-date, or when
    bogotune -M&lt;file&gt; cannot derive the bogofilter directory.
  * Add getopt_long_chk(), a getopt_long variant that checks if the
    overlapping short and long options agree on whether their argument
    is not required, mandatory, or optional.  If they disagree, the
    program aborts.
  * Fix a crash in command line parser that causes a NULL pointer
    dereference when --db-cachesize is used without argument.
    Found with getopt_long_chk().
  * Change lexer API/ABI a bit so as to work with flex 2.5.36 generated
    lexers (for instance, on Fedora 18 "Spherical Cow") that flip the
    type of yyleng from int to size_t. We use a signed long internally.
  * Fix XML form of Bulgarian FAQ so that it validates;
    and validate XHTML at build time.
  * Mark Berkeley DB 5.2.42 and 5.3.21 supported.</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update dependencies
  * use shared gsl
- Cleanup spec-file with spec-cleaner
- Change backend from libdb to sqlite3 for post-13.2 systems</changelog>
  <changelog author="mpluskal@suse.com" date="1429358400">- Build different backends
  * sqlite3 db and tokyocabinet
  * switch between them using update-alternatives
- Disable checks as they do not work with suffixed builds</changelog>
  <changelog author="lmuelle@suse.com" date="1430395200">- Provide and obsolete bogofilter from the db subpackage to ensure we stay
  with the same back-end in the update case.
- Require a backend package from the common package.
- Split of the documentation into an independent package.
- Tag the common and doc package as noarch post-11.1.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Add README.SUSE to the doc package.</changelog>
  <changelog author="p.drouand@gmail.com" date="1450872000">- Replace tokyocabinet with kyotocabinet following kyotocabinet
  upstream recommendations
  * Replace libtokyocabinet-devel with libkyotocabinet-devel
  * Add bogofilter-kyotocabinet.patch
  * Rename tokyocabinet with kyotocabinet
- Add autoconf and automake build dependencies; needed because of
  bogofilter-kyotocabinet.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package _docdir, fix build with rpm 4.13.</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Small spec file cleanup
- Adjust usage of update-alternatives</changelog>
</package>
<package pkgid="8e34c0ab25a53a455c37b51063aeb62f3bc63a35d192dae235087494c4162646" name="bogofilter-db" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="60.1"/>
  <changelog author="lmuelle@suse.de" date="1241697600">- Update to version 1.2.0.
  + Flex-2.5.35 has fix for memory allocation problem in 2.5.4, 2.5.31, and
    2.5.33, making bogofilter's flex patch obsolete.
  + Bogofilter now uses listsort in place of qsort.
  + Added token-count=n, token-count-min=n, and token-count-max=n options.
  + Minor code cleanups.
  + spamitarium.pl updated to version 0.3.0
  + update bf_compact documentation by removing explicit Berkeley DB
    references, as it has been fixed to work with other database drivers in
    March 2008.
  + bf_compact, bf_copy and bf_tar now support transformed program names
  + Update sqlite3 adaptor to take advantage of sqlite3_prepare_v2() API
    function that appeared in SQLite 3.3.9. The new _v2 interface allows for
    more specific error messages when executing SQL statements.  Also enable
    extended result codes for more precise error reporting.
  + Update doc/integrating-with-postfix: the script now suggests sendmail -G
  - i (where -G will be ignored by Postfix before 2.3) to tell Postfix it's a
    gateway submission, not an original injection; the filter pipe(8) magic
    for master.cf now suggests flags=Rq (was flags=R), as per Postfix's
    FILTER_README.
  + Drop support for systems that reverse setvbuf arguments. The last systems
    to do that are reported to be shipped in 1987 by the autoconf manual, so
    ditch them.</changelog>
  <changelog author="bitshuffler@opensuse.org" date="1256644800">- Update to version 1.2.1.
  + Update configure to use "host" rather than "target", to match the
    newer autotools cross-build semantics. Untested.
    Developers changing the build system and users who build from SVN
    will now need automake 1.9 and autoconf 2.60.
  + Fix Christian Frommeyer's MIME decoding bug, Ubuntu/Launchpad Bug
    [#320829]. As a side effect, also fixes misattribution of MIME bodies
    as MIME headers with mime: tag.  Original bug report:
    https://bugs.launchpad.net/ubuntu/+source/bogofilter/+bug/320829
    Before this fix, bogofilter did not properly MIME-decode the first
    line in a body. This was especially bad with Christian's samples
    where the whole body was only one long base64 line.
  + Removed two scripts that are auto-built.
  + Added test case for Stephen Davies' Q-P EOL problem (see below).
  + Fixed EOL problem in quoted_printable text. Problem reported by
    Stephen Davies and identified by Pavel Kankovsky
  + Promoted to "stable"</changelog>
  <changelog author="coolo@novell.com" date="1263297600">- fix build on non-arm</changelog>
  <changelog author="lmuelle@suse.de" date="1278504000">- Fix a heap corruption in base64 decoder on invalid input; CVE-2010-2494;
  (bnc#619847).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="lmuelle@suse.com" date="1354536000">- Update to version 1.2.3.
  * Update configure.ac to avoid autoconf 2.68 warnings, by
    (a) quoting the first AC_RUN_IFELSE argument, an
    AC_LANG_PROGRAM(), with [ ], and
    (b) providing an explicit "true" assumption for Berkeley DB
    capabilities to avoid cross-compilation warnings.
  * Security bugfix; (CVE-2012-5468); (bnc#792939),
    Fix a heap corruption in base64 decoder on invalid input.
    http://bogofilter.sourceforge.net/security/bogofilter-SA-2012-01
  * Added bogofilter-faq-bg.html, a Bulgarian translation of the FAQ.
  * Mark "Berkeley DB 5.1.19: (August 27, 2010)" supported.
- Update to version 1.2.2.
  * Use a better PRNG for random sleeps. That is arc4random() where
    available, and drand48() elsewhere.
  * Assorted fixes for issues found with clang analyzer:
    + Fix a potential NULL deference
    + Fix a potential division by zero
    + Remove dead assignments and increments
  * Update Doxyfile and source contrib/bogogrep.c for docs, too.
  * Security bugfix, CVE-2010-2494:
    Fix a heap corruption in base64 decoder on invalid input.
    Analysis and patch by Julius Plenz &lt;plenz@cis.fu-berlin.de&gt;.
    Please see doc/bogofilter-SA-2010-01 for details.
  * Updated sendmail milter contrib/bogofilter-milter.pl to v1.??????
  * Bump supported/minimum SQLite3 versions and warning threshold.
    See doc/README.sqlite for details.
  * Mark BerkeleyDB 4.8.26 and 5.0.21 supported.
  * Make t.maint more robust; ignore .ENCODING token. To fix test
    failures on, for instance, FreeBSD with unicode enabled.
  * Fix several compiler warnings "array subscript has type 'char'", by
    casting the arguments to unsigned char.
  * Split error messages for ENOENT and EINVAL into new function.
  * Avoid divison by zero in robx computation by checking if there are at
    least one ham message and one spam message registered.
  * contrib/spamitarium.pl updated to version 0.4.0
  * Updated and integrated Ted Phelps's "Patch to prevent .ENCODING from
    being discarded by bogoutil -m" (SourceForge Patch #1743984).</changelog>
  <changelog author="lmuelle@suse.com" date="1374580800">- Update to version 1.2.4.
  * Fix three crashes in command line and environment variable parsers
    that caused NULL pointer dereferences with long option variants
    of bogofilter --syslog-tag, or bogoutil --timestamp-date, or when
    bogotune -M&lt;file&gt; cannot derive the bogofilter directory.
  * Add getopt_long_chk(), a getopt_long variant that checks if the
    overlapping short and long options agree on whether their argument
    is not required, mandatory, or optional.  If they disagree, the
    program aborts.
  * Fix a crash in command line parser that causes a NULL pointer
    dereference when --db-cachesize is used without argument.
    Found with getopt_long_chk().
  * Change lexer API/ABI a bit so as to work with flex 2.5.36 generated
    lexers (for instance, on Fedora 18 "Spherical Cow") that flip the
    type of yyleng from int to size_t. We use a signed long internally.
  * Fix XML form of Bulgarian FAQ so that it validates;
    and validate XHTML at build time.
  * Mark Berkeley DB 5.2.42 and 5.3.21 supported.</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update dependencies
  * use shared gsl
- Cleanup spec-file with spec-cleaner
- Change backend from libdb to sqlite3 for post-13.2 systems</changelog>
  <changelog author="mpluskal@suse.com" date="1429358400">- Build different backends
  * sqlite3 db and tokyocabinet
  * switch between them using update-alternatives
- Disable checks as they do not work with suffixed builds</changelog>
  <changelog author="lmuelle@suse.com" date="1430395200">- Provide and obsolete bogofilter from the db subpackage to ensure we stay
  with the same back-end in the update case.
- Require a backend package from the common package.
- Split of the documentation into an independent package.
- Tag the common and doc package as noarch post-11.1.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Add README.SUSE to the doc package.</changelog>
  <changelog author="p.drouand@gmail.com" date="1450872000">- Replace tokyocabinet with kyotocabinet following kyotocabinet
  upstream recommendations
  * Replace libtokyocabinet-devel with libkyotocabinet-devel
  * Add bogofilter-kyotocabinet.patch
  * Rename tokyocabinet with kyotocabinet
- Add autoconf and automake build dependencies; needed because of
  bogofilter-kyotocabinet.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package _docdir, fix build with rpm 4.13.</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Small spec file cleanup
- Adjust usage of update-alternatives</changelog>
</package>
<package pkgid="09d37f11b5a8fde2d812786e98c834253d465b2a530abfe56d674963a56323c9" name="bogofilter-db-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="60.1"/>
  <changelog author="lmuelle@suse.de" date="1241697600">- Update to version 1.2.0.
  + Flex-2.5.35 has fix for memory allocation problem in 2.5.4, 2.5.31, and
    2.5.33, making bogofilter's flex patch obsolete.
  + Bogofilter now uses listsort in place of qsort.
  + Added token-count=n, token-count-min=n, and token-count-max=n options.
  + Minor code cleanups.
  + spamitarium.pl updated to version 0.3.0
  + update bf_compact documentation by removing explicit Berkeley DB
    references, as it has been fixed to work with other database drivers in
    March 2008.
  + bf_compact, bf_copy and bf_tar now support transformed program names
  + Update sqlite3 adaptor to take advantage of sqlite3_prepare_v2() API
    function that appeared in SQLite 3.3.9. The new _v2 interface allows for
    more specific error messages when executing SQL statements.  Also enable
    extended result codes for more precise error reporting.
  + Update doc/integrating-with-postfix: the script now suggests sendmail -G
  - i (where -G will be ignored by Postfix before 2.3) to tell Postfix it's a
    gateway submission, not an original injection; the filter pipe(8) magic
    for master.cf now suggests flags=Rq (was flags=R), as per Postfix's
    FILTER_README.
  + Drop support for systems that reverse setvbuf arguments. The last systems
    to do that are reported to be shipped in 1987 by the autoconf manual, so
    ditch them.</changelog>
  <changelog author="bitshuffler@opensuse.org" date="1256644800">- Update to version 1.2.1.
  + Update configure to use "host" rather than "target", to match the
    newer autotools cross-build semantics. Untested.
    Developers changing the build system and users who build from SVN
    will now need automake 1.9 and autoconf 2.60.
  + Fix Christian Frommeyer's MIME decoding bug, Ubuntu/Launchpad Bug
    [#320829]. As a side effect, also fixes misattribution of MIME bodies
    as MIME headers with mime: tag.  Original bug report:
    https://bugs.launchpad.net/ubuntu/+source/bogofilter/+bug/320829
    Before this fix, bogofilter did not properly MIME-decode the first
    line in a body. This was especially bad with Christian's samples
    where the whole body was only one long base64 line.
  + Removed two scripts that are auto-built.
  + Added test case for Stephen Davies' Q-P EOL problem (see below).
  + Fixed EOL problem in quoted_printable text. Problem reported by
    Stephen Davies and identified by Pavel Kankovsky
  + Promoted to "stable"</changelog>
  <changelog author="coolo@novell.com" date="1263297600">- fix build on non-arm</changelog>
  <changelog author="lmuelle@suse.de" date="1278504000">- Fix a heap corruption in base64 decoder on invalid input; CVE-2010-2494;
  (bnc#619847).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="lmuelle@suse.com" date="1354536000">- Update to version 1.2.3.
  * Update configure.ac to avoid autoconf 2.68 warnings, by
    (a) quoting the first AC_RUN_IFELSE argument, an
    AC_LANG_PROGRAM(), with [ ], and
    (b) providing an explicit "true" assumption for Berkeley DB
    capabilities to avoid cross-compilation warnings.
  * Security bugfix; (CVE-2012-5468); (bnc#792939),
    Fix a heap corruption in base64 decoder on invalid input.
    http://bogofilter.sourceforge.net/security/bogofilter-SA-2012-01
  * Added bogofilter-faq-bg.html, a Bulgarian translation of the FAQ.
  * Mark "Berkeley DB 5.1.19: (August 27, 2010)" supported.
- Update to version 1.2.2.
  * Use a better PRNG for random sleeps. That is arc4random() where
    available, and drand48() elsewhere.
  * Assorted fixes for issues found with clang analyzer:
    + Fix a potential NULL deference
    + Fix a potential division by zero
    + Remove dead assignments and increments
  * Update Doxyfile and source contrib/bogogrep.c for docs, too.
  * Security bugfix, CVE-2010-2494:
    Fix a heap corruption in base64 decoder on invalid input.
    Analysis and patch by Julius Plenz &lt;plenz@cis.fu-berlin.de&gt;.
    Please see doc/bogofilter-SA-2010-01 for details.
  * Updated sendmail milter contrib/bogofilter-milter.pl to v1.??????
  * Bump supported/minimum SQLite3 versions and warning threshold.
    See doc/README.sqlite for details.
  * Mark BerkeleyDB 4.8.26 and 5.0.21 supported.
  * Make t.maint more robust; ignore .ENCODING token. To fix test
    failures on, for instance, FreeBSD with unicode enabled.
  * Fix several compiler warnings "array subscript has type 'char'", by
    casting the arguments to unsigned char.
  * Split error messages for ENOENT and EINVAL into new function.
  * Avoid divison by zero in robx computation by checking if there are at
    least one ham message and one spam message registered.
  * contrib/spamitarium.pl updated to version 0.4.0
  * Updated and integrated Ted Phelps's "Patch to prevent .ENCODING from
    being discarded by bogoutil -m" (SourceForge Patch #1743984).</changelog>
  <changelog author="lmuelle@suse.com" date="1374580800">- Update to version 1.2.4.
  * Fix three crashes in command line and environment variable parsers
    that caused NULL pointer dereferences with long option variants
    of bogofilter --syslog-tag, or bogoutil --timestamp-date, or when
    bogotune -M&lt;file&gt; cannot derive the bogofilter directory.
  * Add getopt_long_chk(), a getopt_long variant that checks if the
    overlapping short and long options agree on whether their argument
    is not required, mandatory, or optional.  If they disagree, the
    program aborts.
  * Fix a crash in command line parser that causes a NULL pointer
    dereference when --db-cachesize is used without argument.
    Found with getopt_long_chk().
  * Change lexer API/ABI a bit so as to work with flex 2.5.36 generated
    lexers (for instance, on Fedora 18 "Spherical Cow") that flip the
    type of yyleng from int to size_t. We use a signed long internally.
  * Fix XML form of Bulgarian FAQ so that it validates;
    and validate XHTML at build time.
  * Mark Berkeley DB 5.2.42 and 5.3.21 supported.</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update dependencies
  * use shared gsl
- Cleanup spec-file with spec-cleaner
- Change backend from libdb to sqlite3 for post-13.2 systems</changelog>
  <changelog author="mpluskal@suse.com" date="1429358400">- Build different backends
  * sqlite3 db and tokyocabinet
  * switch between them using update-alternatives
- Disable checks as they do not work with suffixed builds</changelog>
  <changelog author="lmuelle@suse.com" date="1430395200">- Provide and obsolete bogofilter from the db subpackage to ensure we stay
  with the same back-end in the update case.
- Require a backend package from the common package.
- Split of the documentation into an independent package.
- Tag the common and doc package as noarch post-11.1.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Add README.SUSE to the doc package.</changelog>
  <changelog author="p.drouand@gmail.com" date="1450872000">- Replace tokyocabinet with kyotocabinet following kyotocabinet
  upstream recommendations
  * Replace libtokyocabinet-devel with libkyotocabinet-devel
  * Add bogofilter-kyotocabinet.patch
  * Rename tokyocabinet with kyotocabinet
- Add autoconf and automake build dependencies; needed because of
  bogofilter-kyotocabinet.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package _docdir, fix build with rpm 4.13.</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Small spec file cleanup
- Adjust usage of update-alternatives</changelog>
</package>
<package pkgid="26f06e917a84a79e7e4bae9037d25fc565a52672de43da126b454d0274c3541e" name="bogofilter-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="60.1"/>
  <changelog author="lmuelle@suse.de" date="1241697600">- Update to version 1.2.0.
  + Flex-2.5.35 has fix for memory allocation problem in 2.5.4, 2.5.31, and
    2.5.33, making bogofilter's flex patch obsolete.
  + Bogofilter now uses listsort in place of qsort.
  + Added token-count=n, token-count-min=n, and token-count-max=n options.
  + Minor code cleanups.
  + spamitarium.pl updated to version 0.3.0
  + update bf_compact documentation by removing explicit Berkeley DB
    references, as it has been fixed to work with other database drivers in
    March 2008.
  + bf_compact, bf_copy and bf_tar now support transformed program names
  + Update sqlite3 adaptor to take advantage of sqlite3_prepare_v2() API
    function that appeared in SQLite 3.3.9. The new _v2 interface allows for
    more specific error messages when executing SQL statements.  Also enable
    extended result codes for more precise error reporting.
  + Update doc/integrating-with-postfix: the script now suggests sendmail -G
  - i (where -G will be ignored by Postfix before 2.3) to tell Postfix it's a
    gateway submission, not an original injection; the filter pipe(8) magic
    for master.cf now suggests flags=Rq (was flags=R), as per Postfix's
    FILTER_README.
  + Drop support for systems that reverse setvbuf arguments. The last systems
    to do that are reported to be shipped in 1987 by the autoconf manual, so
    ditch them.</changelog>
  <changelog author="bitshuffler@opensuse.org" date="1256644800">- Update to version 1.2.1.
  + Update configure to use "host" rather than "target", to match the
    newer autotools cross-build semantics. Untested.
    Developers changing the build system and users who build from SVN
    will now need automake 1.9 and autoconf 2.60.
  + Fix Christian Frommeyer's MIME decoding bug, Ubuntu/Launchpad Bug
    [#320829]. As a side effect, also fixes misattribution of MIME bodies
    as MIME headers with mime: tag.  Original bug report:
    https://bugs.launchpad.net/ubuntu/+source/bogofilter/+bug/320829
    Before this fix, bogofilter did not properly MIME-decode the first
    line in a body. This was especially bad with Christian's samples
    where the whole body was only one long base64 line.
  + Removed two scripts that are auto-built.
  + Added test case for Stephen Davies' Q-P EOL problem (see below).
  + Fixed EOL problem in quoted_printable text. Problem reported by
    Stephen Davies and identified by Pavel Kankovsky
  + Promoted to "stable"</changelog>
  <changelog author="coolo@novell.com" date="1263297600">- fix build on non-arm</changelog>
  <changelog author="lmuelle@suse.de" date="1278504000">- Fix a heap corruption in base64 decoder on invalid input; CVE-2010-2494;
  (bnc#619847).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="lmuelle@suse.com" date="1354536000">- Update to version 1.2.3.
  * Update configure.ac to avoid autoconf 2.68 warnings, by
    (a) quoting the first AC_RUN_IFELSE argument, an
    AC_LANG_PROGRAM(), with [ ], and
    (b) providing an explicit "true" assumption for Berkeley DB
    capabilities to avoid cross-compilation warnings.
  * Security bugfix; (CVE-2012-5468); (bnc#792939),
    Fix a heap corruption in base64 decoder on invalid input.
    http://bogofilter.sourceforge.net/security/bogofilter-SA-2012-01
  * Added bogofilter-faq-bg.html, a Bulgarian translation of the FAQ.
  * Mark "Berkeley DB 5.1.19: (August 27, 2010)" supported.
- Update to version 1.2.2.
  * Use a better PRNG for random sleeps. That is arc4random() where
    available, and drand48() elsewhere.
  * Assorted fixes for issues found with clang analyzer:
    + Fix a potential NULL deference
    + Fix a potential division by zero
    + Remove dead assignments and increments
  * Update Doxyfile and source contrib/bogogrep.c for docs, too.
  * Security bugfix, CVE-2010-2494:
    Fix a heap corruption in base64 decoder on invalid input.
    Analysis and patch by Julius Plenz &lt;plenz@cis.fu-berlin.de&gt;.
    Please see doc/bogofilter-SA-2010-01 for details.
  * Updated sendmail milter contrib/bogofilter-milter.pl to v1.??????
  * Bump supported/minimum SQLite3 versions and warning threshold.
    See doc/README.sqlite for details.
  * Mark BerkeleyDB 4.8.26 and 5.0.21 supported.
  * Make t.maint more robust; ignore .ENCODING token. To fix test
    failures on, for instance, FreeBSD with unicode enabled.
  * Fix several compiler warnings "array subscript has type 'char'", by
    casting the arguments to unsigned char.
  * Split error messages for ENOENT and EINVAL into new function.
  * Avoid divison by zero in robx computation by checking if there are at
    least one ham message and one spam message registered.
  * contrib/spamitarium.pl updated to version 0.4.0
  * Updated and integrated Ted Phelps's "Patch to prevent .ENCODING from
    being discarded by bogoutil -m" (SourceForge Patch #1743984).</changelog>
  <changelog author="lmuelle@suse.com" date="1374580800">- Update to version 1.2.4.
  * Fix three crashes in command line and environment variable parsers
    that caused NULL pointer dereferences with long option variants
    of bogofilter --syslog-tag, or bogoutil --timestamp-date, or when
    bogotune -M&lt;file&gt; cannot derive the bogofilter directory.
  * Add getopt_long_chk(), a getopt_long variant that checks if the
    overlapping short and long options agree on whether their argument
    is not required, mandatory, or optional.  If they disagree, the
    program aborts.
  * Fix a crash in command line parser that causes a NULL pointer
    dereference when --db-cachesize is used without argument.
    Found with getopt_long_chk().
  * Change lexer API/ABI a bit so as to work with flex 2.5.36 generated
    lexers (for instance, on Fedora 18 "Spherical Cow") that flip the
    type of yyleng from int to size_t. We use a signed long internally.
  * Fix XML form of Bulgarian FAQ so that it validates;
    and validate XHTML at build time.
  * Mark Berkeley DB 5.2.42 and 5.3.21 supported.</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update dependencies
  * use shared gsl
- Cleanup spec-file with spec-cleaner
- Change backend from libdb to sqlite3 for post-13.2 systems</changelog>
  <changelog author="mpluskal@suse.com" date="1429358400">- Build different backends
  * sqlite3 db and tokyocabinet
  * switch between them using update-alternatives
- Disable checks as they do not work with suffixed builds</changelog>
  <changelog author="lmuelle@suse.com" date="1430395200">- Provide and obsolete bogofilter from the db subpackage to ensure we stay
  with the same back-end in the update case.
- Require a backend package from the common package.
- Split of the documentation into an independent package.
- Tag the common and doc package as noarch post-11.1.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Add README.SUSE to the doc package.</changelog>
  <changelog author="p.drouand@gmail.com" date="1450872000">- Replace tokyocabinet with kyotocabinet following kyotocabinet
  upstream recommendations
  * Replace libtokyocabinet-devel with libkyotocabinet-devel
  * Add bogofilter-kyotocabinet.patch
  * Rename tokyocabinet with kyotocabinet
- Add autoconf and automake build dependencies; needed because of
  bogofilter-kyotocabinet.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package _docdir, fix build with rpm 4.13.</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Small spec file cleanup
- Adjust usage of update-alternatives</changelog>
</package>
<package pkgid="abda204efe6146441d3d818587cb37dcc56fc06ab6a4e8eb4051e166a8b324c1" name="bogofilter-doc" arch="noarch">
  <version epoch="0" ver="1.2.4" rel="60.1"/>
  <changelog author="lmuelle@suse.de" date="1241697600">- Update to version 1.2.0.
  + Flex-2.5.35 has fix for memory allocation problem in 2.5.4, 2.5.31, and
    2.5.33, making bogofilter's flex patch obsolete.
  + Bogofilter now uses listsort in place of qsort.
  + Added token-count=n, token-count-min=n, and token-count-max=n options.
  + Minor code cleanups.
  + spamitarium.pl updated to version 0.3.0
  + update bf_compact documentation by removing explicit Berkeley DB
    references, as it has been fixed to work with other database drivers in
    March 2008.
  + bf_compact, bf_copy and bf_tar now support transformed program names
  + Update sqlite3 adaptor to take advantage of sqlite3_prepare_v2() API
    function that appeared in SQLite 3.3.9. The new _v2 interface allows for
    more specific error messages when executing SQL statements.  Also enable
    extended result codes for more precise error reporting.
  + Update doc/integrating-with-postfix: the script now suggests sendmail -G
  - i (where -G will be ignored by Postfix before 2.3) to tell Postfix it's a
    gateway submission, not an original injection; the filter pipe(8) magic
    for master.cf now suggests flags=Rq (was flags=R), as per Postfix's
    FILTER_README.
  + Drop support for systems that reverse setvbuf arguments. The last systems
    to do that are reported to be shipped in 1987 by the autoconf manual, so
    ditch them.</changelog>
  <changelog author="bitshuffler@opensuse.org" date="1256644800">- Update to version 1.2.1.
  + Update configure to use "host" rather than "target", to match the
    newer autotools cross-build semantics. Untested.
    Developers changing the build system and users who build from SVN
    will now need automake 1.9 and autoconf 2.60.
  + Fix Christian Frommeyer's MIME decoding bug, Ubuntu/Launchpad Bug
    [#320829]. As a side effect, also fixes misattribution of MIME bodies
    as MIME headers with mime: tag.  Original bug report:
    https://bugs.launchpad.net/ubuntu/+source/bogofilter/+bug/320829
    Before this fix, bogofilter did not properly MIME-decode the first
    line in a body. This was especially bad with Christian's samples
    where the whole body was only one long base64 line.
  + Removed two scripts that are auto-built.
  + Added test case for Stephen Davies' Q-P EOL problem (see below).
  + Fixed EOL problem in quoted_printable text. Problem reported by
    Stephen Davies and identified by Pavel Kankovsky
  + Promoted to "stable"</changelog>
  <changelog author="coolo@novell.com" date="1263297600">- fix build on non-arm</changelog>
  <changelog author="lmuelle@suse.de" date="1278504000">- Fix a heap corruption in base64 decoder on invalid input; CVE-2010-2494;
  (bnc#619847).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="lmuelle@suse.com" date="1354536000">- Update to version 1.2.3.
  * Update configure.ac to avoid autoconf 2.68 warnings, by
    (a) quoting the first AC_RUN_IFELSE argument, an
    AC_LANG_PROGRAM(), with [ ], and
    (b) providing an explicit "true" assumption for Berkeley DB
    capabilities to avoid cross-compilation warnings.
  * Security bugfix; (CVE-2012-5468); (bnc#792939),
    Fix a heap corruption in base64 decoder on invalid input.
    http://bogofilter.sourceforge.net/security/bogofilter-SA-2012-01
  * Added bogofilter-faq-bg.html, a Bulgarian translation of the FAQ.
  * Mark "Berkeley DB 5.1.19: (August 27, 2010)" supported.
- Update to version 1.2.2.
  * Use a better PRNG for random sleeps. That is arc4random() where
    available, and drand48() elsewhere.
  * Assorted fixes for issues found with clang analyzer:
    + Fix a potential NULL deference
    + Fix a potential division by zero
    + Remove dead assignments and increments
  * Update Doxyfile and source contrib/bogogrep.c for docs, too.
  * Security bugfix, CVE-2010-2494:
    Fix a heap corruption in base64 decoder on invalid input.
    Analysis and patch by Julius Plenz &lt;plenz@cis.fu-berlin.de&gt;.
    Please see doc/bogofilter-SA-2010-01 for details.
  * Updated sendmail milter contrib/bogofilter-milter.pl to v1.??????
  * Bump supported/minimum SQLite3 versions and warning threshold.
    See doc/README.sqlite for details.
  * Mark BerkeleyDB 4.8.26 and 5.0.21 supported.
  * Make t.maint more robust; ignore .ENCODING token. To fix test
    failures on, for instance, FreeBSD with unicode enabled.
  * Fix several compiler warnings "array subscript has type 'char'", by
    casting the arguments to unsigned char.
  * Split error messages for ENOENT and EINVAL into new function.
  * Avoid divison by zero in robx computation by checking if there are at
    least one ham message and one spam message registered.
  * contrib/spamitarium.pl updated to version 0.4.0
  * Updated and integrated Ted Phelps's "Patch to prevent .ENCODING from
    being discarded by bogoutil -m" (SourceForge Patch #1743984).</changelog>
  <changelog author="lmuelle@suse.com" date="1374580800">- Update to version 1.2.4.
  * Fix three crashes in command line and environment variable parsers
    that caused NULL pointer dereferences with long option variants
    of bogofilter --syslog-tag, or bogoutil --timestamp-date, or when
    bogotune -M&lt;file&gt; cannot derive the bogofilter directory.
  * Add getopt_long_chk(), a getopt_long variant that checks if the
    overlapping short and long options agree on whether their argument
    is not required, mandatory, or optional.  If they disagree, the
    program aborts.
  * Fix a crash in command line parser that causes a NULL pointer
    dereference when --db-cachesize is used without argument.
    Found with getopt_long_chk().
  * Change lexer API/ABI a bit so as to work with flex 2.5.36 generated
    lexers (for instance, on Fedora 18 "Spherical Cow") that flip the
    type of yyleng from int to size_t. We use a signed long internally.
  * Fix XML form of Bulgarian FAQ so that it validates;
    and validate XHTML at build time.
  * Mark Berkeley DB 5.2.42 and 5.3.21 supported.</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update dependencies
  * use shared gsl
- Cleanup spec-file with spec-cleaner
- Change backend from libdb to sqlite3 for post-13.2 systems</changelog>
  <changelog author="mpluskal@suse.com" date="1429358400">- Build different backends
  * sqlite3 db and tokyocabinet
  * switch between them using update-alternatives
- Disable checks as they do not work with suffixed builds</changelog>
  <changelog author="lmuelle@suse.com" date="1430395200">- Provide and obsolete bogofilter from the db subpackage to ensure we stay
  with the same back-end in the update case.
- Require a backend package from the common package.
- Split of the documentation into an independent package.
- Tag the common and doc package as noarch post-11.1.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Add README.SUSE to the doc package.</changelog>
  <changelog author="p.drouand@gmail.com" date="1450872000">- Replace tokyocabinet with kyotocabinet following kyotocabinet
  upstream recommendations
  * Replace libtokyocabinet-devel with libkyotocabinet-devel
  * Add bogofilter-kyotocabinet.patch
  * Rename tokyocabinet with kyotocabinet
- Add autoconf and automake build dependencies; needed because of
  bogofilter-kyotocabinet.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package _docdir, fix build with rpm 4.13.</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Small spec file cleanup
- Adjust usage of update-alternatives</changelog>
</package>
<package pkgid="450a5bc27d2a549008e987e44cbc8091b8d76b36af823c5018861b5ed6f7ad1f" name="bogofilter-sqlite3" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="60.1"/>
  <changelog author="lmuelle@suse.de" date="1241697600">- Update to version 1.2.0.
  + Flex-2.5.35 has fix for memory allocation problem in 2.5.4, 2.5.31, and
    2.5.33, making bogofilter's flex patch obsolete.
  + Bogofilter now uses listsort in place of qsort.
  + Added token-count=n, token-count-min=n, and token-count-max=n options.
  + Minor code cleanups.
  + spamitarium.pl updated to version 0.3.0
  + update bf_compact documentation by removing explicit Berkeley DB
    references, as it has been fixed to work with other database drivers in
    March 2008.
  + bf_compact, bf_copy and bf_tar now support transformed program names
  + Update sqlite3 adaptor to take advantage of sqlite3_prepare_v2() API
    function that appeared in SQLite 3.3.9. The new _v2 interface allows for
    more specific error messages when executing SQL statements.  Also enable
    extended result codes for more precise error reporting.
  + Update doc/integrating-with-postfix: the script now suggests sendmail -G
  - i (where -G will be ignored by Postfix before 2.3) to tell Postfix it's a
    gateway submission, not an original injection; the filter pipe(8) magic
    for master.cf now suggests flags=Rq (was flags=R), as per Postfix's
    FILTER_README.
  + Drop support for systems that reverse setvbuf arguments. The last systems
    to do that are reported to be shipped in 1987 by the autoconf manual, so
    ditch them.</changelog>
  <changelog author="bitshuffler@opensuse.org" date="1256644800">- Update to version 1.2.1.
  + Update configure to use "host" rather than "target", to match the
    newer autotools cross-build semantics. Untested.
    Developers changing the build system and users who build from SVN
    will now need automake 1.9 and autoconf 2.60.
  + Fix Christian Frommeyer's MIME decoding bug, Ubuntu/Launchpad Bug
    [#320829]. As a side effect, also fixes misattribution of MIME bodies
    as MIME headers with mime: tag.  Original bug report:
    https://bugs.launchpad.net/ubuntu/+source/bogofilter/+bug/320829
    Before this fix, bogofilter did not properly MIME-decode the first
    line in a body. This was especially bad with Christian's samples
    where the whole body was only one long base64 line.
  + Removed two scripts that are auto-built.
  + Added test case for Stephen Davies' Q-P EOL problem (see below).
  + Fixed EOL problem in quoted_printable text. Problem reported by
    Stephen Davies and identified by Pavel Kankovsky
  + Promoted to "stable"</changelog>
  <changelog author="coolo@novell.com" date="1263297600">- fix build on non-arm</changelog>
  <changelog author="lmuelle@suse.de" date="1278504000">- Fix a heap corruption in base64 decoder on invalid input; CVE-2010-2494;
  (bnc#619847).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="lmuelle@suse.com" date="1354536000">- Update to version 1.2.3.
  * Update configure.ac to avoid autoconf 2.68 warnings, by
    (a) quoting the first AC_RUN_IFELSE argument, an
    AC_LANG_PROGRAM(), with [ ], and
    (b) providing an explicit "true" assumption for Berkeley DB
    capabilities to avoid cross-compilation warnings.
  * Security bugfix; (CVE-2012-5468); (bnc#792939),
    Fix a heap corruption in base64 decoder on invalid input.
    http://bogofilter.sourceforge.net/security/bogofilter-SA-2012-01
  * Added bogofilter-faq-bg.html, a Bulgarian translation of the FAQ.
  * Mark "Berkeley DB 5.1.19: (August 27, 2010)" supported.
- Update to version 1.2.2.
  * Use a better PRNG for random sleeps. That is arc4random() where
    available, and drand48() elsewhere.
  * Assorted fixes for issues found with clang analyzer:
    + Fix a potential NULL deference
    + Fix a potential division by zero
    + Remove dead assignments and increments
  * Update Doxyfile and source contrib/bogogrep.c for docs, too.
  * Security bugfix, CVE-2010-2494:
    Fix a heap corruption in base64 decoder on invalid input.
    Analysis and patch by Julius Plenz &lt;plenz@cis.fu-berlin.de&gt;.
    Please see doc/bogofilter-SA-2010-01 for details.
  * Updated sendmail milter contrib/bogofilter-milter.pl to v1.??????
  * Bump supported/minimum SQLite3 versions and warning threshold.
    See doc/README.sqlite for details.
  * Mark BerkeleyDB 4.8.26 and 5.0.21 supported.
  * Make t.maint more robust; ignore .ENCODING token. To fix test
    failures on, for instance, FreeBSD with unicode enabled.
  * Fix several compiler warnings "array subscript has type 'char'", by
    casting the arguments to unsigned char.
  * Split error messages for ENOENT and EINVAL into new function.
  * Avoid divison by zero in robx computation by checking if there are at
    least one ham message and one spam message registered.
  * contrib/spamitarium.pl updated to version 0.4.0
  * Updated and integrated Ted Phelps's "Patch to prevent .ENCODING from
    being discarded by bogoutil -m" (SourceForge Patch #1743984).</changelog>
  <changelog author="lmuelle@suse.com" date="1374580800">- Update to version 1.2.4.
  * Fix three crashes in command line and environment variable parsers
    that caused NULL pointer dereferences with long option variants
    of bogofilter --syslog-tag, or bogoutil --timestamp-date, or when
    bogotune -M&lt;file&gt; cannot derive the bogofilter directory.
  * Add getopt_long_chk(), a getopt_long variant that checks if the
    overlapping short and long options agree on whether their argument
    is not required, mandatory, or optional.  If they disagree, the
    program aborts.
  * Fix a crash in command line parser that causes a NULL pointer
    dereference when --db-cachesize is used without argument.
    Found with getopt_long_chk().
  * Change lexer API/ABI a bit so as to work with flex 2.5.36 generated
    lexers (for instance, on Fedora 18 "Spherical Cow") that flip the
    type of yyleng from int to size_t. We use a signed long internally.
  * Fix XML form of Bulgarian FAQ so that it validates;
    and validate XHTML at build time.
  * Mark Berkeley DB 5.2.42 and 5.3.21 supported.</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update dependencies
  * use shared gsl
- Cleanup spec-file with spec-cleaner
- Change backend from libdb to sqlite3 for post-13.2 systems</changelog>
  <changelog author="mpluskal@suse.com" date="1429358400">- Build different backends
  * sqlite3 db and tokyocabinet
  * switch between them using update-alternatives
- Disable checks as they do not work with suffixed builds</changelog>
  <changelog author="lmuelle@suse.com" date="1430395200">- Provide and obsolete bogofilter from the db subpackage to ensure we stay
  with the same back-end in the update case.
- Require a backend package from the common package.
- Split of the documentation into an independent package.
- Tag the common and doc package as noarch post-11.1.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Add README.SUSE to the doc package.</changelog>
  <changelog author="p.drouand@gmail.com" date="1450872000">- Replace tokyocabinet with kyotocabinet following kyotocabinet
  upstream recommendations
  * Replace libtokyocabinet-devel with libkyotocabinet-devel
  * Add bogofilter-kyotocabinet.patch
  * Rename tokyocabinet with kyotocabinet
- Add autoconf and automake build dependencies; needed because of
  bogofilter-kyotocabinet.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package _docdir, fix build with rpm 4.13.</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Small spec file cleanup
- Adjust usage of update-alternatives</changelog>
</package>
<package pkgid="eed35efae8fb1e5cbec0312da6f42f67af4c176c40abe4cab6e106e9218bb326" name="bogofilter-sqlite3-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="60.1"/>
  <changelog author="lmuelle@suse.de" date="1241697600">- Update to version 1.2.0.
  + Flex-2.5.35 has fix for memory allocation problem in 2.5.4, 2.5.31, and
    2.5.33, making bogofilter's flex patch obsolete.
  + Bogofilter now uses listsort in place of qsort.
  + Added token-count=n, token-count-min=n, and token-count-max=n options.
  + Minor code cleanups.
  + spamitarium.pl updated to version 0.3.0
  + update bf_compact documentation by removing explicit Berkeley DB
    references, as it has been fixed to work with other database drivers in
    March 2008.
  + bf_compact, bf_copy and bf_tar now support transformed program names
  + Update sqlite3 adaptor to take advantage of sqlite3_prepare_v2() API
    function that appeared in SQLite 3.3.9. The new _v2 interface allows for
    more specific error messages when executing SQL statements.  Also enable
    extended result codes for more precise error reporting.
  + Update doc/integrating-with-postfix: the script now suggests sendmail -G
  - i (where -G will be ignored by Postfix before 2.3) to tell Postfix it's a
    gateway submission, not an original injection; the filter pipe(8) magic
    for master.cf now suggests flags=Rq (was flags=R), as per Postfix's
    FILTER_README.
  + Drop support for systems that reverse setvbuf arguments. The last systems
    to do that are reported to be shipped in 1987 by the autoconf manual, so
    ditch them.</changelog>
  <changelog author="bitshuffler@opensuse.org" date="1256644800">- Update to version 1.2.1.
  + Update configure to use "host" rather than "target", to match the
    newer autotools cross-build semantics. Untested.
    Developers changing the build system and users who build from SVN
    will now need automake 1.9 and autoconf 2.60.
  + Fix Christian Frommeyer's MIME decoding bug, Ubuntu/Launchpad Bug
    [#320829]. As a side effect, also fixes misattribution of MIME bodies
    as MIME headers with mime: tag.  Original bug report:
    https://bugs.launchpad.net/ubuntu/+source/bogofilter/+bug/320829
    Before this fix, bogofilter did not properly MIME-decode the first
    line in a body. This was especially bad with Christian's samples
    where the whole body was only one long base64 line.
  + Removed two scripts that are auto-built.
  + Added test case for Stephen Davies' Q-P EOL problem (see below).
  + Fixed EOL problem in quoted_printable text. Problem reported by
    Stephen Davies and identified by Pavel Kankovsky
  + Promoted to "stable"</changelog>
  <changelog author="coolo@novell.com" date="1263297600">- fix build on non-arm</changelog>
  <changelog author="lmuelle@suse.de" date="1278504000">- Fix a heap corruption in base64 decoder on invalid input; CVE-2010-2494;
  (bnc#619847).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="lmuelle@suse.com" date="1354536000">- Update to version 1.2.3.
  * Update configure.ac to avoid autoconf 2.68 warnings, by
    (a) quoting the first AC_RUN_IFELSE argument, an
    AC_LANG_PROGRAM(), with [ ], and
    (b) providing an explicit "true" assumption for Berkeley DB
    capabilities to avoid cross-compilation warnings.
  * Security bugfix; (CVE-2012-5468); (bnc#792939),
    Fix a heap corruption in base64 decoder on invalid input.
    http://bogofilter.sourceforge.net/security/bogofilter-SA-2012-01
  * Added bogofilter-faq-bg.html, a Bulgarian translation of the FAQ.
  * Mark "Berkeley DB 5.1.19: (August 27, 2010)" supported.
- Update to version 1.2.2.
  * Use a better PRNG for random sleeps. That is arc4random() where
    available, and drand48() elsewhere.
  * Assorted fixes for issues found with clang analyzer:
    + Fix a potential NULL deference
    + Fix a potential division by zero
    + Remove dead assignments and increments
  * Update Doxyfile and source contrib/bogogrep.c for docs, too.
  * Security bugfix, CVE-2010-2494:
    Fix a heap corruption in base64 decoder on invalid input.
    Analysis and patch by Julius Plenz &lt;plenz@cis.fu-berlin.de&gt;.
    Please see doc/bogofilter-SA-2010-01 for details.
  * Updated sendmail milter contrib/bogofilter-milter.pl to v1.??????
  * Bump supported/minimum SQLite3 versions and warning threshold.
    See doc/README.sqlite for details.
  * Mark BerkeleyDB 4.8.26 and 5.0.21 supported.
  * Make t.maint more robust; ignore .ENCODING token. To fix test
    failures on, for instance, FreeBSD with unicode enabled.
  * Fix several compiler warnings "array subscript has type 'char'", by
    casting the arguments to unsigned char.
  * Split error messages for ENOENT and EINVAL into new function.
  * Avoid divison by zero in robx computation by checking if there are at
    least one ham message and one spam message registered.
  * contrib/spamitarium.pl updated to version 0.4.0
  * Updated and integrated Ted Phelps's "Patch to prevent .ENCODING from
    being discarded by bogoutil -m" (SourceForge Patch #1743984).</changelog>
  <changelog author="lmuelle@suse.com" date="1374580800">- Update to version 1.2.4.
  * Fix three crashes in command line and environment variable parsers
    that caused NULL pointer dereferences with long option variants
    of bogofilter --syslog-tag, or bogoutil --timestamp-date, or when
    bogotune -M&lt;file&gt; cannot derive the bogofilter directory.
  * Add getopt_long_chk(), a getopt_long variant that checks if the
    overlapping short and long options agree on whether their argument
    is not required, mandatory, or optional.  If they disagree, the
    program aborts.
  * Fix a crash in command line parser that causes a NULL pointer
    dereference when --db-cachesize is used without argument.
    Found with getopt_long_chk().
  * Change lexer API/ABI a bit so as to work with flex 2.5.36 generated
    lexers (for instance, on Fedora 18 "Spherical Cow") that flip the
    type of yyleng from int to size_t. We use a signed long internally.
  * Fix XML form of Bulgarian FAQ so that it validates;
    and validate XHTML at build time.
  * Mark Berkeley DB 5.2.42 and 5.3.21 supported.</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update dependencies
  * use shared gsl
- Cleanup spec-file with spec-cleaner
- Change backend from libdb to sqlite3 for post-13.2 systems</changelog>
  <changelog author="mpluskal@suse.com" date="1429358400">- Build different backends
  * sqlite3 db and tokyocabinet
  * switch between them using update-alternatives
- Disable checks as they do not work with suffixed builds</changelog>
  <changelog author="lmuelle@suse.com" date="1430395200">- Provide and obsolete bogofilter from the db subpackage to ensure we stay
  with the same back-end in the update case.
- Require a backend package from the common package.
- Split of the documentation into an independent package.
- Tag the common and doc package as noarch post-11.1.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Add README.SUSE to the doc package.</changelog>
  <changelog author="p.drouand@gmail.com" date="1450872000">- Replace tokyocabinet with kyotocabinet following kyotocabinet
  upstream recommendations
  * Replace libtokyocabinet-devel with libkyotocabinet-devel
  * Add bogofilter-kyotocabinet.patch
  * Rename tokyocabinet with kyotocabinet
- Add autoconf and automake build dependencies; needed because of
  bogofilter-kyotocabinet.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package _docdir, fix build with rpm 4.13.</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Small spec file cleanup
- Adjust usage of update-alternatives</changelog>
</package>
<package pkgid="88ebfb47084ea6ca3b83fef1ec5b549aa8448fc30ebb033fd7e03db312848467" name="colm" arch="src">
  <version epoch="0" ver="0.13.0.5" rel="11.1"/>
  <changelog author="jengelh@inai.de" date="1466683200">- Initial package (version 0.13.0.3) for openSUSE</changelog>
  <changelog author="jengelh@inai.de" date="1480334400">- Update to new upstream release 0.13.0.4
  * No changelog was provided
- Drop colm-type.diff, colm-shared.diff (applied upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1497009600">- Update to new upstream release 0.13.0.5
  * No changelog was provided</changelog>
</package>
<package pkgid="98dbecf15b0d23c734603800ba79ede58f1a4ab9adb725de9c81e0e2b14c1e64" name="colm-debugsource" arch="x86_64">
  <version epoch="0" ver="0.13.0.5" rel="11.1"/>
  <changelog author="jengelh@inai.de" date="1466683200">- Initial package (version 0.13.0.3) for openSUSE</changelog>
  <changelog author="jengelh@inai.de" date="1480334400">- Update to new upstream release 0.13.0.4
  * No changelog was provided
- Drop colm-type.diff, colm-shared.diff (applied upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1497009600">- Update to new upstream release 0.13.0.5
  * No changelog was provided</changelog>
</package>
<package pkgid="7f92177f2c9f711e0295c5818da1182a05a243249e71d43c4ece1fdd98c354f8" name="colm-devel" arch="x86_64">
  <version epoch="0" ver="0.13.0.5" rel="11.1"/>
  <changelog author="jengelh@inai.de" date="1466683200">- Initial package (version 0.13.0.3) for openSUSE</changelog>
  <changelog author="jengelh@inai.de" date="1480334400">- Update to new upstream release 0.13.0.4
  * No changelog was provided
- Drop colm-type.diff, colm-shared.diff (applied upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1497009600">- Update to new upstream release 0.13.0.5
  * No changelog was provided</changelog>
</package>
<package pkgid="27df2bbc39b6dc3c431a89dfe9f27a39aa710e1a68703869acdb96e8ebdd75fa" name="colm-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.13.0.5" rel="11.1"/>
  <changelog author="jengelh@inai.de" date="1466683200">- Initial package (version 0.13.0.3) for openSUSE</changelog>
  <changelog author="jengelh@inai.de" date="1480334400">- Update to new upstream release 0.13.0.4
  * No changelog was provided
- Drop colm-type.diff, colm-shared.diff (applied upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1497009600">- Update to new upstream release 0.13.0.5
  * No changelog was provided</changelog>
</package>
<package pkgid="dc8a48e4a3d03e99f8c1ad293a674bd438d7c2e1a5e547cb7ef72273d690dcca" name="colm-doc" arch="x86_64">
  <version epoch="0" ver="0.13.0.5" rel="11.1"/>
  <changelog author="jengelh@inai.de" date="1466683200">- Initial package (version 0.13.0.3) for openSUSE</changelog>
  <changelog author="jengelh@inai.de" date="1480334400">- Update to new upstream release 0.13.0.4
  * No changelog was provided
- Drop colm-type.diff, colm-shared.diff (applied upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1497009600">- Update to new upstream release 0.13.0.5
  * No changelog was provided</changelog>
</package>
<package pkgid="0c8714519ae6c30f93c272b77f30c32dd14f841fe730dfbf312b5b5b13f45c2b" name="cone" arch="src">
  <version epoch="0" ver="0.92" rel="1.1"/>
  <changelog author="guru@unixtech.be" date="1163937600">- new package</changelog>
  <changelog author="guru@unixtech.be" date="1191153600">- update to 0.70
- moved to openSUSE Build Service</changelog>
  <changelog author="guru@unixtech.be" date="1195992000">- update to 0.74</changelog>
  <changelog author="guru@unixtech.be" date="1219924800">- update to 0.77:
  * adds support for client SSL certificates</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1244462400">- update to 0.78</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1262260800">- update to 0.80:
  * adds support for internationalized domain names</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1273406400">- update to 0.83:
  * fixes several bugs that may result in crashes</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1302264000">- update to 0.86:
  * adds Unicode-based word-wrapping rules that should work better for text
    written in ideographic-based character sets
  * adds support for the most recent plain text message specification (RFC
    3676)
  * adds an option to the standalone leaf editor that edits plain text files
    that use the flowed text format, as specified in RFC 3676</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1303387200">- update to 0.87:
  * fixes bugs in the handling of HTML mail with MIME headers and an
    unsupported character set
  * fixes a bug that resulted in Cone locking up and slowly consuming memory</changelog>
  <changelog author="bjoern@cs.tu-berlin.de" date="1306843200">- update to 0.89:
  * rfc2045/rfc2045cdecode.c: Tolerate lowercase hexadecimal characters
    in quoted-printable-encoded content.
  * cone/cursesmessage.C (reformat): Typo in error message.
  * cone/cone.dist.in (TLS_STARTTLS_PROTOCOL): Provide a default
    setting of TLS_STARTTLS_PROTOCOL for new cone installs only.
  * cone/cursesmessage.C (beginReformat): Fix bug exposed by cache.H
    bug fix.</changelog>
  <changelog author="bjoern@cs.tu-berlin.de" date="1449489600">- update to 0.92</changelog>
</package>
<package pkgid="c5d8fd8d3be9c45e8c202913582aff7a97819dc145c98142033d9349bd494c86" name="cone" arch="x86_64">
  <version epoch="0" ver="0.92" rel="1.1"/>
  <changelog author="guru@unixtech.be" date="1191153600">- update to 0.70
- moved to openSUSE Build Service</changelog>
  <changelog author="guru@unixtech.be" date="1195992000">- update to 0.74</changelog>
  <changelog author="guru@unixtech.be" date="1219924800">- update to 0.77:
  * adds support for client SSL certificates</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1244462400">- update to 0.78</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1262260800">- update to 0.80:
  * adds support for internationalized domain names</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1273406400">- update to 0.83:
  * fixes several bugs that may result in crashes</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1302264000">- update to 0.86:
  * adds Unicode-based word-wrapping rules that should work better for text
    written in ideographic-based character sets
  * adds support for the most recent plain text message specification (RFC
    3676)
  * adds an option to the standalone leaf editor that edits plain text files
    that use the flowed text format, as specified in RFC 3676</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1303387200">- update to 0.87:
  * fixes bugs in the handling of HTML mail with MIME headers and an
    unsupported character set
  * fixes a bug that resulted in Cone locking up and slowly consuming memory</changelog>
  <changelog author="bjoern@cs.tu-berlin.de" date="1306843200">- update to 0.89:
  * rfc2045/rfc2045cdecode.c: Tolerate lowercase hexadecimal characters
    in quoted-printable-encoded content.
  * cone/cursesmessage.C (reformat): Typo in error message.
  * cone/cone.dist.in (TLS_STARTTLS_PROTOCOL): Provide a default
    setting of TLS_STARTTLS_PROTOCOL for new cone installs only.
  * cone/cursesmessage.C (beginReformat): Fix bug exposed by cache.H
    bug fix.</changelog>
  <changelog author="bjoern@cs.tu-berlin.de" date="1449489600">- update to 0.92</changelog>
</package>
<package pkgid="bacb061986a02f5a41109554aeabbeb2e57050da998295839ef83c13b44c85ea" name="cone-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.92" rel="1.1"/>
  <changelog author="guru@unixtech.be" date="1163937600">- new package</changelog>
  <changelog author="guru@unixtech.be" date="1191153600">- update to 0.70
- moved to openSUSE Build Service</changelog>
  <changelog author="guru@unixtech.be" date="1195992000">- update to 0.74</changelog>
  <changelog author="guru@unixtech.be" date="1219924800">- update to 0.77:
  * adds support for client SSL certificates</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1244462400">- update to 0.78</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1262260800">- update to 0.80:
  * adds support for internationalized domain names</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1273406400">- update to 0.83:
  * fixes several bugs that may result in crashes</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1302264000">- update to 0.86:
  * adds Unicode-based word-wrapping rules that should work better for text
    written in ideographic-based character sets
  * adds support for the most recent plain text message specification (RFC
    3676)
  * adds an option to the standalone leaf editor that edits plain text files
    that use the flowed text format, as specified in RFC 3676</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1303387200">- update to 0.87:
  * fixes bugs in the handling of HTML mail with MIME headers and an
    unsupported character set
  * fixes a bug that resulted in Cone locking up and slowly consuming memory</changelog>
  <changelog author="bjoern@cs.tu-berlin.de" date="1306843200">- update to 0.89:
  * rfc2045/rfc2045cdecode.c: Tolerate lowercase hexadecimal characters
    in quoted-printable-encoded content.
  * cone/cursesmessage.C (reformat): Typo in error message.
  * cone/cone.dist.in (TLS_STARTTLS_PROTOCOL): Provide a default
    setting of TLS_STARTTLS_PROTOCOL for new cone installs only.
  * cone/cursesmessage.C (beginReformat): Fix bug exposed by cache.H
    bug fix.</changelog>
  <changelog author="bjoern@cs.tu-berlin.de" date="1449489600">- update to 0.92</changelog>
</package>
<package pkgid="7fb7468d2b9eee6cdd681edc3871b6c3643f3f1256cf5db9093ae986e127ebde" name="cone-debugsource" arch="x86_64">
  <version epoch="0" ver="0.92" rel="1.1"/>
  <changelog author="guru@unixtech.be" date="1191153600">- update to 0.70
- moved to openSUSE Build Service</changelog>
  <changelog author="guru@unixtech.be" date="1195992000">- update to 0.74</changelog>
  <changelog author="guru@unixtech.be" date="1219924800">- update to 0.77:
  * adds support for client SSL certificates</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1244462400">- update to 0.78</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1262260800">- update to 0.80:
  * adds support for internationalized domain names</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1273406400">- update to 0.83:
  * fixes several bugs that may result in crashes</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1302264000">- update to 0.86:
  * adds Unicode-based word-wrapping rules that should work better for text
    written in ideographic-based character sets
  * adds support for the most recent plain text message specification (RFC
    3676)
  * adds an option to the standalone leaf editor that edits plain text files
    that use the flowed text format, as specified in RFC 3676</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1303387200">- update to 0.87:
  * fixes bugs in the handling of HTML mail with MIME headers and an
    unsupported character set
  * fixes a bug that resulted in Cone locking up and slowly consuming memory</changelog>
  <changelog author="bjoern@cs.tu-berlin.de" date="1306843200">- update to 0.89:
  * rfc2045/rfc2045cdecode.c: Tolerate lowercase hexadecimal characters
    in quoted-printable-encoded content.
  * cone/cursesmessage.C (reformat): Typo in error message.
  * cone/cone.dist.in (TLS_STARTTLS_PROTOCOL): Provide a default
    setting of TLS_STARTTLS_PROTOCOL for new cone installs only.
  * cone/cursesmessage.C (beginReformat): Fix bug exposed by cache.H
    bug fix.</changelog>
  <changelog author="bjoern@cs.tu-berlin.de" date="1449489600">- update to 0.92</changelog>
</package>
<package pkgid="5d088785671274ddacf4a254e19846f783136684eeff52ce52270d5f9d75e226" name="coolmail" arch="src">
  <version epoch="0" ver="1.3" rel="1.1"/>
  <changelog author="werner@suse.de" date="1308744000">- Initial package coolmail 1.3</changelog>
</package>
<package pkgid="75f48e40dbbafe4da9e73426aa3c0c482d8e9e17bc00f246f1484c82601b476f" name="coolmail" arch="x86_64">
  <version epoch="0" ver="1.3" rel="1.1"/>
  <changelog author="werner@suse.de" date="1308744000">- Initial package coolmail 1.3</changelog>
</package>
<package pkgid="ad1c508de867b0e765b72b7180f9c2c796cb4a685eabd9d0fc1c45efca954abf" name="coolmail-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3" rel="1.1"/>
  <changelog author="werner@suse.de" date="1308744000">- Initial package coolmail 1.3</changelog>
</package>
<package pkgid="4b9396c1eb7dfd2f56792cebcaf6d50c95cb565f02307c17363eaef3df10b6f8" name="coolmail-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3" rel="1.1"/>
  <changelog author="werner@suse.de" date="1308744000">- Initial package coolmail 1.3</changelog>
</package>
<package pkgid="b993767de147d7c342af666ae44edc7d63b43d7d270e5a903873fc41bedaf45b" name="courier-authlib" arch="src">
  <version epoch="0" ver="0.66.4" rel="68.1"/>
  <changelog author="chris@computersalat.de" date="1251892800">- spec mods
  o added norootforbuild
  o define authdaemondir
  o post authmigrate, sysconftool</changelog>
  <changelog author="chris@computersalat.de" date="1252152000">- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix</changelog>
  <changelog author="chris@computersalat.de" date="1267012800">- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1316606400">- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1319630400">- fix init script
  * add ldap mysql to Should-Start/Stop</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -&gt; GPL-3.0+)</changelog>
  <changelog author="cfarrell@suse.com" date="1348488000">- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#751125
  * maildrop can not access courier-authlib socket</changelog>
  <changelog author="chris@computersalat.de" date="1395144000">- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in preun script</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis &lt;giovanni@paclan.it&gt;.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql &gt;= 9.1</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Don't call insserv if we use systemd</changelog>
  <changelog author="kukuk@suse.com" date="1489752000">- Don't install init script if we use systemd</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Drop redundant %clean section. Dissolve %__-type macros.</changelog>
</package>
<package pkgid="ef1ce57be1d9c80316683534949dec223a0ce2eefaa6c83f184b2a2f82514098" name="courier-authlib" arch="x86_64">
  <version epoch="0" ver="0.66.4" rel="68.1"/>
  <changelog author="chris@computersalat.de" date="1251892800">- spec mods
  o added norootforbuild
  o define authdaemondir
  o post authmigrate, sysconftool</changelog>
  <changelog author="chris@computersalat.de" date="1252152000">- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix</changelog>
  <changelog author="chris@computersalat.de" date="1267012800">- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1316606400">- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1319630400">- fix init script
  * add ldap mysql to Should-Start/Stop</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -&gt; GPL-3.0+)</changelog>
  <changelog author="cfarrell@suse.com" date="1348488000">- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#751125
  * maildrop can not access courier-authlib socket</changelog>
  <changelog author="chris@computersalat.de" date="1395144000">- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in preun script</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis &lt;giovanni@paclan.it&gt;.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql &gt;= 9.1</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Don't call insserv if we use systemd</changelog>
  <changelog author="kukuk@suse.com" date="1489752000">- Don't install init script if we use systemd</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Drop redundant %clean section. Dissolve %__-type macros.</changelog>
</package>
<package pkgid="a00f8aefcf866b12b952b2f98d5a75fe2d98736f602029b8625ba61a8c5b4f83" name="courier-authlib-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.66.4" rel="68.1"/>
  <changelog author="chris@computersalat.de" date="1251892800">- spec mods
  o added norootforbuild
  o define authdaemondir
  o post authmigrate, sysconftool</changelog>
  <changelog author="chris@computersalat.de" date="1252152000">- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix</changelog>
  <changelog author="chris@computersalat.de" date="1267012800">- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1316606400">- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1319630400">- fix init script
  * add ldap mysql to Should-Start/Stop</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -&gt; GPL-3.0+)</changelog>
  <changelog author="cfarrell@suse.com" date="1348488000">- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#751125
  * maildrop can not access courier-authlib socket</changelog>
  <changelog author="chris@computersalat.de" date="1395144000">- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in preun script</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis &lt;giovanni@paclan.it&gt;.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql &gt;= 9.1</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Don't call insserv if we use systemd</changelog>
  <changelog author="kukuk@suse.com" date="1489752000">- Don't install init script if we use systemd</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Drop redundant %clean section. Dissolve %__-type macros.</changelog>
</package>
<package pkgid="58ba8302daab4668b12883d7ff258184b44291aca86295c570b0e0ba0f77bec2" name="courier-authlib-debugsource" arch="x86_64">
  <version epoch="0" ver="0.66.4" rel="68.1"/>
  <changelog author="chris@computersalat.de" date="1251892800">- spec mods
  o added norootforbuild
  o define authdaemondir
  o post authmigrate, sysconftool</changelog>
  <changelog author="chris@computersalat.de" date="1252152000">- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix</changelog>
  <changelog author="chris@computersalat.de" date="1267012800">- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1316606400">- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1319630400">- fix init script
  * add ldap mysql to Should-Start/Stop</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -&gt; GPL-3.0+)</changelog>
  <changelog author="cfarrell@suse.com" date="1348488000">- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#751125
  * maildrop can not access courier-authlib socket</changelog>
  <changelog author="chris@computersalat.de" date="1395144000">- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in preun script</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis &lt;giovanni@paclan.it&gt;.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql &gt;= 9.1</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Don't call insserv if we use systemd</changelog>
  <changelog author="kukuk@suse.com" date="1489752000">- Don't install init script if we use systemd</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Drop redundant %clean section. Dissolve %__-type macros.</changelog>
</package>
<package pkgid="e0c87ffe8019dc0a7c9d914733b954da9679f7d39379e4b685deaba1fdb600b1" name="courier-authlib-devel" arch="x86_64">
  <version epoch="0" ver="0.66.4" rel="68.1"/>
  <changelog author="chris@computersalat.de" date="1251892800">- spec mods
  o added norootforbuild
  o define authdaemondir
  o post authmigrate, sysconftool</changelog>
  <changelog author="chris@computersalat.de" date="1252152000">- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix</changelog>
  <changelog author="chris@computersalat.de" date="1267012800">- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1316606400">- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1319630400">- fix init script
  * add ldap mysql to Should-Start/Stop</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -&gt; GPL-3.0+)</changelog>
  <changelog author="cfarrell@suse.com" date="1348488000">- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#751125
  * maildrop can not access courier-authlib socket</changelog>
  <changelog author="chris@computersalat.de" date="1395144000">- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in preun script</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis &lt;giovanni@paclan.it&gt;.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql &gt;= 9.1</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Don't call insserv if we use systemd</changelog>
  <changelog author="kukuk@suse.com" date="1489752000">- Don't install init script if we use systemd</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Drop redundant %clean section. Dissolve %__-type macros.</changelog>
</package>
<package pkgid="af3d9ef6d0ea5d5e0bcfa5caed2e996a2d635eee96f7f45d3c8f8abbaf641124" name="courier-authlib-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.66.4" rel="68.1"/>
  <changelog author="chris@computersalat.de" date="1251892800">- spec mods
  o added norootforbuild
  o define authdaemondir
  o post authmigrate, sysconftool</changelog>
  <changelog author="chris@computersalat.de" date="1252152000">- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix</changelog>
  <changelog author="chris@computersalat.de" date="1267012800">- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1316606400">- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1319630400">- fix init script
  * add ldap mysql to Should-Start/Stop</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -&gt; GPL-3.0+)</changelog>
  <changelog author="cfarrell@suse.com" date="1348488000">- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#751125
  * maildrop can not access courier-authlib socket</changelog>
  <changelog author="chris@computersalat.de" date="1395144000">- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in preun script</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis &lt;giovanni@paclan.it&gt;.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql &gt;= 9.1</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Don't call insserv if we use systemd</changelog>
  <changelog author="kukuk@suse.com" date="1489752000">- Don't install init script if we use systemd</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Drop redundant %clean section. Dissolve %__-type macros.</changelog>
</package>
<package pkgid="e42a46d38ea2f73fc41d4f9e9b2a8e612b9936b819cb2ed70097d1eb66b97a4d" name="courier-authlib-ldap" arch="x86_64">
  <version epoch="0" ver="0.66.4" rel="68.1"/>
  <changelog author="chris@computersalat.de" date="1251892800">- spec mods
  o added norootforbuild
  o define authdaemondir
  o post authmigrate, sysconftool</changelog>
  <changelog author="chris@computersalat.de" date="1252152000">- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix</changelog>
  <changelog author="chris@computersalat.de" date="1267012800">- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1316606400">- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1319630400">- fix init script
  * add ldap mysql to Should-Start/Stop</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -&gt; GPL-3.0+)</changelog>
  <changelog author="cfarrell@suse.com" date="1348488000">- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#751125
  * maildrop can not access courier-authlib socket</changelog>
  <changelog author="chris@computersalat.de" date="1395144000">- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in preun script</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis &lt;giovanni@paclan.it&gt;.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql &gt;= 9.1</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Don't call insserv if we use systemd</changelog>
  <changelog author="kukuk@suse.com" date="1489752000">- Don't install init script if we use systemd</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Drop redundant %clean section. Dissolve %__-type macros.</changelog>
</package>
<package pkgid="d709f056d631f073ccf414f028bdfb4976f66eeaf679dca1fe09edbd6e31f6f3" name="courier-authlib-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.66.4" rel="68.1"/>
  <changelog author="chris@computersalat.de" date="1251892800">- spec mods
  o added norootforbuild
  o define authdaemondir
  o post authmigrate, sysconftool</changelog>
  <changelog author="chris@computersalat.de" date="1252152000">- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix</changelog>
  <changelog author="chris@computersalat.de" date="1267012800">- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1316606400">- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1319630400">- fix init script
  * add ldap mysql to Should-Start/Stop</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -&gt; GPL-3.0+)</changelog>
  <changelog author="cfarrell@suse.com" date="1348488000">- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#751125
  * maildrop can not access courier-authlib socket</changelog>
  <changelog author="chris@computersalat.de" date="1395144000">- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in preun script</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis &lt;giovanni@paclan.it&gt;.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql &gt;= 9.1</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Don't call insserv if we use systemd</changelog>
  <changelog author="kukuk@suse.com" date="1489752000">- Don't install init script if we use systemd</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Drop redundant %clean section. Dissolve %__-type macros.</changelog>
</package>
<package pkgid="41afc92fefba57329765845cc2223e586ea6c13060f5ebc2857861304efa7407" name="courier-authlib-mysql" arch="x86_64">
  <version epoch="0" ver="0.66.4" rel="68.1"/>
  <changelog author="chris@computersalat.de" date="1251892800">- spec mods
  o added norootforbuild
  o define authdaemondir
  o post authmigrate, sysconftool</changelog>
  <changelog author="chris@computersalat.de" date="1252152000">- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix</changelog>
  <changelog author="chris@computersalat.de" date="1267012800">- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1316606400">- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1319630400">- fix init script
  * add ldap mysql to Should-Start/Stop</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -&gt; GPL-3.0+)</changelog>
  <changelog author="cfarrell@suse.com" date="1348488000">- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#751125
  * maildrop can not access courier-authlib socket</changelog>
  <changelog author="chris@computersalat.de" date="1395144000">- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in preun script</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis &lt;giovanni@paclan.it&gt;.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql &gt;= 9.1</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Don't call insserv if we use systemd</changelog>
  <changelog author="kukuk@suse.com" date="1489752000">- Don't install init script if we use systemd</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Drop redundant %clean section. Dissolve %__-type macros.</changelog>
</package>
<package pkgid="017525a0721d3f5c03d9e54c0546c3331293b60a7069e69577507fb95ed61313" name="courier-authlib-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.66.4" rel="68.1"/>
  <changelog author="chris@computersalat.de" date="1251892800">- spec mods
  o added norootforbuild
  o define authdaemondir
  o post authmigrate, sysconftool</changelog>
  <changelog author="chris@computersalat.de" date="1252152000">- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix</changelog>
  <changelog author="chris@computersalat.de" date="1267012800">- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1316606400">- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1319630400">- fix init script
  * add ldap mysql to Should-Start/Stop</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -&gt; GPL-3.0+)</changelog>
  <changelog author="cfarrell@suse.com" date="1348488000">- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#751125
  * maildrop can not access courier-authlib socket</changelog>
  <changelog author="chris@computersalat.de" date="1395144000">- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in preun script</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis &lt;giovanni@paclan.it&gt;.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql &gt;= 9.1</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Don't call insserv if we use systemd</changelog>
  <changelog author="kukuk@suse.com" date="1489752000">- Don't install init script if we use systemd</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Drop redundant %clean section. Dissolve %__-type macros.</changelog>
</package>
<package pkgid="234da092034629452f8dffd5152dfe4e698b275e937c238596d4f6358e1b7ff1" name="courier-authlib-pgsql" arch="x86_64">
  <version epoch="0" ver="0.66.4" rel="68.1"/>
  <changelog author="chris@computersalat.de" date="1251892800">- spec mods
  o added norootforbuild
  o define authdaemondir
  o post authmigrate, sysconftool</changelog>
  <changelog author="chris@computersalat.de" date="1252152000">- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix</changelog>
  <changelog author="chris@computersalat.de" date="1267012800">- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1316606400">- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1319630400">- fix init script
  * add ldap mysql to Should-Start/Stop</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -&gt; GPL-3.0+)</changelog>
  <changelog author="cfarrell@suse.com" date="1348488000">- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#751125
  * maildrop can not access courier-authlib socket</changelog>
  <changelog author="chris@computersalat.de" date="1395144000">- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in preun script</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis &lt;giovanni@paclan.it&gt;.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql &gt;= 9.1</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Don't call insserv if we use systemd</changelog>
  <changelog author="kukuk@suse.com" date="1489752000">- Don't install init script if we use systemd</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Drop redundant %clean section. Dissolve %__-type macros.</changelog>
</package>
<package pkgid="7f6a3466d61505342ed38a3bc5e889f07bb14c525df48ff225943e8cffcb95ec" name="courier-authlib-pgsql-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.66.4" rel="68.1"/>
  <changelog author="chris@computersalat.de" date="1251892800">- spec mods
  o added norootforbuild
  o define authdaemondir
  o post authmigrate, sysconftool</changelog>
  <changelog author="chris@computersalat.de" date="1252152000">- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix</changelog>
  <changelog author="chris@computersalat.de" date="1267012800">- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1316606400">- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1319630400">- fix init script
  * add ldap mysql to Should-Start/Stop</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -&gt; GPL-3.0+)</changelog>
  <changelog author="cfarrell@suse.com" date="1348488000">- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#751125
  * maildrop can not access courier-authlib socket</changelog>
  <changelog author="chris@computersalat.de" date="1395144000">- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in preun script</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis &lt;giovanni@paclan.it&gt;.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql &gt;= 9.1</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Don't call insserv if we use systemd</changelog>
  <changelog author="kukuk@suse.com" date="1489752000">- Don't install init script if we use systemd</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Drop redundant %clean section. Dissolve %__-type macros.</changelog>
</package>
<package pkgid="b03cc79a26cc02c75f9cfcba98ebf2bc85974490070cde9b99bd9b8ef579a1a4" name="courier-authlib-pipe" arch="x86_64">
  <version epoch="0" ver="0.66.4" rel="68.1"/>
  <changelog author="chris@computersalat.de" date="1251892800">- spec mods
  o added norootforbuild
  o define authdaemondir
  o post authmigrate, sysconftool</changelog>
  <changelog author="chris@computersalat.de" date="1252152000">- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix</changelog>
  <changelog author="chris@computersalat.de" date="1267012800">- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1316606400">- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1319630400">- fix init script
  * add ldap mysql to Should-Start/Stop</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -&gt; GPL-3.0+)</changelog>
  <changelog author="cfarrell@suse.com" date="1348488000">- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#751125
  * maildrop can not access courier-authlib socket</changelog>
  <changelog author="chris@computersalat.de" date="1395144000">- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in preun script</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis &lt;giovanni@paclan.it&gt;.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql &gt;= 9.1</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Don't call insserv if we use systemd</changelog>
  <changelog author="kukuk@suse.com" date="1489752000">- Don't install init script if we use systemd</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Drop redundant %clean section. Dissolve %__-type macros.</changelog>
</package>
<package pkgid="b862caf74728c9ad4a04bb4aadd6dd92341aea097e2339926040e4f388009dea" name="courier-authlib-pipe-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.66.4" rel="68.1"/>
  <changelog author="chris@computersalat.de" date="1251892800">- spec mods
  o added norootforbuild
  o define authdaemondir
  o post authmigrate, sysconftool</changelog>
  <changelog author="chris@computersalat.de" date="1252152000">- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix</changelog>
  <changelog author="chris@computersalat.de" date="1267012800">- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1316606400">- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1319630400">- fix init script
  * add ldap mysql to Should-Start/Stop</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -&gt; GPL-3.0+)</changelog>
  <changelog author="cfarrell@suse.com" date="1348488000">- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#751125
  * maildrop can not access courier-authlib socket</changelog>
  <changelog author="chris@computersalat.de" date="1395144000">- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in preun script</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis &lt;giovanni@paclan.it&gt;.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql &gt;= 9.1</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Don't call insserv if we use systemd</changelog>
  <changelog author="kukuk@suse.com" date="1489752000">- Don't install init script if we use systemd</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Drop redundant %clean section. Dissolve %__-type macros.</changelog>
</package>
<package pkgid="a28d0a14ead3b591e5886962c58f261fe773c6c6f9c2fcdbea74b166313d9354" name="courier-authlib-sqlite" arch="x86_64">
  <version epoch="0" ver="0.66.4" rel="68.1"/>
  <changelog author="chris@computersalat.de" date="1251892800">- spec mods
  o added norootforbuild
  o define authdaemondir
  o post authmigrate, sysconftool</changelog>
  <changelog author="chris@computersalat.de" date="1252152000">- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix</changelog>
  <changelog author="chris@computersalat.de" date="1267012800">- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1316606400">- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1319630400">- fix init script
  * add ldap mysql to Should-Start/Stop</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -&gt; GPL-3.0+)</changelog>
  <changelog author="cfarrell@suse.com" date="1348488000">- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#751125
  * maildrop can not access courier-authlib socket</changelog>
  <changelog author="chris@computersalat.de" date="1395144000">- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in preun script</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis &lt;giovanni@paclan.it&gt;.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql &gt;= 9.1</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Don't call insserv if we use systemd</changelog>
  <changelog author="kukuk@suse.com" date="1489752000">- Don't install init script if we use systemd</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Drop redundant %clean section. Dissolve %__-type macros.</changelog>
</package>
<package pkgid="9bb2f35c837b6c8bb42ed4f71bad7ba60533925fa0b8514e51f9b55077bf7363" name="courier-authlib-sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.66.4" rel="68.1"/>
  <changelog author="chris@computersalat.de" date="1251892800">- spec mods
  o added norootforbuild
  o define authdaemondir
  o post authmigrate, sysconftool</changelog>
  <changelog author="chris@computersalat.de" date="1252152000">- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix</changelog>
  <changelog author="chris@computersalat.de" date="1267012800">- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1316606400">- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1319630400">- fix init script
  * add ldap mysql to Should-Start/Stop</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -&gt; GPL-3.0+)</changelog>
  <changelog author="cfarrell@suse.com" date="1348488000">- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#751125
  * maildrop can not access courier-authlib socket</changelog>
  <changelog author="chris@computersalat.de" date="1395144000">- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in preun script</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis &lt;giovanni@paclan.it&gt;.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql &gt;= 9.1</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Don't call insserv if we use systemd</changelog>
  <changelog author="kukuk@suse.com" date="1489752000">- Don't install init script if we use systemd</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Drop redundant %clean section. Dissolve %__-type macros.</changelog>
</package>
<package pkgid="b31ec3531ce5cb556e85a61ca70ed2acc3bd1fc82e96202aa04077b4c683589a" name="courier-authlib-userdb" arch="x86_64">
  <version epoch="0" ver="0.66.4" rel="68.1"/>
  <changelog author="chris@computersalat.de" date="1251892800">- spec mods
  o added norootforbuild
  o define authdaemondir
  o post authmigrate, sysconftool</changelog>
  <changelog author="chris@computersalat.de" date="1252152000">- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix</changelog>
  <changelog author="chris@computersalat.de" date="1267012800">- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1316606400">- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1319630400">- fix init script
  * add ldap mysql to Should-Start/Stop</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -&gt; GPL-3.0+)</changelog>
  <changelog author="cfarrell@suse.com" date="1348488000">- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#751125
  * maildrop can not access courier-authlib socket</changelog>
  <changelog author="chris@computersalat.de" date="1395144000">- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in preun script</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis &lt;giovanni@paclan.it&gt;.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql &gt;= 9.1</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Don't call insserv if we use systemd</changelog>
  <changelog author="kukuk@suse.com" date="1489752000">- Don't install init script if we use systemd</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Drop redundant %clean section. Dissolve %__-type macros.</changelog>
</package>
<package pkgid="d240444464e919300e0fd8155659d1037da98b74275353e8db7d226d4505ed03" name="courier-authlib-userdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.66.4" rel="68.1"/>
  <changelog author="chris@computersalat.de" date="1251892800">- spec mods
  o added norootforbuild
  o define authdaemondir
  o post authmigrate, sysconftool</changelog>
  <changelog author="chris@computersalat.de" date="1252152000">- update to new version 0.62.4
  * Various compilation fixes for gcc 4.4 and libtool 2.2
  o 0.62.3
  * courier-authlib.spec.in (MAKEFLAGS): Explicit path to ./configtmp
  * README_authlib.sgml: Fixed documentation of authpipe AUTH command.
  * authmigrate.in (rc): Add /etc/courier-imap
- removed define for authdaemonvar
- fixed DEBUG_LOGIN
  o added export DEBUG_LOGIN to init script
- rpmlint
  o addFilter incoherent-init-script-name courier-authdaemon
  o addFilter shlib-policy-missing-suffix</changelog>
  <changelog author="chris@computersalat.de" date="1267012800">- update to 0.63.0
  * authldapescape.c: Factor out LDAP string escape function.
  * authldap.schema: Various fixes
  * authldap.ldif (olcObjectClasses): Create LDIF format schema from
    authldap.schema
  * authoption.c (auth_getoptionenvint): For account options that
    are parsed to an int, an option value that begins with t, T, y, or Y
    is evaluated as 1, other alphabetic values as 0; so that 'true'
    or 'yes' get evaluated as 1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use _smp_mflags for parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1316606400">- change --with-authdaemonvar to /var/run/{name}
- rework init script
  * create PID DIR
- some spec cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1319630400">- fix init script
  * add ldap mysql to Should-Start/Stop</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 0.64.0
  * authpam.c (callback_pam): Call pam_end() after an authentication
    attempt.
  * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and
    added it to the list of header files that 'make install' puts into
    includedir.
  * Fix gcc 4.6 warnings
  * courier.spec.in: switch to systemd.
  * Fix autoconf warnings.
  * courier-authlib.spec: Make rmplint happy.
- 0.63.1
  * Remove the bundled libtdl library. Require the system-installed
    libltdl library.
  * authmysqllib.c (auth_mysql_setpass): Fix crash if DEFAULT_DOMAIN
    is not set in the config file.
- fix license (GPL-2.0+ -&gt; GPL-3.0+)</changelog>
  <changelog author="cfarrell@suse.com" date="1348488000">- license update: SUSE-GPL-3.0-with-openssl-exception
  Contains an exception to permit linking with openssl</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 0.65.0
  * New authsqlite authentication module.
  * Fixed: when using authpgsql, if the Postgres server goes down
    authpgsql will then start leaking memory.
  * Fixed error codes returned by several authentication modules that
    prevent certain combinations of authentication modules from being
    used together.
- fix deps
  * add missing pkg-config
- add module sqlite</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 0.66
  * sqlite fixes.
  * authldaplib.c (ldapopen): Added LDAP_INITBIND option.
  * Makefile.am: chmod $(pkglibexecdir) explicitly to 755
  * courier-authlib.spec.in: Typo.
- add Source sig file
- add makedat patch
  * fix wrong source path to install makedatprog</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 0.66.1
  * Makefile.am: run sysconftool on authsqliterc, in install-configure.
    Remove .la files for authentication modules, keep then for actual
    API libraries. Install them in the -devel RPM package.
  * userdb/Makefile.am: Stub for the pw2userdb(8) man page.
  * courier-authlib.service.in: Added Install target.
- added systemd service file
- add own tmpfiles.d file
  * courier-authlib.tmpfile
- remove obsolete makedat patch</changelog>
  <changelog author="chris@computersalat.de" date="1395057600">- fix for bnc#751125
  * maildrop can not access courier-authlib socket</changelog>
  <changelog author="chris@computersalat.de" date="1395144000">- fix missing LOGGEROPTS in authdaemonrc
  * added patch courier-authlib-authdaemonrc.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in preun script</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 0.66.3
  * authdaemon.c: auth_callback_default_autocreate, default callback
  used by clients that autocreates a home directory, if one does not
  exist already.
- update to 0.66.2
  * Update to courier-unicode 1.2.
  * liblock, couriertls: fix compilation for OpenBSD -- based on a
  patch from Giovanni Bechis &lt;giovanni@paclan.it&gt;.
  * checkpassword.c (safe_strcmp): Fix bug introduced in 2014-04-27.
  * courier.spec.in: Update to use systemd macros.
  * Check for NULL return value from crypt().
  * Factored out the unicode library into a separate package.
- add BuildRequires courier-unicode-devel
- fix deps (SLE_11_SP4) to build againts pgsql &gt;= 9.1</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- udpate to 0.66.4
  * authgetconfig.c (authgetconfig): avoid invalid memory read.</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Don't call insserv if we use systemd</changelog>
  <changelog author="kukuk@suse.com" date="1489752000">- Don't install init script if we use systemd</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Drop redundant %clean section. Dissolve %__-type macros.</changelog>
</package>
<package pkgid="c60ba9231db6589585c7a016936f7203d48e2abc75cbfbd01c3eac3687635ce8" name="courier-imap" arch="src">
  <version epoch="0" ver="4.17.1" rel="58.12"/>
  <changelog author="meissner@suse.de" date="1278158400">- buildrequire openssl so configure finds /usr/bin/openssl bnc#619665</changelog>
  <changelog author="chris@computersalat.de" date="1278331200">- update to 4.8.0
  * tcpd/configure.in: Check if explicit linking with libgpg-error is
    required.
- 2010-03-20  "Stefan Hornburg (Racke)" &lt;racke@linuxia.de&gt;
  * imapd.c (main): Fix typo in alert message.
- 2010-03-18  Hugo Monteiro &lt;hugo.monteiro@fct.unl.pt&gt;
  * Big quota patch (with some changes).
- 2010-03-12  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * imapd.c (main): Dummy FAM/Gamin initialization, report an error
    during login, upon a failure.
- 2010-03-10  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * imapd.c (imapenhancedidle): Make FAM error more meaningful.
- 2010-02-25  Bernard Quatermass &lt;bernard@quatermass.co.uk&gt;
  * pop3dserver.c (main): "disableinsecurepop3" account option disables
    non-SSL logins.
  * imapd.c (chkdisabled): "disableinsecureimap" account option disables
    non-SSL logins.
- reworked sbindir patch</changelog>
  <changelog author="chris@computersalat.de" date="1281009600">- have pop3d, imapd ssl certs in /etc/ssl/private
  [bnc#628487]; certsdir patch</changelog>
  <changelog author="chris@computersalat.de" date="1286798400">- update to 4.8.1
  * Makefile.am (imapd.cnf): Compatibility fixes.
- 2010-08-15  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * maildir/maildirwatch.c (maildirwatch_alloc): Use alarm() to kill
    the process if FAMOpen() takes more than 15 seconds to return.
    Should prevent a hung process if FAM/Gamin is fubared.
- 2010-07-11  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * pop3dserver.c: Make printed() and putchar() macros.
- 2010-07-01  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * imapd.cnf pop3d.cnf (default_md): added default_md = sha1
- 2010-06-28  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * rfc822/rfc822.c (rfc822_print_common_nameaddr): Prevent segfault if
    address decode fails.
  * Fix make check failure when libidn is not available.
- 2010-05-31  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * Rebuilt man pages with updated stylesheets.
- remove obsolete certsdir patch
- remove LDFLAGS patch, add configure option --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1304251200">- update to 4.9.1
  * tcpd/libcouriertls.c (tls_create): Remove SSLv2_method().
    (tls_create): Remove "!SSLv2" from the default TLS_CIPHER_LIST.
  * mkimapdcert.in (prefix): Create imapd.pem with 600 perms.
  * mkpop3dcert.in (prefix): Create pop3d.pem with 600 perms.
- for more info please see Changelog file
- fix License
  o GPLv2+ -&gt; GPLv3
- fix path to ChangeLog file</changelog>
  <changelog author="chris@computersalat.de" date="1306497600">- update to 4.9.3
  * msgenvelope.c (msgappends): Fix a fatal error upon encountering
    8-bit header content. Heuristically try to interpret it as UTF-8, and
    just ignore invalid UTF-8 sequences.
  - 4.9.2
  * rfc2045/rfc2045cdecode.c: Tolerate lowercase hexadecimal characters
    in quoted-printable-encoded content.
  * unicode/unicode.c: Compilation fixes.</changelog>
  <changelog author="chris@computersalat.de" date="1316692800">- change --with-authdaemonvar to /var/run/courier-authlib</changelog>
  <changelog author="chris@computersalat.de" date="1325937600">- update to 4.10.0
  * imapd.c (main): Open IMAPDEBUGFILE only if it exists already.
    (do_expunge): Optionally log deletions. Based on a patch by
    William Yodlowsky &lt;wyodlows@andromeda.rutgers.edu&gt;.
  * pop3dserver.c (cleanup): Optionally log deletions. Based on a patch by
    William Yodlowsky &lt;wyodlows@andromeda.rutgers.edu&gt;.
  * imapd.dist.in (IMAP_MOVE_EXPUNGE_TO_TRASH): Officially document how
    IMAPDEBUGFILE works.
  * imapscanclient.c: Postpone Y2038K for a while, for uid validities.
  * liblock/mail.c (dotlock_exists): Handle getting here because of a
    recycled pid.
  * unicode/unicode.c (init_default_chset): Handle NULL from setlocale().
  * rfc2045/reformime.c (main2): Fixed segfault on some arches from an
    initial null given to strtok.
  * rfc2045/reformime.c (main2): On ia64 and arm, argv is in readonly
    memory.
  * pop3dserver.c (openpop3dlist): Try a few times to reopen pop3dsizelist
    if it fails with ESTALE.
  * pop3d.dist.in: Add AUTHSERVICE settings. They've been supported
    all along.
  * Fix gcc 4.6 warnings
  * courier-imap.spec.in: switch to systemd. Remove script used when
    upgrading from ancient pre-sysconftool versions.
  * Fix autoconf warnings.</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 4.11.0
  * maildir/maildiraclt.c (maildir_acl_delete): Fix double-free on error
    path of an ENOMEM.
  * courier.spec.in: Fix the RPM spec to work around /bin symlink
    breakage in F17.
  * tcpd/tcpd.c: Update libgnutls API, replace obsoleted functions
    with current API. Obsoletes most TLS_* variables that set protocol
    priorities, replaced with Gnutls-specific single TLS_PRIORITY
    setting (existing TLS_* variables are still used by the OpenSSL
    alternative). Updated *-ssl configuration files accordingly.
  * tcpd: Compilation changes for gnutls 3
  * liblock/mail.c (dotlock_exists): Quell a compiler warning.
  * Miscellaneous spelling fixes.
- rebase sbindir patch (4.8.0 -&gt; 4.11.0)</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 4.12.0
  * tcpd/libcouriergnutls.c (get_server_cert): Fix size of malloced
    buffer.
  * configure.in: Fix typo in configure check for setvbuf().
- rebase patches
  * sbindir (remove version), ulimit_conf (rename diff -&gt; patch)</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 4.14.0
  * Autotool chain update.
  * imapd.c (mddelete): Reject DELETE folder if the maildir is a symlink.
  * imapd.c (doId): Implement the IMAP ID EXTENSION.
- 4.13.0
  * imap: add explicit mkdirs on PIDFILE directories to startup scripts.
  * rfc822: workaround for invalid utf-8 input making libidn go off the
    rails.
- fix License
  * GPL-3.0 -&gt; GPL-3.0+
- rebase patches
  * imap-sbindir, imap-ulimit_conf</changelog>
  <changelog author="adrian@suse.de" date="1389182400">- use gamin-devel instead of unmaintained fam(-devel) package</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 4.15
  * pop3login.c (starttls): Clear input buffer after STARTTLS.
  * imaplogin.c (starttls): Clear input buffer after STARTTLS.
  * Fix various compiler warnings about unchecked results from setuid
    and setgid calls.
  * libs/tcpd/libcouriergnutls.c, libs/tcpd/libcouriertls.c: remove the
    TLS_DHCERTFILE setting, and use TLS_CERTFILE for all functionality.
    Read DH parameters from TLS_CERTFILE, or from the new TLS_DHPARAMS
    environment variable.
  * mkdhparams: New script that generates DH parameters into a standalone
    file.
  * Remove TLS_DHCERTFILE setting from imapd-ssl, pop3d-ssl, esmtpd and
    esmtpd-ssl. Add TLS_DHPARAMS.
  * Update imapd.cnf.openssl, pop3d.cnf.openssl, esmtpd.cnf.openssl,
    set default number of bits for RSA keys to 4096.
  * libs/tcpd/libcouriertls.c (tls_create): Add TLSv1_1_method() and
    TLSv1_2 method(), based on patch by Rob Austein &lt;sra@hactrn.net&gt;.
  * pop3d-ssl.dist.in, imapd-ssl.dist.in: Fix up differences in the
    documentation of TLS options in various config files.
- added systemd service files
- fix build for SLE
  * fam-devel vs gamin-devel
- cleanup spec
  * RPM_BUILD_ROOT -&gt; buildroot</changelog>
  <changelog author="chris@computersalat.de" date="1411646400">- fix courier-imap.service
  * STARTTLS on port 143 (thanks to cschweingruber)</changelog>
  <changelog author="chris@computersalat.de" date="1414584000">- update to 4.15.1.20141122
  * tcpd/libcouriertls.c: add parsing options for different protocol
    combination.
  * Update comments in *ssl config files.
  * libs/tcpd/libcouriertls.c (tls_create): Set SSL_OP_NOSSLv3 flag,
    to disable SSL3 support.
  * mkdhparams: TLS_DHPARAMS environmnt variable overrides default
    DH parameter file location.
  * courier-imap.spec.in: generate the default DH parameter file and
    package it into the rpm, instead of generating one on the first
    start.
  * libs/maildir/maildirinfo.c (maildir_info_imapmunge): Fix
    UTF-8 charset name.
  * tcpd/libcouriertls.c (tls_create): Initialize temporary ecdh
    parameters.
  * imap: try to print a message on stderr if the alarm() call, that
    detects FAM library breakage, goes off.
  * mkdhparams: default to 2048 DH params for OpenSSL.
  * courier-imap.service: bump up startup timeout, initial service start
    may take several minutes to generate DH parameters for the first
    time.
- add new dependency
  * courier-unicode-devel (libunicode)</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 4.16.2
  * imap/mailboxlist.c (match_mailbox_prep): Use strncmp instead of
    memcmp, to pacify overzealous static analysis checkers.
  * Drop SSLv3 from TLS_CIPHER_LIST.
  * imap, pop3: Added AUTH_MKHOMEDIR_SKEL setting.
- update to 4.16.1
  * maildircache.c: fix use after free.
  * mkdhparams: make compatible with libressl
  * Handle 01-Jan-1970 for date-based searches.
  * Update to courier-unicode 1.2.
  * Add the makeimapaccess script.
- add Patch courier-imap-Makefile.patch</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- update to 4.17.1
  * Fix TLS SNI code.
- update to 4.17.0
  * Stop using SSL2 and SSL3 openssl configuration methods.
  * libs/tcpd/libcouriertls.c: Add support for TLS SNI.
  * imaplogin.c (starttls): flush stdin after negotiating STARTTLS.
  * Fix Courier-IMAP rpm build on pre-systemd systems.
- rebase courier-imap-Makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1463486400">- Fix path of SuSEfirewall2.d directory</changelog>
  <changelog author="kukuk@suse.de" date="1463745600">- Remove directories already part of filesystem rpm</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't call insserv if we use systemd
- Don't install LSB init scripts if we use systemd
- Create rc* links to service command if we use systemd</changelog>
</package>
<package pkgid="3552ade26c10cddf8df87bbb05a8a1822500219cbce112434b9b98638e815d30" name="courier-imap" arch="x86_64">
  <version epoch="0" ver="4.17.1" rel="58.12"/>
  <changelog author="meissner@suse.de" date="1278158400">- buildrequire openssl so configure finds /usr/bin/openssl bnc#619665</changelog>
  <changelog author="chris@computersalat.de" date="1278331200">- update to 4.8.0
  * tcpd/configure.in: Check if explicit linking with libgpg-error is
    required.
- 2010-03-20  "Stefan Hornburg (Racke)" &lt;racke@linuxia.de&gt;
  * imapd.c (main): Fix typo in alert message.
- 2010-03-18  Hugo Monteiro &lt;hugo.monteiro@fct.unl.pt&gt;
  * Big quota patch (with some changes).
- 2010-03-12  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * imapd.c (main): Dummy FAM/Gamin initialization, report an error
    during login, upon a failure.
- 2010-03-10  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * imapd.c (imapenhancedidle): Make FAM error more meaningful.
- 2010-02-25  Bernard Quatermass &lt;bernard@quatermass.co.uk&gt;
  * pop3dserver.c (main): "disableinsecurepop3" account option disables
    non-SSL logins.
  * imapd.c (chkdisabled): "disableinsecureimap" account option disables
    non-SSL logins.
- reworked sbindir patch</changelog>
  <changelog author="chris@computersalat.de" date="1281009600">- have pop3d, imapd ssl certs in /etc/ssl/private
  [bnc#628487]; certsdir patch</changelog>
  <changelog author="chris@computersalat.de" date="1286798400">- update to 4.8.1
  * Makefile.am (imapd.cnf): Compatibility fixes.
- 2010-08-15  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * maildir/maildirwatch.c (maildirwatch_alloc): Use alarm() to kill
    the process if FAMOpen() takes more than 15 seconds to return.
    Should prevent a hung process if FAM/Gamin is fubared.
- 2010-07-11  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * pop3dserver.c: Make printed() and putchar() macros.
- 2010-07-01  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * imapd.cnf pop3d.cnf (default_md): added default_md = sha1
- 2010-06-28  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * rfc822/rfc822.c (rfc822_print_common_nameaddr): Prevent segfault if
    address decode fails.
  * Fix make check failure when libidn is not available.
- 2010-05-31  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * Rebuilt man pages with updated stylesheets.
- remove obsolete certsdir patch
- remove LDFLAGS patch, add configure option --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1304251200">- update to 4.9.1
  * tcpd/libcouriertls.c (tls_create): Remove SSLv2_method().
    (tls_create): Remove "!SSLv2" from the default TLS_CIPHER_LIST.
  * mkimapdcert.in (prefix): Create imapd.pem with 600 perms.
  * mkpop3dcert.in (prefix): Create pop3d.pem with 600 perms.
- for more info please see Changelog file
- fix License
  o GPLv2+ -&gt; GPLv3
- fix path to ChangeLog file</changelog>
  <changelog author="chris@computersalat.de" date="1306497600">- update to 4.9.3
  * msgenvelope.c (msgappends): Fix a fatal error upon encountering
    8-bit header content. Heuristically try to interpret it as UTF-8, and
    just ignore invalid UTF-8 sequences.
  - 4.9.2
  * rfc2045/rfc2045cdecode.c: Tolerate lowercase hexadecimal characters
    in quoted-printable-encoded content.
  * unicode/unicode.c: Compilation fixes.</changelog>
  <changelog author="chris@computersalat.de" date="1316692800">- change --with-authdaemonvar to /var/run/courier-authlib</changelog>
  <changelog author="chris@computersalat.de" date="1325937600">- update to 4.10.0
  * imapd.c (main): Open IMAPDEBUGFILE only if it exists already.
    (do_expunge): Optionally log deletions. Based on a patch by
    William Yodlowsky &lt;wyodlows@andromeda.rutgers.edu&gt;.
  * pop3dserver.c (cleanup): Optionally log deletions. Based on a patch by
    William Yodlowsky &lt;wyodlows@andromeda.rutgers.edu&gt;.
  * imapd.dist.in (IMAP_MOVE_EXPUNGE_TO_TRASH): Officially document how
    IMAPDEBUGFILE works.
  * imapscanclient.c: Postpone Y2038K for a while, for uid validities.
  * liblock/mail.c (dotlock_exists): Handle getting here because of a
    recycled pid.
  * unicode/unicode.c (init_default_chset): Handle NULL from setlocale().
  * rfc2045/reformime.c (main2): Fixed segfault on some arches from an
    initial null given to strtok.
  * rfc2045/reformime.c (main2): On ia64 and arm, argv is in readonly
    memory.
  * pop3dserver.c (openpop3dlist): Try a few times to reopen pop3dsizelist
    if it fails with ESTALE.
  * pop3d.dist.in: Add AUTHSERVICE settings. They've been supported
    all along.
  * Fix gcc 4.6 warnings
  * courier-imap.spec.in: switch to systemd. Remove script used when
    upgrading from ancient pre-sysconftool versions.
  * Fix autoconf warnings.</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 4.11.0
  * maildir/maildiraclt.c (maildir_acl_delete): Fix double-free on error
    path of an ENOMEM.
  * courier.spec.in: Fix the RPM spec to work around /bin symlink
    breakage in F17.
  * tcpd/tcpd.c: Update libgnutls API, replace obsoleted functions
    with current API. Obsoletes most TLS_* variables that set protocol
    priorities, replaced with Gnutls-specific single TLS_PRIORITY
    setting (existing TLS_* variables are still used by the OpenSSL
    alternative). Updated *-ssl configuration files accordingly.
  * tcpd: Compilation changes for gnutls 3
  * liblock/mail.c (dotlock_exists): Quell a compiler warning.
  * Miscellaneous spelling fixes.
- rebase sbindir patch (4.8.0 -&gt; 4.11.0)</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 4.12.0
  * tcpd/libcouriergnutls.c (get_server_cert): Fix size of malloced
    buffer.
  * configure.in: Fix typo in configure check for setvbuf().
- rebase patches
  * sbindir (remove version), ulimit_conf (rename diff -&gt; patch)</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 4.14.0
  * Autotool chain update.
  * imapd.c (mddelete): Reject DELETE folder if the maildir is a symlink.
  * imapd.c (doId): Implement the IMAP ID EXTENSION.
- 4.13.0
  * imap: add explicit mkdirs on PIDFILE directories to startup scripts.
  * rfc822: workaround for invalid utf-8 input making libidn go off the
    rails.
- fix License
  * GPL-3.0 -&gt; GPL-3.0+
- rebase patches
  * imap-sbindir, imap-ulimit_conf</changelog>
  <changelog author="adrian@suse.de" date="1389182400">- use gamin-devel instead of unmaintained fam(-devel) package</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 4.15
  * pop3login.c (starttls): Clear input buffer after STARTTLS.
  * imaplogin.c (starttls): Clear input buffer after STARTTLS.
  * Fix various compiler warnings about unchecked results from setuid
    and setgid calls.
  * libs/tcpd/libcouriergnutls.c, libs/tcpd/libcouriertls.c: remove the
    TLS_DHCERTFILE setting, and use TLS_CERTFILE for all functionality.
    Read DH parameters from TLS_CERTFILE, or from the new TLS_DHPARAMS
    environment variable.
  * mkdhparams: New script that generates DH parameters into a standalone
    file.
  * Remove TLS_DHCERTFILE setting from imapd-ssl, pop3d-ssl, esmtpd and
    esmtpd-ssl. Add TLS_DHPARAMS.
  * Update imapd.cnf.openssl, pop3d.cnf.openssl, esmtpd.cnf.openssl,
    set default number of bits for RSA keys to 4096.
  * libs/tcpd/libcouriertls.c (tls_create): Add TLSv1_1_method() and
    TLSv1_2 method(), based on patch by Rob Austein &lt;sra@hactrn.net&gt;.
  * pop3d-ssl.dist.in, imapd-ssl.dist.in: Fix up differences in the
    documentation of TLS options in various config files.
- added systemd service files
- fix build for SLE
  * fam-devel vs gamin-devel
- cleanup spec
  * RPM_BUILD_ROOT -&gt; buildroot</changelog>
  <changelog author="chris@computersalat.de" date="1411646400">- fix courier-imap.service
  * STARTTLS on port 143 (thanks to cschweingruber)</changelog>
  <changelog author="chris@computersalat.de" date="1414584000">- update to 4.15.1.20141122
  * tcpd/libcouriertls.c: add parsing options for different protocol
    combination.
  * Update comments in *ssl config files.
  * libs/tcpd/libcouriertls.c (tls_create): Set SSL_OP_NOSSLv3 flag,
    to disable SSL3 support.
  * mkdhparams: TLS_DHPARAMS environmnt variable overrides default
    DH parameter file location.
  * courier-imap.spec.in: generate the default DH parameter file and
    package it into the rpm, instead of generating one on the first
    start.
  * libs/maildir/maildirinfo.c (maildir_info_imapmunge): Fix
    UTF-8 charset name.
  * tcpd/libcouriertls.c (tls_create): Initialize temporary ecdh
    parameters.
  * imap: try to print a message on stderr if the alarm() call, that
    detects FAM library breakage, goes off.
  * mkdhparams: default to 2048 DH params for OpenSSL.
  * courier-imap.service: bump up startup timeout, initial service start
    may take several minutes to generate DH parameters for the first
    time.
- add new dependency
  * courier-unicode-devel (libunicode)</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 4.16.2
  * imap/mailboxlist.c (match_mailbox_prep): Use strncmp instead of
    memcmp, to pacify overzealous static analysis checkers.
  * Drop SSLv3 from TLS_CIPHER_LIST.
  * imap, pop3: Added AUTH_MKHOMEDIR_SKEL setting.
- update to 4.16.1
  * maildircache.c: fix use after free.
  * mkdhparams: make compatible with libressl
  * Handle 01-Jan-1970 for date-based searches.
  * Update to courier-unicode 1.2.
  * Add the makeimapaccess script.
- add Patch courier-imap-Makefile.patch</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- update to 4.17.1
  * Fix TLS SNI code.
- update to 4.17.0
  * Stop using SSL2 and SSL3 openssl configuration methods.
  * libs/tcpd/libcouriertls.c: Add support for TLS SNI.
  * imaplogin.c (starttls): flush stdin after negotiating STARTTLS.
  * Fix Courier-IMAP rpm build on pre-systemd systems.
- rebase courier-imap-Makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1463486400">- Fix path of SuSEfirewall2.d directory</changelog>
  <changelog author="kukuk@suse.de" date="1463745600">- Remove directories already part of filesystem rpm</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't call insserv if we use systemd
- Don't install LSB init scripts if we use systemd
- Create rc* links to service command if we use systemd</changelog>
</package>
<package pkgid="d0549191c2f8485683b9c689b9a74c4f0ee24e81edd5ef374ac5201b2f76954e" name="courier-imap-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.17.1" rel="58.12"/>
  <changelog author="meissner@suse.de" date="1278158400">- buildrequire openssl so configure finds /usr/bin/openssl bnc#619665</changelog>
  <changelog author="chris@computersalat.de" date="1278331200">- update to 4.8.0
  * tcpd/configure.in: Check if explicit linking with libgpg-error is
    required.
- 2010-03-20  "Stefan Hornburg (Racke)" &lt;racke@linuxia.de&gt;
  * imapd.c (main): Fix typo in alert message.
- 2010-03-18  Hugo Monteiro &lt;hugo.monteiro@fct.unl.pt&gt;
  * Big quota patch (with some changes).
- 2010-03-12  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * imapd.c (main): Dummy FAM/Gamin initialization, report an error
    during login, upon a failure.
- 2010-03-10  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * imapd.c (imapenhancedidle): Make FAM error more meaningful.
- 2010-02-25  Bernard Quatermass &lt;bernard@quatermass.co.uk&gt;
  * pop3dserver.c (main): "disableinsecurepop3" account option disables
    non-SSL logins.
  * imapd.c (chkdisabled): "disableinsecureimap" account option disables
    non-SSL logins.
- reworked sbindir patch</changelog>
  <changelog author="chris@computersalat.de" date="1281009600">- have pop3d, imapd ssl certs in /etc/ssl/private
  [bnc#628487]; certsdir patch</changelog>
  <changelog author="chris@computersalat.de" date="1286798400">- update to 4.8.1
  * Makefile.am (imapd.cnf): Compatibility fixes.
- 2010-08-15  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * maildir/maildirwatch.c (maildirwatch_alloc): Use alarm() to kill
    the process if FAMOpen() takes more than 15 seconds to return.
    Should prevent a hung process if FAM/Gamin is fubared.
- 2010-07-11  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * pop3dserver.c: Make printed() and putchar() macros.
- 2010-07-01  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * imapd.cnf pop3d.cnf (default_md): added default_md = sha1
- 2010-06-28  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * rfc822/rfc822.c (rfc822_print_common_nameaddr): Prevent segfault if
    address decode fails.
  * Fix make check failure when libidn is not available.
- 2010-05-31  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * Rebuilt man pages with updated stylesheets.
- remove obsolete certsdir patch
- remove LDFLAGS patch, add configure option --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1304251200">- update to 4.9.1
  * tcpd/libcouriertls.c (tls_create): Remove SSLv2_method().
    (tls_create): Remove "!SSLv2" from the default TLS_CIPHER_LIST.
  * mkimapdcert.in (prefix): Create imapd.pem with 600 perms.
  * mkpop3dcert.in (prefix): Create pop3d.pem with 600 perms.
- for more info please see Changelog file
- fix License
  o GPLv2+ -&gt; GPLv3
- fix path to ChangeLog file</changelog>
  <changelog author="chris@computersalat.de" date="1306497600">- update to 4.9.3
  * msgenvelope.c (msgappends): Fix a fatal error upon encountering
    8-bit header content. Heuristically try to interpret it as UTF-8, and
    just ignore invalid UTF-8 sequences.
  - 4.9.2
  * rfc2045/rfc2045cdecode.c: Tolerate lowercase hexadecimal characters
    in quoted-printable-encoded content.
  * unicode/unicode.c: Compilation fixes.</changelog>
  <changelog author="chris@computersalat.de" date="1316692800">- change --with-authdaemonvar to /var/run/courier-authlib</changelog>
  <changelog author="chris@computersalat.de" date="1325937600">- update to 4.10.0
  * imapd.c (main): Open IMAPDEBUGFILE only if it exists already.
    (do_expunge): Optionally log deletions. Based on a patch by
    William Yodlowsky &lt;wyodlows@andromeda.rutgers.edu&gt;.
  * pop3dserver.c (cleanup): Optionally log deletions. Based on a patch by
    William Yodlowsky &lt;wyodlows@andromeda.rutgers.edu&gt;.
  * imapd.dist.in (IMAP_MOVE_EXPUNGE_TO_TRASH): Officially document how
    IMAPDEBUGFILE works.
  * imapscanclient.c: Postpone Y2038K for a while, for uid validities.
  * liblock/mail.c (dotlock_exists): Handle getting here because of a
    recycled pid.
  * unicode/unicode.c (init_default_chset): Handle NULL from setlocale().
  * rfc2045/reformime.c (main2): Fixed segfault on some arches from an
    initial null given to strtok.
  * rfc2045/reformime.c (main2): On ia64 and arm, argv is in readonly
    memory.
  * pop3dserver.c (openpop3dlist): Try a few times to reopen pop3dsizelist
    if it fails with ESTALE.
  * pop3d.dist.in: Add AUTHSERVICE settings. They've been supported
    all along.
  * Fix gcc 4.6 warnings
  * courier-imap.spec.in: switch to systemd. Remove script used when
    upgrading from ancient pre-sysconftool versions.
  * Fix autoconf warnings.</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 4.11.0
  * maildir/maildiraclt.c (maildir_acl_delete): Fix double-free on error
    path of an ENOMEM.
  * courier.spec.in: Fix the RPM spec to work around /bin symlink
    breakage in F17.
  * tcpd/tcpd.c: Update libgnutls API, replace obsoleted functions
    with current API. Obsoletes most TLS_* variables that set protocol
    priorities, replaced with Gnutls-specific single TLS_PRIORITY
    setting (existing TLS_* variables are still used by the OpenSSL
    alternative). Updated *-ssl configuration files accordingly.
  * tcpd: Compilation changes for gnutls 3
  * liblock/mail.c (dotlock_exists): Quell a compiler warning.
  * Miscellaneous spelling fixes.
- rebase sbindir patch (4.8.0 -&gt; 4.11.0)</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 4.12.0
  * tcpd/libcouriergnutls.c (get_server_cert): Fix size of malloced
    buffer.
  * configure.in: Fix typo in configure check for setvbuf().
- rebase patches
  * sbindir (remove version), ulimit_conf (rename diff -&gt; patch)</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 4.14.0
  * Autotool chain update.
  * imapd.c (mddelete): Reject DELETE folder if the maildir is a symlink.
  * imapd.c (doId): Implement the IMAP ID EXTENSION.
- 4.13.0
  * imap: add explicit mkdirs on PIDFILE directories to startup scripts.
  * rfc822: workaround for invalid utf-8 input making libidn go off the
    rails.
- fix License
  * GPL-3.0 -&gt; GPL-3.0+
- rebase patches
  * imap-sbindir, imap-ulimit_conf</changelog>
  <changelog author="adrian@suse.de" date="1389182400">- use gamin-devel instead of unmaintained fam(-devel) package</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 4.15
  * pop3login.c (starttls): Clear input buffer after STARTTLS.
  * imaplogin.c (starttls): Clear input buffer after STARTTLS.
  * Fix various compiler warnings about unchecked results from setuid
    and setgid calls.
  * libs/tcpd/libcouriergnutls.c, libs/tcpd/libcouriertls.c: remove the
    TLS_DHCERTFILE setting, and use TLS_CERTFILE for all functionality.
    Read DH parameters from TLS_CERTFILE, or from the new TLS_DHPARAMS
    environment variable.
  * mkdhparams: New script that generates DH parameters into a standalone
    file.
  * Remove TLS_DHCERTFILE setting from imapd-ssl, pop3d-ssl, esmtpd and
    esmtpd-ssl. Add TLS_DHPARAMS.
  * Update imapd.cnf.openssl, pop3d.cnf.openssl, esmtpd.cnf.openssl,
    set default number of bits for RSA keys to 4096.
  * libs/tcpd/libcouriertls.c (tls_create): Add TLSv1_1_method() and
    TLSv1_2 method(), based on patch by Rob Austein &lt;sra@hactrn.net&gt;.
  * pop3d-ssl.dist.in, imapd-ssl.dist.in: Fix up differences in the
    documentation of TLS options in various config files.
- added systemd service files
- fix build for SLE
  * fam-devel vs gamin-devel
- cleanup spec
  * RPM_BUILD_ROOT -&gt; buildroot</changelog>
  <changelog author="chris@computersalat.de" date="1411646400">- fix courier-imap.service
  * STARTTLS on port 143 (thanks to cschweingruber)</changelog>
  <changelog author="chris@computersalat.de" date="1414584000">- update to 4.15.1.20141122
  * tcpd/libcouriertls.c: add parsing options for different protocol
    combination.
  * Update comments in *ssl config files.
  * libs/tcpd/libcouriertls.c (tls_create): Set SSL_OP_NOSSLv3 flag,
    to disable SSL3 support.
  * mkdhparams: TLS_DHPARAMS environmnt variable overrides default
    DH parameter file location.
  * courier-imap.spec.in: generate the default DH parameter file and
    package it into the rpm, instead of generating one on the first
    start.
  * libs/maildir/maildirinfo.c (maildir_info_imapmunge): Fix
    UTF-8 charset name.
  * tcpd/libcouriertls.c (tls_create): Initialize temporary ecdh
    parameters.
  * imap: try to print a message on stderr if the alarm() call, that
    detects FAM library breakage, goes off.
  * mkdhparams: default to 2048 DH params for OpenSSL.
  * courier-imap.service: bump up startup timeout, initial service start
    may take several minutes to generate DH parameters for the first
    time.
- add new dependency
  * courier-unicode-devel (libunicode)</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 4.16.2
  * imap/mailboxlist.c (match_mailbox_prep): Use strncmp instead of
    memcmp, to pacify overzealous static analysis checkers.
  * Drop SSLv3 from TLS_CIPHER_LIST.
  * imap, pop3: Added AUTH_MKHOMEDIR_SKEL setting.
- update to 4.16.1
  * maildircache.c: fix use after free.
  * mkdhparams: make compatible with libressl
  * Handle 01-Jan-1970 for date-based searches.
  * Update to courier-unicode 1.2.
  * Add the makeimapaccess script.
- add Patch courier-imap-Makefile.patch</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- update to 4.17.1
  * Fix TLS SNI code.
- update to 4.17.0
  * Stop using SSL2 and SSL3 openssl configuration methods.
  * libs/tcpd/libcouriertls.c: Add support for TLS SNI.
  * imaplogin.c (starttls): flush stdin after negotiating STARTTLS.
  * Fix Courier-IMAP rpm build on pre-systemd systems.
- rebase courier-imap-Makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1463486400">- Fix path of SuSEfirewall2.d directory</changelog>
  <changelog author="kukuk@suse.de" date="1463745600">- Remove directories already part of filesystem rpm</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't call insserv if we use systemd
- Don't install LSB init scripts if we use systemd
- Create rc* links to service command if we use systemd</changelog>
</package>
<package pkgid="b4bf8750287bd007980e84ee3d105af9638dc8cf0745ffe8120e5eefe7c3ba46" name="courier-imap-debugsource" arch="x86_64">
  <version epoch="0" ver="4.17.1" rel="58.12"/>
  <changelog author="meissner@suse.de" date="1278158400">- buildrequire openssl so configure finds /usr/bin/openssl bnc#619665</changelog>
  <changelog author="chris@computersalat.de" date="1278331200">- update to 4.8.0
  * tcpd/configure.in: Check if explicit linking with libgpg-error is
    required.
- 2010-03-20  "Stefan Hornburg (Racke)" &lt;racke@linuxia.de&gt;
  * imapd.c (main): Fix typo in alert message.
- 2010-03-18  Hugo Monteiro &lt;hugo.monteiro@fct.unl.pt&gt;
  * Big quota patch (with some changes).
- 2010-03-12  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * imapd.c (main): Dummy FAM/Gamin initialization, report an error
    during login, upon a failure.
- 2010-03-10  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * imapd.c (imapenhancedidle): Make FAM error more meaningful.
- 2010-02-25  Bernard Quatermass &lt;bernard@quatermass.co.uk&gt;
  * pop3dserver.c (main): "disableinsecurepop3" account option disables
    non-SSL logins.
  * imapd.c (chkdisabled): "disableinsecureimap" account option disables
    non-SSL logins.
- reworked sbindir patch</changelog>
  <changelog author="chris@computersalat.de" date="1281009600">- have pop3d, imapd ssl certs in /etc/ssl/private
  [bnc#628487]; certsdir patch</changelog>
  <changelog author="chris@computersalat.de" date="1286798400">- update to 4.8.1
  * Makefile.am (imapd.cnf): Compatibility fixes.
- 2010-08-15  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * maildir/maildirwatch.c (maildirwatch_alloc): Use alarm() to kill
    the process if FAMOpen() takes more than 15 seconds to return.
    Should prevent a hung process if FAM/Gamin is fubared.
- 2010-07-11  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * pop3dserver.c: Make printed() and putchar() macros.
- 2010-07-01  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * imapd.cnf pop3d.cnf (default_md): added default_md = sha1
- 2010-06-28  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * rfc822/rfc822.c (rfc822_print_common_nameaddr): Prevent segfault if
    address decode fails.
  * Fix make check failure when libidn is not available.
- 2010-05-31  Sam Varshavchik  &lt;mrsam@courier-mta.com&gt;
  * Rebuilt man pages with updated stylesheets.
- remove obsolete certsdir patch
- remove LDFLAGS patch, add configure option --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1304251200">- update to 4.9.1
  * tcpd/libcouriertls.c (tls_create): Remove SSLv2_method().
    (tls_create): Remove "!SSLv2" from the default TLS_CIPHER_LIST.
  * mkimapdcert.in (prefix): Create imapd.pem with 600 perms.
  * mkpop3dcert.in (prefix): Create pop3d.pem with 600 perms.
- for more info please see Changelog file
- fix License
  o GPLv2+ -&gt; GPLv3
- fix path to ChangeLog file</changelog>
  <changelog author="chris@computersalat.de" date="1306497600">- update to 4.9.3
  * msgenvelope.c (msgappends): Fix a fatal error upon encountering
    8-bit header content. Heuristically try to interpret it as UTF-8, and
    just ignore invalid UTF-8 sequences.
  - 4.9.2
  * rfc2045/rfc2045cdecode.c: Tolerate lowercase hexadecimal characters
    in quoted-printable-encoded content.
  * unicode/unicode.c: Compilation fixes.</changelog>
  <changelog author="chris@computersalat.de" date="1316692800">- change --with-authdaemonvar to /var/run/courier-authlib</changelog>
  <changelog author="chris@computersalat.de" date="1325937600">- update to 4.10.0
  * imapd.c (main): Open IMAPDEBUGFILE only if it exists already.
    (do_expunge): Optionally log deletions. Based on a patch by
    William Yodlowsky &lt;wyodlows@andromeda.rutgers.edu&gt;.
  * pop3dserver.c (cleanup): Optionally log deletions. Based on a patch by
    William Yodlowsky &lt;wyodlows@andromeda.rutgers.edu&gt;.
  * imapd.dist.in (IMAP_MOVE_EXPUNGE_TO_TRASH): Officially document how
    IMAPDEBUGFILE works.
  * imapscanclient.c: Postpone Y2038K for a while, for uid validities.
  * liblock/mail.c (dotlock_exists): Handle getting here because of a
    recycled pid.
  * unicode/unicode.c (init_default_chset): Handle NULL from setlocale().
  * rfc2045/reformime.c (main2): Fixed segfault on some arches from an
    initial null given to strtok.
  * rfc2045/reformime.c (main2): On ia64 and arm, argv is in readonly
    memory.
  * pop3dserver.c (openpop3dlist): Try a few times to reopen pop3dsizelist
    if it fails with ESTALE.
  * pop3d.dist.in: Add AUTHSERVICE settings. They've been supported
    all along.
  * Fix gcc 4.6 warnings
  * courier-imap.spec.in: switch to systemd. Remove script used when
    upgrading from ancient pre-sysconftool versions.
  * Fix autoconf warnings.</changelog>
  <changelog author="chris@computersalat.de" date="1348228800">- update to 4.11.0
  * maildir/maildiraclt.c (maildir_acl_delete): Fix double-free on error
    path of an ENOMEM.
  * courier.spec.in: Fix the RPM spec to work around /bin symlink
    breakage in F17.
  * tcpd/tcpd.c: Update libgnutls API, replace obsoleted functions
    with current API. Obsoletes most TLS_* variables that set protocol
    priorities, replaced with Gnutls-specific single TLS_PRIORITY
    setting (existing TLS_* variables are still used by the OpenSSL
    alternative). Updated *-ssl configuration files accordingly.
  * tcpd: Compilation changes for gnutls 3
  * liblock/mail.c (dotlock_exists): Quell a compiler warning.
  * Miscellaneous spelling fixes.
- rebase sbindir patch (4.8.0 -&gt; 4.11.0)</changelog>
  <changelog author="chris@computersalat.de" date="1358251200">- update to 4.12.0
  * tcpd/libcouriergnutls.c (get_server_cert): Fix size of malloced
    buffer.
  * configure.in: Fix typo in configure check for setvbuf().
- rebase patches
  * sbindir (remove version), ulimit_conf (rename diff -&gt; patch)</changelog>
  <changelog author="chris@computersalat.de" date="1384171200">- update to 4.14.0
  * Autotool chain update.
  * imapd.c (mddelete): Reject DELETE folder if the maildir is a symlink.
  * imapd.c (doId): Implement the IMAP ID EXTENSION.
- 4.13.0
  * imap: add explicit mkdirs on PIDFILE directories to startup scripts.
  * rfc822: workaround for invalid utf-8 input making libidn go off the
    rails.
- fix License
  * GPL-3.0 -&gt; GPL-3.0+
- rebase patches
  * imap-sbindir, imap-ulimit_conf</changelog>
  <changelog author="adrian@suse.de" date="1389182400">- use gamin-devel instead of unmaintained fam(-devel) package</changelog>
  <changelog author="chris@computersalat.de" date="1394884800">- update to 4.15
  * pop3login.c (starttls): Clear input buffer after STARTTLS.
  * imaplogin.c (starttls): Clear input buffer after STARTTLS.
  * Fix various compiler warnings about unchecked results from setuid
    and setgid calls.
  * libs/tcpd/libcouriergnutls.c, libs/tcpd/libcouriertls.c: remove the
    TLS_DHCERTFILE setting, and use TLS_CERTFILE for all functionality.
    Read DH parameters from TLS_CERTFILE, or from the new TLS_DHPARAMS
    environment variable.
  * mkdhparams: New script that generates DH parameters into a standalone
    file.
  * Remove TLS_DHCERTFILE setting from imapd-ssl, pop3d-ssl, esmtpd and
    esmtpd-ssl. Add TLS_DHPARAMS.
  * Update imapd.cnf.openssl, pop3d.cnf.openssl, esmtpd.cnf.openssl,
    set default number of bits for RSA keys to 4096.
  * libs/tcpd/libcouriertls.c (tls_create): Add TLSv1_1_method() and
    TLSv1_2 method(), based on patch by Rob Austein &lt;sra@hactrn.net&gt;.
  * pop3d-ssl.dist.in, imapd-ssl.dist.in: Fix up differences in the
    documentation of TLS options in various config files.
- added systemd service files
- fix build for SLE
  * fam-devel vs gamin-devel
- cleanup spec
  * RPM_BUILD_ROOT -&gt; buildroot</changelog>
  <changelog author="chris@computersalat.de" date="1411646400">- fix courier-imap.service
  * STARTTLS on port 143 (thanks to cschweingruber)</changelog>
  <changelog author="chris@computersalat.de" date="1414584000">- update to 4.15.1.20141122
  * tcpd/libcouriertls.c: add parsing options for different protocol
    combination.
  * Update comments in *ssl config files.
  * libs/tcpd/libcouriertls.c (tls_create): Set SSL_OP_NOSSLv3 flag,
    to disable SSL3 support.
  * mkdhparams: TLS_DHPARAMS environmnt variable overrides default
    DH parameter file location.
  * courier-imap.spec.in: generate the default DH parameter file and
    package it into the rpm, instead of generating one on the first
    start.
  * libs/maildir/maildirinfo.c (maildir_info_imapmunge): Fix
    UTF-8 charset name.
  * tcpd/libcouriertls.c (tls_create): Initialize temporary ecdh
    parameters.
  * imap: try to print a message on stderr if the alarm() call, that
    detects FAM library breakage, goes off.
  * mkdhparams: default to 2048 DH params for OpenSSL.
  * courier-imap.service: bump up startup timeout, initial service start
    may take several minutes to generate DH parameters for the first
    time.
- add new dependency
  * courier-unicode-devel (libunicode)</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 4.16.2
  * imap/mailboxlist.c (match_mailbox_prep): Use strncmp instead of
    memcmp, to pacify overzealous static analysis checkers.
  * Drop SSLv3 from TLS_CIPHER_LIST.
  * imap, pop3: Added AUTH_MKHOMEDIR_SKEL setting.
- update to 4.16.1
  * maildircache.c: fix use after free.
  * mkdhparams: make compatible with libressl
  * Handle 01-Jan-1970 for date-based searches.
  * Update to courier-unicode 1.2.
  * Add the makeimapaccess script.
- add Patch courier-imap-Makefile.patch</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- update to 4.17.1
  * Fix TLS SNI code.
- update to 4.17.0
  * Stop using SSL2 and SSL3 openssl configuration methods.
  * libs/tcpd/libcouriertls.c: Add support for TLS SNI.
  * imaplogin.c (starttls): flush stdin after negotiating STARTTLS.
  * Fix Courier-IMAP rpm build on pre-systemd systems.
- rebase courier-imap-Makefile.patch</changelog>
  <changelog author="kukuk@suse.de" date="1463486400">- Fix path of SuSEfirewall2.d directory</changelog>
  <changelog author="kukuk@suse.de" date="1463745600">- Remove directories already part of filesystem rpm</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't call insserv if we use systemd
- Don't install LSB init scripts if we use systemd
- Create rc* links to service command if we use systemd</changelog>
</package>
<package pkgid="a37030c8bf385695e046b0e62ea5c33b63d3769dca969dc8327f136673baa2cd" name="courier-unicode" arch="src">
  <version epoch="0" ver="1.4" rel="6.1"/>
  <changelog author="chris@computersalat.de" date="1414584000">- initial pkg 1.1</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 1.3
  * all: rebased against Unicode 8
  * courier-unicode: Rename unicode.h, library name, to avoid name
    clashing with some old, forgotten, Gnome library.
  * all: rebased against Unicode 7. Added unicode_script(), tr24
    Scripts lookup.
- fix spec for submit to Factory</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- update to 1.4
  * no info about changes available</changelog>
</package>
<package pkgid="52eaa982460ffe5c6efbdc7df3f5c2171d24baa682181771e49344d84126e7de" name="courier-unicode-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4" rel="6.1"/>
  <changelog author="chris@computersalat.de" date="1414584000">- initial pkg 1.1</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 1.3
  * all: rebased against Unicode 8
  * courier-unicode: Rename unicode.h, library name, to avoid name
    clashing with some old, forgotten, Gnome library.
  * all: rebased against Unicode 7. Added unicode_script(), tr24
    Scripts lookup.
- fix spec for submit to Factory</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- update to 1.4
  * no info about changes available</changelog>
</package>
<package pkgid="ab5774aed6b81c8766bcb6ab7d2694329575d929c7d133a51d2db227f19d29bb" name="courier-unicode-devel" arch="x86_64">
  <version epoch="0" ver="1.4" rel="6.1"/>
  <changelog author="chris@computersalat.de" date="1414584000">- initial pkg 1.1</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 1.3
  * all: rebased against Unicode 8
  * courier-unicode: Rename unicode.h, library name, to avoid name
    clashing with some old, forgotten, Gnome library.
  * all: rebased against Unicode 7. Added unicode_script(), tr24
    Scripts lookup.
- fix spec for submit to Factory</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- update to 1.4
  * no info about changes available</changelog>
</package>
<package pkgid="74f26641a40745faa71884e89a7152d883fa9f58ca824c347ece7ee1ccb761af" name="courier-unicode-doc" arch="noarch">
  <version epoch="0" ver="1.4" rel="6.1"/>
  <changelog author="chris@computersalat.de" date="1414584000">- initial pkg 1.1</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 1.3
  * all: rebased against Unicode 8
  * courier-unicode: Rename unicode.h, library name, to avoid name
    clashing with some old, forgotten, Gnome library.
  * all: rebased against Unicode 7. Added unicode_script(), tr24
    Scripts lookup.
- fix spec for submit to Factory</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- update to 1.4
  * no info about changes available</changelog>
</package>
<package pkgid="bf999698e4bc6e57c05d97f8060c4547896df6ba3d29c35872918ef7b0061a91" name="cyradm" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="149.1"/>
  <changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
  <changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
  <changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
  <changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
  <changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
  <changelog author="aj@ajaissle.de" date="1390564800">- Updated to upstream release 2.4.17 (fate#311137)
  Changes to the Cyrus IMAP Server since 2.3.x:
  * All databases are now default skiplist, and ctl_cyrusdb will automatically convert database type on startup.
  * make_sha1 and make_md5 are removed (replaced by GUID and reconstruct changes)
  * Charset subsystem rewritten - Unicode 5.2 rather than Unicode 2, and UTF-8 support in sieve.
  * Core mailbox handling code largely rewritten with new APIs, CRC checksums, new locking mechanisms, merging of cyrus.index and cyrus.expunge, inclusion of user \Seen flag, and much more.
  * Replication code largely rewritten to provide better performance, consistency checking, and recovery from "split-brain" scenarios.
  * Added support for LIST-EXTENDED IMAP extension. Removed support for deprecated (compile-time) LISTEXT IMAP extension. Based on work by Martin Konold &lt;martin.konold@erfrakon.de&gt;
  * Added support for ESEARCH IMAP extension.
  * Added support for WITHIN extension to IMAP SEARCH.
  * Added support for ENABLE IMAP extension.
  * Added support for QRESYNC IMAP extension.
  * Added support for URLAUTH=BINARY IMAP extension.
  * Removed legacy IMAP[2|3|4] cruft. We now only support IMAPrev1 + extensions.
  * Added support for marking QoS on traffic. (courtesy of Philip Prindeville &lt;philipp@redfish-solutions.com&gt;)
  * Modified user_deny.db code to open database once at service startup time.
  * ... and hundreds of tiny things too numerous to mention in a short change log ...
- Added the following patches:
  - cyrus-imapd-2.4.17_drac_auth.patch -- this is a rebased version of contrib/drac_auth.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch -- Allow a result attribute to be specified with ptclient/ldap.c
  * Supersedes KOLAB_cyrus-imapd-2.3.18_UID.patch
- Renamed the following patches:
  - syslog-facility-doc.patch to cyrus-imapd-2.3.16_syslog-facility-doc.patch
- Rebased the following patches for cyrus-imapd-2.4.17:
  - cyrus-imapd-db6.diff as cyrus-imapd-2.4.17_db6.patch
  - cyrus-imapd-openslp.patch as cyrus-imapd-2.4.17_openslp.patch
  - luser_relay.patch as cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  * Option 'lmtp_luser_relay' was renamed to 'lmtp_catchall_mailbox'
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2360
  - cyrus-imapd_tls-session-leak.dif as cyrus-imapd-2.4.17_tls-session-leak.patch
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3252
  - cyrus-imapd-2.3.16-autocreate-0.10-0.drac.diff as cyrus-imapd-2.4.17_autocreate-0.10-0.patch
  - pie.patch as cyrus-imapd-2.4.17_pie.patch
- Removed the following patches (unknown upstream status):
  - KOLAB_cyrus-imapd-2.3.18_Folder-names.patch
  * There is no need for us to extend the mailbox name restrictions
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2633
  - KOLAB_cyrus-imapd-2.3.18_Groups2.patch
  * optional/not needed
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2632
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3282
  - KOLAB_cyrus-imapd-2.3.18_timsieved_starttls-sendcaps.patch
  * Workaround for an issue with kontact/kio ~ KDE 3.5.9
  - KOLAB_cyrus-imapd-2.3.18_UID.patch
  * Superseded by cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
- Removed the following patches (upstream inclusion):
  - charset.patch
  - cyrus-imapd-perl-5.14.patch
  - cyrus-imapd-perl-path.patch
  - cyrus-imapd_references_header-dos.dif
  - KOLAB_cyrus-imapd-2.3.18_Cyradm_Annotations.patch
  * http://git.cyrusimap.org/cyrus-imapd/commit/?h=cyrus-imapd-2.4&amp;id=98dd7a9130653ac848c0782a7688d26a090b494b
  - KOLAB_cyrus-imapd-2.3.18_Logging.patch
  * Use 'auditlog: 1' in imapd.conf
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2964
  - user_deny_db-once.patch
- Changed cyrus-imapd-rc.tar.gz contents, now having cyrus-imapd-rc-2.tar.gz:
  - dir name now is SUSE (was: SuSE)
  - renamed README.SuSE -&gt; README.SUSE
  - added annotation definitions for groupware folders
  - imapd.conf: added annotaion definitions and lmtp_fuzzy_mailbox_match
  - imapd.conf: changed path to TLS certs form /usr/ssl/ to /etc/SSL_accept
  - imapd.conf: set default 'delete_mode' and 'expunge_mode' to 'delayed'
  - cyrus.conf: added more services, added deleteprune and expungeprune
  - moved DB_CONFIG into cyrus-imapd-rc.tar.gz
- Spec file cleanup
- Prepared systemd support
  * with systemd, we use cyrus-imapd as service name
  * we have a symlink 'rccyrus-imapd' to '/usr/sbin/service'
  * for compatibility, we have an alias 'rccyrus' = 'rccyrus-imapd'
- New package: cyrus-imapd-utils, which now contains tools to test mail servers
- New package: cyrus-imapd-cyradm, which now contains the cyradm tool
- TODO:
  - Check KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch
  * Patch is optional
  * https://roundup.kolab.org/issue1141
  - systemd service not yet working as expected, so we disabled it atm</changelog>
  <changelog author="aj@ajaissle.de" date="1390996800">- Added -snmp and -snmp-mibs sub-packages
- Added README.SNMP to cyrus-imapd-rc-2.tar.gz
- Added sysconfig option to use SNMP
  * TODO: convert to a yesno option</changelog>
  <changelog author="johannes@lst.de" date="1413633600">- Add two patches from Kristian Kraemmer Nielsen found on the info-cyrus mailing list
  (http://lists.andrew.cmu.edu/pipermail/info-cyrus/2014-October/037708.html)
  * cyrus-imapd.tls_ec.patch		- adding tls_ec for Perfect Forward Secrecy
  * cyrus-imapd.tls_tlsonly.patch	- add tlsonly config option to fix POODLE vulnerability</changelog>
  <changelog author="rhafer@suse.com" date="1415966400">- Replace the TLS/POODLE patch with what was merged into the upstream
  git repo:
  * cyrus-imapd.tls_options.patch
  * Obsoletes patches cyrus-imapd.tls_tlsonly.patch and
    cyrus-imapd.tls_ec.patch
- Add a default tls_versions settings to imapd.conf which disables
  POODLE affected SSL versions.</changelog>
  <changelog author="tchvatal@suse.com" date="1416571200">- Drop unused patch:
  * KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch</changelog>
  <changelog author="aj@ajaissle.de" date="1418040000">- Changed cyrus-imapd-rc-2.tar.gz/cron.daily.cyrus to use 'su -s
  /bin/bash - cyrus', as the default shell is now /sbin/nologin
  [boo#908014]
- Changed cyrus-imapd-rc-2.tar.gz/rc.cyrus to set
  /var/run/cyrus-master.pid as the PID file (was: /var/run/cyrus.pid)
  [boo#908006]</changelog>
  <changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.4.18 [boo#945844]
  * Security fix: handle urlfetch range starting outside message range
  * A bunch of cleanups and fixes to compiling
  * A bunch of sieve cleanups
  * Enhanced SSL/TLS configuration options
  * Disable use of SSLv2/SSLv3
  * Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos)
  * Fixed Task #116: correct LIST response for domains starting with ?inbox.?
  * Fixed Task #76: fixed lmtpd userdeny db checks (thanks Leena Heino)
  * Fixed bug #3856: lmtpd now performs userdeny checks
  * Fixed bug #3848: support charset aliases in encoded headers
  * Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha)
  * Fixed bug #3415: fixed nntpd LIST/GROUP bug
  * Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves
  * Fixed bug #3757: don?t segfault on mailbox close with no user
  * New ssl/tls configuration options
    tls_compression: 0
    Enable TLS compression. Disabled by default.
    tls_eccurve: prime256v1
    Select the elliptic curve used for ECDHE.
    tls_prefer_server_ciphers: 0
    Prefer the cipher order configured on the server-side.
    tls_versions: tls1_0 tls1_1 tls1_2
    Disable SSL/TLS protocols not in this list.
- Removed the following patches (included upstream):
  - cyrus-imapd-2.4.17_tls-session-leak.patch
  - cyrus-imapd.tls_options.patch
- Added patch cyrus-imapd-2.4.18-implicit_definitions.patch:
  - Have the correct #include when using implicit definitions</changelog>
  <changelog author="aj@ajaissle.de" date="1447588800">- Added cyrus-imapd-2.4.18-CVE-2015-8077.patch:
  boo#954200, CVE-2015-8077: Integer overflow in range checks
- Added cyrus-imapd-2.4.18-CVE-2015-8078.patch:
  boo#954201, CVE-2015-8078: Integer overflow in index_urlfetch</changelog>
  <changelog author="aj@ajaissle.de" date="1450699200">- Add cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch to add
  Outlook 2013-compatible XLIST behaviour.</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Try to cleanup with spec-cleaner
- Remove exit 0 in pre that stopped execution of the rest of the code
- Update pre/post requires to be acutally correct
- Disable stict-aliasing to avoid some problems</changelog>
  <changelog author="aj@ajaissle.de" date="1497441600">- Update to 2.4.19
  * Complete backport of the new (2.5 and later) IMAP IDLE implementation (thanks Thomas Jarosh). This fixes a bunch of bugs and race conditions that were inherent to the older implementation
  * New option ?imapidletimeout? overrides ?timeout? specifically for connections in IDLE state
  * OpenSSL 1.1.0 is now supported
  * Fixed: imap ENABLED doesn?t print * ENABLED when nothing new enabled
  * Fixed: mailbox lock management over rename (thanks Thomas Jarosh)
  * Fixed: added overflow protection to urlfetch range checks
  * Fixed: lmtpd can now deliver when mupdate server isn?t available (thanks Michael Menge)
  * Fixed task 227: service processes no longer divide by zero when invoked with -T 0 argument (thanks Ian Batten and Jens Erat)
  * Fixed task 229: ctl_cyrusdb now uses database paths from imapd.conf (thanks Simon Matter)
  * Fixed bug #3862: mailbox database changes now rolled back on mupdate failure during rename (thanks Michael Menge)
  * Fixed: XFER to 2.5 and later no longer downgrades index to oldest version
  * Fixed: nonsensical ?TEXT.MIME? section now handled as ?HEADER?
  * Fixed: added missing ?auditlog: ? prefix to backend connections (thanks Wolfgang Breyha)
  * Fixed: IMAP SEARCH crash on some platforms
  * Fixed: memory leaks in IMAP SEARCH and IMAP APPEND
  * Fixed Issue #1967: EXISTS count reported earlier if fetching past size of previous message set
- Rebased patches:
  * cyrus-imapd-2.4.17_drac_auth.patch as cyrus-imapd-2.4.19_drac_auth.patch
  * cyrus-imapd-2.4.17_autocreate-0.10-0.patch as cyrus-imapd-2.4.19_autocreate-0.10-0.patch
- Removed patches:
  - cyrus-imapd-2.4.18-CVE-2015-8077.patch (upstream)
  - cyrus-imapd-2.4.18-CVE-2015-8078.patch (upstream)
- Added cyrus-imapd-2.4.19.tar.gz.sig</changelog>
  <changelog author="aj@ajaissle.de" date="1498046400">- Rebased patch:
  * cyrus-imapd-2.4.18-implicit_definitions.patch as cyrus-imapd-2.4.19-implicit_definitions.patch
    Add fix for implicit-fortify-decl in ldap.c</changelog>
  <changelog author="aj@ajaissle.de" date="1498392000">- Add cyrus-imapd-2.4.19-lmtpd_crash.patch:
  * lmtpd: fix uninitialised variable crash [boo#1045899]</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Remove filler wording from description.
- Improve find commands.</changelog>
</package>
<package pkgid="357f6acd4ffb62316d6eb0831afee76a1f2870952596d001254adaebbbb06732" name="cyrus-imapd" arch="src">
  <version epoch="0" ver="2.4.19" rel="149.1"/>
  <changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
  <changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
  <changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
  <changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
  <changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
  <changelog author="aj@ajaissle.de" date="1390564800">- Updated to upstream release 2.4.17 (fate#311137)
  Changes to the Cyrus IMAP Server since 2.3.x:
  * All databases are now default skiplist, and ctl_cyrusdb will automatically convert database type on startup.
  * make_sha1 and make_md5 are removed (replaced by GUID and reconstruct changes)
  * Charset subsystem rewritten - Unicode 5.2 rather than Unicode 2, and UTF-8 support in sieve.
  * Core mailbox handling code largely rewritten with new APIs, CRC checksums, new locking mechanisms, merging of cyrus.index and cyrus.expunge, inclusion of user \Seen flag, and much more.
  * Replication code largely rewritten to provide better performance, consistency checking, and recovery from "split-brain" scenarios.
  * Added support for LIST-EXTENDED IMAP extension. Removed support for deprecated (compile-time) LISTEXT IMAP extension. Based on work by Martin Konold &lt;martin.konold@erfrakon.de&gt;
  * Added support for ESEARCH IMAP extension.
  * Added support for WITHIN extension to IMAP SEARCH.
  * Added support for ENABLE IMAP extension.
  * Added support for QRESYNC IMAP extension.
  * Added support for URLAUTH=BINARY IMAP extension.
  * Removed legacy IMAP[2|3|4] cruft. We now only support IMAPrev1 + extensions.
  * Added support for marking QoS on traffic. (courtesy of Philip Prindeville &lt;philipp@redfish-solutions.com&gt;)
  * Modified user_deny.db code to open database once at service startup time.
  * ... and hundreds of tiny things too numerous to mention in a short change log ...
- Added the following patches:
  - cyrus-imapd-2.4.17_drac_auth.patch -- this is a rebased version of contrib/drac_auth.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch -- Allow a result attribute to be specified with ptclient/ldap.c
  * Supersedes KOLAB_cyrus-imapd-2.3.18_UID.patch
- Renamed the following patches:
  - syslog-facility-doc.patch to cyrus-imapd-2.3.16_syslog-facility-doc.patch
- Rebased the following patches for cyrus-imapd-2.4.17:
  - cyrus-imapd-db6.diff as cyrus-imapd-2.4.17_db6.patch
  - cyrus-imapd-openslp.patch as cyrus-imapd-2.4.17_openslp.patch
  - luser_relay.patch as cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  * Option 'lmtp_luser_relay' was renamed to 'lmtp_catchall_mailbox'
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2360
  - cyrus-imapd_tls-session-leak.dif as cyrus-imapd-2.4.17_tls-session-leak.patch
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3252
  - cyrus-imapd-2.3.16-autocreate-0.10-0.drac.diff as cyrus-imapd-2.4.17_autocreate-0.10-0.patch
  - pie.patch as cyrus-imapd-2.4.17_pie.patch
- Removed the following patches (unknown upstream status):
  - KOLAB_cyrus-imapd-2.3.18_Folder-names.patch
  * There is no need for us to extend the mailbox name restrictions
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2633
  - KOLAB_cyrus-imapd-2.3.18_Groups2.patch
  * optional/not needed
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2632
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3282
  - KOLAB_cyrus-imapd-2.3.18_timsieved_starttls-sendcaps.patch
  * Workaround for an issue with kontact/kio ~ KDE 3.5.9
  - KOLAB_cyrus-imapd-2.3.18_UID.patch
  * Superseded by cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
- Removed the following patches (upstream inclusion):
  - charset.patch
  - cyrus-imapd-perl-5.14.patch
  - cyrus-imapd-perl-path.patch
  - cyrus-imapd_references_header-dos.dif
  - KOLAB_cyrus-imapd-2.3.18_Cyradm_Annotations.patch
  * http://git.cyrusimap.org/cyrus-imapd/commit/?h=cyrus-imapd-2.4&amp;id=98dd7a9130653ac848c0782a7688d26a090b494b
  - KOLAB_cyrus-imapd-2.3.18_Logging.patch
  * Use 'auditlog: 1' in imapd.conf
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2964
  - user_deny_db-once.patch
- Changed cyrus-imapd-rc.tar.gz contents, now having cyrus-imapd-rc-2.tar.gz:
  - dir name now is SUSE (was: SuSE)
  - renamed README.SuSE -&gt; README.SUSE
  - added annotation definitions for groupware folders
  - imapd.conf: added annotaion definitions and lmtp_fuzzy_mailbox_match
  - imapd.conf: changed path to TLS certs form /usr/ssl/ to /etc/SSL_accept
  - imapd.conf: set default 'delete_mode' and 'expunge_mode' to 'delayed'
  - cyrus.conf: added more services, added deleteprune and expungeprune
  - moved DB_CONFIG into cyrus-imapd-rc.tar.gz
- Spec file cleanup
- Prepared systemd support
  * with systemd, we use cyrus-imapd as service name
  * we have a symlink 'rccyrus-imapd' to '/usr/sbin/service'
  * for compatibility, we have an alias 'rccyrus' = 'rccyrus-imapd'
- New package: cyrus-imapd-utils, which now contains tools to test mail servers
- New package: cyrus-imapd-cyradm, which now contains the cyradm tool
- TODO:
  - Check KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch
  * Patch is optional
  * https://roundup.kolab.org/issue1141
  - systemd service not yet working as expected, so we disabled it atm</changelog>
  <changelog author="aj@ajaissle.de" date="1390996800">- Added -snmp and -snmp-mibs sub-packages
- Added README.SNMP to cyrus-imapd-rc-2.tar.gz
- Added sysconfig option to use SNMP
  * TODO: convert to a yesno option</changelog>
  <changelog author="johannes@lst.de" date="1413633600">- Add two patches from Kristian Kraemmer Nielsen found on the info-cyrus mailing list
  (http://lists.andrew.cmu.edu/pipermail/info-cyrus/2014-October/037708.html)
  * cyrus-imapd.tls_ec.patch		- adding tls_ec for Perfect Forward Secrecy
  * cyrus-imapd.tls_tlsonly.patch	- add tlsonly config option to fix POODLE vulnerability</changelog>
  <changelog author="rhafer@suse.com" date="1415966400">- Replace the TLS/POODLE patch with what was merged into the upstream
  git repo:
  * cyrus-imapd.tls_options.patch
  * Obsoletes patches cyrus-imapd.tls_tlsonly.patch and
    cyrus-imapd.tls_ec.patch
- Add a default tls_versions settings to imapd.conf which disables
  POODLE affected SSL versions.</changelog>
  <changelog author="tchvatal@suse.com" date="1416571200">- Drop unused patch:
  * KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch</changelog>
  <changelog author="aj@ajaissle.de" date="1418040000">- Changed cyrus-imapd-rc-2.tar.gz/cron.daily.cyrus to use 'su -s
  /bin/bash - cyrus', as the default shell is now /sbin/nologin
  [boo#908014]
- Changed cyrus-imapd-rc-2.tar.gz/rc.cyrus to set
  /var/run/cyrus-master.pid as the PID file (was: /var/run/cyrus.pid)
  [boo#908006]</changelog>
  <changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.4.18 [boo#945844]
  * Security fix: handle urlfetch range starting outside message range
  * A bunch of cleanups and fixes to compiling
  * A bunch of sieve cleanups
  * Enhanced SSL/TLS configuration options
  * Disable use of SSLv2/SSLv3
  * Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos)
  * Fixed Task #116: correct LIST response for domains starting with ?inbox.?
  * Fixed Task #76: fixed lmtpd userdeny db checks (thanks Leena Heino)
  * Fixed bug #3856: lmtpd now performs userdeny checks
  * Fixed bug #3848: support charset aliases in encoded headers
  * Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha)
  * Fixed bug #3415: fixed nntpd LIST/GROUP bug
  * Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves
  * Fixed bug #3757: don?t segfault on mailbox close with no user
  * New ssl/tls configuration options
    tls_compression: 0
    Enable TLS compression. Disabled by default.
    tls_eccurve: prime256v1
    Select the elliptic curve used for ECDHE.
    tls_prefer_server_ciphers: 0
    Prefer the cipher order configured on the server-side.
    tls_versions: tls1_0 tls1_1 tls1_2
    Disable SSL/TLS protocols not in this list.
- Removed the following patches (included upstream):
  - cyrus-imapd-2.4.17_tls-session-leak.patch
  - cyrus-imapd.tls_options.patch
- Added patch cyrus-imapd-2.4.18-implicit_definitions.patch:
  - Have the correct #include when using implicit definitions</changelog>
  <changelog author="aj@ajaissle.de" date="1447588800">- Added cyrus-imapd-2.4.18-CVE-2015-8077.patch:
  boo#954200, CVE-2015-8077: Integer overflow in range checks
- Added cyrus-imapd-2.4.18-CVE-2015-8078.patch:
  boo#954201, CVE-2015-8078: Integer overflow in index_urlfetch</changelog>
  <changelog author="aj@ajaissle.de" date="1450699200">- Add cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch to add
  Outlook 2013-compatible XLIST behaviour.</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Try to cleanup with spec-cleaner
- Remove exit 0 in pre that stopped execution of the rest of the code
- Update pre/post requires to be acutally correct
- Disable stict-aliasing to avoid some problems</changelog>
  <changelog author="aj@ajaissle.de" date="1497441600">- Update to 2.4.19
  * Complete backport of the new (2.5 and later) IMAP IDLE implementation (thanks Thomas Jarosh). This fixes a bunch of bugs and race conditions that were inherent to the older implementation
  * New option ?imapidletimeout? overrides ?timeout? specifically for connections in IDLE state
  * OpenSSL 1.1.0 is now supported
  * Fixed: imap ENABLED doesn?t print * ENABLED when nothing new enabled
  * Fixed: mailbox lock management over rename (thanks Thomas Jarosh)
  * Fixed: added overflow protection to urlfetch range checks
  * Fixed: lmtpd can now deliver when mupdate server isn?t available (thanks Michael Menge)
  * Fixed task 227: service processes no longer divide by zero when invoked with -T 0 argument (thanks Ian Batten and Jens Erat)
  * Fixed task 229: ctl_cyrusdb now uses database paths from imapd.conf (thanks Simon Matter)
  * Fixed bug #3862: mailbox database changes now rolled back on mupdate failure during rename (thanks Michael Menge)
  * Fixed: XFER to 2.5 and later no longer downgrades index to oldest version
  * Fixed: nonsensical ?TEXT.MIME? section now handled as ?HEADER?
  * Fixed: added missing ?auditlog: ? prefix to backend connections (thanks Wolfgang Breyha)
  * Fixed: IMAP SEARCH crash on some platforms
  * Fixed: memory leaks in IMAP SEARCH and IMAP APPEND
  * Fixed Issue #1967: EXISTS count reported earlier if fetching past size of previous message set
- Rebased patches:
  * cyrus-imapd-2.4.17_drac_auth.patch as cyrus-imapd-2.4.19_drac_auth.patch
  * cyrus-imapd-2.4.17_autocreate-0.10-0.patch as cyrus-imapd-2.4.19_autocreate-0.10-0.patch
- Removed patches:
  - cyrus-imapd-2.4.18-CVE-2015-8077.patch (upstream)
  - cyrus-imapd-2.4.18-CVE-2015-8078.patch (upstream)
- Added cyrus-imapd-2.4.19.tar.gz.sig</changelog>
  <changelog author="aj@ajaissle.de" date="1498046400">- Rebased patch:
  * cyrus-imapd-2.4.18-implicit_definitions.patch as cyrus-imapd-2.4.19-implicit_definitions.patch
    Add fix for implicit-fortify-decl in ldap.c</changelog>
  <changelog author="aj@ajaissle.de" date="1498392000">- Add cyrus-imapd-2.4.19-lmtpd_crash.patch:
  * lmtpd: fix uninitialised variable crash [boo#1045899]</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Remove filler wording from description.
- Improve find commands.</changelog>
</package>
<package pkgid="33031ce42ffd9b709dc8e3693cf3a7a80f17b7ae02e078f70bc469b04fae9743" name="cyrus-imapd" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="149.1"/>
  <changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
  <changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
  <changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
  <changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
  <changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
  <changelog author="aj@ajaissle.de" date="1390564800">- Updated to upstream release 2.4.17 (fate#311137)
  Changes to the Cyrus IMAP Server since 2.3.x:
  * All databases are now default skiplist, and ctl_cyrusdb will automatically convert database type on startup.
  * make_sha1 and make_md5 are removed (replaced by GUID and reconstruct changes)
  * Charset subsystem rewritten - Unicode 5.2 rather than Unicode 2, and UTF-8 support in sieve.
  * Core mailbox handling code largely rewritten with new APIs, CRC checksums, new locking mechanisms, merging of cyrus.index and cyrus.expunge, inclusion of user \Seen flag, and much more.
  * Replication code largely rewritten to provide better performance, consistency checking, and recovery from "split-brain" scenarios.
  * Added support for LIST-EXTENDED IMAP extension. Removed support for deprecated (compile-time) LISTEXT IMAP extension. Based on work by Martin Konold &lt;martin.konold@erfrakon.de&gt;
  * Added support for ESEARCH IMAP extension.
  * Added support for WITHIN extension to IMAP SEARCH.
  * Added support for ENABLE IMAP extension.
  * Added support for QRESYNC IMAP extension.
  * Added support for URLAUTH=BINARY IMAP extension.
  * Removed legacy IMAP[2|3|4] cruft. We now only support IMAPrev1 + extensions.
  * Added support for marking QoS on traffic. (courtesy of Philip Prindeville &lt;philipp@redfish-solutions.com&gt;)
  * Modified user_deny.db code to open database once at service startup time.
  * ... and hundreds of tiny things too numerous to mention in a short change log ...
- Added the following patches:
  - cyrus-imapd-2.4.17_drac_auth.patch -- this is a rebased version of contrib/drac_auth.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch -- Allow a result attribute to be specified with ptclient/ldap.c
  * Supersedes KOLAB_cyrus-imapd-2.3.18_UID.patch
- Renamed the following patches:
  - syslog-facility-doc.patch to cyrus-imapd-2.3.16_syslog-facility-doc.patch
- Rebased the following patches for cyrus-imapd-2.4.17:
  - cyrus-imapd-db6.diff as cyrus-imapd-2.4.17_db6.patch
  - cyrus-imapd-openslp.patch as cyrus-imapd-2.4.17_openslp.patch
  - luser_relay.patch as cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  * Option 'lmtp_luser_relay' was renamed to 'lmtp_catchall_mailbox'
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2360
  - cyrus-imapd_tls-session-leak.dif as cyrus-imapd-2.4.17_tls-session-leak.patch
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3252
  - cyrus-imapd-2.3.16-autocreate-0.10-0.drac.diff as cyrus-imapd-2.4.17_autocreate-0.10-0.patch
  - pie.patch as cyrus-imapd-2.4.17_pie.patch
- Removed the following patches (unknown upstream status):
  - KOLAB_cyrus-imapd-2.3.18_Folder-names.patch
  * There is no need for us to extend the mailbox name restrictions
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2633
  - KOLAB_cyrus-imapd-2.3.18_Groups2.patch
  * optional/not needed
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2632
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3282
  - KOLAB_cyrus-imapd-2.3.18_timsieved_starttls-sendcaps.patch
  * Workaround for an issue with kontact/kio ~ KDE 3.5.9
  - KOLAB_cyrus-imapd-2.3.18_UID.patch
  * Superseded by cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
- Removed the following patches (upstream inclusion):
  - charset.patch
  - cyrus-imapd-perl-5.14.patch
  - cyrus-imapd-perl-path.patch
  - cyrus-imapd_references_header-dos.dif
  - KOLAB_cyrus-imapd-2.3.18_Cyradm_Annotations.patch
  * http://git.cyrusimap.org/cyrus-imapd/commit/?h=cyrus-imapd-2.4&amp;id=98dd7a9130653ac848c0782a7688d26a090b494b
  - KOLAB_cyrus-imapd-2.3.18_Logging.patch
  * Use 'auditlog: 1' in imapd.conf
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2964
  - user_deny_db-once.patch
- Changed cyrus-imapd-rc.tar.gz contents, now having cyrus-imapd-rc-2.tar.gz:
  - dir name now is SUSE (was: SuSE)
  - renamed README.SuSE -&gt; README.SUSE
  - added annotation definitions for groupware folders
  - imapd.conf: added annotaion definitions and lmtp_fuzzy_mailbox_match
  - imapd.conf: changed path to TLS certs form /usr/ssl/ to /etc/SSL_accept
  - imapd.conf: set default 'delete_mode' and 'expunge_mode' to 'delayed'
  - cyrus.conf: added more services, added deleteprune and expungeprune
  - moved DB_CONFIG into cyrus-imapd-rc.tar.gz
- Spec file cleanup
- Prepared systemd support
  * with systemd, we use cyrus-imapd as service name
  * we have a symlink 'rccyrus-imapd' to '/usr/sbin/service'
  * for compatibility, we have an alias 'rccyrus' = 'rccyrus-imapd'
- New package: cyrus-imapd-utils, which now contains tools to test mail servers
- New package: cyrus-imapd-cyradm, which now contains the cyradm tool
- TODO:
  - Check KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch
  * Patch is optional
  * https://roundup.kolab.org/issue1141
  - systemd service not yet working as expected, so we disabled it atm</changelog>
  <changelog author="aj@ajaissle.de" date="1390996800">- Added -snmp and -snmp-mibs sub-packages
- Added README.SNMP to cyrus-imapd-rc-2.tar.gz
- Added sysconfig option to use SNMP
  * TODO: convert to a yesno option</changelog>
  <changelog author="johannes@lst.de" date="1413633600">- Add two patches from Kristian Kraemmer Nielsen found on the info-cyrus mailing list
  (http://lists.andrew.cmu.edu/pipermail/info-cyrus/2014-October/037708.html)
  * cyrus-imapd.tls_ec.patch		- adding tls_ec for Perfect Forward Secrecy
  * cyrus-imapd.tls_tlsonly.patch	- add tlsonly config option to fix POODLE vulnerability</changelog>
  <changelog author="rhafer@suse.com" date="1415966400">- Replace the TLS/POODLE patch with what was merged into the upstream
  git repo:
  * cyrus-imapd.tls_options.patch
  * Obsoletes patches cyrus-imapd.tls_tlsonly.patch and
    cyrus-imapd.tls_ec.patch
- Add a default tls_versions settings to imapd.conf which disables
  POODLE affected SSL versions.</changelog>
  <changelog author="tchvatal@suse.com" date="1416571200">- Drop unused patch:
  * KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch</changelog>
  <changelog author="aj@ajaissle.de" date="1418040000">- Changed cyrus-imapd-rc-2.tar.gz/cron.daily.cyrus to use 'su -s
  /bin/bash - cyrus', as the default shell is now /sbin/nologin
  [boo#908014]
- Changed cyrus-imapd-rc-2.tar.gz/rc.cyrus to set
  /var/run/cyrus-master.pid as the PID file (was: /var/run/cyrus.pid)
  [boo#908006]</changelog>
  <changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.4.18 [boo#945844]
  * Security fix: handle urlfetch range starting outside message range
  * A bunch of cleanups and fixes to compiling
  * A bunch of sieve cleanups
  * Enhanced SSL/TLS configuration options
  * Disable use of SSLv2/SSLv3
  * Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos)
  * Fixed Task #116: correct LIST response for domains starting with ?inbox.?
  * Fixed Task #76: fixed lmtpd userdeny db checks (thanks Leena Heino)
  * Fixed bug #3856: lmtpd now performs userdeny checks
  * Fixed bug #3848: support charset aliases in encoded headers
  * Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha)
  * Fixed bug #3415: fixed nntpd LIST/GROUP bug
  * Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves
  * Fixed bug #3757: don?t segfault on mailbox close with no user
  * New ssl/tls configuration options
    tls_compression: 0
    Enable TLS compression. Disabled by default.
    tls_eccurve: prime256v1
    Select the elliptic curve used for ECDHE.
    tls_prefer_server_ciphers: 0
    Prefer the cipher order configured on the server-side.
    tls_versions: tls1_0 tls1_1 tls1_2
    Disable SSL/TLS protocols not in this list.
- Removed the following patches (included upstream):
  - cyrus-imapd-2.4.17_tls-session-leak.patch
  - cyrus-imapd.tls_options.patch
- Added patch cyrus-imapd-2.4.18-implicit_definitions.patch:
  - Have the correct #include when using implicit definitions</changelog>
  <changelog author="aj@ajaissle.de" date="1447588800">- Added cyrus-imapd-2.4.18-CVE-2015-8077.patch:
  boo#954200, CVE-2015-8077: Integer overflow in range checks
- Added cyrus-imapd-2.4.18-CVE-2015-8078.patch:
  boo#954201, CVE-2015-8078: Integer overflow in index_urlfetch</changelog>
  <changelog author="aj@ajaissle.de" date="1450699200">- Add cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch to add
  Outlook 2013-compatible XLIST behaviour.</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Try to cleanup with spec-cleaner
- Remove exit 0 in pre that stopped execution of the rest of the code
- Update pre/post requires to be acutally correct
- Disable stict-aliasing to avoid some problems</changelog>
  <changelog author="aj@ajaissle.de" date="1497441600">- Update to 2.4.19
  * Complete backport of the new (2.5 and later) IMAP IDLE implementation (thanks Thomas Jarosh). This fixes a bunch of bugs and race conditions that were inherent to the older implementation
  * New option ?imapidletimeout? overrides ?timeout? specifically for connections in IDLE state
  * OpenSSL 1.1.0 is now supported
  * Fixed: imap ENABLED doesn?t print * ENABLED when nothing new enabled
  * Fixed: mailbox lock management over rename (thanks Thomas Jarosh)
  * Fixed: added overflow protection to urlfetch range checks
  * Fixed: lmtpd can now deliver when mupdate server isn?t available (thanks Michael Menge)
  * Fixed task 227: service processes no longer divide by zero when invoked with -T 0 argument (thanks Ian Batten and Jens Erat)
  * Fixed task 229: ctl_cyrusdb now uses database paths from imapd.conf (thanks Simon Matter)
  * Fixed bug #3862: mailbox database changes now rolled back on mupdate failure during rename (thanks Michael Menge)
  * Fixed: XFER to 2.5 and later no longer downgrades index to oldest version
  * Fixed: nonsensical ?TEXT.MIME? section now handled as ?HEADER?
  * Fixed: added missing ?auditlog: ? prefix to backend connections (thanks Wolfgang Breyha)
  * Fixed: IMAP SEARCH crash on some platforms
  * Fixed: memory leaks in IMAP SEARCH and IMAP APPEND
  * Fixed Issue #1967: EXISTS count reported earlier if fetching past size of previous message set
- Rebased patches:
  * cyrus-imapd-2.4.17_drac_auth.patch as cyrus-imapd-2.4.19_drac_auth.patch
  * cyrus-imapd-2.4.17_autocreate-0.10-0.patch as cyrus-imapd-2.4.19_autocreate-0.10-0.patch
- Removed patches:
  - cyrus-imapd-2.4.18-CVE-2015-8077.patch (upstream)
  - cyrus-imapd-2.4.18-CVE-2015-8078.patch (upstream)
- Added cyrus-imapd-2.4.19.tar.gz.sig</changelog>
  <changelog author="aj@ajaissle.de" date="1498046400">- Rebased patch:
  * cyrus-imapd-2.4.18-implicit_definitions.patch as cyrus-imapd-2.4.19-implicit_definitions.patch
    Add fix for implicit-fortify-decl in ldap.c</changelog>
  <changelog author="aj@ajaissle.de" date="1498392000">- Add cyrus-imapd-2.4.19-lmtpd_crash.patch:
  * lmtpd: fix uninitialised variable crash [boo#1045899]</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Remove filler wording from description.
- Improve find commands.</changelog>
</package>
<package pkgid="3aa9573cf8ec0445595ff172e88a29c14f52b23df73ad71eee19e538b1424550" name="cyrus-imapd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="149.1"/>
  <changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
  <changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
  <changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
  <changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
  <changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
  <changelog author="aj@ajaissle.de" date="1390564800">- Updated to upstream release 2.4.17 (fate#311137)
  Changes to the Cyrus IMAP Server since 2.3.x:
  * All databases are now default skiplist, and ctl_cyrusdb will automatically convert database type on startup.
  * make_sha1 and make_md5 are removed (replaced by GUID and reconstruct changes)
  * Charset subsystem rewritten - Unicode 5.2 rather than Unicode 2, and UTF-8 support in sieve.
  * Core mailbox handling code largely rewritten with new APIs, CRC checksums, new locking mechanisms, merging of cyrus.index and cyrus.expunge, inclusion of user \Seen flag, and much more.
  * Replication code largely rewritten to provide better performance, consistency checking, and recovery from "split-brain" scenarios.
  * Added support for LIST-EXTENDED IMAP extension. Removed support for deprecated (compile-time) LISTEXT IMAP extension. Based on work by Martin Konold &lt;martin.konold@erfrakon.de&gt;
  * Added support for ESEARCH IMAP extension.
  * Added support for WITHIN extension to IMAP SEARCH.
  * Added support for ENABLE IMAP extension.
  * Added support for QRESYNC IMAP extension.
  * Added support for URLAUTH=BINARY IMAP extension.
  * Removed legacy IMAP[2|3|4] cruft. We now only support IMAPrev1 + extensions.
  * Added support for marking QoS on traffic. (courtesy of Philip Prindeville &lt;philipp@redfish-solutions.com&gt;)
  * Modified user_deny.db code to open database once at service startup time.
  * ... and hundreds of tiny things too numerous to mention in a short change log ...
- Added the following patches:
  - cyrus-imapd-2.4.17_drac_auth.patch -- this is a rebased version of contrib/drac_auth.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch -- Allow a result attribute to be specified with ptclient/ldap.c
  * Supersedes KOLAB_cyrus-imapd-2.3.18_UID.patch
- Renamed the following patches:
  - syslog-facility-doc.patch to cyrus-imapd-2.3.16_syslog-facility-doc.patch
- Rebased the following patches for cyrus-imapd-2.4.17:
  - cyrus-imapd-db6.diff as cyrus-imapd-2.4.17_db6.patch
  - cyrus-imapd-openslp.patch as cyrus-imapd-2.4.17_openslp.patch
  - luser_relay.patch as cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  * Option 'lmtp_luser_relay' was renamed to 'lmtp_catchall_mailbox'
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2360
  - cyrus-imapd_tls-session-leak.dif as cyrus-imapd-2.4.17_tls-session-leak.patch
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3252
  - cyrus-imapd-2.3.16-autocreate-0.10-0.drac.diff as cyrus-imapd-2.4.17_autocreate-0.10-0.patch
  - pie.patch as cyrus-imapd-2.4.17_pie.patch
- Removed the following patches (unknown upstream status):
  - KOLAB_cyrus-imapd-2.3.18_Folder-names.patch
  * There is no need for us to extend the mailbox name restrictions
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2633
  - KOLAB_cyrus-imapd-2.3.18_Groups2.patch
  * optional/not needed
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2632
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3282
  - KOLAB_cyrus-imapd-2.3.18_timsieved_starttls-sendcaps.patch
  * Workaround for an issue with kontact/kio ~ KDE 3.5.9
  - KOLAB_cyrus-imapd-2.3.18_UID.patch
  * Superseded by cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
- Removed the following patches (upstream inclusion):
  - charset.patch
  - cyrus-imapd-perl-5.14.patch
  - cyrus-imapd-perl-path.patch
  - cyrus-imapd_references_header-dos.dif
  - KOLAB_cyrus-imapd-2.3.18_Cyradm_Annotations.patch
  * http://git.cyrusimap.org/cyrus-imapd/commit/?h=cyrus-imapd-2.4&amp;id=98dd7a9130653ac848c0782a7688d26a090b494b
  - KOLAB_cyrus-imapd-2.3.18_Logging.patch
  * Use 'auditlog: 1' in imapd.conf
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2964
  - user_deny_db-once.patch
- Changed cyrus-imapd-rc.tar.gz contents, now having cyrus-imapd-rc-2.tar.gz:
  - dir name now is SUSE (was: SuSE)
  - renamed README.SuSE -&gt; README.SUSE
  - added annotation definitions for groupware folders
  - imapd.conf: added annotaion definitions and lmtp_fuzzy_mailbox_match
  - imapd.conf: changed path to TLS certs form /usr/ssl/ to /etc/SSL_accept
  - imapd.conf: set default 'delete_mode' and 'expunge_mode' to 'delayed'
  - cyrus.conf: added more services, added deleteprune and expungeprune
  - moved DB_CONFIG into cyrus-imapd-rc.tar.gz
- Spec file cleanup
- Prepared systemd support
  * with systemd, we use cyrus-imapd as service name
  * we have a symlink 'rccyrus-imapd' to '/usr/sbin/service'
  * for compatibility, we have an alias 'rccyrus' = 'rccyrus-imapd'
- New package: cyrus-imapd-utils, which now contains tools to test mail servers
- New package: cyrus-imapd-cyradm, which now contains the cyradm tool
- TODO:
  - Check KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch
  * Patch is optional
  * https://roundup.kolab.org/issue1141
  - systemd service not yet working as expected, so we disabled it atm</changelog>
  <changelog author="aj@ajaissle.de" date="1390996800">- Added -snmp and -snmp-mibs sub-packages
- Added README.SNMP to cyrus-imapd-rc-2.tar.gz
- Added sysconfig option to use SNMP
  * TODO: convert to a yesno option</changelog>
  <changelog author="johannes@lst.de" date="1413633600">- Add two patches from Kristian Kraemmer Nielsen found on the info-cyrus mailing list
  (http://lists.andrew.cmu.edu/pipermail/info-cyrus/2014-October/037708.html)
  * cyrus-imapd.tls_ec.patch		- adding tls_ec for Perfect Forward Secrecy
  * cyrus-imapd.tls_tlsonly.patch	- add tlsonly config option to fix POODLE vulnerability</changelog>
  <changelog author="rhafer@suse.com" date="1415966400">- Replace the TLS/POODLE patch with what was merged into the upstream
  git repo:
  * cyrus-imapd.tls_options.patch
  * Obsoletes patches cyrus-imapd.tls_tlsonly.patch and
    cyrus-imapd.tls_ec.patch
- Add a default tls_versions settings to imapd.conf which disables
  POODLE affected SSL versions.</changelog>
  <changelog author="tchvatal@suse.com" date="1416571200">- Drop unused patch:
  * KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch</changelog>
  <changelog author="aj@ajaissle.de" date="1418040000">- Changed cyrus-imapd-rc-2.tar.gz/cron.daily.cyrus to use 'su -s
  /bin/bash - cyrus', as the default shell is now /sbin/nologin
  [boo#908014]
- Changed cyrus-imapd-rc-2.tar.gz/rc.cyrus to set
  /var/run/cyrus-master.pid as the PID file (was: /var/run/cyrus.pid)
  [boo#908006]</changelog>
  <changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.4.18 [boo#945844]
  * Security fix: handle urlfetch range starting outside message range
  * A bunch of cleanups and fixes to compiling
  * A bunch of sieve cleanups
  * Enhanced SSL/TLS configuration options
  * Disable use of SSLv2/SSLv3
  * Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos)
  * Fixed Task #116: correct LIST response for domains starting with ?inbox.?
  * Fixed Task #76: fixed lmtpd userdeny db checks (thanks Leena Heino)
  * Fixed bug #3856: lmtpd now performs userdeny checks
  * Fixed bug #3848: support charset aliases in encoded headers
  * Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha)
  * Fixed bug #3415: fixed nntpd LIST/GROUP bug
  * Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves
  * Fixed bug #3757: don?t segfault on mailbox close with no user
  * New ssl/tls configuration options
    tls_compression: 0
    Enable TLS compression. Disabled by default.
    tls_eccurve: prime256v1
    Select the elliptic curve used for ECDHE.
    tls_prefer_server_ciphers: 0
    Prefer the cipher order configured on the server-side.
    tls_versions: tls1_0 tls1_1 tls1_2
    Disable SSL/TLS protocols not in this list.
- Removed the following patches (included upstream):
  - cyrus-imapd-2.4.17_tls-session-leak.patch
  - cyrus-imapd.tls_options.patch
- Added patch cyrus-imapd-2.4.18-implicit_definitions.patch:
  - Have the correct #include when using implicit definitions</changelog>
  <changelog author="aj@ajaissle.de" date="1447588800">- Added cyrus-imapd-2.4.18-CVE-2015-8077.patch:
  boo#954200, CVE-2015-8077: Integer overflow in range checks
- Added cyrus-imapd-2.4.18-CVE-2015-8078.patch:
  boo#954201, CVE-2015-8078: Integer overflow in index_urlfetch</changelog>
  <changelog author="aj@ajaissle.de" date="1450699200">- Add cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch to add
  Outlook 2013-compatible XLIST behaviour.</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Try to cleanup with spec-cleaner
- Remove exit 0 in pre that stopped execution of the rest of the code
- Update pre/post requires to be acutally correct
- Disable stict-aliasing to avoid some problems</changelog>
  <changelog author="aj@ajaissle.de" date="1497441600">- Update to 2.4.19
  * Complete backport of the new (2.5 and later) IMAP IDLE implementation (thanks Thomas Jarosh). This fixes a bunch of bugs and race conditions that were inherent to the older implementation
  * New option ?imapidletimeout? overrides ?timeout? specifically for connections in IDLE state
  * OpenSSL 1.1.0 is now supported
  * Fixed: imap ENABLED doesn?t print * ENABLED when nothing new enabled
  * Fixed: mailbox lock management over rename (thanks Thomas Jarosh)
  * Fixed: added overflow protection to urlfetch range checks
  * Fixed: lmtpd can now deliver when mupdate server isn?t available (thanks Michael Menge)
  * Fixed task 227: service processes no longer divide by zero when invoked with -T 0 argument (thanks Ian Batten and Jens Erat)
  * Fixed task 229: ctl_cyrusdb now uses database paths from imapd.conf (thanks Simon Matter)
  * Fixed bug #3862: mailbox database changes now rolled back on mupdate failure during rename (thanks Michael Menge)
  * Fixed: XFER to 2.5 and later no longer downgrades index to oldest version
  * Fixed: nonsensical ?TEXT.MIME? section now handled as ?HEADER?
  * Fixed: added missing ?auditlog: ? prefix to backend connections (thanks Wolfgang Breyha)
  * Fixed: IMAP SEARCH crash on some platforms
  * Fixed: memory leaks in IMAP SEARCH and IMAP APPEND
  * Fixed Issue #1967: EXISTS count reported earlier if fetching past size of previous message set
- Rebased patches:
  * cyrus-imapd-2.4.17_drac_auth.patch as cyrus-imapd-2.4.19_drac_auth.patch
  * cyrus-imapd-2.4.17_autocreate-0.10-0.patch as cyrus-imapd-2.4.19_autocreate-0.10-0.patch
- Removed patches:
  - cyrus-imapd-2.4.18-CVE-2015-8077.patch (upstream)
  - cyrus-imapd-2.4.18-CVE-2015-8078.patch (upstream)
- Added cyrus-imapd-2.4.19.tar.gz.sig</changelog>
  <changelog author="aj@ajaissle.de" date="1498046400">- Rebased patch:
  * cyrus-imapd-2.4.18-implicit_definitions.patch as cyrus-imapd-2.4.19-implicit_definitions.patch
    Add fix for implicit-fortify-decl in ldap.c</changelog>
  <changelog author="aj@ajaissle.de" date="1498392000">- Add cyrus-imapd-2.4.19-lmtpd_crash.patch:
  * lmtpd: fix uninitialised variable crash [boo#1045899]</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Remove filler wording from description.
- Improve find commands.</changelog>
</package>
<package pkgid="a867f55dc4a5a6e16c33831f2e9acf3c64075be84ac907deab53fffbff8f460c" name="cyrus-imapd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="149.1"/>
  <changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
  <changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
  <changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
  <changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
  <changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
  <changelog author="aj@ajaissle.de" date="1390564800">- Updated to upstream release 2.4.17 (fate#311137)
  Changes to the Cyrus IMAP Server since 2.3.x:
  * All databases are now default skiplist, and ctl_cyrusdb will automatically convert database type on startup.
  * make_sha1 and make_md5 are removed (replaced by GUID and reconstruct changes)
  * Charset subsystem rewritten - Unicode 5.2 rather than Unicode 2, and UTF-8 support in sieve.
  * Core mailbox handling code largely rewritten with new APIs, CRC checksums, new locking mechanisms, merging of cyrus.index and cyrus.expunge, inclusion of user \Seen flag, and much more.
  * Replication code largely rewritten to provide better performance, consistency checking, and recovery from "split-brain" scenarios.
  * Added support for LIST-EXTENDED IMAP extension. Removed support for deprecated (compile-time) LISTEXT IMAP extension. Based on work by Martin Konold &lt;martin.konold@erfrakon.de&gt;
  * Added support for ESEARCH IMAP extension.
  * Added support for WITHIN extension to IMAP SEARCH.
  * Added support for ENABLE IMAP extension.
  * Added support for QRESYNC IMAP extension.
  * Added support for URLAUTH=BINARY IMAP extension.
  * Removed legacy IMAP[2|3|4] cruft. We now only support IMAPrev1 + extensions.
  * Added support for marking QoS on traffic. (courtesy of Philip Prindeville &lt;philipp@redfish-solutions.com&gt;)
  * Modified user_deny.db code to open database once at service startup time.
  * ... and hundreds of tiny things too numerous to mention in a short change log ...
- Added the following patches:
  - cyrus-imapd-2.4.17_drac_auth.patch -- this is a rebased version of contrib/drac_auth.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch -- Allow a result attribute to be specified with ptclient/ldap.c
  * Supersedes KOLAB_cyrus-imapd-2.3.18_UID.patch
- Renamed the following patches:
  - syslog-facility-doc.patch to cyrus-imapd-2.3.16_syslog-facility-doc.patch
- Rebased the following patches for cyrus-imapd-2.4.17:
  - cyrus-imapd-db6.diff as cyrus-imapd-2.4.17_db6.patch
  - cyrus-imapd-openslp.patch as cyrus-imapd-2.4.17_openslp.patch
  - luser_relay.patch as cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  * Option 'lmtp_luser_relay' was renamed to 'lmtp_catchall_mailbox'
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2360
  - cyrus-imapd_tls-session-leak.dif as cyrus-imapd-2.4.17_tls-session-leak.patch
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3252
  - cyrus-imapd-2.3.16-autocreate-0.10-0.drac.diff as cyrus-imapd-2.4.17_autocreate-0.10-0.patch
  - pie.patch as cyrus-imapd-2.4.17_pie.patch
- Removed the following patches (unknown upstream status):
  - KOLAB_cyrus-imapd-2.3.18_Folder-names.patch
  * There is no need for us to extend the mailbox name restrictions
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2633
  - KOLAB_cyrus-imapd-2.3.18_Groups2.patch
  * optional/not needed
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2632
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3282
  - KOLAB_cyrus-imapd-2.3.18_timsieved_starttls-sendcaps.patch
  * Workaround for an issue with kontact/kio ~ KDE 3.5.9
  - KOLAB_cyrus-imapd-2.3.18_UID.patch
  * Superseded by cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
- Removed the following patches (upstream inclusion):
  - charset.patch
  - cyrus-imapd-perl-5.14.patch
  - cyrus-imapd-perl-path.patch
  - cyrus-imapd_references_header-dos.dif
  - KOLAB_cyrus-imapd-2.3.18_Cyradm_Annotations.patch
  * http://git.cyrusimap.org/cyrus-imapd/commit/?h=cyrus-imapd-2.4&amp;id=98dd7a9130653ac848c0782a7688d26a090b494b
  - KOLAB_cyrus-imapd-2.3.18_Logging.patch
  * Use 'auditlog: 1' in imapd.conf
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2964
  - user_deny_db-once.patch
- Changed cyrus-imapd-rc.tar.gz contents, now having cyrus-imapd-rc-2.tar.gz:
  - dir name now is SUSE (was: SuSE)
  - renamed README.SuSE -&gt; README.SUSE
  - added annotation definitions for groupware folders
  - imapd.conf: added annotaion definitions and lmtp_fuzzy_mailbox_match
  - imapd.conf: changed path to TLS certs form /usr/ssl/ to /etc/SSL_accept
  - imapd.conf: set default 'delete_mode' and 'expunge_mode' to 'delayed'
  - cyrus.conf: added more services, added deleteprune and expungeprune
  - moved DB_CONFIG into cyrus-imapd-rc.tar.gz
- Spec file cleanup
- Prepared systemd support
  * with systemd, we use cyrus-imapd as service name
  * we have a symlink 'rccyrus-imapd' to '/usr/sbin/service'
  * for compatibility, we have an alias 'rccyrus' = 'rccyrus-imapd'
- New package: cyrus-imapd-utils, which now contains tools to test mail servers
- New package: cyrus-imapd-cyradm, which now contains the cyradm tool
- TODO:
  - Check KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch
  * Patch is optional
  * https://roundup.kolab.org/issue1141
  - systemd service not yet working as expected, so we disabled it atm</changelog>
  <changelog author="aj@ajaissle.de" date="1390996800">- Added -snmp and -snmp-mibs sub-packages
- Added README.SNMP to cyrus-imapd-rc-2.tar.gz
- Added sysconfig option to use SNMP
  * TODO: convert to a yesno option</changelog>
  <changelog author="johannes@lst.de" date="1413633600">- Add two patches from Kristian Kraemmer Nielsen found on the info-cyrus mailing list
  (http://lists.andrew.cmu.edu/pipermail/info-cyrus/2014-October/037708.html)
  * cyrus-imapd.tls_ec.patch		- adding tls_ec for Perfect Forward Secrecy
  * cyrus-imapd.tls_tlsonly.patch	- add tlsonly config option to fix POODLE vulnerability</changelog>
  <changelog author="rhafer@suse.com" date="1415966400">- Replace the TLS/POODLE patch with what was merged into the upstream
  git repo:
  * cyrus-imapd.tls_options.patch
  * Obsoletes patches cyrus-imapd.tls_tlsonly.patch and
    cyrus-imapd.tls_ec.patch
- Add a default tls_versions settings to imapd.conf which disables
  POODLE affected SSL versions.</changelog>
  <changelog author="tchvatal@suse.com" date="1416571200">- Drop unused patch:
  * KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch</changelog>
  <changelog author="aj@ajaissle.de" date="1418040000">- Changed cyrus-imapd-rc-2.tar.gz/cron.daily.cyrus to use 'su -s
  /bin/bash - cyrus', as the default shell is now /sbin/nologin
  [boo#908014]
- Changed cyrus-imapd-rc-2.tar.gz/rc.cyrus to set
  /var/run/cyrus-master.pid as the PID file (was: /var/run/cyrus.pid)
  [boo#908006]</changelog>
  <changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.4.18 [boo#945844]
  * Security fix: handle urlfetch range starting outside message range
  * A bunch of cleanups and fixes to compiling
  * A bunch of sieve cleanups
  * Enhanced SSL/TLS configuration options
  * Disable use of SSLv2/SSLv3
  * Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos)
  * Fixed Task #116: correct LIST response for domains starting with ?inbox.?
  * Fixed Task #76: fixed lmtpd userdeny db checks (thanks Leena Heino)
  * Fixed bug #3856: lmtpd now performs userdeny checks
  * Fixed bug #3848: support charset aliases in encoded headers
  * Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha)
  * Fixed bug #3415: fixed nntpd LIST/GROUP bug
  * Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves
  * Fixed bug #3757: don?t segfault on mailbox close with no user
  * New ssl/tls configuration options
    tls_compression: 0
    Enable TLS compression. Disabled by default.
    tls_eccurve: prime256v1
    Select the elliptic curve used for ECDHE.
    tls_prefer_server_ciphers: 0
    Prefer the cipher order configured on the server-side.
    tls_versions: tls1_0 tls1_1 tls1_2
    Disable SSL/TLS protocols not in this list.
- Removed the following patches (included upstream):
  - cyrus-imapd-2.4.17_tls-session-leak.patch
  - cyrus-imapd.tls_options.patch
- Added patch cyrus-imapd-2.4.18-implicit_definitions.patch:
  - Have the correct #include when using implicit definitions</changelog>
  <changelog author="aj@ajaissle.de" date="1447588800">- Added cyrus-imapd-2.4.18-CVE-2015-8077.patch:
  boo#954200, CVE-2015-8077: Integer overflow in range checks
- Added cyrus-imapd-2.4.18-CVE-2015-8078.patch:
  boo#954201, CVE-2015-8078: Integer overflow in index_urlfetch</changelog>
  <changelog author="aj@ajaissle.de" date="1450699200">- Add cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch to add
  Outlook 2013-compatible XLIST behaviour.</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Try to cleanup with spec-cleaner
- Remove exit 0 in pre that stopped execution of the rest of the code
- Update pre/post requires to be acutally correct
- Disable stict-aliasing to avoid some problems</changelog>
  <changelog author="aj@ajaissle.de" date="1497441600">- Update to 2.4.19
  * Complete backport of the new (2.5 and later) IMAP IDLE implementation (thanks Thomas Jarosh). This fixes a bunch of bugs and race conditions that were inherent to the older implementation
  * New option ?imapidletimeout? overrides ?timeout? specifically for connections in IDLE state
  * OpenSSL 1.1.0 is now supported
  * Fixed: imap ENABLED doesn?t print * ENABLED when nothing new enabled
  * Fixed: mailbox lock management over rename (thanks Thomas Jarosh)
  * Fixed: added overflow protection to urlfetch range checks
  * Fixed: lmtpd can now deliver when mupdate server isn?t available (thanks Michael Menge)
  * Fixed task 227: service processes no longer divide by zero when invoked with -T 0 argument (thanks Ian Batten and Jens Erat)
  * Fixed task 229: ctl_cyrusdb now uses database paths from imapd.conf (thanks Simon Matter)
  * Fixed bug #3862: mailbox database changes now rolled back on mupdate failure during rename (thanks Michael Menge)
  * Fixed: XFER to 2.5 and later no longer downgrades index to oldest version
  * Fixed: nonsensical ?TEXT.MIME? section now handled as ?HEADER?
  * Fixed: added missing ?auditlog: ? prefix to backend connections (thanks Wolfgang Breyha)
  * Fixed: IMAP SEARCH crash on some platforms
  * Fixed: memory leaks in IMAP SEARCH and IMAP APPEND
  * Fixed Issue #1967: EXISTS count reported earlier if fetching past size of previous message set
- Rebased patches:
  * cyrus-imapd-2.4.17_drac_auth.patch as cyrus-imapd-2.4.19_drac_auth.patch
  * cyrus-imapd-2.4.17_autocreate-0.10-0.patch as cyrus-imapd-2.4.19_autocreate-0.10-0.patch
- Removed patches:
  - cyrus-imapd-2.4.18-CVE-2015-8077.patch (upstream)
  - cyrus-imapd-2.4.18-CVE-2015-8078.patch (upstream)
- Added cyrus-imapd-2.4.19.tar.gz.sig</changelog>
  <changelog author="aj@ajaissle.de" date="1498046400">- Rebased patch:
  * cyrus-imapd-2.4.18-implicit_definitions.patch as cyrus-imapd-2.4.19-implicit_definitions.patch
    Add fix for implicit-fortify-decl in ldap.c</changelog>
  <changelog author="aj@ajaissle.de" date="1498392000">- Add cyrus-imapd-2.4.19-lmtpd_crash.patch:
  * lmtpd: fix uninitialised variable crash [boo#1045899]</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Remove filler wording from description.
- Improve find commands.</changelog>
</package>
<package pkgid="7831f8ce4827f5132efec722326579cb140fa8f13214d4d26269ed10689e207e" name="cyrus-imapd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="149.1"/>
  <changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
  <changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
  <changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
  <changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
  <changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
  <changelog author="aj@ajaissle.de" date="1390564800">- Updated to upstream release 2.4.17 (fate#311137)
  Changes to the Cyrus IMAP Server since 2.3.x:
  * All databases are now default skiplist, and ctl_cyrusdb will automatically convert database type on startup.
  * make_sha1 and make_md5 are removed (replaced by GUID and reconstruct changes)
  * Charset subsystem rewritten - Unicode 5.2 rather than Unicode 2, and UTF-8 support in sieve.
  * Core mailbox handling code largely rewritten with new APIs, CRC checksums, new locking mechanisms, merging of cyrus.index and cyrus.expunge, inclusion of user \Seen flag, and much more.
  * Replication code largely rewritten to provide better performance, consistency checking, and recovery from "split-brain" scenarios.
  * Added support for LIST-EXTENDED IMAP extension. Removed support for deprecated (compile-time) LISTEXT IMAP extension. Based on work by Martin Konold &lt;martin.konold@erfrakon.de&gt;
  * Added support for ESEARCH IMAP extension.
  * Added support for WITHIN extension to IMAP SEARCH.
  * Added support for ENABLE IMAP extension.
  * Added support for QRESYNC IMAP extension.
  * Added support for URLAUTH=BINARY IMAP extension.
  * Removed legacy IMAP[2|3|4] cruft. We now only support IMAPrev1 + extensions.
  * Added support for marking QoS on traffic. (courtesy of Philip Prindeville &lt;philipp@redfish-solutions.com&gt;)
  * Modified user_deny.db code to open database once at service startup time.
  * ... and hundreds of tiny things too numerous to mention in a short change log ...
- Added the following patches:
  - cyrus-imapd-2.4.17_drac_auth.patch -- this is a rebased version of contrib/drac_auth.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch -- Allow a result attribute to be specified with ptclient/ldap.c
  * Supersedes KOLAB_cyrus-imapd-2.3.18_UID.patch
- Renamed the following patches:
  - syslog-facility-doc.patch to cyrus-imapd-2.3.16_syslog-facility-doc.patch
- Rebased the following patches for cyrus-imapd-2.4.17:
  - cyrus-imapd-db6.diff as cyrus-imapd-2.4.17_db6.patch
  - cyrus-imapd-openslp.patch as cyrus-imapd-2.4.17_openslp.patch
  - luser_relay.patch as cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  * Option 'lmtp_luser_relay' was renamed to 'lmtp_catchall_mailbox'
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2360
  - cyrus-imapd_tls-session-leak.dif as cyrus-imapd-2.4.17_tls-session-leak.patch
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3252
  - cyrus-imapd-2.3.16-autocreate-0.10-0.drac.diff as cyrus-imapd-2.4.17_autocreate-0.10-0.patch
  - pie.patch as cyrus-imapd-2.4.17_pie.patch
- Removed the following patches (unknown upstream status):
  - KOLAB_cyrus-imapd-2.3.18_Folder-names.patch
  * There is no need for us to extend the mailbox name restrictions
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2633
  - KOLAB_cyrus-imapd-2.3.18_Groups2.patch
  * optional/not needed
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2632
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3282
  - KOLAB_cyrus-imapd-2.3.18_timsieved_starttls-sendcaps.patch
  * Workaround for an issue with kontact/kio ~ KDE 3.5.9
  - KOLAB_cyrus-imapd-2.3.18_UID.patch
  * Superseded by cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
- Removed the following patches (upstream inclusion):
  - charset.patch
  - cyrus-imapd-perl-5.14.patch
  - cyrus-imapd-perl-path.patch
  - cyrus-imapd_references_header-dos.dif
  - KOLAB_cyrus-imapd-2.3.18_Cyradm_Annotations.patch
  * http://git.cyrusimap.org/cyrus-imapd/commit/?h=cyrus-imapd-2.4&amp;id=98dd7a9130653ac848c0782a7688d26a090b494b
  - KOLAB_cyrus-imapd-2.3.18_Logging.patch
  * Use 'auditlog: 1' in imapd.conf
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2964
  - user_deny_db-once.patch
- Changed cyrus-imapd-rc.tar.gz contents, now having cyrus-imapd-rc-2.tar.gz:
  - dir name now is SUSE (was: SuSE)
  - renamed README.SuSE -&gt; README.SUSE
  - added annotation definitions for groupware folders
  - imapd.conf: added annotaion definitions and lmtp_fuzzy_mailbox_match
  - imapd.conf: changed path to TLS certs form /usr/ssl/ to /etc/SSL_accept
  - imapd.conf: set default 'delete_mode' and 'expunge_mode' to 'delayed'
  - cyrus.conf: added more services, added deleteprune and expungeprune
  - moved DB_CONFIG into cyrus-imapd-rc.tar.gz
- Spec file cleanup
- Prepared systemd support
  * with systemd, we use cyrus-imapd as service name
  * we have a symlink 'rccyrus-imapd' to '/usr/sbin/service'
  * for compatibility, we have an alias 'rccyrus' = 'rccyrus-imapd'
- New package: cyrus-imapd-utils, which now contains tools to test mail servers
- New package: cyrus-imapd-cyradm, which now contains the cyradm tool
- TODO:
  - Check KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch
  * Patch is optional
  * https://roundup.kolab.org/issue1141
  - systemd service not yet working as expected, so we disabled it atm</changelog>
  <changelog author="aj@ajaissle.de" date="1390996800">- Added -snmp and -snmp-mibs sub-packages
- Added README.SNMP to cyrus-imapd-rc-2.tar.gz
- Added sysconfig option to use SNMP
  * TODO: convert to a yesno option</changelog>
  <changelog author="johannes@lst.de" date="1413633600">- Add two patches from Kristian Kraemmer Nielsen found on the info-cyrus mailing list
  (http://lists.andrew.cmu.edu/pipermail/info-cyrus/2014-October/037708.html)
  * cyrus-imapd.tls_ec.patch		- adding tls_ec for Perfect Forward Secrecy
  * cyrus-imapd.tls_tlsonly.patch	- add tlsonly config option to fix POODLE vulnerability</changelog>
  <changelog author="rhafer@suse.com" date="1415966400">- Replace the TLS/POODLE patch with what was merged into the upstream
  git repo:
  * cyrus-imapd.tls_options.patch
  * Obsoletes patches cyrus-imapd.tls_tlsonly.patch and
    cyrus-imapd.tls_ec.patch
- Add a default tls_versions settings to imapd.conf which disables
  POODLE affected SSL versions.</changelog>
  <changelog author="tchvatal@suse.com" date="1416571200">- Drop unused patch:
  * KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch</changelog>
  <changelog author="aj@ajaissle.de" date="1418040000">- Changed cyrus-imapd-rc-2.tar.gz/cron.daily.cyrus to use 'su -s
  /bin/bash - cyrus', as the default shell is now /sbin/nologin
  [boo#908014]
- Changed cyrus-imapd-rc-2.tar.gz/rc.cyrus to set
  /var/run/cyrus-master.pid as the PID file (was: /var/run/cyrus.pid)
  [boo#908006]</changelog>
  <changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.4.18 [boo#945844]
  * Security fix: handle urlfetch range starting outside message range
  * A bunch of cleanups and fixes to compiling
  * A bunch of sieve cleanups
  * Enhanced SSL/TLS configuration options
  * Disable use of SSLv2/SSLv3
  * Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos)
  * Fixed Task #116: correct LIST response for domains starting with ?inbox.?
  * Fixed Task #76: fixed lmtpd userdeny db checks (thanks Leena Heino)
  * Fixed bug #3856: lmtpd now performs userdeny checks
  * Fixed bug #3848: support charset aliases in encoded headers
  * Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha)
  * Fixed bug #3415: fixed nntpd LIST/GROUP bug
  * Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves
  * Fixed bug #3757: don?t segfault on mailbox close with no user
  * New ssl/tls configuration options
    tls_compression: 0
    Enable TLS compression. Disabled by default.
    tls_eccurve: prime256v1
    Select the elliptic curve used for ECDHE.
    tls_prefer_server_ciphers: 0
    Prefer the cipher order configured on the server-side.
    tls_versions: tls1_0 tls1_1 tls1_2
    Disable SSL/TLS protocols not in this list.
- Removed the following patches (included upstream):
  - cyrus-imapd-2.4.17_tls-session-leak.patch
  - cyrus-imapd.tls_options.patch
- Added patch cyrus-imapd-2.4.18-implicit_definitions.patch:
  - Have the correct #include when using implicit definitions</changelog>
  <changelog author="aj@ajaissle.de" date="1447588800">- Added cyrus-imapd-2.4.18-CVE-2015-8077.patch:
  boo#954200, CVE-2015-8077: Integer overflow in range checks
- Added cyrus-imapd-2.4.18-CVE-2015-8078.patch:
  boo#954201, CVE-2015-8078: Integer overflow in index_urlfetch</changelog>
  <changelog author="aj@ajaissle.de" date="1450699200">- Add cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch to add
  Outlook 2013-compatible XLIST behaviour.</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Try to cleanup with spec-cleaner
- Remove exit 0 in pre that stopped execution of the rest of the code
- Update pre/post requires to be acutally correct
- Disable stict-aliasing to avoid some problems</changelog>
  <changelog author="aj@ajaissle.de" date="1497441600">- Update to 2.4.19
  * Complete backport of the new (2.5 and later) IMAP IDLE implementation (thanks Thomas Jarosh). This fixes a bunch of bugs and race conditions that were inherent to the older implementation
  * New option ?imapidletimeout? overrides ?timeout? specifically for connections in IDLE state
  * OpenSSL 1.1.0 is now supported
  * Fixed: imap ENABLED doesn?t print * ENABLED when nothing new enabled
  * Fixed: mailbox lock management over rename (thanks Thomas Jarosh)
  * Fixed: added overflow protection to urlfetch range checks
  * Fixed: lmtpd can now deliver when mupdate server isn?t available (thanks Michael Menge)
  * Fixed task 227: service processes no longer divide by zero when invoked with -T 0 argument (thanks Ian Batten and Jens Erat)
  * Fixed task 229: ctl_cyrusdb now uses database paths from imapd.conf (thanks Simon Matter)
  * Fixed bug #3862: mailbox database changes now rolled back on mupdate failure during rename (thanks Michael Menge)
  * Fixed: XFER to 2.5 and later no longer downgrades index to oldest version
  * Fixed: nonsensical ?TEXT.MIME? section now handled as ?HEADER?
  * Fixed: added missing ?auditlog: ? prefix to backend connections (thanks Wolfgang Breyha)
  * Fixed: IMAP SEARCH crash on some platforms
  * Fixed: memory leaks in IMAP SEARCH and IMAP APPEND
  * Fixed Issue #1967: EXISTS count reported earlier if fetching past size of previous message set
- Rebased patches:
  * cyrus-imapd-2.4.17_drac_auth.patch as cyrus-imapd-2.4.19_drac_auth.patch
  * cyrus-imapd-2.4.17_autocreate-0.10-0.patch as cyrus-imapd-2.4.19_autocreate-0.10-0.patch
- Removed patches:
  - cyrus-imapd-2.4.18-CVE-2015-8077.patch (upstream)
  - cyrus-imapd-2.4.18-CVE-2015-8078.patch (upstream)
- Added cyrus-imapd-2.4.19.tar.gz.sig</changelog>
  <changelog author="aj@ajaissle.de" date="1498046400">- Rebased patch:
  * cyrus-imapd-2.4.18-implicit_definitions.patch as cyrus-imapd-2.4.19-implicit_definitions.patch
    Add fix for implicit-fortify-decl in ldap.c</changelog>
  <changelog author="aj@ajaissle.de" date="1498392000">- Add cyrus-imapd-2.4.19-lmtpd_crash.patch:
  * lmtpd: fix uninitialised variable crash [boo#1045899]</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Remove filler wording from description.
- Improve find commands.</changelog>
</package>
<package pkgid="f65dea9b7bb6466cb20a9762675b733c5b61d6f52254d079f818ca0655f9f0fc" name="cyrus-imapd-snmp" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="149.1"/>
  <changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
  <changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
  <changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
  <changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
  <changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
  <changelog author="aj@ajaissle.de" date="1390564800">- Updated to upstream release 2.4.17 (fate#311137)
  Changes to the Cyrus IMAP Server since 2.3.x:
  * All databases are now default skiplist, and ctl_cyrusdb will automatically convert database type on startup.
  * make_sha1 and make_md5 are removed (replaced by GUID and reconstruct changes)
  * Charset subsystem rewritten - Unicode 5.2 rather than Unicode 2, and UTF-8 support in sieve.
  * Core mailbox handling code largely rewritten with new APIs, CRC checksums, new locking mechanisms, merging of cyrus.index and cyrus.expunge, inclusion of user \Seen flag, and much more.
  * Replication code largely rewritten to provide better performance, consistency checking, and recovery from "split-brain" scenarios.
  * Added support for LIST-EXTENDED IMAP extension. Removed support for deprecated (compile-time) LISTEXT IMAP extension. Based on work by Martin Konold &lt;martin.konold@erfrakon.de&gt;
  * Added support for ESEARCH IMAP extension.
  * Added support for WITHIN extension to IMAP SEARCH.
  * Added support for ENABLE IMAP extension.
  * Added support for QRESYNC IMAP extension.
  * Added support for URLAUTH=BINARY IMAP extension.
  * Removed legacy IMAP[2|3|4] cruft. We now only support IMAPrev1 + extensions.
  * Added support for marking QoS on traffic. (courtesy of Philip Prindeville &lt;philipp@redfish-solutions.com&gt;)
  * Modified user_deny.db code to open database once at service startup time.
  * ... and hundreds of tiny things too numerous to mention in a short change log ...
- Added the following patches:
  - cyrus-imapd-2.4.17_drac_auth.patch -- this is a rebased version of contrib/drac_auth.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch -- Allow a result attribute to be specified with ptclient/ldap.c
  * Supersedes KOLAB_cyrus-imapd-2.3.18_UID.patch
- Renamed the following patches:
  - syslog-facility-doc.patch to cyrus-imapd-2.3.16_syslog-facility-doc.patch
- Rebased the following patches for cyrus-imapd-2.4.17:
  - cyrus-imapd-db6.diff as cyrus-imapd-2.4.17_db6.patch
  - cyrus-imapd-openslp.patch as cyrus-imapd-2.4.17_openslp.patch
  - luser_relay.patch as cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  * Option 'lmtp_luser_relay' was renamed to 'lmtp_catchall_mailbox'
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2360
  - cyrus-imapd_tls-session-leak.dif as cyrus-imapd-2.4.17_tls-session-leak.patch
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3252
  - cyrus-imapd-2.3.16-autocreate-0.10-0.drac.diff as cyrus-imapd-2.4.17_autocreate-0.10-0.patch
  - pie.patch as cyrus-imapd-2.4.17_pie.patch
- Removed the following patches (unknown upstream status):
  - KOLAB_cyrus-imapd-2.3.18_Folder-names.patch
  * There is no need for us to extend the mailbox name restrictions
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2633
  - KOLAB_cyrus-imapd-2.3.18_Groups2.patch
  * optional/not needed
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2632
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3282
  - KOLAB_cyrus-imapd-2.3.18_timsieved_starttls-sendcaps.patch
  * Workaround for an issue with kontact/kio ~ KDE 3.5.9
  - KOLAB_cyrus-imapd-2.3.18_UID.patch
  * Superseded by cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
- Removed the following patches (upstream inclusion):
  - charset.patch
  - cyrus-imapd-perl-5.14.patch
  - cyrus-imapd-perl-path.patch
  - cyrus-imapd_references_header-dos.dif
  - KOLAB_cyrus-imapd-2.3.18_Cyradm_Annotations.patch
  * http://git.cyrusimap.org/cyrus-imapd/commit/?h=cyrus-imapd-2.4&amp;id=98dd7a9130653ac848c0782a7688d26a090b494b
  - KOLAB_cyrus-imapd-2.3.18_Logging.patch
  * Use 'auditlog: 1' in imapd.conf
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2964
  - user_deny_db-once.patch
- Changed cyrus-imapd-rc.tar.gz contents, now having cyrus-imapd-rc-2.tar.gz:
  - dir name now is SUSE (was: SuSE)
  - renamed README.SuSE -&gt; README.SUSE
  - added annotation definitions for groupware folders
  - imapd.conf: added annotaion definitions and lmtp_fuzzy_mailbox_match
  - imapd.conf: changed path to TLS certs form /usr/ssl/ to /etc/SSL_accept
  - imapd.conf: set default 'delete_mode' and 'expunge_mode' to 'delayed'
  - cyrus.conf: added more services, added deleteprune and expungeprune
  - moved DB_CONFIG into cyrus-imapd-rc.tar.gz
- Spec file cleanup
- Prepared systemd support
  * with systemd, we use cyrus-imapd as service name
  * we have a symlink 'rccyrus-imapd' to '/usr/sbin/service'
  * for compatibility, we have an alias 'rccyrus' = 'rccyrus-imapd'
- New package: cyrus-imapd-utils, which now contains tools to test mail servers
- New package: cyrus-imapd-cyradm, which now contains the cyradm tool
- TODO:
  - Check KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch
  * Patch is optional
  * https://roundup.kolab.org/issue1141
  - systemd service not yet working as expected, so we disabled it atm</changelog>
  <changelog author="aj@ajaissle.de" date="1390996800">- Added -snmp and -snmp-mibs sub-packages
- Added README.SNMP to cyrus-imapd-rc-2.tar.gz
- Added sysconfig option to use SNMP
  * TODO: convert to a yesno option</changelog>
  <changelog author="johannes@lst.de" date="1413633600">- Add two patches from Kristian Kraemmer Nielsen found on the info-cyrus mailing list
  (http://lists.andrew.cmu.edu/pipermail/info-cyrus/2014-October/037708.html)
  * cyrus-imapd.tls_ec.patch		- adding tls_ec for Perfect Forward Secrecy
  * cyrus-imapd.tls_tlsonly.patch	- add tlsonly config option to fix POODLE vulnerability</changelog>
  <changelog author="rhafer@suse.com" date="1415966400">- Replace the TLS/POODLE patch with what was merged into the upstream
  git repo:
  * cyrus-imapd.tls_options.patch
  * Obsoletes patches cyrus-imapd.tls_tlsonly.patch and
    cyrus-imapd.tls_ec.patch
- Add a default tls_versions settings to imapd.conf which disables
  POODLE affected SSL versions.</changelog>
  <changelog author="tchvatal@suse.com" date="1416571200">- Drop unused patch:
  * KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch</changelog>
  <changelog author="aj@ajaissle.de" date="1418040000">- Changed cyrus-imapd-rc-2.tar.gz/cron.daily.cyrus to use 'su -s
  /bin/bash - cyrus', as the default shell is now /sbin/nologin
  [boo#908014]
- Changed cyrus-imapd-rc-2.tar.gz/rc.cyrus to set
  /var/run/cyrus-master.pid as the PID file (was: /var/run/cyrus.pid)
  [boo#908006]</changelog>
  <changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.4.18 [boo#945844]
  * Security fix: handle urlfetch range starting outside message range
  * A bunch of cleanups and fixes to compiling
  * A bunch of sieve cleanups
  * Enhanced SSL/TLS configuration options
  * Disable use of SSLv2/SSLv3
  * Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos)
  * Fixed Task #116: correct LIST response for domains starting with ?inbox.?
  * Fixed Task #76: fixed lmtpd userdeny db checks (thanks Leena Heino)
  * Fixed bug #3856: lmtpd now performs userdeny checks
  * Fixed bug #3848: support charset aliases in encoded headers
  * Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha)
  * Fixed bug #3415: fixed nntpd LIST/GROUP bug
  * Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves
  * Fixed bug #3757: don?t segfault on mailbox close with no user
  * New ssl/tls configuration options
    tls_compression: 0
    Enable TLS compression. Disabled by default.
    tls_eccurve: prime256v1
    Select the elliptic curve used for ECDHE.
    tls_prefer_server_ciphers: 0
    Prefer the cipher order configured on the server-side.
    tls_versions: tls1_0 tls1_1 tls1_2
    Disable SSL/TLS protocols not in this list.
- Removed the following patches (included upstream):
  - cyrus-imapd-2.4.17_tls-session-leak.patch
  - cyrus-imapd.tls_options.patch
- Added patch cyrus-imapd-2.4.18-implicit_definitions.patch:
  - Have the correct #include when using implicit definitions</changelog>
  <changelog author="aj@ajaissle.de" date="1447588800">- Added cyrus-imapd-2.4.18-CVE-2015-8077.patch:
  boo#954200, CVE-2015-8077: Integer overflow in range checks
- Added cyrus-imapd-2.4.18-CVE-2015-8078.patch:
  boo#954201, CVE-2015-8078: Integer overflow in index_urlfetch</changelog>
  <changelog author="aj@ajaissle.de" date="1450699200">- Add cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch to add
  Outlook 2013-compatible XLIST behaviour.</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Try to cleanup with spec-cleaner
- Remove exit 0 in pre that stopped execution of the rest of the code
- Update pre/post requires to be acutally correct
- Disable stict-aliasing to avoid some problems</changelog>
  <changelog author="aj@ajaissle.de" date="1497441600">- Update to 2.4.19
  * Complete backport of the new (2.5 and later) IMAP IDLE implementation (thanks Thomas Jarosh). This fixes a bunch of bugs and race conditions that were inherent to the older implementation
  * New option ?imapidletimeout? overrides ?timeout? specifically for connections in IDLE state
  * OpenSSL 1.1.0 is now supported
  * Fixed: imap ENABLED doesn?t print * ENABLED when nothing new enabled
  * Fixed: mailbox lock management over rename (thanks Thomas Jarosh)
  * Fixed: added overflow protection to urlfetch range checks
  * Fixed: lmtpd can now deliver when mupdate server isn?t available (thanks Michael Menge)
  * Fixed task 227: service processes no longer divide by zero when invoked with -T 0 argument (thanks Ian Batten and Jens Erat)
  * Fixed task 229: ctl_cyrusdb now uses database paths from imapd.conf (thanks Simon Matter)
  * Fixed bug #3862: mailbox database changes now rolled back on mupdate failure during rename (thanks Michael Menge)
  * Fixed: XFER to 2.5 and later no longer downgrades index to oldest version
  * Fixed: nonsensical ?TEXT.MIME? section now handled as ?HEADER?
  * Fixed: added missing ?auditlog: ? prefix to backend connections (thanks Wolfgang Breyha)
  * Fixed: IMAP SEARCH crash on some platforms
  * Fixed: memory leaks in IMAP SEARCH and IMAP APPEND
  * Fixed Issue #1967: EXISTS count reported earlier if fetching past size of previous message set
- Rebased patches:
  * cyrus-imapd-2.4.17_drac_auth.patch as cyrus-imapd-2.4.19_drac_auth.patch
  * cyrus-imapd-2.4.17_autocreate-0.10-0.patch as cyrus-imapd-2.4.19_autocreate-0.10-0.patch
- Removed patches:
  - cyrus-imapd-2.4.18-CVE-2015-8077.patch (upstream)
  - cyrus-imapd-2.4.18-CVE-2015-8078.patch (upstream)
- Added cyrus-imapd-2.4.19.tar.gz.sig</changelog>
  <changelog author="aj@ajaissle.de" date="1498046400">- Rebased patch:
  * cyrus-imapd-2.4.18-implicit_definitions.patch as cyrus-imapd-2.4.19-implicit_definitions.patch
    Add fix for implicit-fortify-decl in ldap.c</changelog>
  <changelog author="aj@ajaissle.de" date="1498392000">- Add cyrus-imapd-2.4.19-lmtpd_crash.patch:
  * lmtpd: fix uninitialised variable crash [boo#1045899]</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Remove filler wording from description.
- Improve find commands.</changelog>
</package>
<package pkgid="6aa07e56554b12ed2c31599e95605153902c9a86b60cc46bdaa7f9d6ff6d4fcb" name="cyrus-imapd-snmp-mibs" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="149.1"/>
  <changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
  <changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
  <changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
  <changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
  <changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
  <changelog author="aj@ajaissle.de" date="1390564800">- Updated to upstream release 2.4.17 (fate#311137)
  Changes to the Cyrus IMAP Server since 2.3.x:
  * All databases are now default skiplist, and ctl_cyrusdb will automatically convert database type on startup.
  * make_sha1 and make_md5 are removed (replaced by GUID and reconstruct changes)
  * Charset subsystem rewritten - Unicode 5.2 rather than Unicode 2, and UTF-8 support in sieve.
  * Core mailbox handling code largely rewritten with new APIs, CRC checksums, new locking mechanisms, merging of cyrus.index and cyrus.expunge, inclusion of user \Seen flag, and much more.
  * Replication code largely rewritten to provide better performance, consistency checking, and recovery from "split-brain" scenarios.
  * Added support for LIST-EXTENDED IMAP extension. Removed support for deprecated (compile-time) LISTEXT IMAP extension. Based on work by Martin Konold &lt;martin.konold@erfrakon.de&gt;
  * Added support for ESEARCH IMAP extension.
  * Added support for WITHIN extension to IMAP SEARCH.
  * Added support for ENABLE IMAP extension.
  * Added support for QRESYNC IMAP extension.
  * Added support for URLAUTH=BINARY IMAP extension.
  * Removed legacy IMAP[2|3|4] cruft. We now only support IMAPrev1 + extensions.
  * Added support for marking QoS on traffic. (courtesy of Philip Prindeville &lt;philipp@redfish-solutions.com&gt;)
  * Modified user_deny.db code to open database once at service startup time.
  * ... and hundreds of tiny things too numerous to mention in a short change log ...
- Added the following patches:
  - cyrus-imapd-2.4.17_drac_auth.patch -- this is a rebased version of contrib/drac_auth.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch -- Allow a result attribute to be specified with ptclient/ldap.c
  * Supersedes KOLAB_cyrus-imapd-2.3.18_UID.patch
- Renamed the following patches:
  - syslog-facility-doc.patch to cyrus-imapd-2.3.16_syslog-facility-doc.patch
- Rebased the following patches for cyrus-imapd-2.4.17:
  - cyrus-imapd-db6.diff as cyrus-imapd-2.4.17_db6.patch
  - cyrus-imapd-openslp.patch as cyrus-imapd-2.4.17_openslp.patch
  - luser_relay.patch as cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  * Option 'lmtp_luser_relay' was renamed to 'lmtp_catchall_mailbox'
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2360
  - cyrus-imapd_tls-session-leak.dif as cyrus-imapd-2.4.17_tls-session-leak.patch
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3252
  - cyrus-imapd-2.3.16-autocreate-0.10-0.drac.diff as cyrus-imapd-2.4.17_autocreate-0.10-0.patch
  - pie.patch as cyrus-imapd-2.4.17_pie.patch
- Removed the following patches (unknown upstream status):
  - KOLAB_cyrus-imapd-2.3.18_Folder-names.patch
  * There is no need for us to extend the mailbox name restrictions
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2633
  - KOLAB_cyrus-imapd-2.3.18_Groups2.patch
  * optional/not needed
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2632
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3282
  - KOLAB_cyrus-imapd-2.3.18_timsieved_starttls-sendcaps.patch
  * Workaround for an issue with kontact/kio ~ KDE 3.5.9
  - KOLAB_cyrus-imapd-2.3.18_UID.patch
  * Superseded by cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
- Removed the following patches (upstream inclusion):
  - charset.patch
  - cyrus-imapd-perl-5.14.patch
  - cyrus-imapd-perl-path.patch
  - cyrus-imapd_references_header-dos.dif
  - KOLAB_cyrus-imapd-2.3.18_Cyradm_Annotations.patch
  * http://git.cyrusimap.org/cyrus-imapd/commit/?h=cyrus-imapd-2.4&amp;id=98dd7a9130653ac848c0782a7688d26a090b494b
  - KOLAB_cyrus-imapd-2.3.18_Logging.patch
  * Use 'auditlog: 1' in imapd.conf
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2964
  - user_deny_db-once.patch
- Changed cyrus-imapd-rc.tar.gz contents, now having cyrus-imapd-rc-2.tar.gz:
  - dir name now is SUSE (was: SuSE)
  - renamed README.SuSE -&gt; README.SUSE
  - added annotation definitions for groupware folders
  - imapd.conf: added annotaion definitions and lmtp_fuzzy_mailbox_match
  - imapd.conf: changed path to TLS certs form /usr/ssl/ to /etc/SSL_accept
  - imapd.conf: set default 'delete_mode' and 'expunge_mode' to 'delayed'
  - cyrus.conf: added more services, added deleteprune and expungeprune
  - moved DB_CONFIG into cyrus-imapd-rc.tar.gz
- Spec file cleanup
- Prepared systemd support
  * with systemd, we use cyrus-imapd as service name
  * we have a symlink 'rccyrus-imapd' to '/usr/sbin/service'
  * for compatibility, we have an alias 'rccyrus' = 'rccyrus-imapd'
- New package: cyrus-imapd-utils, which now contains tools to test mail servers
- New package: cyrus-imapd-cyradm, which now contains the cyradm tool
- TODO:
  - Check KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch
  * Patch is optional
  * https://roundup.kolab.org/issue1141
  - systemd service not yet working as expected, so we disabled it atm</changelog>
  <changelog author="aj@ajaissle.de" date="1390996800">- Added -snmp and -snmp-mibs sub-packages
- Added README.SNMP to cyrus-imapd-rc-2.tar.gz
- Added sysconfig option to use SNMP
  * TODO: convert to a yesno option</changelog>
  <changelog author="johannes@lst.de" date="1413633600">- Add two patches from Kristian Kraemmer Nielsen found on the info-cyrus mailing list
  (http://lists.andrew.cmu.edu/pipermail/info-cyrus/2014-October/037708.html)
  * cyrus-imapd.tls_ec.patch		- adding tls_ec for Perfect Forward Secrecy
  * cyrus-imapd.tls_tlsonly.patch	- add tlsonly config option to fix POODLE vulnerability</changelog>
  <changelog author="rhafer@suse.com" date="1415966400">- Replace the TLS/POODLE patch with what was merged into the upstream
  git repo:
  * cyrus-imapd.tls_options.patch
  * Obsoletes patches cyrus-imapd.tls_tlsonly.patch and
    cyrus-imapd.tls_ec.patch
- Add a default tls_versions settings to imapd.conf which disables
  POODLE affected SSL versions.</changelog>
  <changelog author="tchvatal@suse.com" date="1416571200">- Drop unused patch:
  * KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch</changelog>
  <changelog author="aj@ajaissle.de" date="1418040000">- Changed cyrus-imapd-rc-2.tar.gz/cron.daily.cyrus to use 'su -s
  /bin/bash - cyrus', as the default shell is now /sbin/nologin
  [boo#908014]
- Changed cyrus-imapd-rc-2.tar.gz/rc.cyrus to set
  /var/run/cyrus-master.pid as the PID file (was: /var/run/cyrus.pid)
  [boo#908006]</changelog>
  <changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.4.18 [boo#945844]
  * Security fix: handle urlfetch range starting outside message range
  * A bunch of cleanups and fixes to compiling
  * A bunch of sieve cleanups
  * Enhanced SSL/TLS configuration options
  * Disable use of SSLv2/SSLv3
  * Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos)
  * Fixed Task #116: correct LIST response for domains starting with ?inbox.?
  * Fixed Task #76: fixed lmtpd userdeny db checks (thanks Leena Heino)
  * Fixed bug #3856: lmtpd now performs userdeny checks
  * Fixed bug #3848: support charset aliases in encoded headers
  * Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha)
  * Fixed bug #3415: fixed nntpd LIST/GROUP bug
  * Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves
  * Fixed bug #3757: don?t segfault on mailbox close with no user
  * New ssl/tls configuration options
    tls_compression: 0
    Enable TLS compression. Disabled by default.
    tls_eccurve: prime256v1
    Select the elliptic curve used for ECDHE.
    tls_prefer_server_ciphers: 0
    Prefer the cipher order configured on the server-side.
    tls_versions: tls1_0 tls1_1 tls1_2
    Disable SSL/TLS protocols not in this list.
- Removed the following patches (included upstream):
  - cyrus-imapd-2.4.17_tls-session-leak.patch
  - cyrus-imapd.tls_options.patch
- Added patch cyrus-imapd-2.4.18-implicit_definitions.patch:
  - Have the correct #include when using implicit definitions</changelog>
  <changelog author="aj@ajaissle.de" date="1447588800">- Added cyrus-imapd-2.4.18-CVE-2015-8077.patch:
  boo#954200, CVE-2015-8077: Integer overflow in range checks
- Added cyrus-imapd-2.4.18-CVE-2015-8078.patch:
  boo#954201, CVE-2015-8078: Integer overflow in index_urlfetch</changelog>
  <changelog author="aj@ajaissle.de" date="1450699200">- Add cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch to add
  Outlook 2013-compatible XLIST behaviour.</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Try to cleanup with spec-cleaner
- Remove exit 0 in pre that stopped execution of the rest of the code
- Update pre/post requires to be acutally correct
- Disable stict-aliasing to avoid some problems</changelog>
  <changelog author="aj@ajaissle.de" date="1497441600">- Update to 2.4.19
  * Complete backport of the new (2.5 and later) IMAP IDLE implementation (thanks Thomas Jarosh). This fixes a bunch of bugs and race conditions that were inherent to the older implementation
  * New option ?imapidletimeout? overrides ?timeout? specifically for connections in IDLE state
  * OpenSSL 1.1.0 is now supported
  * Fixed: imap ENABLED doesn?t print * ENABLED when nothing new enabled
  * Fixed: mailbox lock management over rename (thanks Thomas Jarosh)
  * Fixed: added overflow protection to urlfetch range checks
  * Fixed: lmtpd can now deliver when mupdate server isn?t available (thanks Michael Menge)
  * Fixed task 227: service processes no longer divide by zero when invoked with -T 0 argument (thanks Ian Batten and Jens Erat)
  * Fixed task 229: ctl_cyrusdb now uses database paths from imapd.conf (thanks Simon Matter)
  * Fixed bug #3862: mailbox database changes now rolled back on mupdate failure during rename (thanks Michael Menge)
  * Fixed: XFER to 2.5 and later no longer downgrades index to oldest version
  * Fixed: nonsensical ?TEXT.MIME? section now handled as ?HEADER?
  * Fixed: added missing ?auditlog: ? prefix to backend connections (thanks Wolfgang Breyha)
  * Fixed: IMAP SEARCH crash on some platforms
  * Fixed: memory leaks in IMAP SEARCH and IMAP APPEND
  * Fixed Issue #1967: EXISTS count reported earlier if fetching past size of previous message set
- Rebased patches:
  * cyrus-imapd-2.4.17_drac_auth.patch as cyrus-imapd-2.4.19_drac_auth.patch
  * cyrus-imapd-2.4.17_autocreate-0.10-0.patch as cyrus-imapd-2.4.19_autocreate-0.10-0.patch
- Removed patches:
  - cyrus-imapd-2.4.18-CVE-2015-8077.patch (upstream)
  - cyrus-imapd-2.4.18-CVE-2015-8078.patch (upstream)
- Added cyrus-imapd-2.4.19.tar.gz.sig</changelog>
  <changelog author="aj@ajaissle.de" date="1498046400">- Rebased patch:
  * cyrus-imapd-2.4.18-implicit_definitions.patch as cyrus-imapd-2.4.19-implicit_definitions.patch
    Add fix for implicit-fortify-decl in ldap.c</changelog>
  <changelog author="aj@ajaissle.de" date="1498392000">- Add cyrus-imapd-2.4.19-lmtpd_crash.patch:
  * lmtpd: fix uninitialised variable crash [boo#1045899]</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Remove filler wording from description.
- Improve find commands.</changelog>
</package>
<package pkgid="1543d093a297b1cb74d8027e46a501cb30a6fc63f231369ab417db647e2c7566" name="cyrus-imapd-utils" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="149.1"/>
  <changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
  <changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
  <changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
  <changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
  <changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
  <changelog author="aj@ajaissle.de" date="1390564800">- Updated to upstream release 2.4.17 (fate#311137)
  Changes to the Cyrus IMAP Server since 2.3.x:
  * All databases are now default skiplist, and ctl_cyrusdb will automatically convert database type on startup.
  * make_sha1 and make_md5 are removed (replaced by GUID and reconstruct changes)
  * Charset subsystem rewritten - Unicode 5.2 rather than Unicode 2, and UTF-8 support in sieve.
  * Core mailbox handling code largely rewritten with new APIs, CRC checksums, new locking mechanisms, merging of cyrus.index and cyrus.expunge, inclusion of user \Seen flag, and much more.
  * Replication code largely rewritten to provide better performance, consistency checking, and recovery from "split-brain" scenarios.
  * Added support for LIST-EXTENDED IMAP extension. Removed support for deprecated (compile-time) LISTEXT IMAP extension. Based on work by Martin Konold &lt;martin.konold@erfrakon.de&gt;
  * Added support for ESEARCH IMAP extension.
  * Added support for WITHIN extension to IMAP SEARCH.
  * Added support for ENABLE IMAP extension.
  * Added support for QRESYNC IMAP extension.
  * Added support for URLAUTH=BINARY IMAP extension.
  * Removed legacy IMAP[2|3|4] cruft. We now only support IMAPrev1 + extensions.
  * Added support for marking QoS on traffic. (courtesy of Philip Prindeville &lt;philipp@redfish-solutions.com&gt;)
  * Modified user_deny.db code to open database once at service startup time.
  * ... and hundreds of tiny things too numerous to mention in a short change log ...
- Added the following patches:
  - cyrus-imapd-2.4.17_drac_auth.patch -- this is a rebased version of contrib/drac_auth.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch -- Allow a result attribute to be specified with ptclient/ldap.c
  * Supersedes KOLAB_cyrus-imapd-2.3.18_UID.patch
- Renamed the following patches:
  - syslog-facility-doc.patch to cyrus-imapd-2.3.16_syslog-facility-doc.patch
- Rebased the following patches for cyrus-imapd-2.4.17:
  - cyrus-imapd-db6.diff as cyrus-imapd-2.4.17_db6.patch
  - cyrus-imapd-openslp.patch as cyrus-imapd-2.4.17_openslp.patch
  - luser_relay.patch as cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  * Option 'lmtp_luser_relay' was renamed to 'lmtp_catchall_mailbox'
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2360
  - cyrus-imapd_tls-session-leak.dif as cyrus-imapd-2.4.17_tls-session-leak.patch
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3252
  - cyrus-imapd-2.3.16-autocreate-0.10-0.drac.diff as cyrus-imapd-2.4.17_autocreate-0.10-0.patch
  - pie.patch as cyrus-imapd-2.4.17_pie.patch
- Removed the following patches (unknown upstream status):
  - KOLAB_cyrus-imapd-2.3.18_Folder-names.patch
  * There is no need for us to extend the mailbox name restrictions
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2633
  - KOLAB_cyrus-imapd-2.3.18_Groups2.patch
  * optional/not needed
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2632
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3282
  - KOLAB_cyrus-imapd-2.3.18_timsieved_starttls-sendcaps.patch
  * Workaround for an issue with kontact/kio ~ KDE 3.5.9
  - KOLAB_cyrus-imapd-2.3.18_UID.patch
  * Superseded by cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
- Removed the following patches (upstream inclusion):
  - charset.patch
  - cyrus-imapd-perl-5.14.patch
  - cyrus-imapd-perl-path.patch
  - cyrus-imapd_references_header-dos.dif
  - KOLAB_cyrus-imapd-2.3.18_Cyradm_Annotations.patch
  * http://git.cyrusimap.org/cyrus-imapd/commit/?h=cyrus-imapd-2.4&amp;id=98dd7a9130653ac848c0782a7688d26a090b494b
  - KOLAB_cyrus-imapd-2.3.18_Logging.patch
  * Use 'auditlog: 1' in imapd.conf
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2964
  - user_deny_db-once.patch
- Changed cyrus-imapd-rc.tar.gz contents, now having cyrus-imapd-rc-2.tar.gz:
  - dir name now is SUSE (was: SuSE)
  - renamed README.SuSE -&gt; README.SUSE
  - added annotation definitions for groupware folders
  - imapd.conf: added annotaion definitions and lmtp_fuzzy_mailbox_match
  - imapd.conf: changed path to TLS certs form /usr/ssl/ to /etc/SSL_accept
  - imapd.conf: set default 'delete_mode' and 'expunge_mode' to 'delayed'
  - cyrus.conf: added more services, added deleteprune and expungeprune
  - moved DB_CONFIG into cyrus-imapd-rc.tar.gz
- Spec file cleanup
- Prepared systemd support
  * with systemd, we use cyrus-imapd as service name
  * we have a symlink 'rccyrus-imapd' to '/usr/sbin/service'
  * for compatibility, we have an alias 'rccyrus' = 'rccyrus-imapd'
- New package: cyrus-imapd-utils, which now contains tools to test mail servers
- New package: cyrus-imapd-cyradm, which now contains the cyradm tool
- TODO:
  - Check KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch
  * Patch is optional
  * https://roundup.kolab.org/issue1141
  - systemd service not yet working as expected, so we disabled it atm</changelog>
  <changelog author="aj@ajaissle.de" date="1390996800">- Added -snmp and -snmp-mibs sub-packages
- Added README.SNMP to cyrus-imapd-rc-2.tar.gz
- Added sysconfig option to use SNMP
  * TODO: convert to a yesno option</changelog>
  <changelog author="johannes@lst.de" date="1413633600">- Add two patches from Kristian Kraemmer Nielsen found on the info-cyrus mailing list
  (http://lists.andrew.cmu.edu/pipermail/info-cyrus/2014-October/037708.html)
  * cyrus-imapd.tls_ec.patch		- adding tls_ec for Perfect Forward Secrecy
  * cyrus-imapd.tls_tlsonly.patch	- add tlsonly config option to fix POODLE vulnerability</changelog>
  <changelog author="rhafer@suse.com" date="1415966400">- Replace the TLS/POODLE patch with what was merged into the upstream
  git repo:
  * cyrus-imapd.tls_options.patch
  * Obsoletes patches cyrus-imapd.tls_tlsonly.patch and
    cyrus-imapd.tls_ec.patch
- Add a default tls_versions settings to imapd.conf which disables
  POODLE affected SSL versions.</changelog>
  <changelog author="tchvatal@suse.com" date="1416571200">- Drop unused patch:
  * KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch</changelog>
  <changelog author="aj@ajaissle.de" date="1418040000">- Changed cyrus-imapd-rc-2.tar.gz/cron.daily.cyrus to use 'su -s
  /bin/bash - cyrus', as the default shell is now /sbin/nologin
  [boo#908014]
- Changed cyrus-imapd-rc-2.tar.gz/rc.cyrus to set
  /var/run/cyrus-master.pid as the PID file (was: /var/run/cyrus.pid)
  [boo#908006]</changelog>
  <changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.4.18 [boo#945844]
  * Security fix: handle urlfetch range starting outside message range
  * A bunch of cleanups and fixes to compiling
  * A bunch of sieve cleanups
  * Enhanced SSL/TLS configuration options
  * Disable use of SSLv2/SSLv3
  * Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos)
  * Fixed Task #116: correct LIST response for domains starting with ?inbox.?
  * Fixed Task #76: fixed lmtpd userdeny db checks (thanks Leena Heino)
  * Fixed bug #3856: lmtpd now performs userdeny checks
  * Fixed bug #3848: support charset aliases in encoded headers
  * Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha)
  * Fixed bug #3415: fixed nntpd LIST/GROUP bug
  * Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves
  * Fixed bug #3757: don?t segfault on mailbox close with no user
  * New ssl/tls configuration options
    tls_compression: 0
    Enable TLS compression. Disabled by default.
    tls_eccurve: prime256v1
    Select the elliptic curve used for ECDHE.
    tls_prefer_server_ciphers: 0
    Prefer the cipher order configured on the server-side.
    tls_versions: tls1_0 tls1_1 tls1_2
    Disable SSL/TLS protocols not in this list.
- Removed the following patches (included upstream):
  - cyrus-imapd-2.4.17_tls-session-leak.patch
  - cyrus-imapd.tls_options.patch
- Added patch cyrus-imapd-2.4.18-implicit_definitions.patch:
  - Have the correct #include when using implicit definitions</changelog>
  <changelog author="aj@ajaissle.de" date="1447588800">- Added cyrus-imapd-2.4.18-CVE-2015-8077.patch:
  boo#954200, CVE-2015-8077: Integer overflow in range checks
- Added cyrus-imapd-2.4.18-CVE-2015-8078.patch:
  boo#954201, CVE-2015-8078: Integer overflow in index_urlfetch</changelog>
  <changelog author="aj@ajaissle.de" date="1450699200">- Add cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch to add
  Outlook 2013-compatible XLIST behaviour.</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Try to cleanup with spec-cleaner
- Remove exit 0 in pre that stopped execution of the rest of the code
- Update pre/post requires to be acutally correct
- Disable stict-aliasing to avoid some problems</changelog>
  <changelog author="aj@ajaissle.de" date="1497441600">- Update to 2.4.19
  * Complete backport of the new (2.5 and later) IMAP IDLE implementation (thanks Thomas Jarosh). This fixes a bunch of bugs and race conditions that were inherent to the older implementation
  * New option ?imapidletimeout? overrides ?timeout? specifically for connections in IDLE state
  * OpenSSL 1.1.0 is now supported
  * Fixed: imap ENABLED doesn?t print * ENABLED when nothing new enabled
  * Fixed: mailbox lock management over rename (thanks Thomas Jarosh)
  * Fixed: added overflow protection to urlfetch range checks
  * Fixed: lmtpd can now deliver when mupdate server isn?t available (thanks Michael Menge)
  * Fixed task 227: service processes no longer divide by zero when invoked with -T 0 argument (thanks Ian Batten and Jens Erat)
  * Fixed task 229: ctl_cyrusdb now uses database paths from imapd.conf (thanks Simon Matter)
  * Fixed bug #3862: mailbox database changes now rolled back on mupdate failure during rename (thanks Michael Menge)
  * Fixed: XFER to 2.5 and later no longer downgrades index to oldest version
  * Fixed: nonsensical ?TEXT.MIME? section now handled as ?HEADER?
  * Fixed: added missing ?auditlog: ? prefix to backend connections (thanks Wolfgang Breyha)
  * Fixed: IMAP SEARCH crash on some platforms
  * Fixed: memory leaks in IMAP SEARCH and IMAP APPEND
  * Fixed Issue #1967: EXISTS count reported earlier if fetching past size of previous message set
- Rebased patches:
  * cyrus-imapd-2.4.17_drac_auth.patch as cyrus-imapd-2.4.19_drac_auth.patch
  * cyrus-imapd-2.4.17_autocreate-0.10-0.patch as cyrus-imapd-2.4.19_autocreate-0.10-0.patch
- Removed patches:
  - cyrus-imapd-2.4.18-CVE-2015-8077.patch (upstream)
  - cyrus-imapd-2.4.18-CVE-2015-8078.patch (upstream)
- Added cyrus-imapd-2.4.19.tar.gz.sig</changelog>
  <changelog author="aj@ajaissle.de" date="1498046400">- Rebased patch:
  * cyrus-imapd-2.4.18-implicit_definitions.patch as cyrus-imapd-2.4.19-implicit_definitions.patch
    Add fix for implicit-fortify-decl in ldap.c</changelog>
  <changelog author="aj@ajaissle.de" date="1498392000">- Add cyrus-imapd-2.4.19-lmtpd_crash.patch:
  * lmtpd: fix uninitialised variable crash [boo#1045899]</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Remove filler wording from description.
- Improve find commands.</changelog>
</package>
<package pkgid="9403764beeb7fd452fd4cf0ec9334bd4c3110c08daf9013c38e887912755e8f7" name="cyrus2courier" arch="src">
  <version epoch="0" ver="1.3z4" rel="4.1"/>
  <changelog author="Detlef Reichelt &lt;detlef@die-mafia.de&gt;" date="1155643200">- first build</changelog>
</package>
<package pkgid="857bb53c3619cc909f281f57e9fffa5ca1adaf6d184e77820e49b0d1f027a448" name="cyrus2courier" arch="x86_64">
  <version epoch="0" ver="1.3z4" rel="4.1"/>
  <changelog author="Detlef Reichelt &lt;detlef@die-mafia.de&gt;" date="1155643200">- first build</changelog>
</package>
<package pkgid="684de087d8263ae9c64ab1fd92f0509ff7a96190bd2924da38de24f5c3cc5e1a" name="cyrus2courier-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3z4" rel="4.1"/>
  <changelog author="Detlef Reichelt &lt;detlef@die-mafia.de&gt;" date="1155643200">- first build</changelog>
</package>
<package pkgid="f0ad143ff32036c8cd994f30c299edb80dfd8e91b91aa53f5e0a19c454f66a2a" name="cyrus2dovecot" arch="noarch">
  <version epoch="0" ver="1.2" rel="3.1"/>
  <changelog author="mrueckert@suse.de" date="1416571200">- initial package of version 1.2</changelog>
  <changelog author="mrueckert@suse.de" date="1416571201">- generate man page from the perl file
  - new BR: perl</changelog>
  <changelog author="mrueckert@suse.de" date="1417003200">- seems the -u option for pod2man is not supported on older
  distros, so skip it and hope for the best.</changelog>
</package>
<package pkgid="3855af2eba4e0195e5fac85794157c9c35d8d079c2bf89992217e3d47b18c2f3" name="cyrus2dovecot" arch="src">
  <version epoch="0" ver="1.2" rel="3.1"/>
  <changelog author="mrueckert@suse.de" date="1416571200">- initial package of version 1.2</changelog>
  <changelog author="mrueckert@suse.de" date="1416571201">- generate man page from the perl file
  - new BR: perl</changelog>
  <changelog author="mrueckert@suse.de" date="1417003200">- seems the -u option for pod2man is not supported on older
  distros, so skip it and hope for the best.</changelog>
</package>
<package pkgid="4804d13b9a33f98b115cecfe2aaa0f2bff2a458f246fda282327ad46df968a44" name="dcc" arch="src">
  <version epoch="0" ver="1.3.158" rel="1.1"/>
  <changelog author="lrupp@suse.de" date="1244894400">- initial package</changelog>
  <changelog author="opensuse@dstoecker.de" date="1254744000">- update to 1.3.116</changelog>
  <changelog author="opensuse@dstoecker.de" date="1295524800">- update to 1.3.135
- integrate updates from home:rusjako</changelog>
  <changelog author="chris@computersalat.de" date="1295524801">- fix build
  o remove debug_package from spec</changelog>
  <changelog author="opensuse@dstoecker.de" date="1322740800">- Update to version 1.3.140</changelog>
  <changelog author="opensuse@dstoecker.de" date="1449057600">- update to 1.3.158
- copy some improvements from other packages
- add nagios package</changelog>
</package>
<package pkgid="441350a5b610fdc64a78932456475621015fdf17d32a670a3864e57f5675c2d1" name="dcc" arch="x86_64">
  <version epoch="0" ver="1.3.158" rel="1.1"/>
  <changelog author="lrupp@suse.de" date="1244894400">- initial package</changelog>
  <changelog author="opensuse@dstoecker.de" date="1254744000">- update to 1.3.116</changelog>
  <changelog author="opensuse@dstoecker.de" date="1295524800">- update to 1.3.135
- integrate updates from home:rusjako</changelog>
  <changelog author="chris@computersalat.de" date="1295524801">- fix build
  o remove debug_package from spec</changelog>
  <changelog author="opensuse@dstoecker.de" date="1322740800">- Update to version 1.3.140</changelog>
  <changelog author="opensuse@dstoecker.de" date="1449057600">- update to 1.3.158
- copy some improvements from other packages
- add nagios package</changelog>
</package>
<package pkgid="746dcaa39102eecb67763a3c75df2192c064b3fc02fcab6c606dbba6440399ad" name="dcc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.158" rel="1.1"/>
  <changelog author="lrupp@suse.de" date="1244894400">- initial package</changelog>
  <changelog author="opensuse@dstoecker.de" date="1254744000">- update to 1.3.116</changelog>
  <changelog author="opensuse@dstoecker.de" date="1295524800">- update to 1.3.135
- integrate updates from home:rusjako</changelog>
  <changelog author="chris@computersalat.de" date="1295524801">- fix build
  o remove debug_package from spec</changelog>
  <changelog author="opensuse@dstoecker.de" date="1322740800">- Update to version 1.3.140</changelog>
  <changelog author="opensuse@dstoecker.de" date="1449057600">- update to 1.3.158
- copy some improvements from other packages
- add nagios package</changelog>
</package>
<package pkgid="fe3d465df6e20ac366afd8d0ea1199f9257526c91d5402649c4511f93b8be7d9" name="dcc-nagios" arch="x86_64">
  <version epoch="0" ver="1.3.158" rel="1.1"/>
  <changelog author="lrupp@suse.de" date="1244894400">- initial package</changelog>
  <changelog author="opensuse@dstoecker.de" date="1254744000">- update to 1.3.116</changelog>
  <changelog author="opensuse@dstoecker.de" date="1295524800">- update to 1.3.135
- integrate updates from home:rusjako</changelog>
  <changelog author="chris@computersalat.de" date="1295524801">- fix build
  o remove debug_package from spec</changelog>
  <changelog author="opensuse@dstoecker.de" date="1322740800">- Update to version 1.3.140</changelog>
  <changelog author="opensuse@dstoecker.de" date="1449057600">- update to 1.3.158
- copy some improvements from other packages
- add nagios package</changelog>
</package>
<package pkgid="aff01d88dc242527ea23f0578e7279c8b7abcdef0d8ed2cfe0b0f3c8824f899f" name="dcc-www" arch="x86_64">
  <version epoch="0" ver="1.3.158" rel="1.1"/>
  <changelog author="lrupp@suse.de" date="1244894400">- initial package</changelog>
  <changelog author="opensuse@dstoecker.de" date="1254744000">- update to 1.3.116</changelog>
  <changelog author="opensuse@dstoecker.de" date="1295524800">- update to 1.3.135
- integrate updates from home:rusjako</changelog>
  <changelog author="chris@computersalat.de" date="1295524801">- fix build
  o remove debug_package from spec</changelog>
  <changelog author="opensuse@dstoecker.de" date="1322740800">- Update to version 1.3.140</changelog>
  <changelog author="opensuse@dstoecker.de" date="1449057600">- update to 1.3.158
- copy some improvements from other packages
- add nagios package</changelog>
</package>
<package pkgid="8513d28d9245a270928f2fc5efa19e44e3a5dc5e313524b5faa31abb65513076" name="dkimproxy" arch="noarch">
  <version epoch="0" ver="1.4.1" rel="32.1"/>
  <changelog author="varkoly@suse.de" date="1217073600">- Initial Version of dkimporxy</changelog>
  <changelog author="crrodriguez@suse.de" date="1218715200">- fix init scripts
- fix installation  of init scripts</changelog>
  <changelog author="varkoly@suse.de" date="1220616000">- remove fillup_and_insserv from spec file</changelog>
  <changelog author="chris@computersalat.de" date="1297771200">- remove author</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1335009600">- Updated to upstream version 1.4.1
  - There is a new option for setting the i= tag on generated
  signatures.
  - The $sender macro, as it is called, is not the only new macro.
  See the NEWS file for details.</changelog>
  <changelog author="coolo@suse.com" date="1339416000">- avoid providing perl modules that are not in the source, rather
  hard require the needed module</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd and groupadd invocation: -o is useless without -u and
  newer versions of pwdutils/shadowutils fail on this now.</changelog>
</package>
<package pkgid="ecf0299da292e587fb70b78713932d58d8b88b29d11907aa94a8e017dd8f46cc" name="dkimproxy" arch="src">
  <version epoch="0" ver="1.4.1" rel="32.1"/>
  <changelog author="varkoly@suse.de" date="1217073600">- Initial Version of dkimporxy</changelog>
  <changelog author="crrodriguez@suse.de" date="1218715200">- fix init scripts
- fix installation  of init scripts</changelog>
  <changelog author="varkoly@suse.de" date="1220616000">- remove fillup_and_insserv from spec file</changelog>
  <changelog author="chris@computersalat.de" date="1297771200">- remove author</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1335009600">- Updated to upstream version 1.4.1
  - There is a new option for setting the i= tag on generated
  signatures.
  - The $sender macro, as it is called, is not the only new macro.
  See the NEWS file for details.</changelog>
  <changelog author="coolo@suse.com" date="1339416000">- avoid providing perl modules that are not in the source, rather
  hard require the needed module</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd and groupadd invocation: -o is useless without -u and
  newer versions of pwdutils/shadowutils fail on this now.</changelog>
</package>
<package pkgid="4305b763155ea5d3da01e4c63de2c2bffaad78d8848d0ea71da2d36d94320427" name="dovecot" arch="noarch">
  <version epoch="0" ver="2.2" rel="14.1"/>
  <changelog author="mrueckert@suse.de" date="1409832000">- start an unversioned wrapper package again</changelog>
  <changelog author="mrueckert@suse.de" date="1409918400">- make the dovecot implementation a prereq</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- added trigger scripts</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- move ldconfig to the versioned packages
- own the shared var directories.
- kick out the triggerin script as we dont need it.
- restart dovecot also when the module packages are updated</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- no longer restart the socket activation. this seems to kill the
  dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918404">- as we cant use service_del_preun we should still check if it is
  the last package that we install otherwise we kill it
  unconditionally</changelog>
  <changelog author="mrueckert@suse.de" date="1409918405">- remove triggers again. when we handle the dovecot update problems
  by manually stopping in %pre and manually starting up again in
  %postun we dont need them anymore.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- we dont need a dovecot implementation at build time just at
  install time. add BuildIgnore to get around the loop.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- copy the correct file as init script in the non systemd case
- remove %buildroot from %pre script just in case we uncomment that
  part at some point
- only have %post in the systemd case</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- make the /etc/dovecot handling consistent between dovecot and
  dovecotXY. both now use:
  %dir /etc/dovecot
  %ghost %config(noreplace) /etc/dovecot/*</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1411041600">- add reload support to the dovecot service file</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms in pre script</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- updated README.SUSE:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
</package>
<package pkgid="c8845238fd7ff0c8a74840c30160112bff0a5ae671518dd1919dec95b8dcbda3" name="dovecot" arch="src">
  <version epoch="0" ver="2.2" rel="14.1"/>
  <changelog author="mrueckert@suse.de" date="1409832000">- start an unversioned wrapper package again</changelog>
  <changelog author="mrueckert@suse.de" date="1409918400">- make the dovecot implementation a prereq</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- added trigger scripts</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- move ldconfig to the versioned packages
- own the shared var directories.
- kick out the triggerin script as we dont need it.
- restart dovecot also when the module packages are updated</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- no longer restart the socket activation. this seems to kill the
  dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918404">- as we cant use service_del_preun we should still check if it is
  the last package that we install otherwise we kill it
  unconditionally</changelog>
  <changelog author="mrueckert@suse.de" date="1409918405">- remove triggers again. when we handle the dovecot update problems
  by manually stopping in %pre and manually starting up again in
  %postun we dont need them anymore.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- we dont need a dovecot implementation at build time just at
  install time. add BuildIgnore to get around the loop.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- copy the correct file as init script in the non systemd case
- remove %buildroot from %pre script just in case we uncomment that
  part at some point
- only have %post in the systemd case</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- make the /etc/dovecot handling consistent between dovecot and
  dovecotXY. both now use:
  %dir /etc/dovecot
  %ghost %config(noreplace) /etc/dovecot/*</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1411041600">- add reload support to the dovecot service file</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms in pre script</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- updated README.SUSE:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
</package>
<package pkgid="cda80151bdac1138c36693b14ef8a4ef06504bc18578765ebd29a506147d57df" name="dovecot-antispam22" arch="src">
  <version epoch="0" ver="0.0.1" rel="5.8"/>
  <changelog author="asn@cynapses.org" date="1292155200">- Initial RPM</changelog>
  <changelog author="darix@nordisch.org" date="1324036800">- don't require dspam the backend should be configurable</changelog>
  <changelog author="darix@nordisch.org" date="1324036801">- update to 43880985e3dd
  Removed unnecessary and even prone to errors mail allocation
  code.</changelog>
  <changelog author="asn@cryptomilk.org" date="1360497600">- update to 0319240072d8
  * Added support for dovecot 2.2.</changelog>
  <changelog author="asn@cryptomilk.org" date="1372507200">- update to 5ebc6aae4d7c
  * Use macros for compatibility checking.</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1472212800">- Added validate_sendmail.patch, better validation for missing
  binaries, submitted upstream.</changelog>
</package>
<package pkgid="11c698d3563963b33f4264f9dd8508a52af7eb924204dace3a7929240fec51d7" name="dovecot-antispam22" arch="x86_64">
  <version epoch="0" ver="0.0.1" rel="5.8"/>
  <changelog author="asn@cynapses.org" date="1292155200">- Initial RPM</changelog>
  <changelog author="darix@nordisch.org" date="1324036800">- don't require dspam the backend should be configurable</changelog>
  <changelog author="darix@nordisch.org" date="1324036801">- update to 43880985e3dd
  Removed unnecessary and even prone to errors mail allocation
  code.</changelog>
  <changelog author="asn@cryptomilk.org" date="1360497600">- update to 0319240072d8
  * Added support for dovecot 2.2.</changelog>
  <changelog author="asn@cryptomilk.org" date="1372507200">- update to 5ebc6aae4d7c
  * Use macros for compatibility checking.</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1472212800">- Added validate_sendmail.patch, better validation for missing
  binaries, submitted upstream.</changelog>
</package>
<package pkgid="8280f5a396c1594890e234e7890199c291c09d8222d638702b6f4b3d8299b191" name="dovecot-antispam22-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.0.1" rel="5.8"/>
  <changelog author="asn@cynapses.org" date="1292155200">- Initial RPM</changelog>
  <changelog author="darix@nordisch.org" date="1324036800">- don't require dspam the backend should be configurable</changelog>
  <changelog author="darix@nordisch.org" date="1324036801">- update to 43880985e3dd
  Removed unnecessary and even prone to errors mail allocation
  code.</changelog>
  <changelog author="asn@cryptomilk.org" date="1360497600">- update to 0319240072d8
  * Added support for dovecot 2.2.</changelog>
  <changelog author="asn@cryptomilk.org" date="1372507200">- update to 5ebc6aae4d7c
  * Use macros for compatibility checking.</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1472212800">- Added validate_sendmail.patch, better validation for missing
  binaries, submitted upstream.</changelog>
</package>
<package pkgid="bcc204994946f02d5384f9df132a94962744313ea564653113dc15a5fc602cbf" name="dovecot-antispam22-debugsource" arch="x86_64">
  <version epoch="0" ver="0.0.1" rel="5.8"/>
  <changelog author="asn@cynapses.org" date="1292155200">- Initial RPM</changelog>
  <changelog author="darix@nordisch.org" date="1324036800">- don't require dspam the backend should be configurable</changelog>
  <changelog author="darix@nordisch.org" date="1324036801">- update to 43880985e3dd
  Removed unnecessary and even prone to errors mail allocation
  code.</changelog>
  <changelog author="asn@cryptomilk.org" date="1360497600">- update to 0319240072d8
  * Added support for dovecot 2.2.</changelog>
  <changelog author="asn@cryptomilk.org" date="1372507200">- update to 5ebc6aae4d7c
  * Use macros for compatibility checking.</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1472212800">- Added validate_sendmail.patch, better validation for missing
  binaries, submitted upstream.</changelog>
</package>
<package pkgid="bcd3d1da8ce5160df2effdaae736f0c88023aa71dfa3c27b6fe3e2346c812dfe" name="dovecot21" arch="src">
  <version epoch="0" ver="2.1.17" rel="38.1"/>
  <changelog author="mrueckert@suse.de" date="1406635200">- don't package /var/run on systemd systems</changelog>
  <changelog author="mrueckert@suse.de" date="1406635201">- only build clucene for sle 11 or newer</changelog>
  <changelog author="mrueckert@suse.de" date="1406635202">- use xz-devel to fix build on SLE 11 SP3</changelog>
  <changelog author="mrueckert@suse.de" date="1409918400">- port changes for the shared unversioned dovecot package from the
  2.2 package
  - no longer obsolete older packages. module packages require
    their base package with version. the main package has a conflicts
    on other providers of dovecot-implementation.
  - guard the new %pre/%post snippets against missing dovecot
    package
  - fix https://bugzilla.redhat.com/show_bug.cgi?id=134325: dovecot
    should be shut down before exchanging files.
  - remove all the init script related scripts from this package.
    that we we can break the build cycle more easily.
  - copy the example config in post.
  - split out all the things we can share with other versioned
    dovecot packages.
  - no longer obsolete/provide dovecot
  - provide dovecot-implementation</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- switch back to original tarball urls (.tar.gz)
- update dovecot pigeonhole to 0.3.6
  - Fixed a binary code read problem in the `set' command of the
    Sieve variables extension. Using the set command with a
    modifier and an empty string value would cause code corruption
    problems while running the script.
  - Various fixes for compiler and static analyzer warnings, as
    reported by CLang.
  - ManageSieve: Fixed '[' ']' stupidity for response codes (only
    happened before login).
  - Fixed setting name in
    example-config/conf.d/20-managesieve.conf.
  - Fixed messed up hex output for sieve-dump tool.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- added dovecot-2.2.18-dont_use_etc_ssl_certs.sh:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369601">- added dovecot-2.1.17-better_ssl_defaults.patch: (boo #854512)
  - set the default cipher suite to:
    ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
  - disable not just SSLv2 by default but also SSLv3
- dropped all config changing via sed and folded them into this
  patch
  Upgrade note: if you want to benefit from those changes you have
  to merge your /etc/dovecot/conf.d/10-ssl.conf with
  /usr/share/doc/packages/dovecot/example-config/conf.d/10-ssl.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
</package>
<package pkgid="74dc00f96b2d7d1f828c44555975f13a73719303f91668df2b591f10a28b6dad" name="dovecot21" arch="x86_64">
  <version epoch="0" ver="2.1.17" rel="38.1"/>
  <changelog author="mrueckert@suse.de" date="1406635200">- don't package /var/run on systemd systems</changelog>
  <changelog author="mrueckert@suse.de" date="1406635201">- only build clucene for sle 11 or newer</changelog>
  <changelog author="mrueckert@suse.de" date="1406635202">- use xz-devel to fix build on SLE 11 SP3</changelog>
  <changelog author="mrueckert@suse.de" date="1409918400">- port changes for the shared unversioned dovecot package from the
  2.2 package
  - no longer obsolete older packages. module packages require
    their base package with version. the main package has a conflicts
    on other providers of dovecot-implementation.
  - guard the new %pre/%post snippets against missing dovecot
    package
  - fix https://bugzilla.redhat.com/show_bug.cgi?id=134325: dovecot
    should be shut down before exchanging files.
  - remove all the init script related scripts from this package.
    that we we can break the build cycle more easily.
  - copy the example config in post.
  - split out all the things we can share with other versioned
    dovecot packages.
  - no longer obsolete/provide dovecot
  - provide dovecot-implementation</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- switch back to original tarball urls (.tar.gz)
- update dovecot pigeonhole to 0.3.6
  - Fixed a binary code read problem in the `set' command of the
    Sieve variables extension. Using the set command with a
    modifier and an empty string value would cause code corruption
    problems while running the script.
  - Various fixes for compiler and static analyzer warnings, as
    reported by CLang.
  - ManageSieve: Fixed '[' ']' stupidity for response codes (only
    happened before login).
  - Fixed setting name in
    example-config/conf.d/20-managesieve.conf.
  - Fixed messed up hex output for sieve-dump tool.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- added dovecot-2.2.18-dont_use_etc_ssl_certs.sh:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369601">- added dovecot-2.1.17-better_ssl_defaults.patch: (boo #854512)
  - set the default cipher suite to:
    ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
  - disable not just SSLv2 by default but also SSLv3
- dropped all config changing via sed and folded them into this
  patch
  Upgrade note: if you want to benefit from those changes you have
  to merge your /etc/dovecot/conf.d/10-ssl.conf with
  /usr/share/doc/packages/dovecot/example-config/conf.d/10-ssl.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
</package>
<package pkgid="320e6294bbdec2f79db9880ab807f713e6676cfe86b8151880cd9a703bfd7d77" name="dovecot21-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.1.17" rel="38.1"/>
  <changelog author="mrueckert@suse.de" date="1406635200">- don't package /var/run on systemd systems</changelog>
  <changelog author="mrueckert@suse.de" date="1406635201">- only build clucene for sle 11 or newer</changelog>
  <changelog author="mrueckert@suse.de" date="1406635202">- use xz-devel to fix build on SLE 11 SP3</changelog>
  <changelog author="mrueckert@suse.de" date="1409918400">- port changes for the shared unversioned dovecot package from the
  2.2 package
  - no longer obsolete older packages. module packages require
    their base package with version. the main package has a conflicts
    on other providers of dovecot-implementation.
  - guard the new %pre/%post snippets against missing dovecot
    package
  - fix https://bugzilla.redhat.com/show_bug.cgi?id=134325: dovecot
    should be shut down before exchanging files.
  - remove all the init script related scripts from this package.
    that we we can break the build cycle more easily.
  - copy the example config in post.
  - split out all the things we can share with other versioned
    dovecot packages.
  - no longer obsolete/provide dovecot
  - provide dovecot-implementation</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- switch back to original tarball urls (.tar.gz)
- update dovecot pigeonhole to 0.3.6
  - Fixed a binary code read problem in the `set' command of the
    Sieve variables extension. Using the set command with a
    modifier and an empty string value would cause code corruption
    problems while running the script.
  - Various fixes for compiler and static analyzer warnings, as
    reported by CLang.
  - ManageSieve: Fixed '[' ']' stupidity for response codes (only
    happened before login).
  - Fixed setting name in
    example-config/conf.d/20-managesieve.conf.
  - Fixed messed up hex output for sieve-dump tool.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- added dovecot-2.2.18-dont_use_etc_ssl_certs.sh:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369601">- added dovecot-2.1.17-better_ssl_defaults.patch: (boo #854512)
  - set the default cipher suite to:
    ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
  - disable not just SSLv2 by default but also SSLv3
- dropped all config changing via sed and folded them into this
  patch
  Upgrade note: if you want to benefit from those changes you have
  to merge your /etc/dovecot/conf.d/10-ssl.conf with
  /usr/share/doc/packages/dovecot/example-config/conf.d/10-ssl.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
</package>
<package pkgid="d5b561030b25067e6057bb0fab31ac2f4050cdf976236d0c6dd99c04d9b2dceb" name="dovecot21-backend-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.17" rel="38.1"/>
  <changelog author="mrueckert@suse.de" date="1406635200">- don't package /var/run on systemd systems</changelog>
  <changelog author="mrueckert@suse.de" date="1406635201">- only build clucene for sle 11 or newer</changelog>
  <changelog author="mrueckert@suse.de" date="1406635202">- use xz-devel to fix build on SLE 11 SP3</changelog>
  <changelog author="mrueckert@suse.de" date="1409918400">- port changes for the shared unversioned dovecot package from the
  2.2 package
  - no longer obsolete older packages. module packages require
    their base package with version. the main package has a conflicts
    on other providers of dovecot-implementation.
  - guard the new %pre/%post snippets against missing dovecot
    package
  - fix https://bugzilla.redhat.com/show_bug.cgi?id=134325: dovecot
    should be shut down before exchanging files.
  - remove all the init script related scripts from this package.
    that we we can break the build cycle more easily.
  - copy the example config in post.
  - split out all the things we can share with other versioned
    dovecot packages.
  - no longer obsolete/provide dovecot
  - provide dovecot-implementation</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- switch back to original tarball urls (.tar.gz)
- update dovecot pigeonhole to 0.3.6
  - Fixed a binary code read problem in the `set' command of the
    Sieve variables extension. Using the set command with a
    modifier and an empty string value would cause code corruption
    problems while running the script.
  - Various fixes for compiler and static analyzer warnings, as
    reported by CLang.
  - ManageSieve: Fixed '[' ']' stupidity for response codes (only
    happened before login).
  - Fixed setting name in
    example-config/conf.d/20-managesieve.conf.
  - Fixed messed up hex output for sieve-dump tool.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- added dovecot-2.2.18-dont_use_etc_ssl_certs.sh:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369601">- added dovecot-2.1.17-better_ssl_defaults.patch: (boo #854512)
  - set the default cipher suite to:
    ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
  - disable not just SSLv2 by default but also SSLv3
- dropped all config changing via sed and folded them into this
  patch
  Upgrade note: if you want to benefit from those changes you have
  to merge your /etc/dovecot/conf.d/10-ssl.conf with
  /usr/share/doc/packages/dovecot/example-config/conf.d/10-ssl.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
</package>
<package pkgid="2a465dcf1cedf7337aaa58927f7e0809e8f822ba37df8dafe5064fe8c344a3d5" name="dovecot21-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.1.17" rel="38.1"/>
  <changelog author="mrueckert@suse.de" date="1406635200">- don't package /var/run on systemd systems</changelog>
  <changelog author="mrueckert@suse.de" date="1406635201">- only build clucene for sle 11 or newer</changelog>
  <changelog author="mrueckert@suse.de" date="1406635202">- use xz-devel to fix build on SLE 11 SP3</changelog>
  <changelog author="mrueckert@suse.de" date="1409918400">- port changes for the shared unversioned dovecot package from the
  2.2 package
  - no longer obsolete older packages. module packages require
    their base package with version. the main package has a conflicts
    on other providers of dovecot-implementation.
  - guard the new %pre/%post snippets against missing dovecot
    package
  - fix https://bugzilla.redhat.com/show_bug.cgi?id=134325: dovecot
    should be shut down before exchanging files.
  - remove all the init script related scripts from this package.
    that we we can break the build cycle more easily.
  - copy the example config in post.
  - split out all the things we can share with other versioned
    dovecot packages.
  - no longer obsolete/provide dovecot
  - provide dovecot-implementation</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- switch back to original tarball urls (.tar.gz)
- update dovecot pigeonhole to 0.3.6
  - Fixed a binary code read problem in the `set' command of the
    Sieve variables extension. Using the set command with a
    modifier and an empty string value would cause code corruption
    problems while running the script.
  - Various fixes for compiler and static analyzer warnings, as
    reported by CLang.
  - ManageSieve: Fixed '[' ']' stupidity for response codes (only
    happened before login).
  - Fixed setting name in
    example-config/conf.d/20-managesieve.conf.
  - Fixed messed up hex output for sieve-dump tool.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- added dovecot-2.2.18-dont_use_etc_ssl_certs.sh:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369601">- added dovecot-2.1.17-better_ssl_defaults.patch: (boo #854512)
  - set the default cipher suite to:
    ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
  - disable not just SSLv2 by default but also SSLv3
- dropped all config changing via sed and folded them into this
  patch
  Upgrade note: if you want to benefit from those changes you have
  to merge your /etc/dovecot/conf.d/10-ssl.conf with
  /usr/share/doc/packages/dovecot/example-config/conf.d/10-ssl.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
</package>
<package pkgid="a805ae5ef2105b7eb727d64a868a506a0ca61d3ba62653534c02a3979e51b915" name="dovecot21-backend-pgsql-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.17" rel="38.1"/>
  <changelog author="mrueckert@suse.de" date="1406635200">- don't package /var/run on systemd systems</changelog>
  <changelog author="mrueckert@suse.de" date="1406635201">- only build clucene for sle 11 or newer</changelog>
  <changelog author="mrueckert@suse.de" date="1406635202">- use xz-devel to fix build on SLE 11 SP3</changelog>
  <changelog author="mrueckert@suse.de" date="1409918400">- port changes for the shared unversioned dovecot package from the
  2.2 package
  - no longer obsolete older packages. module packages require
    their base package with version. the main package has a conflicts
    on other providers of dovecot-implementation.
  - guard the new %pre/%post snippets against missing dovecot
    package
  - fix https://bugzilla.redhat.com/show_bug.cgi?id=134325: dovecot
    should be shut down before exchanging files.
  - remove all the init script related scripts from this package.
    that we we can break the build cycle more easily.
  - copy the example config in post.
  - split out all the things we can share with other versioned
    dovecot packages.
  - no longer obsolete/provide dovecot
  - provide dovecot-implementation</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- switch back to original tarball urls (.tar.gz)
- update dovecot pigeonhole to 0.3.6
  - Fixed a binary code read problem in the `set' command of the
    Sieve variables extension. Using the set command with a
    modifier and an empty string value would cause code corruption
    problems while running the script.
  - Various fixes for compiler and static analyzer warnings, as
    reported by CLang.
  - ManageSieve: Fixed '[' ']' stupidity for response codes (only
    happened before login).
  - Fixed setting name in
    example-config/conf.d/20-managesieve.conf.
  - Fixed messed up hex output for sieve-dump tool.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- added dovecot-2.2.18-dont_use_etc_ssl_certs.sh:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369601">- added dovecot-2.1.17-better_ssl_defaults.patch: (boo #854512)
  - set the default cipher suite to:
    ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
  - disable not just SSLv2 by default but also SSLv3
- dropped all config changing via sed and folded them into this
  patch
  Upgrade note: if you want to benefit from those changes you have
  to merge your /etc/dovecot/conf.d/10-ssl.conf with
  /usr/share/doc/packages/dovecot/example-config/conf.d/10-ssl.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
</package>
<package pkgid="52fb2eab0b64d821eb6aa182610ec24b26dd55099578d5be0ad97ecbf09a0507" name="dovecot21-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.1.17" rel="38.1"/>
  <changelog author="mrueckert@suse.de" date="1406635200">- don't package /var/run on systemd systems</changelog>
  <changelog author="mrueckert@suse.de" date="1406635201">- only build clucene for sle 11 or newer</changelog>
  <changelog author="mrueckert@suse.de" date="1406635202">- use xz-devel to fix build on SLE 11 SP3</changelog>
  <changelog author="mrueckert@suse.de" date="1409918400">- port changes for the shared unversioned dovecot package from the
  2.2 package
  - no longer obsolete older packages. module packages require
    their base package with version. the main package has a conflicts
    on other providers of dovecot-implementation.
  - guard the new %pre/%post snippets against missing dovecot
    package
  - fix https://bugzilla.redhat.com/show_bug.cgi?id=134325: dovecot
    should be shut down before exchanging files.
  - remove all the init script related scripts from this package.
    that we we can break the build cycle more easily.
  - copy the example config in post.
  - split out all the things we can share with other versioned
    dovecot packages.
  - no longer obsolete/provide dovecot
  - provide dovecot-implementation</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- switch back to original tarball urls (.tar.gz)
- update dovecot pigeonhole to 0.3.6
  - Fixed a binary code read problem in the `set' command of the
    Sieve variables extension. Using the set command with a
    modifier and an empty string value would cause code corruption
    problems while running the script.
  - Various fixes for compiler and static analyzer warnings, as
    reported by CLang.
  - ManageSieve: Fixed '[' ']' stupidity for response codes (only
    happened before login).
  - Fixed setting name in
    example-config/conf.d/20-managesieve.conf.
  - Fixed messed up hex output for sieve-dump tool.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- added dovecot-2.2.18-dont_use_etc_ssl_certs.sh:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369601">- added dovecot-2.1.17-better_ssl_defaults.patch: (boo #854512)
  - set the default cipher suite to:
    ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
  - disable not just SSLv2 by default but also SSLv3
- dropped all config changing via sed and folded them into this
  patch
  Upgrade note: if you want to benefit from those changes you have
  to merge your /etc/dovecot/conf.d/10-ssl.conf with
  /usr/share/doc/packages/dovecot/example-config/conf.d/10-ssl.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
</package>
<package pkgid="606abeccb63753d01d5cc90d3e9e02a94432ff7d597f0d47338bdf68b3500c11" name="dovecot21-backend-sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.17" rel="38.1"/>
  <changelog author="mrueckert@suse.de" date="1406635200">- don't package /var/run on systemd systems</changelog>
  <changelog author="mrueckert@suse.de" date="1406635201">- only build clucene for sle 11 or newer</changelog>
  <changelog author="mrueckert@suse.de" date="1406635202">- use xz-devel to fix build on SLE 11 SP3</changelog>
  <changelog author="mrueckert@suse.de" date="1409918400">- port changes for the shared unversioned dovecot package from the
  2.2 package
  - no longer obsolete older packages. module packages require
    their base package with version. the main package has a conflicts
    on other providers of dovecot-implementation.
  - guard the new %pre/%post snippets against missing dovecot
    package
  - fix https://bugzilla.redhat.com/show_bug.cgi?id=134325: dovecot
    should be shut down before exchanging files.
  - remove all the init script related scripts from this package.
    that we we can break the build cycle more easily.
  - copy the example config in post.
  - split out all the things we can share with other versioned
    dovecot packages.
  - no longer obsolete/provide dovecot
  - provide dovecot-implementation</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- switch back to original tarball urls (.tar.gz)
- update dovecot pigeonhole to 0.3.6
  - Fixed a binary code read problem in the `set' command of the
    Sieve variables extension. Using the set command with a
    modifier and an empty string value would cause code corruption
    problems while running the script.
  - Various fixes for compiler and static analyzer warnings, as
    reported by CLang.
  - ManageSieve: Fixed '[' ']' stupidity for response codes (only
    happened before login).
  - Fixed setting name in
    example-config/conf.d/20-managesieve.conf.
  - Fixed messed up hex output for sieve-dump tool.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- added dovecot-2.2.18-dont_use_etc_ssl_certs.sh:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369601">- added dovecot-2.1.17-better_ssl_defaults.patch: (boo #854512)
  - set the default cipher suite to:
    ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
  - disable not just SSLv2 by default but also SSLv3
- dropped all config changing via sed and folded them into this
  patch
  Upgrade note: if you want to benefit from those changes you have
  to merge your /etc/dovecot/conf.d/10-ssl.conf with
  /usr/share/doc/packages/dovecot/example-config/conf.d/10-ssl.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
</package>
<package pkgid="5ad14e6d9dff1df4ab6f93c072d1742aa6bb937ca02709da2b2867e35f42f07a" name="dovecot21-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.17" rel="38.1"/>
  <changelog author="mrueckert@suse.de" date="1406635200">- don't package /var/run on systemd systems</changelog>
  <changelog author="mrueckert@suse.de" date="1406635201">- only build clucene for sle 11 or newer</changelog>
  <changelog author="mrueckert@suse.de" date="1406635202">- use xz-devel to fix build on SLE 11 SP3</changelog>
  <changelog author="mrueckert@suse.de" date="1409918400">- port changes for the shared unversioned dovecot package from the
  2.2 package
  - no longer obsolete older packages. module packages require
    their base package with version. the main package has a conflicts
    on other providers of dovecot-implementation.
  - guard the new %pre/%post snippets against missing dovecot
    package
  - fix https://bugzilla.redhat.com/show_bug.cgi?id=134325: dovecot
    should be shut down before exchanging files.
  - remove all the init script related scripts from this package.
    that we we can break the build cycle more easily.
  - copy the example config in post.
  - split out all the things we can share with other versioned
    dovecot packages.
  - no longer obsolete/provide dovecot
  - provide dovecot-implementation</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- switch back to original tarball urls (.tar.gz)
- update dovecot pigeonhole to 0.3.6
  - Fixed a binary code read problem in the `set' command of the
    Sieve variables extension. Using the set command with a
    modifier and an empty string value would cause code corruption
    problems while running the script.
  - Various fixes for compiler and static analyzer warnings, as
    reported by CLang.
  - ManageSieve: Fixed '[' ']' stupidity for response codes (only
    happened before login).
  - Fixed setting name in
    example-config/conf.d/20-managesieve.conf.
  - Fixed messed up hex output for sieve-dump tool.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- added dovecot-2.2.18-dont_use_etc_ssl_certs.sh:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369601">- added dovecot-2.1.17-better_ssl_defaults.patch: (boo #854512)
  - set the default cipher suite to:
    ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
  - disable not just SSLv2 by default but also SSLv3
- dropped all config changing via sed and folded them into this
  patch
  Upgrade note: if you want to benefit from those changes you have
  to merge your /etc/dovecot/conf.d/10-ssl.conf with
  /usr/share/doc/packages/dovecot/example-config/conf.d/10-ssl.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
</package>
<package pkgid="0c0ce09adb2f8aaa872295f9f7c6d01dfa0fbb0bb4cb13afdf174910c9a4cbb2" name="dovecot21-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1.17" rel="38.1"/>
  <changelog author="mrueckert@suse.de" date="1406635200">- don't package /var/run on systemd systems</changelog>
  <changelog author="mrueckert@suse.de" date="1406635201">- only build clucene for sle 11 or newer</changelog>
  <changelog author="mrueckert@suse.de" date="1406635202">- use xz-devel to fix build on SLE 11 SP3</changelog>
  <changelog author="mrueckert@suse.de" date="1409918400">- port changes for the shared unversioned dovecot package from the
  2.2 package
  - no longer obsolete older packages. module packages require
    their base package with version. the main package has a conflicts
    on other providers of dovecot-implementation.
  - guard the new %pre/%post snippets against missing dovecot
    package
  - fix https://bugzilla.redhat.com/show_bug.cgi?id=134325: dovecot
    should be shut down before exchanging files.
  - remove all the init script related scripts from this package.
    that we we can break the build cycle more easily.
  - copy the example config in post.
  - split out all the things we can share with other versioned
    dovecot packages.
  - no longer obsolete/provide dovecot
  - provide dovecot-implementation</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- switch back to original tarball urls (.tar.gz)
- update dovecot pigeonhole to 0.3.6
  - Fixed a binary code read problem in the `set' command of the
    Sieve variables extension. Using the set command with a
    modifier and an empty string value would cause code corruption
    problems while running the script.
  - Various fixes for compiler and static analyzer warnings, as
    reported by CLang.
  - ManageSieve: Fixed '[' ']' stupidity for response codes (only
    happened before login).
  - Fixed setting name in
    example-config/conf.d/20-managesieve.conf.
  - Fixed messed up hex output for sieve-dump tool.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- added dovecot-2.2.18-dont_use_etc_ssl_certs.sh:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369601">- added dovecot-2.1.17-better_ssl_defaults.patch: (boo #854512)
  - set the default cipher suite to:
    ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
  - disable not just SSLv2 by default but also SSLv3
- dropped all config changing via sed and folded them into this
  patch
  Upgrade note: if you want to benefit from those changes you have
  to merge your /etc/dovecot/conf.d/10-ssl.conf with
  /usr/share/doc/packages/dovecot/example-config/conf.d/10-ssl.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
</package>
<package pkgid="c602a785885af8ae886a8faaf053d514665b33a55b0015b304d35faf76b3e623" name="dovecot21-devel" arch="x86_64">
  <version epoch="0" ver="2.1.17" rel="38.1"/>
  <changelog author="mrueckert@suse.de" date="1406635200">- don't package /var/run on systemd systems</changelog>
  <changelog author="mrueckert@suse.de" date="1406635201">- only build clucene for sle 11 or newer</changelog>
  <changelog author="mrueckert@suse.de" date="1406635202">- use xz-devel to fix build on SLE 11 SP3</changelog>
  <changelog author="mrueckert@suse.de" date="1409918400">- port changes for the shared unversioned dovecot package from the
  2.2 package
  - no longer obsolete older packages. module packages require
    their base package with version. the main package has a conflicts
    on other providers of dovecot-implementation.
  - guard the new %pre/%post snippets against missing dovecot
    package
  - fix https://bugzilla.redhat.com/show_bug.cgi?id=134325: dovecot
    should be shut down before exchanging files.
  - remove all the init script related scripts from this package.
    that we we can break the build cycle more easily.
  - copy the example config in post.
  - split out all the things we can share with other versioned
    dovecot packages.
  - no longer obsolete/provide dovecot
  - provide dovecot-implementation</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- switch back to original tarball urls (.tar.gz)
- update dovecot pigeonhole to 0.3.6
  - Fixed a binary code read problem in the `set' command of the
    Sieve variables extension. Using the set command with a
    modifier and an empty string value would cause code corruption
    problems while running the script.
  - Various fixes for compiler and static analyzer warnings, as
    reported by CLang.
  - ManageSieve: Fixed '[' ']' stupidity for response codes (only
    happened before login).
  - Fixed setting name in
    example-config/conf.d/20-managesieve.conf.
  - Fixed messed up hex output for sieve-dump tool.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- added dovecot-2.2.18-dont_use_etc_ssl_certs.sh:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369601">- added dovecot-2.1.17-better_ssl_defaults.patch: (boo #854512)
  - set the default cipher suite to:
    ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
  - disable not just SSLv2 by default but also SSLv3
- dropped all config changing via sed and folded them into this
  patch
  Upgrade note: if you want to benefit from those changes you have
  to merge your /etc/dovecot/conf.d/10-ssl.conf with
  /usr/share/doc/packages/dovecot/example-config/conf.d/10-ssl.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
</package>
<package pkgid="05153d399cd65d0f10f36dab0c15442ce7536af780b93ed1edf65400a922c6fb" name="dovecot21-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.1.17" rel="38.1"/>
  <changelog author="mrueckert@suse.de" date="1406635200">- don't package /var/run on systemd systems</changelog>
  <changelog author="mrueckert@suse.de" date="1406635201">- only build clucene for sle 11 or newer</changelog>
  <changelog author="mrueckert@suse.de" date="1406635202">- use xz-devel to fix build on SLE 11 SP3</changelog>
  <changelog author="mrueckert@suse.de" date="1409918400">- port changes for the shared unversioned dovecot package from the
  2.2 package
  - no longer obsolete older packages. module packages require
    their base package with version. the main package has a conflicts
    on other providers of dovecot-implementation.
  - guard the new %pre/%post snippets against missing dovecot
    package
  - fix https://bugzilla.redhat.com/show_bug.cgi?id=134325: dovecot
    should be shut down before exchanging files.
  - remove all the init script related scripts from this package.
    that we we can break the build cycle more easily.
  - copy the example config in post.
  - split out all the things we can share with other versioned
    dovecot packages.
  - no longer obsolete/provide dovecot
  - provide dovecot-implementation</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- switch back to original tarball urls (.tar.gz)
- update dovecot pigeonhole to 0.3.6
  - Fixed a binary code read problem in the `set' command of the
    Sieve variables extension. Using the set command with a
    modifier and an empty string value would cause code corruption
    problems while running the script.
  - Various fixes for compiler and static analyzer warnings, as
    reported by CLang.
  - ManageSieve: Fixed '[' ']' stupidity for response codes (only
    happened before login).
  - Fixed setting name in
    example-config/conf.d/20-managesieve.conf.
  - Fixed messed up hex output for sieve-dump tool.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- added dovecot-2.2.18-dont_use_etc_ssl_certs.sh:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369601">- added dovecot-2.1.17-better_ssl_defaults.patch: (boo #854512)
  - set the default cipher suite to:
    ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
  - disable not just SSLv2 by default but also SSLv3
- dropped all config changing via sed and folded them into this
  patch
  Upgrade note: if you want to benefit from those changes you have
  to merge your /etc/dovecot/conf.d/10-ssl.conf with
  /usr/share/doc/packages/dovecot/example-config/conf.d/10-ssl.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
</package>
<package pkgid="eb278e915a3480a1e03e7eab252b380342e5bb907d43d5e15728f6f281accb2e" name="dovecot21-fts-lucene-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.17" rel="38.1"/>
  <changelog author="mrueckert@suse.de" date="1406635200">- don't package /var/run on systemd systems</changelog>
  <changelog author="mrueckert@suse.de" date="1406635201">- only build clucene for sle 11 or newer</changelog>
  <changelog author="mrueckert@suse.de" date="1406635202">- use xz-devel to fix build on SLE 11 SP3</changelog>
  <changelog author="mrueckert@suse.de" date="1409918400">- port changes for the shared unversioned dovecot package from the
  2.2 package
  - no longer obsolete older packages. module packages require
    their base package with version. the main package has a conflicts
    on other providers of dovecot-implementation.
  - guard the new %pre/%post snippets against missing dovecot
    package
  - fix https://bugzilla.redhat.com/show_bug.cgi?id=134325: dovecot
    should be shut down before exchanging files.
  - remove all the init script related scripts from this package.
    that we we can break the build cycle more easily.
  - copy the example config in post.
  - split out all the things we can share with other versioned
    dovecot packages.
  - no longer obsolete/provide dovecot
  - provide dovecot-implementation</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- switch back to original tarball urls (.tar.gz)
- update dovecot pigeonhole to 0.3.6
  - Fixed a binary code read problem in the `set' command of the
    Sieve variables extension. Using the set command with a
    modifier and an empty string value would cause code corruption
    problems while running the script.
  - Various fixes for compiler and static analyzer warnings, as
    reported by CLang.
  - ManageSieve: Fixed '[' ']' stupidity for response codes (only
    happened before login).
  - Fixed setting name in
    example-config/conf.d/20-managesieve.conf.
  - Fixed messed up hex output for sieve-dump tool.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- added dovecot-2.2.18-dont_use_etc_ssl_certs.sh:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369601">- added dovecot-2.1.17-better_ssl_defaults.patch: (boo #854512)
  - set the default cipher suite to:
    ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
  - disable not just SSLv2 by default but also SSLv3
- dropped all config changing via sed and folded them into this
  patch
  Upgrade note: if you want to benefit from those changes you have
  to merge your /etc/dovecot/conf.d/10-ssl.conf with
  /usr/share/doc/packages/dovecot/example-config/conf.d/10-ssl.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
</package>
<package pkgid="509416919ed958da65c536cd5e4f86fd43757eb8c394a9853574101465a1f207" name="dovecot21-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.1.17" rel="38.1"/>
  <changelog author="mrueckert@suse.de" date="1406635200">- don't package /var/run on systemd systems</changelog>
  <changelog author="mrueckert@suse.de" date="1406635201">- only build clucene for sle 11 or newer</changelog>
  <changelog author="mrueckert@suse.de" date="1406635202">- use xz-devel to fix build on SLE 11 SP3</changelog>
  <changelog author="mrueckert@suse.de" date="1409918400">- port changes for the shared unversioned dovecot package from the
  2.2 package
  - no longer obsolete older packages. module packages require
    their base package with version. the main package has a conflicts
    on other providers of dovecot-implementation.
  - guard the new %pre/%post snippets against missing dovecot
    package
  - fix https://bugzilla.redhat.com/show_bug.cgi?id=134325: dovecot
    should be shut down before exchanging files.
  - remove all the init script related scripts from this package.
    that we we can break the build cycle more easily.
  - copy the example config in post.
  - split out all the things we can share with other versioned
    dovecot packages.
  - no longer obsolete/provide dovecot
  - provide dovecot-implementation</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- switch back to original tarball urls (.tar.gz)
- update dovecot pigeonhole to 0.3.6
  - Fixed a binary code read problem in the `set' command of the
    Sieve variables extension. Using the set command with a
    modifier and an empty string value would cause code corruption
    problems while running the script.
  - Various fixes for compiler and static analyzer warnings, as
    reported by CLang.
  - ManageSieve: Fixed '[' ']' stupidity for response codes (only
    happened before login).
  - Fixed setting name in
    example-config/conf.d/20-managesieve.conf.
  - Fixed messed up hex output for sieve-dump tool.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- added dovecot-2.2.18-dont_use_etc_ssl_certs.sh:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369601">- added dovecot-2.1.17-better_ssl_defaults.patch: (boo #854512)
  - set the default cipher suite to:
    ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
  - disable not just SSLv2 by default but also SSLv3
- dropped all config changing via sed and folded them into this
  patch
  Upgrade note: if you want to benefit from those changes you have
  to merge your /etc/dovecot/conf.d/10-ssl.conf with
  /usr/share/doc/packages/dovecot/example-config/conf.d/10-ssl.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
</package>
<package pkgid="2bf7431e180cdaa6813ef194738c72a9b8b971deda526c218afcbd2b86736073" name="dovecot21-fts-solr-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.17" rel="38.1"/>
  <changelog author="mrueckert@suse.de" date="1406635200">- don't package /var/run on systemd systems</changelog>
  <changelog author="mrueckert@suse.de" date="1406635201">- only build clucene for sle 11 or newer</changelog>
  <changelog author="mrueckert@suse.de" date="1406635202">- use xz-devel to fix build on SLE 11 SP3</changelog>
  <changelog author="mrueckert@suse.de" date="1409918400">- port changes for the shared unversioned dovecot package from the
  2.2 package
  - no longer obsolete older packages. module packages require
    their base package with version. the main package has a conflicts
    on other providers of dovecot-implementation.
  - guard the new %pre/%post snippets against missing dovecot
    package
  - fix https://bugzilla.redhat.com/show_bug.cgi?id=134325: dovecot
    should be shut down before exchanging files.
  - remove all the init script related scripts from this package.
    that we we can break the build cycle more easily.
  - copy the example config in post.
  - split out all the things we can share with other versioned
    dovecot packages.
  - no longer obsolete/provide dovecot
  - provide dovecot-implementation</changelog>
  <changelog author="mrueckert@suse.de" date="1409918401">- we really need the %posttrans for reinstalling the same package</changelog>
  <changelog author="mrueckert@suse.de" date="1409918402">- move the copy part to %postun for handling the upgrading more
  graceful.</changelog>
  <changelog author="mrueckert@suse.de" date="1409918403">- added back the old style conflicts to make upgrading easier
- moved copying of the config to the unversioned package</changelog>
  <changelog author="mrueckert@suse.de" date="1410177600">- finally found a way to preserve the configuration even over
  version updates.
  - have the same ghosting loop in this package as in the
    unversioned package
  - that way the config files are owned by oth and upgrading to a
    newer version of dovecot e.g. 2.3 would also not kill the
    config anymore as before.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177601">- also add dovecot config files for the other 2.x branches</changelog>
  <changelog author="mrueckert@suse.de" date="1410177602">- dont try to delete systemd files when not building with systemd.</changelog>
  <changelog author="mrueckert@suse.de" date="1410177603">- dont ghost the whole /etc/dovecot. on older rpms the directory is
  not created in that case. we only ghost /etc/dovecot/* and have a
  %dir entry for /etc/dovecot.</changelog>
  <changelog author="mrueckert@suse.de" date="1410264000">- add all dovecot-*.configfiles as sources</changelog>
  <changelog author="mrueckert@suse.de" date="1410350400">- while technically not needed, adding back conflicts on
  otherprovider(subpackage)</changelog>
  <changelog author="mrueckert@suse.de" date="1410350401">- fix typo in conflicts: s/otherprovider/otherproviders/</changelog>
  <changelog author="mrueckert@suse.de" date="1410436800">- for the mysql subpackage use the really provided symbol and not
  just part of the package name.</changelog>
  <changelog author="mrueckert@suse.de" date="1410436801">- also track the config files from the sieve support in the %ghost</changelog>
  <changelog author="mrueckert@suse.de" date="1413374400">- switch back to original tarball urls (.tar.gz)
- update dovecot pigeonhole to 0.3.6
  - Fixed a binary code read problem in the `set' command of the
    Sieve variables extension. Using the set command with a
    modifier and an empty string value would cause code corruption
    problems while running the script.
  - Various fixes for compiler and static analyzer warnings, as
    reported by CLang.
  - ManageSieve: Fixed '[' ']' stupidity for response codes (only
    happened before login).
  - Fixed setting name in
    example-config/conf.d/20-managesieve.conf.
  - Fixed messed up hex output for sieve-dump tool.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- added dovecot-2.2.18-dont_use_etc_ssl_certs.sh:
  Remove all references /etc/ssl/certs/. It should not be used
  anymore. (boo #932386)
  Please make sure you read README.SUSE after installing this
  update.</changelog>
  <changelog author="mrueckert@suse.de" date="1434369601">- added dovecot-2.1.17-better_ssl_defaults.patch: (boo #854512)
  - set the default cipher suite to:
    ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH
  - disable not just SSLv2 by default but also SSLv3
- dropped all config changing via sed and folded them into this
  patch
  Upgrade note: if you want to benefit from those changes you have
  to merge your /etc/dovecot/conf.d/10-ssl.conf with
  /usr/share/doc/packages/dovecot/example-config/conf.d/10-ssl.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
</package>
<package pkgid="8f92a28dc9dc82ddfc66868c360cd510e07c189ad3e2e355610f16d5e507789a" name="dovecot22" arch="src">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="6fad43317a34c8e5e55c713a9e4c035eb6c0334e719fac3b05fd999e0bb8fc53" name="dovecot22" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="07090c30c61a61173cd3cd7a35efbb57f64c439cdfce0c461e7cabba90b252b1" name="dovecot22-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="d4a4a75ef55f41602918c3d38c84e0e93253b1f6477c3eae08f3614ce2f0d0ba" name="dovecot22-backend-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="748f5162f6331db3da1c1dd1be79682bc998fd460ef87181f7b8fef02c3a331e" name="dovecot22-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="c6f27913676e14860431bfc5261f709f093cf83873e84d24cde99bed06dd4942" name="dovecot22-backend-pgsql-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="771794e8a41d8674487b23516793f84316b505c178d382433c55495779980e87" name="dovecot22-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="2a60b5d765e590be262921d88f8b4481f941dbf6dd83095ed353c65aa36420b0" name="dovecot22-backend-sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="a28b4f5cdbaca8a7e18ea984cc06ccda1eaacd43fecea80530db8e1f290121f8" name="dovecot22-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="a9df291f1fa3a761825961e4103a53f79a44a5ec97878953157a45eba988d1b7" name="dovecot22-debugsource" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="b1a0084416beb79ad150b848c43a1d26369c3118861da7737b355069bbfdba27" name="dovecot22-devel" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="4ce363c5d2b1fcf5377ef1a2458adfdb0408557953c4edb5a0374931734bbefe" name="dovecot22-fts" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="c4f9f1c3f824376c0d5f862cb76791431e3c246b022b86fa2e06deb126c308e9" name="dovecot22-fts-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="fad339ddeb499b8d93178e0f71db952fbded65e49ee8be5645e7f687eae77666" name="dovecot22-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="a7239933c70cabb58f676cf7e11e211dd08315cd63853698427a603c90d058a0" name="dovecot22-fts-lucene-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="a0583e269cd23df8951d68feee14403e0625722c1b20be31b6e0a2c2408578a9" name="dovecot22-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="e6487482ee854c7eb4ee84c8f1b2f7e11502858123e27d64388f6e45fe611f29" name="dovecot22-fts-solr-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="1c9707d3a71fa858a99e733daa33979455227aaee5224e3efab8914311ddd2ce" name="dovecot22-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="32f1f8ddd3205fb48e51c948ccf20cedf30862c8090152ebdab26877a362a848" name="dovecot22-fts-squat-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.31" rel="99.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1476100800">- Add 0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch:
  Fix LDAP based authentication for some setups (boo #1003952)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865600">- added dovecot-2.2.25-umask_for_mkcert.patch:
  CVE-2016-4983 (bnc #984639)</changelog>
  <changelog author="mrueckert@suse.de" date="1478865601">- update to 2.2.26.0
  - Fixed some compiling issues.
  - auth: Fixed assert-crash when using NTLM or SKEY mechanisms and
    multiple passdbs.
  - auth: Fixed crash when exporting to auth-worker passdb extra
    fields that had empty values.
  - dsync: Fixed assert-crash in dsync_brain_sync_mailbox_deinit
  * master: Removed hardcoded 511 backlog limit for listen().
    The kernel should limit this as needed.
  * doveadm import: Source user is now initialized the same as
    target user. Added -U parameter to override the source user.
  * Mailbox names are no longer limited to 16 hierarchy levels.
    We'll check another way to make sure mailbox names can't grow
    larger than 4096 bytes.
  + Added a concept of "alternative usernames" by returning user_*
    extra field(s) in passdb. doveadm proxy list shows these alt
    usernames in "doveadm proxy list" output. "doveadm
    director&amp;proxy kick" adds -f &lt;passdb field&gt; parameter. The alt
    usernames don't have to be unique, so this allows creation of
    user groups and kicking them in one command.
  + auth: passdb/userdb dict allows now %variables in key settings.
  + auth: If passdb returns noauthenticate=yes extra field, assume
    that it only set extra fields and authentication wasn't
    actually performed.
  + auth: passdb static now supports password={scheme} prefix.
  + auth, login_log_format_elements: Added %{local_name} variable,
    which expands to TLS SNI hostname if given.
  + imapc: Added imapc_max_line_length to limit maximum memory
    usage.
  + imap, pop3: Added rawlog_dir setting to store IMAP/POP3 traffic
    logs.  This replaces at least partially the rawlog plugin.
  + dsync: Added dsync_features=empty-header-workaround setting.
    This makes incremental dsyncs work better for servers that
    randomly return empty headers for mails. When an empty header
    is seen for an existing mail, dsync assumes that it matches the
    local mail.
  + doveadm sync/backup: Added -I &lt;max size&gt; parameter to skip too
    large mails.
  + doveadm sync/backup: Fixed -t parameter and added -e for
    "end date".
  + doveadm mailbox metadata: Added -s parameter to allow accessing
    server metadata by using empty mailbox name.
  + Added "doveadm service status" and "doveadm process status"
    commands.
  + director: Added director_flush_socket. See
    http://wiki2.dovecot.org/Director#Flush_socket
  + doveadm director flush: Users are now moved only max 100 at a
    time to avoid load spikes. --max-parallel parameter overrides
    this.
  + Added FILE_LOCK_SLOW_WARNING_MSECS environment, which logs a
    warning if any lock is waited on or kept for this many
    milliseconds.
  - master process's listener socket was leaked to all child
    processes.  This might have allowed untrusted processes to
    capture and prevent "doveadm service stop" comands from
    working.
  - login proxy: Fixed crash when outgoing SSL connections were
    hanging.
  - auth: userdb fields weren't passed to auth-workers, so
    %{userdb:*} from previous userdbs didn't work there.
  - auth: Each userdb lookup from cache reset its TTL.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - auth: Blocking userdb lookups reset extra fields set by
    previous userdbs.
  - auth: Cache keys didn't include %{passdb:*} and %{userdb:*}
  - auth-policy: Fixed crash due to using already-freed memory if
    policy lookup takes longer than auth request exists.
  - lib-auth: Unescape passdb/userdb extra fields. Mainly affected
    returning extra fields with LFs or TABs.
  - lmtp_user_concurrency_limit&gt;0 setting was logging unnecessary
    anvil errors.
  - lmtp_user_concurrency_limit is now checked before quota check
    with lmtp_rcpt_check_quota=yes to avoid unnecessary quota work.
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - autoexpunge settings for mailboxes with wildcards didn't work
    when namespace prefix was non-empty.
  - Fixed writing &gt;2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - director: Ignore duplicates in director_servers setting.
  - director: Many fixes related to connection handshaking, user
    moving and error handling.
  - director: Don't break with shutdown_clients=no
  - zlib, IMAP BINARY: Fixed internal caching when accessing
    multiple newly created mails. They all had UID=0 and the next
    mail could have wrongly used the previously cached mail.
  - doveadm stats reset wasn't reseting all the stats.
  - auth_stats=yes: Don't update num_logins, since it doubles them
    when using with mail stats.
  - quota count: Fixed deadlocks when updating vsize header.
  - dict-quota: Fixed crashes happening due to memory corruption.
  - dict proxy: Fixed various timeout-related bugs.
  - doveadm proxying: Fixed -A and -u wildcard handling.
  - doveadm proxying: Fixed hangs and bugs related to printing.
  - imap: Fixed wrongly triggering assert-crash in
    client_check_command_hangs.
  - imap proxy: Don't send ID command pipelined with
    nopipelining=yes
  - imap-hibernate: Don't execute quota_over_script or last_login
    after un-hibernation.
  - imap-hibernate: Don't un-hibernate if client sends DONE+IDLE in
    one IP packet.
  - imap-hibernate: Fixed various failures when un-hibernating.
  - fts: fts_autoindex=yes was broken in 2.2.25 unless
    fts_autoindex_exclude settings existed.
  - fts-solr: Fixed searching multiple mailboxes (patch by x16a0)
  - doveadm fetch body.snippet wasn't working in 2.2.25. Also fixed
    a crash with certain emails.
  - pop3-migration + dbox: Various fixes related to POP3 UIDL
    optimization in 2.2.25.
  - pop3-migration: Fixed "truncated email header" workaround.
- update pigeonhole to 0.4.15
  * Part of the Sieve extprograms implementation was moved to
    Dovecot, which means that this release depends on Dovecot
    v2.2.26+.
  * ManageSieve: The PUTSCRIPT command now allows uploading empty
    Sieve scripts.  There was really no good reason to disallow
    doing that.
  + Sieve vnd.dovecot.report extension:
    + Added a Dovecot-Reporting-User field to the report body,
    which contains the e-mail address of the user sending the
    report.
    + Added support for configuring the "From:" address used in
    the report.
  + LDA sieve plugin: Implemented support for a "discard script"
    that is run when the message is going to be discarded. This
    allows doing something other than throwing the message away for
    good.
  + Sieve vnd.dovecot.environment extension:
    Added vnd.dovecot.config.* environment items. These environment
    items map to sieve_env_* settings from the plugin {} section in
    the configuration. Such values can of course also be returned
    from userdb.
  + Sieve vacation extension: Use the Microsoft
    X-Auto-Response-Suppress header to prevent unwanted responses
    from and to (older) Microsoft products.
  + ManageSieve: Added rawlog_dir setting to store ManageSieve
    traffic logs.  This replaces at least partially the rawlog
    plugin (mimics similar IMAP/POP3 change).
  - doveadm sieve plugin: synchronization: Prevent setting file
    timestamps to unix epoch time. This occurred when Dovecot
    passed the timestamp as 'unknown' during synchronization.
  - Sieve exprograms plugin: Fixed spurious '+' sometimes returned
    at the end of socket-based program output.
  - imapsieve plugin: Fixed crash occurring in specific situations.
  - Performed various fixes based on static analysis and Clang
    warnings.
- drop obsolete patches:
  0001-auth-Introduce-db_ldap_bind_sasl-function.patch
  0002-auth-Fix-default-SASL-bind-for-LDAP.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1481025600">- update to 2.2.27
  * dovecot.list.index.log rotation sizes/times were changed so
    that the .log file stays smaller and .log.2 is deleted sooner.
  + Added mail_crypt plugin that allows encryption of stored
    emails.  See http://wiki2.dovecot.org/Plugins/MailCrypt
  + stats: Global stats can be sent to Carbon server by setting
    stats_carbon_server=ip:port
  + imap/pop3 proxy: If passdb returns proxy_not_trusted, don't
    send ID/XCLIENT
  + Added generic hash modifier for %variables:
    %{&lt;hash algorithm&gt;;rounds=&lt;n&gt;,truncate=&lt;bits&gt;,salt=s&gt;:field}
    Hash algorithm is any of the supported ones, e.g. md5, sha1,
    sha256.  Also "pkcs5" is supported using SHA256. For example:
    %{sha256:user} or %{md5;truncate=32:user}.
  + Added support for SHA3-256 and SHA3-512 hashes.
  + config: Support DNS wildcards in local_name, e.g.
    local_name *.example.com { .. } matches anything.example.com,
    but not multiple.anything.example.com.
  + config: Support multiple names in local_name, e.g.
    local_name "1.example.com 2.example.com" { .. }
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large.
    This is because 3 bytes per email were being wasted that could
    have been used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific
    input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is
    detected inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between
    different quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged
    together.
- refreshed patches to apply cleanly again
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch
- drop dovecot-2.2.25-umask_for_mkcert.patch, included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1486382400">- added 79195413c349af7f9ce26871bf79c70af07ea7ce.patch:
  backport patch from git to fix crashes when using FTS plugins</changelog>
  <changelog author="mrueckert@suse.de" date="1487160000">- added dovecot-2.2.27-endian.patch:
  fixes testsuite on s390(x)</changelog>
  <changelog author="kukuk@suse.com" date="1487505600">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="mrueckert@suse.de" date="1487937600">- update to 2.2.28
  * director: "doveadm director move" to same host now refreshes
    user's timeout. This allows keeping user constantly in the same
    backend by just periodically moving the user there.
  * When new mailbox is created, use initially INBOX's
    dovecot.index.cache caching decisions.
  * Expunging mails writes GUID to dovecot.index.log now only if
    the GUID is quickly available from index/cache.
  * pop3c: Increase timeout for PASS command to 5 minutes.
  * Mail access errors are no longer ignored when searching or
    sorting.  With IMAP the untagged SEARCH/SORT reply is still
    sent the same as before, but NO reply is returned instead of
    OK.
  + Make dovecot.list.index's filename configurable. This is needed
    when there are multiple namespaces pointing to the same mail
    root (e.g. lazy_expunge namespace for mdbox).
  + Add size.virtual to dovecot.index when folder vsizes are
    accessed (e.g. quota=count). This is mainly a workaround to
    avoid slow quota recalculation performance when message sizes
    get lost from dovecot.index.cache due to corruption or some
    other reason.
  + auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support
    them in lib-dsasl for client side.
  + auth: Support filtering by SASL mechanism:
    passdb { mechanisms }
  + Shrink the mail processes' memory usage by not storing settings
    duplicated unnecessarily many times.
  + imap: Add imap_fetch_failure setting to control what happens
    when FETCH fails for some mails (see example-config).
  + imap: Include info about last command in disconnection log
    line.
  + imap: Created new SEARCH=X-MIMEPART extension. It's currently
    not advertised by default, since it's not fully implemented.
  + fts-solr: Add support for basic authentication.
  + Cassandra: Support automatically retrying failed queries if
    execution_retry_interval and execution_retry_times are set.
  + doveadm: Added "mailbox path" command.
  + mail_log plugin: If plugin { mail_log_cached_only=yes }, log
    the wanted fields only if it doesn't require opening the email.
  + mail_vsize_bg_after_count setting added (see example-config).
  + mail_sort_max_read_count setting added (see example-config).
  + pop3c: Added pop3c_features=no-pipelining setting to prevent
    using PIPELINING extension even though it's advertised.
  - Index files: day_first_uid wasn't updated correctly since
    v2.2.26.  This caused dovecot.index.cache to be non-optimal.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual
    mailboxes.
  - imap: Running time in tagged command reply was often wrongly 0.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - director: doveadm director kick was broken
  - director: Fix crash when using director_flush_socket
  - director: Fix some bugs when moving users between backends
  - imapc: Various error handling fixes and improvements
  - master: doveadm process status output had a lot of duplicates.
  - autoexpunge: If mailbox's rename timestamp is newer than mail's
    save-timestamp, use it instead. This is useful when
    autoexpunging e.g. Trash/* and an entire mailbox is deleted by
    renaming it under Trash to prevent it from being autoexpunged
    too early.
  - autoexpunge: Multiple processes may have been trying to expunge
    the same mails simultaneously. This was problematic especially
    with lazy_expunge plugin.
  - auth: %{passdb:*} was empty in auth-worker processes
  - auth-policy: hashed_password was always sent empty.
  - dict-sql: Merge multiple UPDATEs to a single statement if
    possible.
  - fts-solr: Escape {} chars when sending queries
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is
    reused for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if
    Sieve was used. especially %{storage_id} was broken.
  - lmtp_user_concurrency_limit didn't work if userdb changed
    username
- drop obsolete patches:
  dovecot-2.2.27-endian.patch
  79195413c349af7f9ce26871bf79c70af07ea7ce.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1488196800">- update pigeonhole to 0.4.17
  - LDA Sieve plugin: Fixed handling of an early explicit keep
    during multiscript execution. Action side-effects and the
    message snapshot would be lost at the final stage where the
    implicit keep is evaluated. This could result in the IMAP flags
    assigned to the message to be forgotten or that headers
    modified by the "editheader" extension would revert to their
    original state.
  - file script storage: Amended the up-to-date time stamp
    comparison for on-disk binaries to include nanoseconds. This
    will fix problems occurring when both binary and script are
    saved within the same second. This fix is ineffective on older
    systems that have no support for nanoseconds in stat()
    timestamps, which	should be pretty rare nowadays.
  - file script storage: Improve saving and listing permission
    error to include more details.
  - imapsieve plugin: Make sure "INBOX" is upper case in static
    mailbox rules.  Otherwise, the mailbox name would never match,
    since matching is performed case-sensitively and Dovecot only
    returns the upper-cased "INBOX".
  - imapsieve plugin: Fixed assert failure occurring when used with
    virtual mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via
    attribute's string value.</changelog>
  <changelog author="mrueckert@suse.de" date="1488196801">- dcrypt is only build with ECC enabled openssl. This seems to be
  missing on SLE 11. Guard against that now.</changelog>
  <changelog author="mrueckert@suse.de" date="1491998400">- update to 2.2.29.1 (boo#1032248)
  - imapc reconnection fix was forgotten from 2.2.29 release, which
    also made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail
  * passdb/userdb dict: Don't double-expand %variables in keys. If
    dict was used as the authentication passdb, using specially
    crafted
    %variables in the username could be used to cause DoS
    %(CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real
    error and usually logs another line saying what function
    failed. Previously the second log line's error message was a
    rather uninformative "Internal error occurred. Refer to server
    log for more information." Now the real error message is
    duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging
    only for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular
    expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (&gt;9000) are no longer visible
    in logs
  * director: Log vhost count changes and HOST-UP/DOWN
  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to
    the remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title
    before autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable
    string.
  + imap/pop3-login: All forward_* extra fields returned by passdb
    are sent to the next hop when proxying using ID/XCLIENT
    commands. On the receiving side these fields are imported and
    sent to auth process where they're accessible via
    %{passdb:forward_*}. This is done only if the sending IP
    address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The
    ID string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers,
    too much data was added to auth cache. This could have resulted
    in wrong replies when using multiple passdbs/userdbs.
  - auth: passdb { skip &amp; mechanisms } were ignored for the first
    passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't
    always synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as
    \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands
    via doveadm-server. Almost all errors used exit code 75
    (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working
    correctly.
  - doveadm director status &lt;user&gt;: "Initial config" was always
    empty
  - imapc: Various reconnection fixes.
- update pigeonhole to 0.4.18
  + imapsieve plugin: Implemented the copy_source_after rule
    action. When this is enabled for a mailbox rule, the specified
    Sieve script is executed for the message in the source mailbox
    during a "COPY" event. This happens only after the Sieve script
    that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items
    for the source and destination mailbox.
  - multiscript: The execution of the discard script had an
    implicit "keep", rather than an implicit "discard".
- refreshed dovecot-2.2.18-better_ssl_defaults.patch
- moved the libdovecot-ldap.so symlink to the devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1493121600">- fix dovecot-2.2.18-better_ssl_defaults.patch:
  aNULLLL is not a valid token, use aNULL.</changelog>
  <changelog author="mrueckert@suse.de" date="1493380800">- added 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  fix flags with implicit keeps in sieve rules</changelog>
  <changelog author="mrueckert@suse.de" date="1496318400">- update to 2.2.30.1 (boo# 1044110)
  - quota_warning scripts weren't working in v2.2.30
  - vpopmail still wasn't compiling
  * auth: Use timing safe comparisons for everything related to
    passwords. It's unlikely that these could have been used for
    practical attacks, especially because Dovecot delays and
    flushes all failed authentications in 2 second intervals. Also
    it could have worked only when passwords were stored in
    plaintext in the passdb.
  * master process sends SIGQUIT to all running children at
    shutdown, which instructs them to close all the socket
    listeners immediately.  This way restarting Dovecot should no
    longer fail due to some processes keeping the listeners open
    for a long time.
  + auth: Add passdb { mechanisms=none } to match separate passdb
    lookup
  + auth: Add passdb { username_filter } to use passdb only if user
    matches the filter. See
    https://wiki2.dovecot.org/PasswordDatabase
  + dsync: Add dsync_commit_msgs_interval setting. It attempts to
    commit the transaction after saving this many new messages.
    Because of the way dsync works, it may not always be possible
    if mails are copied or UIDs need to change.
  + imapc: Support imapc_features=search without ESEARCH extension.
  + imapc: Add imapc_features=fetch-bodystructure to pass through
    remote server's FETCH BODY and BODYSTRUCTURE.
  + imapc: Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on
    the remote server.
  + passdb imap: Add allow_invalid_cert and ssl_ca_file parameters.
  + If dovecot.index.cache corruption is detected, reset only the
    one corrupted mail instead of the whole file.
  + doveadm mailbox status: Add "firstsaved" field.
  + director_flush_socket: Add old host's up/down and vhost count
    as parameters
  - More fixes to automatically fix corruption in
    dovecot.list.index
  - dsync-server: Fix support for
    dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some
    errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in
    v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and
    per-mailbox keys are used. Otherwise the copied mails can't be
    opened.
  - vpopmail: Fix compiling</changelog>
  <changelog author="mrueckert@suse.de" date="1496923200">- update to 2.2.30.2
  - auth: Multiple failed authentications within short time caused
    crashes
  - push-notification: OX driver crashed at deinit</changelog>
  <changelog author="mrueckert@suse.de" date="1498219200">- update to 2.2.31
  * LMTP: Removed "(Dovecot)" from added Received headers. Some
    installations want to hide it, and there's not really any good
    reason for anyone to have it.
  + Add ssl_alt_cert and ssl_alt_key settings to add support for
    having both RSA and ECDSA certificates.
  + dsync/imapc, pop3-migration plugin: Strip trailing whitespace
    from headers when matching mails. This helps with migrations
    from Zimbra.
  + acl: Add acl_globals_only setting to disable looking up
    per-mailbox dovecot-acl files.
  + Parse invalid message addresses better. This mainly affects the
    generated IMAP ENVELOPE replies.
  - v2.2.30 wasn't fixing corrupted dovecot.index.cache files
    properly.  It could have deleted wrong mail's cache or
    assert-crashed.
  - v2.2.30 mail-crypt-acl plugin was assert-crashing
  - v2.2.30 welcome plugin wasn't working
  - Various fixes to handling mailbox listing. Especially related
    to handling nonexistent autocreated/autosubscribed mailboxes
    and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This
    caused some of the ACL rule interactions to not work exactly as
    intended.
  - auth: forward_* fields didn't work properly: Only the first
    forward field was working, and only if the first passdb lookup
    succeeded.
  - Using mail_sort_max_read_count sometimes caused "Broken sort-*
    indexes, resetting" errors.
  - Using mail_sort_max_read_count may have caused very high CPU
    usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly
    and caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=imapc sent unnecessary FETCH RFC822.SIZE to server when
    expunging mails.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date
    or Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since
    the beginning. I guess nobody has been trying to use it.
- update pigeonhole to 0.4.19
  * This release adjusts Pigeonhole to several changes in the
    Dovecot API, making it depend on Dovecot v2.2.31. Previous
    versions of Pigeonhole will produce compile warnings with the
    recent Dovecot releases (but still work ok).
  - Fixed bug in handling of implicit keep in some cases. Implicit
    side-effects, such as assigned flags, were not always applied
    correctly. This is in essence a very old bug, but it was
    exposed by recent changes.
  - include extension: Fixed segfault that (sometimes) occurred
    when the global script location was left unconfigured.
- drop 3e1a17a286ab0e084577fc267a442cb12aed1cbc.patch:
  included in pigeonhole 0.4.19
- refreshed patches to apply cleanly again:
  dovecot-2.2.18-better_ssl_defaults.patch
  dovecot-2.2.18-dont_use_etc_ssl_certs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1498478400">- added dovecot-2.2.31-dhparams_fips_mode.patch (boo#1045662)
  - make sure we do not generate dhparams smaller than 2048 in fips
    mode</changelog>
  <changelog author="mrueckert@suse.de" date="1498564800">- update dovecot-2.2.31-dhparams_fips_mode.patch to also work with
  libressl</changelog>
  <changelog author="mrueckert@suse.de" date="1499083200">- Fix notify extension
  (https://www.dovecot.org/pipermail/dovecot/2017-June/108474.html)
  bcb321bc62117d30bc53a872ca1154c0100aeefd.patch
  8b2d740b8182c63b76ff7ef0dd5e01710228705a.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1499083201">- added de5d6bb50931ea243f582ace5a31abb11b619ffe.patch:
  Do not attempt to deinitialize backend if it's not set</changelog>
</package>
<package pkgid="6ce3f00ba8a88b1a72617e5169a7b46fd49d79c11d5bc9d6d49d6932a230faee" name="drac" arch="src">
  <version epoch="0" ver="1.12" rel="282.1"/>
  <changelog author="choeger@suse.de" date="1007121600">- added buildroot
- remove START_ variable</changelog>
  <changelog author="choeger@suse.de" date="1014638400">- libdrac.a was executable</changelog>
  <changelog author="choeger@suse.de" date="1017144000">- migrated to new sysconfig scheme, Bugzilla ID#15498</changelog>
  <changelog author="choeger@suse.de" date="1017230400">- moved /etc/mail/dracd.allow to /etc/dracd.allow,
  Bugzilla ID#15519</changelog>
  <changelog author="choeger@suse.de" date="1020081600">- added lib64 awareness</changelog>
  <changelog author="choeger@suse.de" date="1028548800">- added Prereq</changelog>
  <changelog author="ro@suse.de" date="1032264000">- removed bogus self-provides</changelog>
  <changelog author="choeger@suse.de" date="1040299200">- added sysconfig metadata</changelog>
  <changelog author="ro@suse.de" date="1052654400">- fix build with db-4.1</changelog>
  <changelog author="choeger@suse.de" date="1059566400">- new macros for stop/restart of services on rpm update/removal</changelog>
  <changelog author="choeger@suse.de" date="1060862400">- Bugfix Bugzilla ID#28870:
  missing activation metadata in sysconfig template</changelog>
  <changelog author="choeger@suse.de" date="1067601600">- Don't build as root</changelog>
  <changelog author="choeger@suse.de" date="1088078400">- update to version 1.12</changelog>
  <changelog author="meissner@suse.de" date="1120132800">- use RPM_OPT_FLAGS, fixed implicits.</changelog>
  <changelog author="choeger@suse.de" date="1120737600">- link using -pie
- use -fPIC</changelog>
  <changelog author="mmj@suse.de" date="1129896000">- add -lpthread to link flags</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="rhafer@suse.de" date="1219060800">- fixed init-script LSB Headers</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Adjust drac.dif to compile with db &gt;= 5.0</changelog>
</package>
<package pkgid="685484d944f706e682f09f28c82d8369db07be7e4e386b17c950bb13c6ee613a" name="drac" arch="x86_64">
  <version epoch="0" ver="1.12" rel="282.1"/>
  <changelog author="choeger@suse.de" date="1060862400">- Bugfix Bugzilla ID#28870:
  missing activation metadata in sysconfig template</changelog>
  <changelog author="choeger@suse.de" date="1067601600">- Don't build as root</changelog>
  <changelog author="choeger@suse.de" date="1088078400">- update to version 1.12</changelog>
  <changelog author="meissner@suse.de" date="1120132800">- use RPM_OPT_FLAGS, fixed implicits.</changelog>
  <changelog author="choeger@suse.de" date="1120737600">- link using -pie
- use -fPIC</changelog>
  <changelog author="mmj@suse.de" date="1129896000">- add -lpthread to link flags</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="rhafer@suse.de" date="1219060800">- fixed init-script LSB Headers</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Adjust drac.dif to compile with db &gt;= 5.0</changelog>
</package>
<package pkgid="c58f1b911a78b7af18a4f1649ac42258b3f56ace88e8a0fa83d314d99151ce6f" name="drac-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.12" rel="282.1"/>
  <changelog author="choeger@suse.de" date="1007121600">- added buildroot
- remove START_ variable</changelog>
  <changelog author="choeger@suse.de" date="1014638400">- libdrac.a was executable</changelog>
  <changelog author="choeger@suse.de" date="1017144000">- migrated to new sysconfig scheme, Bugzilla ID#15498</changelog>
  <changelog author="choeger@suse.de" date="1017230400">- moved /etc/mail/dracd.allow to /etc/dracd.allow,
  Bugzilla ID#15519</changelog>
  <changelog author="choeger@suse.de" date="1020081600">- added lib64 awareness</changelog>
  <changelog author="choeger@suse.de" date="1028548800">- added Prereq</changelog>
  <changelog author="ro@suse.de" date="1032264000">- removed bogus self-provides</changelog>
  <changelog author="choeger@suse.de" date="1040299200">- added sysconfig metadata</changelog>
  <changelog author="ro@suse.de" date="1052654400">- fix build with db-4.1</changelog>
  <changelog author="choeger@suse.de" date="1059566400">- new macros for stop/restart of services on rpm update/removal</changelog>
  <changelog author="choeger@suse.de" date="1060862400">- Bugfix Bugzilla ID#28870:
  missing activation metadata in sysconfig template</changelog>
  <changelog author="choeger@suse.de" date="1067601600">- Don't build as root</changelog>
  <changelog author="choeger@suse.de" date="1088078400">- update to version 1.12</changelog>
  <changelog author="meissner@suse.de" date="1120132800">- use RPM_OPT_FLAGS, fixed implicits.</changelog>
  <changelog author="choeger@suse.de" date="1120737600">- link using -pie
- use -fPIC</changelog>
  <changelog author="mmj@suse.de" date="1129896000">- add -lpthread to link flags</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="rhafer@suse.de" date="1219060800">- fixed init-script LSB Headers</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Adjust drac.dif to compile with db &gt;= 5.0</changelog>
</package>
<package pkgid="5bb6966b38ff8e64111f880ce7df775b4b500f64e66b6a2a14e61453e8e44f1b" name="drac-debugsource" arch="x86_64">
  <version epoch="0" ver="1.12" rel="282.1"/>
  <changelog author="choeger@suse.de" date="1060862400">- Bugfix Bugzilla ID#28870:
  missing activation metadata in sysconfig template</changelog>
  <changelog author="choeger@suse.de" date="1067601600">- Don't build as root</changelog>
  <changelog author="choeger@suse.de" date="1088078400">- update to version 1.12</changelog>
  <changelog author="meissner@suse.de" date="1120132800">- use RPM_OPT_FLAGS, fixed implicits.</changelog>
  <changelog author="choeger@suse.de" date="1120737600">- link using -pie
- use -fPIC</changelog>
  <changelog author="mmj@suse.de" date="1129896000">- add -lpthread to link flags</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="rhafer@suse.de" date="1219060800">- fixed init-script LSB Headers</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Adjust drac.dif to compile with db &gt;= 5.0</changelog>
</package>
<package pkgid="0e4c8c162cfa34e82b569c4d128b263674e81f59646ca36a7ea30aaab39827a2" name="email" arch="src">
  <version epoch="0" ver="3.1.2" rel="2.1"/>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.3.0-1" date="1097668800">- new package</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.3.3-1" date="1112616000">- version 2.3.3</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.3.4-1" date="1113307200">- version 2.3.4</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.3.4-2" date="1140350400">- rewrote spec file
- x86_64 builds
- added debuginfo support</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.5.0-1" date="1150459200">- moved configure to build section
- added binary stripping on SUSE &lt; 9.3
- removed Packager and Distribution, injected by rpmmacros
- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.5.1-1" date="1164024000">- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.5.1" date="1194177600">- moved to openSUSE Build Service</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.0.2" date="1207656000">- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.0.3" date="1208088000">- new upstream version:
  * segfault when using AUTH PLAIN was fixed
  * issue in using LF instead of CRLF was fixed</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.0.4" date="1208952000">- new upstream version:
  * a bug with a segfault caused by attaching files with no MIME type was fixed</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.0.5" date="1210939200">- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.1.0" date="1228046400">- update to 3.1.0:
  * UTF-8 support for headers and message
  * a timeout option
  * VCARD support
  * fixed a bug that was causing 100% CPU usage on some mailings
  * fixed "No SMTP Server specified" (existed on 64-bit and Solaris systems)
  * fixed MIME type guessing</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.1.2" date="1231070400">- update to 3.1.2</changelog>
</package>
<package pkgid="7b9f8eec54e59c2f1cba859d7ce55def865b26c0f353cd7aedc2cb95e227f55b" name="email" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="2.1"/>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.3.4-2" date="1140350400">- rewrote spec file
- x86_64 builds
- added debuginfo support</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.5.0-1" date="1150459200">- moved configure to build section
- added binary stripping on SUSE &lt; 9.3
- removed Packager and Distribution, injected by rpmmacros
- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.5.1-1" date="1164024000">- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.5.1" date="1194177600">- moved to openSUSE Build Service</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.0.2" date="1207656000">- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.0.3" date="1208088000">- new upstream version:
  * segfault when using AUTH PLAIN was fixed
  * issue in using LF instead of CRLF was fixed</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.0.4" date="1208952000">- new upstream version:
  * a bug with a segfault caused by attaching files with no MIME type was fixed</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.0.5" date="1210939200">- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.1.0" date="1228046400">- update to 3.1.0:
  * UTF-8 support for headers and message
  * a timeout option
  * VCARD support
  * fixed a bug that was causing 100% CPU usage on some mailings
  * fixed "No SMTP Server specified" (existed on 64-bit and Solaris systems)
  * fixed MIME type guessing</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.1.2" date="1231070400">- update to 3.1.2</changelog>
</package>
<package pkgid="2fdb83bbb4daf3ff272d0afebef90b7c24572f500c81735c460c2184a63712e7" name="email-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="2.1"/>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.3.0-1" date="1097668800">- new package</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.3.3-1" date="1112616000">- version 2.3.3</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.3.4-1" date="1113307200">- version 2.3.4</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.3.4-2" date="1140350400">- rewrote spec file
- x86_64 builds
- added debuginfo support</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.5.0-1" date="1150459200">- moved configure to build section
- added binary stripping on SUSE &lt; 9.3
- removed Packager and Distribution, injected by rpmmacros
- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.5.1-1" date="1164024000">- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.5.1" date="1194177600">- moved to openSUSE Build Service</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.0.2" date="1207656000">- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.0.3" date="1208088000">- new upstream version:
  * segfault when using AUTH PLAIN was fixed
  * issue in using LF instead of CRLF was fixed</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.0.4" date="1208952000">- new upstream version:
  * a bug with a segfault caused by attaching files with no MIME type was fixed</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.0.5" date="1210939200">- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.1.0" date="1228046400">- update to 3.1.0:
  * UTF-8 support for headers and message
  * a timeout option
  * VCARD support
  * fixed a bug that was causing 100% CPU usage on some mailings
  * fixed "No SMTP Server specified" (existed on 64-bit and Solaris systems)
  * fixed MIME type guessing</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.1.2" date="1231070400">- update to 3.1.2</changelog>
</package>
<package pkgid="1a017091e3a185e5031013f9b44c69c104c3496f76d3acce7a894a0b777067c2" name="email-debugsource" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="2.1"/>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.3.4-2" date="1140350400">- rewrote spec file
- x86_64 builds
- added debuginfo support</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.5.0-1" date="1150459200">- moved configure to build section
- added binary stripping on SUSE &lt; 9.3
- removed Packager and Distribution, injected by rpmmacros
- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.5.1-1" date="1164024000">- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 2.5.1" date="1194177600">- moved to openSUSE Build Service</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.0.2" date="1207656000">- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.0.3" date="1208088000">- new upstream version:
  * segfault when using AUTH PLAIN was fixed
  * issue in using LF instead of CRLF was fixed</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.0.4" date="1208952000">- new upstream version:
  * a bug with a segfault caused by attaching files with no MIME type was fixed</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.0.5" date="1210939200">- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.1.0" date="1228046400">- update to 3.1.0:
  * UTF-8 support for headers and message
  * a timeout option
  * VCARD support
  * fixed a bug that was causing 100% CPU usage on some mailings
  * fixed "No SMTP Server specified" (existed on 64-bit and Solaris systems)
  * fixed MIME type guessing</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 3.1.2" date="1231070400">- update to 3.1.2</changelog>
</package>
<package pkgid="884f815aad896fa01af9459af86089b3d451ac1d786fa1bfb7c554d76def7774" name="esmtp" arch="src">
  <version epoch="0" ver="1.2" rel="1.1"/>
  <changelog author="mrueckert@suse.de" date="1188907200">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1188907201">- provide smtp_daemon</changelog>
  <changelog author="michal@sawicz.net" date="1288612800">- fix package build on OBS and x86_64 architecture</changelog>
  <changelog author="max@novell.com" date="1302177600">- New version: 1.2:
  * Fix NTLM authentication
  * Option to disable Message-ID header
  * Use locking in esmtp-wrapper
  * Option to force local only MDA
  * Make force_mda in the esmtprc to work with the -t option</changelog>
</package>
<package pkgid="a8ac9981c9f441c31a19dcd18b54ae32309a008317a4ab3b2bc3f7d4cfd7b25d" name="esmtp" arch="x86_64">
  <version epoch="0" ver="1.2" rel="1.1"/>
  <changelog author="mrueckert@suse.de" date="1188907200">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1188907201">- provide smtp_daemon</changelog>
  <changelog author="michal@sawicz.net" date="1288612800">- fix package build on OBS and x86_64 architecture</changelog>
  <changelog author="max@novell.com" date="1302177600">- New version: 1.2:
  * Fix NTLM authentication
  * Option to disable Message-ID header
  * Use locking in esmtp-wrapper
  * Option to force local only MDA
  * Make force_mda in the esmtprc to work with the -t option</changelog>
</package>
<package pkgid="34c3c92693d3cdabf29725e645bdbee77c6649de385e206d087e0b3153200988" name="esmtp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2" rel="1.1"/>
  <changelog author="mrueckert@suse.de" date="1188907200">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1188907201">- provide smtp_daemon</changelog>
  <changelog author="michal@sawicz.net" date="1288612800">- fix package build on OBS and x86_64 architecture</changelog>
  <changelog author="max@novell.com" date="1302177600">- New version: 1.2:
  * Fix NTLM authentication
  * Option to disable Message-ID header
  * Use locking in esmtp-wrapper
  * Option to force local only MDA
  * Make force_mda in the esmtprc to work with the -t option</changelog>
</package>
<package pkgid="a96feaf80fa3b414eeda433f1344ba0c9379e7050cbc9741a30855c78d684ad3" name="esmtp-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2" rel="1.1"/>
  <changelog author="mrueckert@suse.de" date="1188907200">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1188907201">- provide smtp_daemon</changelog>
  <changelog author="michal@sawicz.net" date="1288612800">- fix package build on OBS and x86_64 architecture</changelog>
  <changelog author="max@novell.com" date="1302177600">- New version: 1.2:
  * Fix NTLM authentication
  * Option to disable Message-ID header
  * Use locking in esmtp-wrapper
  * Option to force local only MDA
  * Make force_mda in the esmtprc to work with the -t option</changelog>
</package>
<package pkgid="4d50746e8008f71c8038df8d3d835efea519fd2b47295fd5f30c12f34dd48629" name="exim" arch="src">
  <version epoch="0" ver="4.86.2" rel="114.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="7b7b398724c53e82e98604aca8ddf14a662c2dcbbb596ddf1e3a863fdece687c" name="exim" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="114.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="b56bdcde11192ea703b9237cc216c35a6b5eecc7d2cb42b513fce3ddd65667ca" name="exim-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="114.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="f3278df6e2995ea33f9ca4e18cdd36be91a825cf8c69bb4932b578b4558242c4" name="exim-debugsource" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="114.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="815b55ba332f57275da440271ac4e1b7c69a8ea69cbe403cf9863c685777334f" name="exim-mysql" arch="src">
  <version epoch="0" ver="4.86.2" rel="133.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="e753302246078aa972fd95b8595227133724ac9e703ff8fa11e690ea4fde3178" name="exim-mysql" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="133.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="fda079cb51971cda6b1eea4beb1c4318e918455426022dd274fd4e464dcf7855" name="exim-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="133.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="0aa3165c9d0311af9d55cf5a3b16fe2c4f89706f491ce8f3fdf3db3a2c0a4052" name="exim-mysql-debugsource" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="133.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="0475f5631a15a86e63f6100e347b72855a0cf0a28b0b0310f5ca3decae1e44f1" name="exim-postgresql" arch="src">
  <version epoch="0" ver="4.86.2" rel="118.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="8ecbe1d4618f8c6dcc01795e3dcaef7efc4011905cceb5a48ecae183869ce876" name="exim-postgresql" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="118.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="3ebfbbcee9961e3d457822013152bddcd580e71d5be8c28803c8ef5eb206bf23" name="exim-postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="118.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="69b7c7ba0a9b1dc2b7f6a6b4623fcf802051f579df863ca7a00bbedc17e276a5" name="exim-postgresql-debugsource" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="118.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="0e886b9fdbe950fedd2585989dbdffafb661949a21c72f19f5aa2fb6e6660649" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="114.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="88d2673dd667d40586e55816405f99b05afba691992684ffcbd9740d227ebf78" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="118.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="f1da29a16e93f5c3c38d080f197c073bcf71e5184f685f02bf9ff349ddd907e5" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="133.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="18bc2d0713cc939ea2ce52867709dd556524ad6f9bdbb280451d8fb8569779ae" name="eximon-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="114.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="903e531f68290c8413a159ed1fc584cfecedf3d5bd6ad3b183a66c679f21367d" name="eximon-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="118.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="4178758630014e6884a01e76edfd452c5b2d71060e8f2cc5071b1ec11eab4cde" name="eximon-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="133.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="67ae411327e6c9f7dbe7cf4cafcf7b150666e950d4ea4cb1b44cbf95acb4e244" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="114.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="40fd19855ad90286c48210bcf79d4fadac6a0077c885c3e59b366f66194ce366" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="118.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="014ee6cf3d5c05ebfd206d737cb3cb903b21835566bc1233e8bd1f2b7d26bb04" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.86.2" rel="133.1"/>
  <changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
  <changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
  <changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
</package>
<package pkgid="1d77bed738df78a84d40c00b98099177f313e5a22c6122cc90189cc268bd5365" name="fann" arch="src">
  <version epoch="0" ver="2.2.0" rel="8.1"/>
  <changelog author="judas_iscariote@shorewall.net" date="1176811200">- update to version fann-2.1.0.snap20070416 solving several problems
  see the vendor site for more info.</changelog>
  <changelog author="judas_iscariote@shorewall.net" date="1180958400">-adapt to the new library package policy as well.</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Add autotools BuildRequires for factory/12.2
- Ensure pkgconfig symbols are provided</changelog>
  <changelog author="coolo@suse.com" date="1432728000">- update to 2.2
  Added Sarprop training
  Added fann_create_train for creating an empty training data struct
  Added fann_copy for copying an ANN
  Added cascade_min_out_epochs and cascade_min_cand_epochs to improve cascade training
  Added extra checks when training, to ensure that data and network input and output sizes matches
  Added Visual Studio 2010 solution
  Added support for 64bit architecture
  Cleanup in sources</changelog>
  <changelog author="rpm@fthiessen.de" date="1446552000">- Fixed spec file:
  * Use cmake macro
  * Some cleanup
  * Updated URL (new website)
- Added fix-cmake-link-libraries.patch to fix build.
  * This will add libm to the linker flags and install pkgconfig
    file in lib(64)/pkgconfig</changelog>
  <changelog author="jengelh@inai.de" date="1477137600">- Update descriptions, summaries and license field</changelog>
</package>
<package pkgid="1e97a4969ecc99973963528963f55ccc4bac57b72a60011581db727e2cdb8afd" name="fann-debugsource" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="8.1"/>
  <changelog author="judas_iscariote@shorewall.net" date="1176811200">- update to version fann-2.1.0.snap20070416 solving several problems
  see the vendor site for more info.</changelog>
  <changelog author="judas_iscariote@shorewall.net" date="1180958400">-adapt to the new library package policy as well.</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Add autotools BuildRequires for factory/12.2
- Ensure pkgconfig symbols are provided</changelog>
  <changelog author="coolo@suse.com" date="1432728000">- update to 2.2
  Added Sarprop training
  Added fann_create_train for creating an empty training data struct
  Added fann_copy for copying an ANN
  Added cascade_min_out_epochs and cascade_min_cand_epochs to improve cascade training
  Added extra checks when training, to ensure that data and network input and output sizes matches
  Added Visual Studio 2010 solution
  Added support for 64bit architecture
  Cleanup in sources</changelog>
  <changelog author="rpm@fthiessen.de" date="1446552000">- Fixed spec file:
  * Use cmake macro
  * Some cleanup
  * Updated URL (new website)
- Added fix-cmake-link-libraries.patch to fix build.
  * This will add libm to the linker flags and install pkgconfig
    file in lib(64)/pkgconfig</changelog>
  <changelog author="jengelh@inai.de" date="1477137600">- Update descriptions, summaries and license field</changelog>
</package>
<package pkgid="f90e32fb5552bf3986f7244493658073e1fd5d915d4453199e3cf709617948c1" name="fdm" arch="src">
  <version epoch="0" ver="1.9" rel="1.1"/>
  <changelog author="mrueckert@suse.de" date="1160049600">- initial package of version 0.4</changelog>
  <changelog author="mrueckert@suse.de" date="1165406400">- updating to version 0.6</changelog>
  <changelog author="mrueckert@suse.de" date="1165924800">- updating to version 0.7</changelog>
  <changelog author="mrueckert@suse.de" date="1168344000">- updating to version 0.8a
- added fdm-0.8a_db185.patch:
  properly build against db 1.85 on suse</changelog>
  <changelog author="mrueckert@suse.de" date="1169812800">- update to version 0.9:
  - support for IMAP over a pipe (allows IMAP over ssh),
  - POP3/IMAP/NNTP code cleanup (basically a rewrite),
  - a purge-after option to flush deleted mails every so
    often, for unreliable connections,
  - SOCKS proxying now works with SSL,
  - support for writing gzip compressed mboxes,
  - an SMTP bug fix, a workaround for Exchange, and a couple
    of general bug fixes with large mails, reported by
    Kilburn Abraham,
  - glob in maildir account paths and fnmatch in account list
    on rules,
  - an fdm-sanitize script to remove passwords from -vvvv
    output.</changelog>
  <changelog author="mrueckert@suse.de" date="1175860800">- update to 1.1</changelog>
  <changelog author="mrueckert@suse.de" date="1191240000">- update to 1.4</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1229947200">- update to 1.6</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1256385600">- fix build on Factory and 11.2 by changing the library linking
  order (for as-needed)
- remove the current build date from the version string, in order
  to fix proper build-compare detection</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1256731200">- add setproctitle support on Linux
- fix posix_types_32.h build failure on x86 by replacing
  - I- with -iquote (now that was an ugly one to track down)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1471608000">- update to 1.9
- dropped patches:
    fdm-fix_iquote.patch
    fdm-fix_link_order.patch
    fdm-setproctitle.patch
    fdm-build.patch
    fdm-util_linux_setproctitle.patch
    fdm-remove_date_from_version.patch</changelog>
</package>
<package pkgid="d28213880d75437dd493fc04af5254a8050f5c1c0a00b406b70de6b6d02da1c4" name="fdm" arch="x86_64">
  <version epoch="0" ver="1.9" rel="1.1"/>
  <changelog author="mrueckert@suse.de" date="1165406400">- updating to version 0.6</changelog>
  <changelog author="mrueckert@suse.de" date="1165924800">- updating to version 0.7</changelog>
  <changelog author="mrueckert@suse.de" date="1168344000">- updating to version 0.8a
- added fdm-0.8a_db185.patch:
  properly build against db 1.85 on suse</changelog>
  <changelog author="mrueckert@suse.de" date="1169812800">- update to version 0.9:
  - support for IMAP over a pipe (allows IMAP over ssh),
  - POP3/IMAP/NNTP code cleanup (basically a rewrite),
  - a purge-after option to flush deleted mails every so
    often, for unreliable connections,
  - SOCKS proxying now works with SSL,
  - support for writing gzip compressed mboxes,
  - an SMTP bug fix, a workaround for Exchange, and a couple
    of general bug fixes with large mails, reported by
    Kilburn Abraham,
  - glob in maildir account paths and fnmatch in account list
    on rules,
  - an fdm-sanitize script to remove passwords from -vvvv
    output.</changelog>
  <changelog author="mrueckert@suse.de" date="1175860800">- update to 1.1</changelog>
  <changelog author="mrueckert@suse.de" date="1191240000">- update to 1.4</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1229947200">- update to 1.6</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1256385600">- fix build on Factory and 11.2 by changing the library linking
  order (for as-needed)
- remove the current build date from the version string, in order
  to fix proper build-compare detection</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1256731200">- add setproctitle support on Linux
- fix posix_types_32.h build failure on x86 by replacing
  - I- with -iquote (now that was an ugly one to track down)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1471608000">- update to 1.9
- dropped patches:
    fdm-fix_iquote.patch
    fdm-fix_link_order.patch
    fdm-setproctitle.patch
    fdm-build.patch
    fdm-util_linux_setproctitle.patch
    fdm-remove_date_from_version.patch</changelog>
</package>
<package pkgid="955258f411b93a4bebb183b67f6ac09b465d1823752e4ad045a943773dcedf8d" name="fdm-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.9" rel="1.1"/>
  <changelog author="mrueckert@suse.de" date="1160049600">- initial package of version 0.4</changelog>
  <changelog author="mrueckert@suse.de" date="1165406400">- updating to version 0.6</changelog>
  <changelog author="mrueckert@suse.de" date="1165924800">- updating to version 0.7</changelog>
  <changelog author="mrueckert@suse.de" date="1168344000">- updating to version 0.8a
- added fdm-0.8a_db185.patch:
  properly build against db 1.85 on suse</changelog>
  <changelog author="mrueckert@suse.de" date="1169812800">- update to version 0.9:
  - support for IMAP over a pipe (allows IMAP over ssh),
  - POP3/IMAP/NNTP code cleanup (basically a rewrite),
  - a purge-after option to flush deleted mails every so
    often, for unreliable connections,
  - SOCKS proxying now works with SSL,
  - support for writing gzip compressed mboxes,
  - an SMTP bug fix, a workaround for Exchange, and a couple
    of general bug fixes with large mails, reported by
    Kilburn Abraham,
  - glob in maildir account paths and fnmatch in account list
    on rules,
  - an fdm-sanitize script to remove passwords from -vvvv
    output.</changelog>
  <changelog author="mrueckert@suse.de" date="1175860800">- update to 1.1</changelog>
  <changelog author="mrueckert@suse.de" date="1191240000">- update to 1.4</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1229947200">- update to 1.6</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1256385600">- fix build on Factory and 11.2 by changing the library linking
  order (for as-needed)
- remove the current build date from the version string, in order
  to fix proper build-compare detection</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1256731200">- add setproctitle support on Linux
- fix posix_types_32.h build failure on x86 by replacing
  - I- with -iquote (now that was an ugly one to track down)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1471608000">- update to 1.9
- dropped patches:
    fdm-fix_iquote.patch
    fdm-fix_link_order.patch
    fdm-setproctitle.patch
    fdm-build.patch
    fdm-util_linux_setproctitle.patch
    fdm-remove_date_from_version.patch</changelog>
</package>
<package pkgid="336692f026641fd181abec3b318494f30ee615f9c9d202cb5e56c3f74fcf6a5c" name="fdm-debugsource" arch="x86_64">
  <version epoch="0" ver="1.9" rel="1.1"/>
  <changelog author="mrueckert@suse.de" date="1165406400">- updating to version 0.6</changelog>
  <changelog author="mrueckert@suse.de" date="1165924800">- updating to version 0.7</changelog>
  <changelog author="mrueckert@suse.de" date="1168344000">- updating to version 0.8a
- added fdm-0.8a_db185.patch:
  properly build against db 1.85 on suse</changelog>
  <changelog author="mrueckert@suse.de" date="1169812800">- update to version 0.9:
  - support for IMAP over a pipe (allows IMAP over ssh),
  - POP3/IMAP/NNTP code cleanup (basically a rewrite),
  - a purge-after option to flush deleted mails every so
    often, for unreliable connections,
  - SOCKS proxying now works with SSL,
  - support for writing gzip compressed mboxes,
  - an SMTP bug fix, a workaround for Exchange, and a couple
    of general bug fixes with large mails, reported by
    Kilburn Abraham,
  - glob in maildir account paths and fnmatch in account list
    on rules,
  - an fdm-sanitize script to remove passwords from -vvvv
    output.</changelog>
  <changelog author="mrueckert@suse.de" date="1175860800">- update to 1.1</changelog>
  <changelog author="mrueckert@suse.de" date="1191240000">- update to 1.4</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1229947200">- update to 1.6</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1256385600">- fix build on Factory and 11.2 by changing the library linking
  order (for as-needed)
- remove the current build date from the version string, in order
  to fix proper build-compare detection</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1256731200">- add setproctitle support on Linux
- fix posix_types_32.h build failure on x86 by replacing
  - I- with -iquote (now that was an ugly one to track down)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1471608000">- update to 1.9
- dropped patches:
    fdm-fix_iquote.patch
    fdm-fix_link_order.patch
    fdm-setproctitle.patch
    fdm-build.patch
    fdm-util_linux_setproctitle.patch
    fdm-remove_date_from_version.patch</changelog>
</package>
<package pkgid="c95eb586873dadff2acda4b55bf987eb879316f1b15762ab8d923f77aa1836ba" name="fetchmail" arch="src">
  <version epoch="0" ver="6.3.26" rel="91.1"/>
  <changelog author="cdenicolo@novell.com" date="1309435200">- license update:  GPLv2+
  remove licenses " Other uncritical OpenSource License ; Public Domain,
  Freeware"</changelog>
  <changelog author="puzel@novell.com" date="1314014400">- update to fetchmail-6.3.21
  - critical bug fix
  - The IMAP client no longer inserts NUL bytes into the last line
    of a message when it is not closed with a LF or CRLF sequence.
    Reported by Antoine Levitt.  As a side effect of the fix, and
    in order to avoid a full rewrite, fetchmail will now
    CRLF-terminate the last line fetched through IMAP, even if it
    is originally not terminated by LF or CRLF. This bears no
    relevance if your messages end up in mbox, but adds line
    termination for storages (like Maildir) that do not require
    that the last line be LF- or CRLF-terminated.</changelog>
  <changelog author="puzel@suse.com" date="1314705600">- repack upstream tarball without fetchmail-{SA,EN}-*.txt
  (bnc#713698)
- add README-security.txt</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339675200">- dont't require, just suggest smtp_daemon -- fetchmail does run
  fine (and much safer) with e.g. procmail as mda.</changelog>
  <changelog author="vcizek@suse.com" date="1347364800">- update to 6.3.22
  [#] SECURITY FIXES
  * CVE-2012-3482 (bnc#775988)
  * CVE-2011-3389
  [#] BUG FIX
  * The Server certificate: message in verbose mode now appears on stdout like the
    remainder of the output. Reported by Henry Jensen, to fix Debian Bug #639807.
  * The GSSAPI-related autoconf code now matches gssapi.c better, and uses
    a different check to look for GSS_C_NT_HOSTBASED_SERVICE.
    This fixes the GSSAPI-enabled build on NetBSD 6 Beta.
  [#] CHANGES
  * The security and errata notices fetchmail-{EN,SA}-20??-??.txt are now
    under the more relaxed CC BY-ND 3.0 license (the noncommercial clause
    was dropped). The Creative Commons address was updated.
  * The Python-related Makefile.am parts were simplified to avoid an automake
    1.11.X bug around noinst_PYTHON, Automake Bug #10995.
  * Configuring fetchmail without SSL now triggers a configure warning,
    and asks the user to consider running configure --with-ssl.
  [#] WORKAROUNDS
  * Some servers, notably Zimbra, return A1234 987 FETCH () in response to
    a header request, in the face of message corruption.  fetchmail now treats
    these as temporary errors. Report and Patch by Mikulas Patocka, Red Hat.
  * Some servers, notably Microsoft Exchange, return "A0009 OK FETCH completed."
    without any header in response to a header request for meeting reminder
    messages (with a "meeting.ics" attachment). fetchmail now treats these as
    transient errors.  Report by John Connett, Patch by Sunil Shetye.</changelog>
  <changelog author="coolo@suse.com" date="1352721600">- do not use useradd -o without -u</changelog>
  <changelog author="vcizek@suse.com" date="1355227200">- update to 6.3.23
  [#] REGRESSION FIXES
  * Fix compilation with OpenSSL implementations before 0.9.8m that lack
  SSL_CTX_clear_options. Patch by Earl Chew.
  Note that the use of older OpenSSL versions with fetchmail is unsupported and
  * not* recommended.
  [#] BUG FIXES
  * Fix combination of --plugin and -f -. Patch by Alexander Zangerl,
  to fix Debian Bug#671294.
  * Clean up logfile vs. syslog handling, and in case logfile overrides
  syslog, send a message to the latter stating where logging goes.
  [#] CHANGES
  * The build process can now be made a bit more silent and concise through
  ./configure --enable-silent-rules, or by adding "V=0" to the make command.
  [#] WORKAROUNDS
  * Make Maillennium POP3 workarounds less specific, to encompass
  Maillennium POP3/UNIBOX (Maillennium V05.00c++). Reported by Eddie
  via fetchmail-users mailing list, 2012-10-13.
  [#] TRANSLATION UPDATES</changelog>
  <changelog author="vcizek@suse.com" date="1363694400">- update to 6.3,25
  [#] CRITICAL AND REGRESSION FIXES
  * Plug a memory leak in OpenSSL's certificate verification callback.
  This would affect fetchmail configurations running with SSL in daemon mode
  more than one-shot runs.
  Reported by Erik Thiele, and pinned by Dominik Heeg,
  fixes Debian Bug #688015.
  This bug was introduced into fetchmail 6.3.0 (committed 2005-10-29)
  when support for subjectAltName was added through a patch by Roland
  Stigge, submitted as Debian Bug#201113.
  * The --logfile option now works again outside daemon mode, reported by Heinz
  Diehl. The documentation that I had been reading was inconsistent with the
  code, and only parts of the manual page claimed that --logfile was only
  effective in daemon mode.
  [#] BUG FIXES
  * Fix a memory leak in out-of-memory error condition while handling plugins.
  Report and patch by John Beck (found with Parfait static code analyzer).
  * Fix a NULL pointer dereference in out-of-memory error condition while handling
  plugins.
  Report and patch by John Beck (found with Parfait static code analyzer).
  [#] CHANGES
  * Improved reporting when SSL/TLS X.509 certificate validation has failed,
  working around a not-so-recent swapping of two OpenSSL error codes, and
  a practical impossibility to distinguish broken certification chains from
  missing trust anchors (root certificates).
  * OpenSSL decoded errors are now reported through report(), rather than dumped
  to stderr, so that they should show up in logfiles and/or syslog.
  * The fetchmail manual page no longer claims that MD5 were the default OpenSSL
  hash format (for use with --sslfingerprint). Reported by Jakob Wilk,
  PARTIAL fix for Debian Bug#700266.
  * The fetchmail manual page now refers the user to --softbounce from the
  SMTP/ESMTP ERROR HANDLING section.  Reported by Anton Shterenlikht.</changelog>
  <changelog author="vcizek@suse.com" date="1367236800">- added offline gpg verification
- update to 6.3.26
  [#] CRITICAL BUG FIX for setups using "mimedecode":
  * The mimedecode feature failed to ship the last line of the body if it was
    encoded as quoted-printable and had a MIME soft line break in the very last
    line.  Reported by Lars Hecking in June 2011.
  * Bug introduced on 1998-03-20 when the mimedecode support was added by ESR
    before release 4.4.1 through code contributed by Henrik Storner.
    Workaround for older releases: do not use mimedecode feature.
  * Earlier versions of this NEWS file claimed this bug fixed in fetchmail-6.3.23,
    but it was not.
  * Fixes Launchpad Bug#1171818.</changelog>
  <changelog author="p.drouand@gmail.com" date="1382875200">- Add systemd support for openSUSE &gt;= 12.3</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from fetchmail.service file.
- Update the project url in the spec file after Berlios shutdown.
- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="meissner@suse.com" date="1419854400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1420718400">- Cleanup with spec-cleaner
- Remove support for &lt;12.3 as it does not build anyway.
- Fix krb5 switches
- Provide proper rcbla controler for the service</changelog>
  <changelog author="pjanouch@suse.de" date="1460116800">- Made /etc/sysconfig/fetchmail work again after a botched systemd
  conversion that ignored the file altogether (bsc#905673)
- Removed the FETCHMAIL_USER setting in favor of editing the
  systemd service file (which should be copied to the respective
  location in /etc, and not edited in-place)</changelog>
  <changelog author="pjanouch@suse.de" date="1463140800">- Made the helper script introduced in last change return exit status
  5 on configuration errors instead of 1, which should make it a bit
  less confusing (bsc#979534)</changelog>
  <changelog author="jengelh@inai.de" date="1463140801">- Check for user/group existence before attempting to add them,
  and remove error suppression from these calls.
- Ensure tmpfile creation is run</changelog>
</package>
<package pkgid="0db52ced1c00bd9ffae11a2697de3840d68b20f9c19347d2bc347198bc6c9054" name="fetchmail" arch="x86_64">
  <version epoch="0" ver="6.3.26" rel="91.1"/>
  <changelog author="cdenicolo@novell.com" date="1309435200">- license update:  GPLv2+
  remove licenses " Other uncritical OpenSource License ; Public Domain,
  Freeware"</changelog>
  <changelog author="puzel@novell.com" date="1314014400">- update to fetchmail-6.3.21
  - critical bug fix
  - The IMAP client no longer inserts NUL bytes into the last line
    of a message when it is not closed with a LF or CRLF sequence.
    Reported by Antoine Levitt.  As a side effect of the fix, and
    in order to avoid a full rewrite, fetchmail will now
    CRLF-terminate the last line fetched through IMAP, even if it
    is originally not terminated by LF or CRLF. This bears no
    relevance if your messages end up in mbox, but adds line
    termination for storages (like Maildir) that do not require
    that the last line be LF- or CRLF-terminated.</changelog>
  <changelog author="puzel@suse.com" date="1314705600">- repack upstream tarball without fetchmail-{SA,EN}-*.txt
  (bnc#713698)
- add README-security.txt</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339675200">- dont't require, just suggest smtp_daemon -- fetchmail does run
  fine (and much safer) with e.g. procmail as mda.</changelog>
  <changelog author="vcizek@suse.com" date="1347364800">- update to 6.3.22
  [#] SECURITY FIXES
  * CVE-2012-3482 (bnc#775988)
  * CVE-2011-3389
  [#] BUG FIX
  * The Server certificate: message in verbose mode now appears on stdout like the
    remainder of the output. Reported by Henry Jensen, to fix Debian Bug #639807.
  * The GSSAPI-related autoconf code now matches gssapi.c better, and uses
    a different check to look for GSS_C_NT_HOSTBASED_SERVICE.
    This fixes the GSSAPI-enabled build on NetBSD 6 Beta.
  [#] CHANGES
  * The security and errata notices fetchmail-{EN,SA}-20??-??.txt are now
    under the more relaxed CC BY-ND 3.0 license (the noncommercial clause
    was dropped). The Creative Commons address was updated.
  * The Python-related Makefile.am parts were simplified to avoid an automake
    1.11.X bug around noinst_PYTHON, Automake Bug #10995.
  * Configuring fetchmail without SSL now triggers a configure warning,
    and asks the user to consider running configure --with-ssl.
  [#] WORKAROUNDS
  * Some servers, notably Zimbra, return A1234 987 FETCH () in response to
    a header request, in the face of message corruption.  fetchmail now treats
    these as temporary errors. Report and Patch by Mikulas Patocka, Red Hat.
  * Some servers, notably Microsoft Exchange, return "A0009 OK FETCH completed."
    without any header in response to a header request for meeting reminder
    messages (with a "meeting.ics" attachment). fetchmail now treats these as
    transient errors.  Report by John Connett, Patch by Sunil Shetye.</changelog>
  <changelog author="coolo@suse.com" date="1352721600">- do not use useradd -o without -u</changelog>
  <changelog author="vcizek@suse.com" date="1355227200">- update to 6.3.23
  [#] REGRESSION FIXES
  * Fix compilation with OpenSSL implementations before 0.9.8m that lack
  SSL_CTX_clear_options. Patch by Earl Chew.
  Note that the use of older OpenSSL versions with fetchmail is unsupported and
  * not* recommended.
  [#] BUG FIXES
  * Fix combination of --plugin and -f -. Patch by Alexander Zangerl,
  to fix Debian Bug#671294.
  * Clean up logfile vs. syslog handling, and in case logfile overrides
  syslog, send a message to the latter stating where logging goes.
  [#] CHANGES
  * The build process can now be made a bit more silent and concise through
  ./configure --enable-silent-rules, or by adding "V=0" to the make command.
  [#] WORKAROUNDS
  * Make Maillennium POP3 workarounds less specific, to encompass
  Maillennium POP3/UNIBOX (Maillennium V05.00c++). Reported by Eddie
  via fetchmail-users mailing list, 2012-10-13.
  [#] TRANSLATION UPDATES</changelog>
  <changelog author="vcizek@suse.com" date="1363694400">- update to 6.3,25
  [#] CRITICAL AND REGRESSION FIXES
  * Plug a memory leak in OpenSSL's certificate verification callback.
  This would affect fetchmail configurations running with SSL in daemon mode
  more than one-shot runs.
  Reported by Erik Thiele, and pinned by Dominik Heeg,
  fixes Debian Bug #688015.
  This bug was introduced into fetchmail 6.3.0 (committed 2005-10-29)
  when support for subjectAltName was added through a patch by Roland
  Stigge, submitted as Debian Bug#201113.
  * The --logfile option now works again outside daemon mode, reported by Heinz
  Diehl. The documentation that I had been reading was inconsistent with the
  code, and only parts of the manual page claimed that --logfile was only
  effective in daemon mode.
  [#] BUG FIXES
  * Fix a memory leak in out-of-memory error condition while handling plugins.
  Report and patch by John Beck (found with Parfait static code analyzer).
  * Fix a NULL pointer dereference in out-of-memory error condition while handling
  plugins.
  Report and patch by John Beck (found with Parfait static code analyzer).
  [#] CHANGES
  * Improved reporting when SSL/TLS X.509 certificate validation has failed,
  working around a not-so-recent swapping of two OpenSSL error codes, and
  a practical impossibility to distinguish broken certification chains from
  missing trust anchors (root certificates).
  * OpenSSL decoded errors are now reported through report(), rather than dumped
  to stderr, so that they should show up in logfiles and/or syslog.
  * The fetchmail manual page no longer claims that MD5 were the default OpenSSL
  hash format (for use with --sslfingerprint). Reported by Jakob Wilk,
  PARTIAL fix for Debian Bug#700266.
  * The fetchmail manual page now refers the user to --softbounce from the
  SMTP/ESMTP ERROR HANDLING section.  Reported by Anton Shterenlikht.</changelog>
  <changelog author="vcizek@suse.com" date="1367236800">- added offline gpg verification
- update to 6.3.26
  [#] CRITICAL BUG FIX for setups using "mimedecode":
  * The mimedecode feature failed to ship the last line of the body if it was
    encoded as quoted-printable and had a MIME soft line break in the very last
    line.  Reported by Lars Hecking in June 2011.
  * Bug introduced on 1998-03-20 when the mimedecode support was added by ESR
    before release 4.4.1 through code contributed by Henrik Storner.
    Workaround for older releases: do not use mimedecode feature.
  * Earlier versions of this NEWS file claimed this bug fixed in fetchmail-6.3.23,
    but it was not.
  * Fixes Launchpad Bug#1171818.</changelog>
  <changelog author="p.drouand@gmail.com" date="1382875200">- Add systemd support for openSUSE &gt;= 12.3</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from fetchmail.service file.
- Update the project url in the spec file after Berlios shutdown.
- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="meissner@suse.com" date="1419854400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1420718400">- Cleanup with spec-cleaner
- Remove support for &lt;12.3 as it does not build anyway.
- Fix krb5 switches
- Provide proper rcbla controler for the service</changelog>
  <changelog author="pjanouch@suse.de" date="1460116800">- Made /etc/sysconfig/fetchmail work again after a botched systemd
  conversion that ignored the file altogether (bsc#905673)
- Removed the FETCHMAIL_USER setting in favor of editing the
  systemd service file (which should be copied to the respective
  location in /etc, and not edited in-place)</changelog>
  <changelog author="pjanouch@suse.de" date="1463140800">- Made the helper script introduced in last change return exit status
  5 on configuration errors instead of 1, which should make it a bit
  less confusing (bsc#979534)</changelog>
  <changelog author="jengelh@inai.de" date="1463140801">- Check for user/group existence before attempting to add them,
  and remove error suppression from these calls.
- Ensure tmpfile creation is run</changelog>
</package>
<package pkgid="016e1cb7e1dec5317b706c3045b9f85312e7db8fa575de61e9aea638505e95d4" name="fetchmail-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.3.26" rel="91.1"/>
  <changelog author="cdenicolo@novell.com" date="1309435200">- license update:  GPLv2+
  remove licenses " Other uncritical OpenSource License ; Public Domain,
  Freeware"</changelog>
  <changelog author="puzel@novell.com" date="1314014400">- update to fetchmail-6.3.21
  - critical bug fix
  - The IMAP client no longer inserts NUL bytes into the last line
    of a message when it is not closed with a LF or CRLF sequence.
    Reported by Antoine Levitt.  As a side effect of the fix, and
    in order to avoid a full rewrite, fetchmail will now
    CRLF-terminate the last line fetched through IMAP, even if it
    is originally not terminated by LF or CRLF. This bears no
    relevance if your messages end up in mbox, but adds line
    termination for storages (like Maildir) that do not require
    that the last line be LF- or CRLF-terminated.</changelog>
  <changelog author="puzel@suse.com" date="1314705600">- repack upstream tarball without fetchmail-{SA,EN}-*.txt
  (bnc#713698)
- add README-security.txt</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339675200">- dont't require, just suggest smtp_daemon -- fetchmail does run
  fine (and much safer) with e.g. procmail as mda.</changelog>
  <changelog author="vcizek@suse.com" date="1347364800">- update to 6.3.22
  [#] SECURITY FIXES
  * CVE-2012-3482 (bnc#775988)
  * CVE-2011-3389
  [#] BUG FIX
  * The Server certificate: message in verbose mode now appears on stdout like the
    remainder of the output. Reported by Henry Jensen, to fix Debian Bug #639807.
  * The GSSAPI-related autoconf code now matches gssapi.c better, and uses
    a different check to look for GSS_C_NT_HOSTBASED_SERVICE.
    This fixes the GSSAPI-enabled build on NetBSD 6 Beta.
  [#] CHANGES
  * The security and errata notices fetchmail-{EN,SA}-20??-??.txt are now
    under the more relaxed CC BY-ND 3.0 license (the noncommercial clause
    was dropped). The Creative Commons address was updated.
  * The Python-related Makefile.am parts were simplified to avoid an automake
    1.11.X bug around noinst_PYTHON, Automake Bug #10995.
  * Configuring fetchmail without SSL now triggers a configure warning,
    and asks the user to consider running configure --with-ssl.
  [#] WORKAROUNDS
  * Some servers, notably Zimbra, return A1234 987 FETCH () in response to
    a header request, in the face of message corruption.  fetchmail now treats
    these as temporary errors. Report and Patch by Mikulas Patocka, Red Hat.
  * Some servers, notably Microsoft Exchange, return "A0009 OK FETCH completed."
    without any header in response to a header request for meeting reminder
    messages (with a "meeting.ics" attachment). fetchmail now treats these as
    transient errors.  Report by John Connett, Patch by Sunil Shetye.</changelog>
  <changelog author="coolo@suse.com" date="1352721600">- do not use useradd -o without -u</changelog>
  <changelog author="vcizek@suse.com" date="1355227200">- update to 6.3.23
  [#] REGRESSION FIXES
  * Fix compilation with OpenSSL implementations before 0.9.8m that lack
  SSL_CTX_clear_options. Patch by Earl Chew.
  Note that the use of older OpenSSL versions with fetchmail is unsupported and
  * not* recommended.
  [#] BUG FIXES
  * Fix combination of --plugin and -f -. Patch by Alexander Zangerl,
  to fix Debian Bug#671294.
  * Clean up logfile vs. syslog handling, and in case logfile overrides
  syslog, send a message to the latter stating where logging goes.
  [#] CHANGES
  * The build process can now be made a bit more silent and concise through
  ./configure --enable-silent-rules, or by adding "V=0" to the make command.
  [#] WORKAROUNDS
  * Make Maillennium POP3 workarounds less specific, to encompass
  Maillennium POP3/UNIBOX (Maillennium V05.00c++). Reported by Eddie
  via fetchmail-users mailing list, 2012-10-13.
  [#] TRANSLATION UPDATES</changelog>
  <changelog author="vcizek@suse.com" date="1363694400">- update to 6.3,25
  [#] CRITICAL AND REGRESSION FIXES
  * Plug a memory leak in OpenSSL's certificate verification callback.
  This would affect fetchmail configurations running with SSL in daemon mode
  more than one-shot runs.
  Reported by Erik Thiele, and pinned by Dominik Heeg,
  fixes Debian Bug #688015.
  This bug was introduced into fetchmail 6.3.0 (committed 2005-10-29)
  when support for subjectAltName was added through a patch by Roland
  Stigge, submitted as Debian Bug#201113.
  * The --logfile option now works again outside daemon mode, reported by Heinz
  Diehl. The documentation that I had been reading was inconsistent with the
  code, and only parts of the manual page claimed that --logfile was only
  effective in daemon mode.
  [#] BUG FIXES
  * Fix a memory leak in out-of-memory error condition while handling plugins.
  Report and patch by John Beck (found with Parfait static code analyzer).
  * Fix a NULL pointer dereference in out-of-memory error condition while handling
  plugins.
  Report and patch by John Beck (found with Parfait static code analyzer).
  [#] CHANGES
  * Improved reporting when SSL/TLS X.509 certificate validation has failed,
  working around a not-so-recent swapping of two OpenSSL error codes, and
  a practical impossibility to distinguish broken certification chains from
  missing trust anchors (root certificates).
  * OpenSSL decoded errors are now reported through report(), rather than dumped
  to stderr, so that they should show up in logfiles and/or syslog.
  * The fetchmail manual page no longer claims that MD5 were the default OpenSSL
  hash format (for use with --sslfingerprint). Reported by Jakob Wilk,
  PARTIAL fix for Debian Bug#700266.
  * The fetchmail manual page now refers the user to --softbounce from the
  SMTP/ESMTP ERROR HANDLING section.  Reported by Anton Shterenlikht.</changelog>
  <changelog author="vcizek@suse.com" date="1367236800">- added offline gpg verification
- update to 6.3.26
  [#] CRITICAL BUG FIX for setups using "mimedecode":
  * The mimedecode feature failed to ship the last line of the body if it was
    encoded as quoted-printable and had a MIME soft line break in the very last
    line.  Reported by Lars Hecking in June 2011.
  * Bug introduced on 1998-03-20 when the mimedecode support was added by ESR
    before release 4.4.1 through code contributed by Henrik Storner.
    Workaround for older releases: do not use mimedecode feature.
  * Earlier versions of this NEWS file claimed this bug fixed in fetchmail-6.3.23,
    but it was not.
  * Fixes Launchpad Bug#1171818.</changelog>
  <changelog author="p.drouand@gmail.com" date="1382875200">- Add systemd support for openSUSE &gt;= 12.3</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from fetchmail.service file.
- Update the project url in the spec file after Berlios shutdown.
- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="meissner@suse.com" date="1419854400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1420718400">- Cleanup with spec-cleaner
- Remove support for &lt;12.3 as it does not build anyway.
- Fix krb5 switches
- Provide proper rcbla controler for the service</changelog>
  <changelog author="pjanouch@suse.de" date="1460116800">- Made /etc/sysconfig/fetchmail work again after a botched systemd
  conversion that ignored the file altogether (bsc#905673)
- Removed the FETCHMAIL_USER setting in favor of editing the
  systemd service file (which should be copied to the respective
  location in /etc, and not edited in-place)</changelog>
  <changelog author="pjanouch@suse.de" date="1463140800">- Made the helper script introduced in last change return exit status
  5 on configuration errors instead of 1, which should make it a bit
  less confusing (bsc#979534)</changelog>
  <changelog author="jengelh@inai.de" date="1463140801">- Check for user/group existence before attempting to add them,
  and remove error suppression from these calls.
- Ensure tmpfile creation is run</changelog>
</package>
<package pkgid="0997be13016b2e26c35f189665623abc2ee850eba67a55988b8508af3005d3ec" name="fetchmail-debugsource" arch="x86_64">
  <version epoch="0" ver="6.3.26" rel="91.1"/>
  <changelog author="cdenicolo@novell.com" date="1309435200">- license update:  GPLv2+
  remove licenses " Other uncritical OpenSource License ; Public Domain,
  Freeware"</changelog>
  <changelog author="puzel@novell.com" date="1314014400">- update to fetchmail-6.3.21
  - critical bug fix
  - The IMAP client no longer inserts NUL bytes into the last line
    of a message when it is not closed with a LF or CRLF sequence.
    Reported by Antoine Levitt.  As a side effect of the fix, and
    in order to avoid a full rewrite, fetchmail will now
    CRLF-terminate the last line fetched through IMAP, even if it
    is originally not terminated by LF or CRLF. This bears no
    relevance if your messages end up in mbox, but adds line
    termination for storages (like Maildir) that do not require
    that the last line be LF- or CRLF-terminated.</changelog>
  <changelog author="puzel@suse.com" date="1314705600">- repack upstream tarball without fetchmail-{SA,EN}-*.txt
  (bnc#713698)
- add README-security.txt</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339675200">- dont't require, just suggest smtp_daemon -- fetchmail does run
  fine (and much safer) with e.g. procmail as mda.</changelog>
  <changelog author="vcizek@suse.com" date="1347364800">- update to 6.3.22
  [#] SECURITY FIXES
  * CVE-2012-3482 (bnc#775988)
  * CVE-2011-3389
  [#] BUG FIX
  * The Server certificate: message in verbose mode now appears on stdout like the
    remainder of the output. Reported by Henry Jensen, to fix Debian Bug #639807.
  * The GSSAPI-related autoconf code now matches gssapi.c better, and uses
    a different check to look for GSS_C_NT_HOSTBASED_SERVICE.
    This fixes the GSSAPI-enabled build on NetBSD 6 Beta.
  [#] CHANGES
  * The security and errata notices fetchmail-{EN,SA}-20??-??.txt are now
    under the more relaxed CC BY-ND 3.0 license (the noncommercial clause
    was dropped). The Creative Commons address was updated.
  * The Python-related Makefile.am parts were simplified to avoid an automake
    1.11.X bug around noinst_PYTHON, Automake Bug #10995.
  * Configuring fetchmail without SSL now triggers a configure warning,
    and asks the user to consider running configure --with-ssl.
  [#] WORKAROUNDS
  * Some servers, notably Zimbra, return A1234 987 FETCH () in response to
    a header request, in the face of message corruption.  fetchmail now treats
    these as temporary errors. Report and Patch by Mikulas Patocka, Red Hat.
  * Some servers, notably Microsoft Exchange, return "A0009 OK FETCH completed."
    without any header in response to a header request for meeting reminder
    messages (with a "meeting.ics" attachment). fetchmail now treats these as
    transient errors.  Report by John Connett, Patch by Sunil Shetye.</changelog>
  <changelog author="coolo@suse.com" date="1352721600">- do not use useradd -o without -u</changelog>
  <changelog author="vcizek@suse.com" date="1355227200">- update to 6.3.23
  [#] REGRESSION FIXES
  * Fix compilation with OpenSSL implementations before 0.9.8m that lack
  SSL_CTX_clear_options. Patch by Earl Chew.
  Note that the use of older OpenSSL versions with fetchmail is unsupported and
  * not* recommended.
  [#] BUG FIXES
  * Fix combination of --plugin and -f -. Patch by Alexander Zangerl,
  to fix Debian Bug#671294.
  * Clean up logfile vs. syslog handling, and in case logfile overrides
  syslog, send a message to the latter stating where logging goes.
  [#] CHANGES
  * The build process can now be made a bit more silent and concise through
  ./configure --enable-silent-rules, or by adding "V=0" to the make command.
  [#] WORKAROUNDS
  * Make Maillennium POP3 workarounds less specific, to encompass
  Maillennium POP3/UNIBOX (Maillennium V05.00c++). Reported by Eddie
  via fetchmail-users mailing list, 2012-10-13.
  [#] TRANSLATION UPDATES</changelog>
  <changelog author="vcizek@suse.com" date="1363694400">- update to 6.3,25
  [#] CRITICAL AND REGRESSION FIXES
  * Plug a memory leak in OpenSSL's certificate verification callback.
  This would affect fetchmail configurations running with SSL in daemon mode
  more than one-shot runs.
  Reported by Erik Thiele, and pinned by Dominik Heeg,
  fixes Debian Bug #688015.
  This bug was introduced into fetchmail 6.3.0 (committed 2005-10-29)
  when support for subjectAltName was added through a patch by Roland
  Stigge, submitted as Debian Bug#201113.
  * The --logfile option now works again outside daemon mode, reported by Heinz
  Diehl. The documentation that I had been reading was inconsistent with the
  code, and only parts of the manual page claimed that --logfile was only
  effective in daemon mode.
  [#] BUG FIXES
  * Fix a memory leak in out-of-memory error condition while handling plugins.
  Report and patch by John Beck (found with Parfait static code analyzer).
  * Fix a NULL pointer dereference in out-of-memory error condition while handling
  plugins.
  Report and patch by John Beck (found with Parfait static code analyzer).
  [#] CHANGES
  * Improved reporting when SSL/TLS X.509 certificate validation has failed,
  working around a not-so-recent swapping of two OpenSSL error codes, and
  a practical impossibility to distinguish broken certification chains from
  missing trust anchors (root certificates).
  * OpenSSL decoded errors are now reported through report(), rather than dumped
  to stderr, so that they should show up in logfiles and/or syslog.
  * The fetchmail manual page no longer claims that MD5 were the default OpenSSL
  hash format (for use with --sslfingerprint). Reported by Jakob Wilk,
  PARTIAL fix for Debian Bug#700266.
  * The fetchmail manual page now refers the user to --softbounce from the
  SMTP/ESMTP ERROR HANDLING section.  Reported by Anton Shterenlikht.</changelog>
  <changelog author="vcizek@suse.com" date="1367236800">- added offline gpg verification
- update to 6.3.26
  [#] CRITICAL BUG FIX for setups using "mimedecode":
  * The mimedecode feature failed to ship the last line of the body if it was
    encoded as quoted-printable and had a MIME soft line break in the very last
    line.  Reported by Lars Hecking in June 2011.
  * Bug introduced on 1998-03-20 when the mimedecode support was added by ESR
    before release 4.4.1 through code contributed by Henrik Storner.
    Workaround for older releases: do not use mimedecode feature.
  * Earlier versions of this NEWS file claimed this bug fixed in fetchmail-6.3.23,
    but it was not.
  * Fixes Launchpad Bug#1171818.</changelog>
  <changelog author="p.drouand@gmail.com" date="1382875200">- Add systemd support for openSUSE &gt;= 12.3</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from fetchmail.service file.
- Update the project url in the spec file after Berlios shutdown.
- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="meissner@suse.com" date="1419854400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1420718400">- Cleanup with spec-cleaner
- Remove support for &lt;12.3 as it does not build anyway.
- Fix krb5 switches
- Provide proper rcbla controler for the service</changelog>
  <changelog author="pjanouch@suse.de" date="1460116800">- Made /etc/sysconfig/fetchmail work again after a botched systemd
  conversion that ignored the file altogether (bsc#905673)
- Removed the FETCHMAIL_USER setting in favor of editing the
  systemd service file (which should be copied to the respective
  location in /etc, and not edited in-place)</changelog>
  <changelog author="pjanouch@suse.de" date="1463140800">- Made the helper script introduced in last change return exit status
  5 on configuration errors instead of 1, which should make it a bit
  less confusing (bsc#979534)</changelog>
  <changelog author="jengelh@inai.de" date="1463140801">- Check for user/group existence before attempting to add them,
  and remove error suppression from these calls.
- Ensure tmpfile creation is run</changelog>
</package>
<package pkgid="df50c34012c11398f8fe2a5202f6d0a155c8ab3789edb0993ec4a92cb6f0ee37" name="fetchmailconf" arch="x86_64">
  <version epoch="0" ver="6.3.26" rel="91.1"/>
  <changelog author="cdenicolo@novell.com" date="1309435200">- license update:  GPLv2+
  remove licenses " Other uncritical OpenSource License ; Public Domain,
  Freeware"</changelog>
  <changelog author="puzel@novell.com" date="1314014400">- update to fetchmail-6.3.21
  - critical bug fix
  - The IMAP client no longer inserts NUL bytes into the last line
    of a message when it is not closed with a LF or CRLF sequence.
    Reported by Antoine Levitt.  As a side effect of the fix, and
    in order to avoid a full rewrite, fetchmail will now
    CRLF-terminate the last line fetched through IMAP, even if it
    is originally not terminated by LF or CRLF. This bears no
    relevance if your messages end up in mbox, but adds line
    termination for storages (like Maildir) that do not require
    that the last line be LF- or CRLF-terminated.</changelog>
  <changelog author="puzel@suse.com" date="1314705600">- repack upstream tarball without fetchmail-{SA,EN}-*.txt
  (bnc#713698)
- add README-security.txt</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339675200">- dont't require, just suggest smtp_daemon -- fetchmail does run
  fine (and much safer) with e.g. procmail as mda.</changelog>
  <changelog author="vcizek@suse.com" date="1347364800">- update to 6.3.22
  [#] SECURITY FIXES
  * CVE-2012-3482 (bnc#775988)
  * CVE-2011-3389
  [#] BUG FIX
  * The Server certificate: message in verbose mode now appears on stdout like the
    remainder of the output. Reported by Henry Jensen, to fix Debian Bug #639807.
  * The GSSAPI-related autoconf code now matches gssapi.c better, and uses
    a different check to look for GSS_C_NT_HOSTBASED_SERVICE.
    This fixes the GSSAPI-enabled build on NetBSD 6 Beta.
  [#] CHANGES
  * The security and errata notices fetchmail-{EN,SA}-20??-??.txt are now
    under the more relaxed CC BY-ND 3.0 license (the noncommercial clause
    was dropped). The Creative Commons address was updated.
  * The Python-related Makefile.am parts were simplified to avoid an automake
    1.11.X bug around noinst_PYTHON, Automake Bug #10995.
  * Configuring fetchmail without SSL now triggers a configure warning,
    and asks the user to consider running configure --with-ssl.
  [#] WORKAROUNDS
  * Some servers, notably Zimbra, return A1234 987 FETCH () in response to
    a header request, in the face of message corruption.  fetchmail now treats
    these as temporary errors. Report and Patch by Mikulas Patocka, Red Hat.
  * Some servers, notably Microsoft Exchange, return "A0009 OK FETCH completed."
    without any header in response to a header request for meeting reminder
    messages (with a "meeting.ics" attachment). fetchmail now treats these as
    transient errors.  Report by John Connett, Patch by Sunil Shetye.</changelog>
  <changelog author="coolo@suse.com" date="1352721600">- do not use useradd -o without -u</changelog>
  <changelog author="vcizek@suse.com" date="1355227200">- update to 6.3.23
  [#] REGRESSION FIXES
  * Fix compilation with OpenSSL implementations before 0.9.8m that lack
  SSL_CTX_clear_options. Patch by Earl Chew.
  Note that the use of older OpenSSL versions with fetchmail is unsupported and
  * not* recommended.
  [#] BUG FIXES
  * Fix combination of --plugin and -f -. Patch by Alexander Zangerl,
  to fix Debian Bug#671294.
  * Clean up logfile vs. syslog handling, and in case logfile overrides
  syslog, send a message to the latter stating where logging goes.
  [#] CHANGES
  * The build process can now be made a bit more silent and concise through
  ./configure --enable-silent-rules, or by adding "V=0" to the make command.
  [#] WORKAROUNDS
  * Make Maillennium POP3 workarounds less specific, to encompass
  Maillennium POP3/UNIBOX (Maillennium V05.00c++). Reported by Eddie
  via fetchmail-users mailing list, 2012-10-13.
  [#] TRANSLATION UPDATES</changelog>
  <changelog author="vcizek@suse.com" date="1363694400">- update to 6.3,25
  [#] CRITICAL AND REGRESSION FIXES
  * Plug a memory leak in OpenSSL's certificate verification callback.
  This would affect fetchmail configurations running with SSL in daemon mode
  more than one-shot runs.
  Reported by Erik Thiele, and pinned by Dominik Heeg,
  fixes Debian Bug #688015.
  This bug was introduced into fetchmail 6.3.0 (committed 2005-10-29)
  when support for subjectAltName was added through a patch by Roland
  Stigge, submitted as Debian Bug#201113.
  * The --logfile option now works again outside daemon mode, reported by Heinz
  Diehl. The documentation that I had been reading was inconsistent with the
  code, and only parts of the manual page claimed that --logfile was only
  effective in daemon mode.
  [#] BUG FIXES
  * Fix a memory leak in out-of-memory error condition while handling plugins.
  Report and patch by John Beck (found with Parfait static code analyzer).
  * Fix a NULL pointer dereference in out-of-memory error condition while handling
  plugins.
  Report and patch by John Beck (found with Parfait static code analyzer).
  [#] CHANGES
  * Improved reporting when SSL/TLS X.509 certificate validation has failed,
  working around a not-so-recent swapping of two OpenSSL error codes, and
  a practical impossibility to distinguish broken certification chains from
  missing trust anchors (root certificates).
  * OpenSSL decoded errors are now reported through report(), rather than dumped
  to stderr, so that they should show up in logfiles and/or syslog.
  * The fetchmail manual page no longer claims that MD5 were the default OpenSSL
  hash format (for use with --sslfingerprint). Reported by Jakob Wilk,
  PARTIAL fix for Debian Bug#700266.
  * The fetchmail manual page now refers the user to --softbounce from the
  SMTP/ESMTP ERROR HANDLING section.  Reported by Anton Shterenlikht.</changelog>
  <changelog author="vcizek@suse.com" date="1367236800">- added offline gpg verification
- update to 6.3.26
  [#] CRITICAL BUG FIX for setups using "mimedecode":
  * The mimedecode feature failed to ship the last line of the body if it was
    encoded as quoted-printable and had a MIME soft line break in the very last
    line.  Reported by Lars Hecking in June 2011.
  * Bug introduced on 1998-03-20 when the mimedecode support was added by ESR
    before release 4.4.1 through code contributed by Henrik Storner.
    Workaround for older releases: do not use mimedecode feature.
  * Earlier versions of this NEWS file claimed this bug fixed in fetchmail-6.3.23,
    but it was not.
  * Fixes Launchpad Bug#1171818.</changelog>
  <changelog author="p.drouand@gmail.com" date="1382875200">- Add systemd support for openSUSE &gt;= 12.3</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from fetchmail.service file.
- Update the project url in the spec file after Berlios shutdown.
- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="meissner@suse.com" date="1419854400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1420718400">- Cleanup with spec-cleaner
- Remove support for &lt;12.3 as it does not build anyway.
- Fix krb5 switches
- Provide proper rcbla controler for the service</changelog>
  <changelog author="pjanouch@suse.de" date="1460116800">- Made /etc/sysconfig/fetchmail work again after a botched systemd
  conversion that ignored the file altogether (bsc#905673)
- Removed the FETCHMAIL_USER setting in favor of editing the
  systemd service file (which should be copied to the respective
  location in /etc, and not edited in-place)</changelog>
  <changelog author="pjanouch@suse.de" date="1463140800">- Made the helper script introduced in last change return exit status
  5 on configuration errors instead of 1, which should make it a bit
  less confusing (bsc#979534)</changelog>
  <changelog author="jengelh@inai.de" date="1463140801">- Check for user/group existence before attempting to add them,
  and remove error suppression from these calls.
- Ensure tmpfile creation is run</changelog>
</package>
<package pkgid="29f35822ce99477e1c529408738302ed669b98f2eb63b143240dc94f0afc258a" name="getmail" arch="noarch">
  <version epoch="0" ver="5.1" rel="44.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1306843200">- update to 4.20.3:
  * fix logging errors in error paths</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1311249600">- update to 4.20.4:
  * more information from the server response is included in the error message
    when an IMAP command errors out
  * Parser is now used instead of HeaderParser to correct illegal formatting
    bogosities in the body parts of incoming messages</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1317038400">- update to 4.22.0:
  * when retriever supports multiple mail folders (IMAP), store oldmail data
    for each folder separately, preventing problems in some cases when using
    multiple rc files with the same account
- changes from 4.21.0:
  * automatically open IMAP folders read-only if neither the delete nor
    delete_after options are in use; necessary to access chatlogs via Gmail
  * avoid sorting msgids on each retrieval, reducing overhead when dealing with
    folders containing thousands of messages</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1317556800">- update to 4.22.1:
  * fix BrokenUIDLPOP3Retriever breakage from 4.21.0</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1321617600">- update to 4.22.2:
  * ffix an error when logging a bad response to an IMAP SELECT command,
    introduced in 4.21.0</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1321790400">- update to 4.23.0:
  * fix race if new message shows up in POP3 mailbox between running the UIDL
    and LIST commands</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1323691200">- update to 4.24.0:
  * add an explicit expunge when closing an IMAP mailbox, for servers that
    incorrectly do not do this when the mailbox is closed
  * fix incorrect section reference for "mailboxes" parameter in documentation
  * fix getmail_fetch broken in 4.21.0</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1328961600">- update to 4.25.0:
  * add support for storing POP/IMAP password in OSX keychain</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1334491200">- update to 4.26.0:
  * switch to using BODY.PEEK in IMAP retrieval; upstream no longer see
    problems with this feature in my testing; if users experience
    incompatibility with any IMAP servers where 4.25.0 worked, contact upstream</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1337515200">- update to 4.27.0:
  * make use of IMAP BODY.PEEK configurable; set the IMAP retriever parameter
    `use_peek` to False to disable use of PEEK to get getmail's historical IMAP
    behaviour</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1350561600">- update to 4.34.0:
  * retrieve Gmail metadata (labels, thread ID, message ID) via IMAP extension
    and record it in new message headers
- changes from 4.33.0:
  * allow normal exit on interrupt (ctrl-c) to allow the user to abort message
    retrieval while still remembering already-retrieved messages as successfully
    delivered.  You may get a weird error message after you abort, since the
    server may be in the middle of delivering another message to getmail at the
    time
- changes from 4.32.0:
  * prevent some nuisance stack traces if getmail cannot connect to the POP/
    IMAP server correctly
  * restore use_peek IMAP retriever parameter which accidentally got removed
    in 4.30
- changes from 4.31.0:
  * improved backwards compatibility with pre-v.4.22.0 oldmail files, so IMAP
    mail is not re-retrieved if you upgrade from a 4.22 or earlier to this one;
    no user action necessary
- changes from 4.30.2:
  * fix a nuisance stack trace that would be dumped if a connection failed in
    particular states
- changes from 4.30.1:
  * silence a nuisance deprecation warning about the sets module when running
    with Python &gt;= 2.5 which was reintroduced in 4.29.0
- changes from 4.30.0:
  * fix breakage introduced in 4.29.0 where BrokenUIDLPOP3Retriever would fail
    with a TypeError at logout time
  * fix breakage introduced in 4.29.0 where deleted mail was not being expunged
    from the last (or only) folder retrieved from in an IMAP session
- changes from 4.29.0:
  * ensure getmail exits nonzero if a server refuses login due to a credential
    problem
- changes from 4.28.0:
  * ensure getmail exits nonzero if various error conditions (like POP/IMAP
    authentication failure) occur
  * python versions prior to 2.5.0 contain a bug when dealing with read-only
    IMAP mailboxes.  Monkey-patch imaplib when running with Python&lt;2.5.0.
  * do IMAP modified-utf7 conversion of mailbox names containing non-ASCII
    characters
  * add special ALL value for retrieving mail from all selectable IMAP
    mailboxes in the account
  * change IMAP retrieval strategy to retrieve all messages from a mailbox,
    then move on to the next mailbox, etc.  Should result in increased speed,
    but if you set `max_messages_per_session` too low, this could result in
    later mailboxes not being retrieved from.</changelog>
  <changelog author="dschung@cs.uni-kl.de" date="1361793600">- update to 4.39.0:
  * fix an oldmail filename issue that occurred with certain non-ASCII
    characters in an IMAP mailbox name
- changes from 4.38.0:
  * fix retrieving mail from an IMAP mailbox with non-ASCII characters in its
    name causing difficult-to-understand unicode errors during delivery
- changes from 4.37.0:
  * handle IMAP servers which include "/" in message IDs better, so those
    messages aren't always thought to be new
  * record (IMAP) mailbox retrieved from in X-getmail-retrieved-from-mailbox:
    header field, and make it available as %(mailbox) substitution in
    MDA_external arguments
  * add delete_bigger_than option to allow removal of large messages after
    retrieval, even if not deleting messages otherwise
- changes from 4.36.0:
  * add support for retrieving POP/IMAP passwords from, and storing them to,
    the Gnome keyring
- changes from 4.35.0:
  * fix From_ quoting in mbox delivery; use of the Python stdlib function
    meant getmail was incorrectly using mboxo-style quoting instead of
    mboxrd quoting, probably since early in the v4 series</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1364212800">- update to 4.39.1:
  * fix a bug that could crop up when retrieving mail via IMAP from Gmail, and
    the Gmail servers provided weird data in their header extensions.</changelog>
  <changelog author="tchvatal@suse.com" date="1376049600">- Fix the _service usage so we can submit to factory.</changelog>
  <changelog author="tchvatal@suse.com" date="1376049601">- Version bump to 4.42.0:
  * fix problem with non-ascii characters in newly-added message header fields
    with output from Filter_classifier.  Thanks: "Gour"
- Changes from 4.41.0:
  * messages retrieved with POP could have a blank trailing line removed when
    delivered; fixed.  Thanks: Christoph Mitterer, Krzysztof Warzecha.
  * fix an ImportError when IMAP retriever used with getmail under Python 2.4.
- Changes from 4.40.3:
  * increase system recursion limit when run with Python 2.3, to prevent
    recursion errors in parsing some pathologically complex MIME emails.
    Thanks: Kenneth Pronovici.
- Changes from 4.40.2:
  * fix a backwards incompatibility with Python 2.3 and 2.4 introduced in
    getmail 4.38.0.  Thanks: Massimo Zambelli, Krzysztof Warzecha.
- Changes from 4.40.1:
  * again change protocol codes passed to OSX, as they're not only reserved
    codes, but also case-sensitive.  Use the ones an OSX user reports work
    properly.  Thanks: Tim Gray.
- Changes from 4.40.0:
  * convert SIGTERM to SIGINT so getmail can cleanup and exit normally if
    killed with a default signal.  Thanks: Carl Lei.
  * fix change which resulted in passing full protocol name to OSX keyring
    program, which can't handle it (restricted to 4-character code).
    Thanks: Tim Gray.</changelog>
  <changelog author="tchvatal@suse.com" date="1376049602">- Remove %clean phase as it is not required.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1379937600">- update to 4.43.0:
  + add IMAP IDLE support
- refreshed getmail-fix_paths.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1412769600">- getmail 4.46.0 [bnc#900217]
  This release fixes several similar vulnerabilities that could
  allow a man-in-the-middle attacker to read encrypted traffic due
  to pack of certificate verification against the hostname.
  * fix --idle checking Python version incorrectly, resulting in
    incorrect warning about running with Python &lt; 2.5
  * add missing support for SSL certificate checking in POP3 which
    broke POP retrieval in v4.45.0
    [CVE-2014-7275]
- includes changes from 4.45.0:
  * perform hostname-vs-certificate matching of SSL certificate if
    validating the certifcate
    [CVE-2014-7274]
  * fix missing plaintext versions of documentation
- includes changes from 4.44.0:
  * add extended SSL options for IMAP retrievers, allowing
    certificate verification and other features
    [CVE-2014-7273]
  * fix missing plaintext versions of documentation
  * fix "Header instance has no attribute 'strip'" error which
    cropped up in some configurations</changelog>
  <changelog author="cunix@bitmessage.ch" date="1493553600">- added obs-service verify_file
- Version bump to 4.54.0
  * fix error running getmail_fetch introduced in 4.53.0.
- Changes from 4.53.0
  * fix plaintext version of docs not generated correctly.
  * fix `getmail --fingerprint` not logging server TLS fingerprint correctly
    with SimplePOP3SSLRetriever.
- Changes from 4.52.0
  * add `ignore_header_shrinkage` parameter to Filter_external for users who
    know it is normal for their particular filter to result in a smaller message
    header than the source message, for example when the filter encapsulates
    the original message in a simpler wrapper message.
  * EXPERIMENTAL: when deleting a message from an IMAP mailbox, set the \Seen
    flag in addition to the the \Deleted flag.  This apparently prevents
    the ever-innovatively-broken MSExchange from sending a spurious incorrect
    disposition-notification message to the sender of the message.  I do not
    know if this will cause problems with other broken IMAP server
    implementations; please send a report to the getmail-user's mailing list if
    you see odd behaviour with this change.
  * enable socket timeouts for IMAP SSL classes by default.  They were disabled
    in the code because they were incompatible with SSL in older versions of
    Python.  If you see problems with Python 2.6 or 2.7 now, please let me know.
- Changes from 4.51.0
  * fix exception when using MDA_External and an IMAP mailbox whose name
    contains non-ASCII chars.
- Changes from 4.50.0
  * maybe fix handling of OSX keychain passwords containing double-quote chars.
  * fix getmail erroring out on IMAP folders containing i18n chars.
- Changes from 4.49.0
  * make IMAP class only issue EXPUNGE command on mailbox close if we have
    actually deleted any messages from the open mailbox.  Makes use of read-only
    IMAP folders possible.
- Changes from 4.48.0
  * work around brain-damaged change in Python's poplib which causes
    message retrieval errors if any line of a message has more than
    2048 characters in it.
  * restore link to moved Marc mailing list archive.
- Changes from 4.47.0
  * try to work around pathological breakage in one random POP server
    implementation.
  * remove dead marc.theaimsgroup.com list archive from docs.
  * bugfix: if you combined IMAP IDLE mode with delete_after, getmail would,
    after remaining connected to the server for the number of days configured,
    begin deleting messages immediately after retrieval instead of after the
    configured delay.  Now fixed.</changelog>
  <changelog author="cunix@bitmessage.ch" date="1500379200">- Version bump to 5.1
  * bugfix: if password_command parameter was used with a non-existent
    program, getmail would error out during the handling of that
    condition and not report the problem correctly.
- Changes from 5.0
  * new release numbering scheme; previous version numbers were just
    getting too high.
  * catch and ignore/exit cleanly after reset connection in IMAP IDLE
    mode. Thanks:  Stephan Schulz.
  * allow specifying an expected SSL certificate hostname, for when
    the server's certificate does not match the domain name used to
    connect to it.  Thanks:  "Andre".
  * fix error message not actually giving the header field name
    incorrectly specified as containing the envelope recipient address.
    Thanks:  Hardy Braunsdorf.
  * add new password_command configuration parameter for retrievers,
    allowing getmail to retrieve the account password from any
    arbitrary external command.  Suggestion:  "ng0".</changelog>
</package>
<package pkgid="02e0eec2a866cb49dc08c891a45e27f82140f98c3952503faa6cbf2da363e49c" name="getmail" arch="src">
  <version epoch="0" ver="5.1" rel="44.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1306843200">- update to 4.20.3:
  * fix logging errors in error paths</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1311249600">- update to 4.20.4:
  * more information from the server response is included in the error message
    when an IMAP command errors out
  * Parser is now used instead of HeaderParser to correct illegal formatting
    bogosities in the body parts of incoming messages</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1317038400">- update to 4.22.0:
  * when retriever supports multiple mail folders (IMAP), store oldmail data
    for each folder separately, preventing problems in some cases when using
    multiple rc files with the same account
- changes from 4.21.0:
  * automatically open IMAP folders read-only if neither the delete nor
    delete_after options are in use; necessary to access chatlogs via Gmail
  * avoid sorting msgids on each retrieval, reducing overhead when dealing with
    folders containing thousands of messages</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1317556800">- update to 4.22.1:
  * fix BrokenUIDLPOP3Retriever breakage from 4.21.0</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1321617600">- update to 4.22.2:
  * ffix an error when logging a bad response to an IMAP SELECT command,
    introduced in 4.21.0</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1321790400">- update to 4.23.0:
  * fix race if new message shows up in POP3 mailbox between running the UIDL
    and LIST commands</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1323691200">- update to 4.24.0:
  * add an explicit expunge when closing an IMAP mailbox, for servers that
    incorrectly do not do this when the mailbox is closed
  * fix incorrect section reference for "mailboxes" parameter in documentation
  * fix getmail_fetch broken in 4.21.0</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1328961600">- update to 4.25.0:
  * add support for storing POP/IMAP password in OSX keychain</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1334491200">- update to 4.26.0:
  * switch to using BODY.PEEK in IMAP retrieval; upstream no longer see
    problems with this feature in my testing; if users experience
    incompatibility with any IMAP servers where 4.25.0 worked, contact upstream</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1337515200">- update to 4.27.0:
  * make use of IMAP BODY.PEEK configurable; set the IMAP retriever parameter
    `use_peek` to False to disable use of PEEK to get getmail's historical IMAP
    behaviour</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1350561600">- update to 4.34.0:
  * retrieve Gmail metadata (labels, thread ID, message ID) via IMAP extension
    and record it in new message headers
- changes from 4.33.0:
  * allow normal exit on interrupt (ctrl-c) to allow the user to abort message
    retrieval while still remembering already-retrieved messages as successfully
    delivered.  You may get a weird error message after you abort, since the
    server may be in the middle of delivering another message to getmail at the
    time
- changes from 4.32.0:
  * prevent some nuisance stack traces if getmail cannot connect to the POP/
    IMAP server correctly
  * restore use_peek IMAP retriever parameter which accidentally got removed
    in 4.30
- changes from 4.31.0:
  * improved backwards compatibility with pre-v.4.22.0 oldmail files, so IMAP
    mail is not re-retrieved if you upgrade from a 4.22 or earlier to this one;
    no user action necessary
- changes from 4.30.2:
  * fix a nuisance stack trace that would be dumped if a connection failed in
    particular states
- changes from 4.30.1:
  * silence a nuisance deprecation warning about the sets module when running
    with Python &gt;= 2.5 which was reintroduced in 4.29.0
- changes from 4.30.0:
  * fix breakage introduced in 4.29.0 where BrokenUIDLPOP3Retriever would fail
    with a TypeError at logout time
  * fix breakage introduced in 4.29.0 where deleted mail was not being expunged
    from the last (or only) folder retrieved from in an IMAP session
- changes from 4.29.0:
  * ensure getmail exits nonzero if a server refuses login due to a credential
    problem
- changes from 4.28.0:
  * ensure getmail exits nonzero if various error conditions (like POP/IMAP
    authentication failure) occur
  * python versions prior to 2.5.0 contain a bug when dealing with read-only
    IMAP mailboxes.  Monkey-patch imaplib when running with Python&lt;2.5.0.
  * do IMAP modified-utf7 conversion of mailbox names containing non-ASCII
    characters
  * add special ALL value for retrieving mail from all selectable IMAP
    mailboxes in the account
  * change IMAP retrieval strategy to retrieve all messages from a mailbox,
    then move on to the next mailbox, etc.  Should result in increased speed,
    but if you set `max_messages_per_session` too low, this could result in
    later mailboxes not being retrieved from.</changelog>
  <changelog author="dschung@cs.uni-kl.de" date="1361793600">- update to 4.39.0:
  * fix an oldmail filename issue that occurred with certain non-ASCII
    characters in an IMAP mailbox name
- changes from 4.38.0:
  * fix retrieving mail from an IMAP mailbox with non-ASCII characters in its
    name causing difficult-to-understand unicode errors during delivery
- changes from 4.37.0:
  * handle IMAP servers which include "/" in message IDs better, so those
    messages aren't always thought to be new
  * record (IMAP) mailbox retrieved from in X-getmail-retrieved-from-mailbox:
    header field, and make it available as %(mailbox) substitution in
    MDA_external arguments
  * add delete_bigger_than option to allow removal of large messages after
    retrieval, even if not deleting messages otherwise
- changes from 4.36.0:
  * add support for retrieving POP/IMAP passwords from, and storing them to,
    the Gnome keyring
- changes from 4.35.0:
  * fix From_ quoting in mbox delivery; use of the Python stdlib function
    meant getmail was incorrectly using mboxo-style quoting instead of
    mboxrd quoting, probably since early in the v4 series</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1364212800">- update to 4.39.1:
  * fix a bug that could crop up when retrieving mail via IMAP from Gmail, and
    the Gmail servers provided weird data in their header extensions.</changelog>
  <changelog author="tchvatal@suse.com" date="1376049600">- Fix the _service usage so we can submit to factory.</changelog>
  <changelog author="tchvatal@suse.com" date="1376049601">- Version bump to 4.42.0:
  * fix problem with non-ascii characters in newly-added message header fields
    with output from Filter_classifier.  Thanks: "Gour"
- Changes from 4.41.0:
  * messages retrieved with POP could have a blank trailing line removed when
    delivered; fixed.  Thanks: Christoph Mitterer, Krzysztof Warzecha.
  * fix an ImportError when IMAP retriever used with getmail under Python 2.4.
- Changes from 4.40.3:
  * increase system recursion limit when run with Python 2.3, to prevent
    recursion errors in parsing some pathologically complex MIME emails.
    Thanks: Kenneth Pronovici.
- Changes from 4.40.2:
  * fix a backwards incompatibility with Python 2.3 and 2.4 introduced in
    getmail 4.38.0.  Thanks: Massimo Zambelli, Krzysztof Warzecha.
- Changes from 4.40.1:
  * again change protocol codes passed to OSX, as they're not only reserved
    codes, but also case-sensitive.  Use the ones an OSX user reports work
    properly.  Thanks: Tim Gray.
- Changes from 4.40.0:
  * convert SIGTERM to SIGINT so getmail can cleanup and exit normally if
    killed with a default signal.  Thanks: Carl Lei.
  * fix change which resulted in passing full protocol name to OSX keyring
    program, which can't handle it (restricted to 4-character code).
    Thanks: Tim Gray.</changelog>
  <changelog author="tchvatal@suse.com" date="1376049602">- Remove %clean phase as it is not required.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1379937600">- update to 4.43.0:
  + add IMAP IDLE support
- refreshed getmail-fix_paths.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1412769600">- getmail 4.46.0 [bnc#900217]
  This release fixes several similar vulnerabilities that could
  allow a man-in-the-middle attacker to read encrypted traffic due
  to pack of certificate verification against the hostname.
  * fix --idle checking Python version incorrectly, resulting in
    incorrect warning about running with Python &lt; 2.5
  * add missing support for SSL certificate checking in POP3 which
    broke POP retrieval in v4.45.0
    [CVE-2014-7275]
- includes changes from 4.45.0:
  * perform hostname-vs-certificate matching of SSL certificate if
    validating the certifcate
    [CVE-2014-7274]
  * fix missing plaintext versions of documentation
- includes changes from 4.44.0:
  * add extended SSL options for IMAP retrievers, allowing
    certificate verification and other features
    [CVE-2014-7273]
  * fix missing plaintext versions of documentation
  * fix "Header instance has no attribute 'strip'" error which
    cropped up in some configurations</changelog>
  <changelog author="cunix@bitmessage.ch" date="1493553600">- added obs-service verify_file
- Version bump to 4.54.0
  * fix error running getmail_fetch introduced in 4.53.0.
- Changes from 4.53.0
  * fix plaintext version of docs not generated correctly.
  * fix `getmail --fingerprint` not logging server TLS fingerprint correctly
    with SimplePOP3SSLRetriever.
- Changes from 4.52.0
  * add `ignore_header_shrinkage` parameter to Filter_external for users who
    know it is normal for their particular filter to result in a smaller message
    header than the source message, for example when the filter encapsulates
    the original message in a simpler wrapper message.
  * EXPERIMENTAL: when deleting a message from an IMAP mailbox, set the \Seen
    flag in addition to the the \Deleted flag.  This apparently prevents
    the ever-innovatively-broken MSExchange from sending a spurious incorrect
    disposition-notification message to the sender of the message.  I do not
    know if this will cause problems with other broken IMAP server
    implementations; please send a report to the getmail-user's mailing list if
    you see odd behaviour with this change.
  * enable socket timeouts for IMAP SSL classes by default.  They were disabled
    in the code because they were incompatible with SSL in older versions of
    Python.  If you see problems with Python 2.6 or 2.7 now, please let me know.
- Changes from 4.51.0
  * fix exception when using MDA_External and an IMAP mailbox whose name
    contains non-ASCII chars.
- Changes from 4.50.0
  * maybe fix handling of OSX keychain passwords containing double-quote chars.
  * fix getmail erroring out on IMAP folders containing i18n chars.
- Changes from 4.49.0
  * make IMAP class only issue EXPUNGE command on mailbox close if we have
    actually deleted any messages from the open mailbox.  Makes use of read-only
    IMAP folders possible.
- Changes from 4.48.0
  * work around brain-damaged change in Python's poplib which causes
    message retrieval errors if any line of a message has more than
    2048 characters in it.
  * restore link to moved Marc mailing list archive.
- Changes from 4.47.0
  * try to work around pathological breakage in one random POP server
    implementation.
  * remove dead marc.theaimsgroup.com list archive from docs.
  * bugfix: if you combined IMAP IDLE mode with delete_after, getmail would,
    after remaining connected to the server for the number of days configured,
    begin deleting messages immediately after retrieval instead of after the
    configured delay.  Now fixed.</changelog>
  <changelog author="cunix@bitmessage.ch" date="1500379200">- Version bump to 5.1
  * bugfix: if password_command parameter was used with a non-existent
    program, getmail would error out during the handling of that
    condition and not report the problem correctly.
- Changes from 5.0
  * new release numbering scheme; previous version numbers were just
    getting too high.
  * catch and ignore/exit cleanly after reset connection in IMAP IDLE
    mode. Thanks:  Stephan Schulz.
  * allow specifying an expected SSL certificate hostname, for when
    the server's certificate does not match the domain name used to
    connect to it.  Thanks:  "Andre".
  * fix error message not actually giving the header field name
    incorrectly specified as containing the envelope recipient address.
    Thanks:  Hardy Braunsdorf.
  * add new password_command configuration parameter for retrievers,
    allowing getmail to retrieve the account password from any
    arbitrary external command.  Suggestion:  "ng0".</changelog>
</package>
<package pkgid="521d761cf3286f8093c10a01487e2a8000f8923841421a6dc4624f24b3aa5301" name="getmail-doc" arch="noarch">
  <version epoch="0" ver="5.1" rel="44.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1306843200">- update to 4.20.3:
  * fix logging errors in error paths</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1311249600">- update to 4.20.4:
  * more information from the server response is included in the error message
    when an IMAP command errors out
  * Parser is now used instead of HeaderParser to correct illegal formatting
    bogosities in the body parts of incoming messages</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1317038400">- update to 4.22.0:
  * when retriever supports multiple mail folders (IMAP), store oldmail data
    for each folder separately, preventing problems in some cases when using
    multiple rc files with the same account
- changes from 4.21.0:
  * automatically open IMAP folders read-only if neither the delete nor
    delete_after options are in use; necessary to access chatlogs via Gmail
  * avoid sorting msgids on each retrieval, reducing overhead when dealing with
    folders containing thousands of messages</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1317556800">- update to 4.22.1:
  * fix BrokenUIDLPOP3Retriever breakage from 4.21.0</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1321617600">- update to 4.22.2:
  * ffix an error when logging a bad response to an IMAP SELECT command,
    introduced in 4.21.0</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1321790400">- update to 4.23.0:
  * fix race if new message shows up in POP3 mailbox between running the UIDL
    and LIST commands</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1323691200">- update to 4.24.0:
  * add an explicit expunge when closing an IMAP mailbox, for servers that
    incorrectly do not do this when the mailbox is closed
  * fix incorrect section reference for "mailboxes" parameter in documentation
  * fix getmail_fetch broken in 4.21.0</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1328961600">- update to 4.25.0:
  * add support for storing POP/IMAP password in OSX keychain</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1334491200">- update to 4.26.0:
  * switch to using BODY.PEEK in IMAP retrieval; upstream no longer see
    problems with this feature in my testing; if users experience
    incompatibility with any IMAP servers where 4.25.0 worked, contact upstream</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1337515200">- update to 4.27.0:
  * make use of IMAP BODY.PEEK configurable; set the IMAP retriever parameter
    `use_peek` to False to disable use of PEEK to get getmail's historical IMAP
    behaviour</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1350561600">- update to 4.34.0:
  * retrieve Gmail metadata (labels, thread ID, message ID) via IMAP extension
    and record it in new message headers
- changes from 4.33.0:
  * allow normal exit on interrupt (ctrl-c) to allow the user to abort message
    retrieval while still remembering already-retrieved messages as successfully
    delivered.  You may get a weird error message after you abort, since the
    server may be in the middle of delivering another message to getmail at the
    time
- changes from 4.32.0:
  * prevent some nuisance stack traces if getmail cannot connect to the POP/
    IMAP server correctly
  * restore use_peek IMAP retriever parameter which accidentally got removed
    in 4.30
- changes from 4.31.0:
  * improved backwards compatibility with pre-v.4.22.0 oldmail files, so IMAP
    mail is not re-retrieved if you upgrade from a 4.22 or earlier to this one;
    no user action necessary
- changes from 4.30.2:
  * fix a nuisance stack trace that would be dumped if a connection failed in
    particular states
- changes from 4.30.1:
  * silence a nuisance deprecation warning about the sets module when running
    with Python &gt;= 2.5 which was reintroduced in 4.29.0
- changes from 4.30.0:
  * fix breakage introduced in 4.29.0 where BrokenUIDLPOP3Retriever would fail
    with a TypeError at logout time
  * fix breakage introduced in 4.29.0 where deleted mail was not being expunged
    from the last (or only) folder retrieved from in an IMAP session
- changes from 4.29.0:
  * ensure getmail exits nonzero if a server refuses login due to a credential
    problem
- changes from 4.28.0:
  * ensure getmail exits nonzero if various error conditions (like POP/IMAP
    authentication failure) occur
  * python versions prior to 2.5.0 contain a bug when dealing with read-only
    IMAP mailboxes.  Monkey-patch imaplib when running with Python&lt;2.5.0.
  * do IMAP modified-utf7 conversion of mailbox names containing non-ASCII
    characters
  * add special ALL value for retrieving mail from all selectable IMAP
    mailboxes in the account
  * change IMAP retrieval strategy to retrieve all messages from a mailbox,
    then move on to the next mailbox, etc.  Should result in increased speed,
    but if you set `max_messages_per_session` too low, this could result in
    later mailboxes not being retrieved from.</changelog>
  <changelog author="dschung@cs.uni-kl.de" date="1361793600">- update to 4.39.0:
  * fix an oldmail filename issue that occurred with certain non-ASCII
    characters in an IMAP mailbox name
- changes from 4.38.0:
  * fix retrieving mail from an IMAP mailbox with non-ASCII characters in its
    name causing difficult-to-understand unicode errors during delivery
- changes from 4.37.0:
  * handle IMAP servers which include "/" in message IDs better, so those
    messages aren't always thought to be new
  * record (IMAP) mailbox retrieved from in X-getmail-retrieved-from-mailbox:
    header field, and make it available as %(mailbox) substitution in
    MDA_external arguments
  * add delete_bigger_than option to allow removal of large messages after
    retrieval, even if not deleting messages otherwise
- changes from 4.36.0:
  * add support for retrieving POP/IMAP passwords from, and storing them to,
    the Gnome keyring
- changes from 4.35.0:
  * fix From_ quoting in mbox delivery; use of the Python stdlib function
    meant getmail was incorrectly using mboxo-style quoting instead of
    mboxrd quoting, probably since early in the v4 series</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1364212800">- update to 4.39.1:
  * fix a bug that could crop up when retrieving mail via IMAP from Gmail, and
    the Gmail servers provided weird data in their header extensions.</changelog>
  <changelog author="tchvatal@suse.com" date="1376049600">- Fix the _service usage so we can submit to factory.</changelog>
  <changelog author="tchvatal@suse.com" date="1376049601">- Version bump to 4.42.0:
  * fix problem with non-ascii characters in newly-added message header fields
    with output from Filter_classifier.  Thanks: "Gour"
- Changes from 4.41.0:
  * messages retrieved with POP could have a blank trailing line removed when
    delivered; fixed.  Thanks: Christoph Mitterer, Krzysztof Warzecha.
  * fix an ImportError when IMAP retriever used with getmail under Python 2.4.
- Changes from 4.40.3:
  * increase system recursion limit when run with Python 2.3, to prevent
    recursion errors in parsing some pathologically complex MIME emails.
    Thanks: Kenneth Pronovici.
- Changes from 4.40.2:
  * fix a backwards incompatibility with Python 2.3 and 2.4 introduced in
    getmail 4.38.0.  Thanks: Massimo Zambelli, Krzysztof Warzecha.
- Changes from 4.40.1:
  * again change protocol codes passed to OSX, as they're not only reserved
    codes, but also case-sensitive.  Use the ones an OSX user reports work
    properly.  Thanks: Tim Gray.
- Changes from 4.40.0:
  * convert SIGTERM to SIGINT so getmail can cleanup and exit normally if
    killed with a default signal.  Thanks: Carl Lei.
  * fix change which resulted in passing full protocol name to OSX keyring
    program, which can't handle it (restricted to 4-character code).
    Thanks: Tim Gray.</changelog>
  <changelog author="tchvatal@suse.com" date="1376049602">- Remove %clean phase as it is not required.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1379937600">- update to 4.43.0:
  + add IMAP IDLE support
- refreshed getmail-fix_paths.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1412769600">- getmail 4.46.0 [bnc#900217]
  This release fixes several similar vulnerabilities that could
  allow a man-in-the-middle attacker to read encrypted traffic due
  to pack of certificate verification against the hostname.
  * fix --idle checking Python version incorrectly, resulting in
    incorrect warning about running with Python &lt; 2.5
  * add missing support for SSL certificate checking in POP3 which
    broke POP retrieval in v4.45.0
    [CVE-2014-7275]
- includes changes from 4.45.0:
  * perform hostname-vs-certificate matching of SSL certificate if
    validating the certifcate
    [CVE-2014-7274]
  * fix missing plaintext versions of documentation
- includes changes from 4.44.0:
  * add extended SSL options for IMAP retrievers, allowing
    certificate verification and other features
    [CVE-2014-7273]
  * fix missing plaintext versions of documentation
  * fix "Header instance has no attribute 'strip'" error which
    cropped up in some configurations</changelog>
  <changelog author="cunix@bitmessage.ch" date="1493553600">- added obs-service verify_file
- Version bump to 4.54.0
  * fix error running getmail_fetch introduced in 4.53.0.
- Changes from 4.53.0
  * fix plaintext version of docs not generated correctly.
  * fix `getmail --fingerprint` not logging server TLS fingerprint correctly
    with SimplePOP3SSLRetriever.
- Changes from 4.52.0
  * add `ignore_header_shrinkage` parameter to Filter_external for users who
    know it is normal for their particular filter to result in a smaller message
    header than the source message, for example when the filter encapsulates
    the original message in a simpler wrapper message.
  * EXPERIMENTAL: when deleting a message from an IMAP mailbox, set the \Seen
    flag in addition to the the \Deleted flag.  This apparently prevents
    the ever-innovatively-broken MSExchange from sending a spurious incorrect
    disposition-notification message to the sender of the message.  I do not
    know if this will cause problems with other broken IMAP server
    implementations; please send a report to the getmail-user's mailing list if
    you see odd behaviour with this change.
  * enable socket timeouts for IMAP SSL classes by default.  They were disabled
    in the code because they were incompatible with SSL in older versions of
    Python.  If you see problems with Python 2.6 or 2.7 now, please let me know.
- Changes from 4.51.0
  * fix exception when using MDA_External and an IMAP mailbox whose name
    contains non-ASCII chars.
- Changes from 4.50.0
  * maybe fix handling of OSX keychain passwords containing double-quote chars.
  * fix getmail erroring out on IMAP folders containing i18n chars.
- Changes from 4.49.0
  * make IMAP class only issue EXPUNGE command on mailbox close if we have
    actually deleted any messages from the open mailbox.  Makes use of read-only
    IMAP folders possible.
- Changes from 4.48.0
  * work around brain-damaged change in Python's poplib which causes
    message retrieval errors if any line of a message has more than
    2048 characters in it.
  * restore link to moved Marc mailing list archive.
- Changes from 4.47.0
  * try to work around pathological breakage in one random POP server
    implementation.
  * remove dead marc.theaimsgroup.com list archive from docs.
  * bugfix: if you combined IMAP IDLE mode with delete_after, getmail would,
    after remaining connected to the server for the number of days configured,
    begin deleting messages immediately after retrieval instead of after the
    configured delay.  Now fixed.</changelog>
  <changelog author="cunix@bitmessage.ch" date="1500379200">- Version bump to 5.1
  * bugfix: if password_command parameter was used with a non-existent
    program, getmail would error out during the handling of that
    condition and not report the problem correctly.
- Changes from 5.0
  * new release numbering scheme; previous version numbers were just
    getting too high.
  * catch and ignore/exit cleanly after reset connection in IMAP IDLE
    mode. Thanks:  Stephan Schulz.
  * allow specifying an expected SSL certificate hostname, for when
    the server's certificate does not match the domain name used to
    connect to it.  Thanks:  "Andre".
  * fix error message not actually giving the header field name
    incorrectly specified as containing the envelope recipient address.
    Thanks:  Hardy Braunsdorf.
  * add new password_command configuration parameter for retrievers,
    allowing getmail to retrieve the account password from any
    arbitrary external command.  Suggestion:  "ng0".</changelog>
</package>
<package pkgid="1d8d62db1a50d26d207d6ee5fa3bc73f6feae8a64540f9fe02d6a5426d05656e" name="gld" arch="src">
  <version epoch="0" ver="1.7" rel="4.1"/>
</package>
<package pkgid="56b1078d65afa4a440868fc534c418802bc5a459575503574d119aab637b4c29" name="gld" arch="x86_64">
  <version epoch="0" ver="1.7" rel="4.1"/>
</package>
<package pkgid="e3f060f1e7566d6a56470b43da9d85e276692589efe0e691b708e4e3bd15134a" name="gld-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7" rel="4.1"/>
</package>
<package pkgid="cfa704e586d2ad4d8b14643303f1b9a14d8f915c1e885d9b764bc3db47326733" name="gld-debugsource" arch="x86_64">
  <version epoch="0" ver="1.7" rel="4.1"/>
</package>
<package pkgid="cefd3f19bad98fc75e984ecbefdd18b1b89d8a7e377c4d6b6a556fe43c1fbf2a" name="gnarwl" arch="src">
  <version epoch="0" ver="3.6" rel="1.1"/>
  <changelog author="chris@computersalat.de" date="1345291200">- initial pkg 3.6</changelog>
</package>
<package pkgid="822946b22ba82053217af10950abefaeb5fc23307f5bba81b20e29dd5ebb2e66" name="gnarwl" arch="x86_64">
  <version epoch="0" ver="3.6" rel="1.1"/>
  <changelog author="chris@computersalat.de" date="1345291200">- initial pkg 3.6</changelog>
</package>
<package pkgid="b978d6663c3e837e4d9d45a9854a5a4633356d3693089f7eb084fb20d7d144f8" name="gnarwl-openldap-schema-ISPEnv2" arch="x86_64">
  <version epoch="0" ver="3.6" rel="1.1"/>
  <changelog author="chris@computersalat.de" date="1345291200">- initial pkg 3.6</changelog>
</package>
<package pkgid="0dcd7919d9ecd403cad53c49a602099689f57783240df98ea2353807d7133510" name="greylistd" arch="src">
  <version epoch="0" ver="0.8.7+nmu1" rel="3.1"/>
  <changelog author="poeml@suse.de" date="1102680000">- new packages (0.5.3)</changelog>
  <changelog author="poeml@suse.de" date="1104840000">- update to 0.7</changelog>
  <changelog author="poeml@suse.de" date="1149336000">- update to 0.8.3</changelog>
  <changelog author="poeml@suse.de" date="1160913600">- update to 0.8.3.1
  * Fix a bug with blacklist treated as whitelist
  * Fix text wrapped in exim4-acl-example.txt
  * Add vi translation
  * Add ja translation
  * Add cs translation</changelog>
  <changelog author="poeml@suse.de" date="1162468800">- greylistd should not start after exim -- the opposite is the
  case</changelog>
  <changelog author="poeml@suse.de" date="1164628800">- update to 0.8.3.2
  (only Debian-related changes)</changelog>
  <changelog author="poeml@suse.de" date="1164628801">- fix permissions of non-executable files</changelog>
  <changelog author="poeml@suse.de" date="1164801600">- fix whitelist to be a "host list" parsable by exim (it needs
  correct IP addresses with or without netmask)
  greylistd-0.8.3.2-whitelist_for_exim.patch
- in %post, install example /etc/greylistd/whitelist-hosts if not
  present already</changelog>
  <changelog author="poeml@suse.de" date="1181736000">- update to 0.8.3.5
  * Fix comments in configuration
  * Integrate Sven Anderson patch to allow to change triplet to single
  * Reduce delay to 600 by default
  * Add support for MRTG like output
  * Add nl, it, german translations</changelog>
  <changelog author="poeml@suse.de" date="1188475200">- init script: use the LSB equivalent Should-Start instead of
  X-UnitedLinux-Should-Start
- don't let force-reload send SIGHUP. Restart instead. SIGHUP leads
  to a server crash.</changelog>
  <changelog author="poeml@suse.de" date="1194609600">- update to 0.8.5. No functional change.</changelog>
  <changelog author="poeml@suse.de" date="1203940800">- clean up /var/run/greylistd/socket on startup, if it is not in
  use. Normally I would expect /etc/init.d/boot.local to do that,
  but apparently it cleans up only regular files.</changelog>
  <changelog author="poeml@suse.de" date="1206360000">- fix typo in init script, introduced with last change.</changelog>
  <changelog author="poeml@suse.de" date="1208260800">- update to 0.8.6. From the Debian upstream changelog:
  * Non-maintainer upload acknowledged by maintainer.
  * Applied patch from Petter Reinholdtsen which add LSB dependency info
    to init.d-script. (Closes: #460151)
  * Applied patch from David L. Anselmi which fixes a syntax error in
    exim4-acl-example.txt. (Closes: #400089)
  * Change acl_whitelist_local_deny to acl_local_deny_exceptions
    for exim4 &gt;= 4.68 (Closes: #452163)
  None of those changes should be relevant for this RPM package.</changelog>
  <changelog author="poeml@suse.de" date="1243944000">- fix Should-Stop/Required-Stop setup in the init script
- remove suse_version check for SuSE Linux 8.2</changelog>
  <changelog author="poeml@suse.de" date="1243944001">- update to 0.8.7+nmu1. Changes (from upstream/Debian changelog):
  greylistd (0.8.7) unstable; urgency=low
  * Declaring myself as maintainer
  * My first ever Debian package
  * Applied patch from myself to fix bug: Singleupdate option is
    broken (Closes: #480365)
  * Applied patch from Alexander Gordienko to fix bug: network ranges
    in whitelist-hosts don't work (Closes: #311652)
  * Simplified whitelist-hosts, because now we can say /12
- greylistd-0.8.3.2-whitelist_for_exim.patch is obsolete now</changelog>
  <changelog author="poeml@suse.de" date="1246622400">- update copyright header in init script</changelog>
  <changelog author="lars@samba.org" date="1322481600">- Start the daemon even if the socket directory is missing; (bnc#733107).
- Attribute the socket directory as %ghost in the files list.</changelog>
</package>
<package pkgid="b7d302a9c9310281fdde60ad6d458e9d17602ec08ac8e0f72162ffe60357e365" name="greylistd" arch="x86_64">
  <version epoch="0" ver="0.8.7+nmu1" rel="3.1"/>
  <changelog author="poeml@suse.de" date="1181736000">- update to 0.8.3.5
  * Fix comments in configuration
  * Integrate Sven Anderson patch to allow to change triplet to single
  * Reduce delay to 600 by default
  * Add support for MRTG like output
  * Add nl, it, german translations</changelog>
  <changelog author="poeml@suse.de" date="1188475200">- init script: use the LSB equivalent Should-Start instead of
  X-UnitedLinux-Should-Start
- don't let force-reload send SIGHUP. Restart instead. SIGHUP leads
  to a server crash.</changelog>
  <changelog author="poeml@suse.de" date="1194609600">- update to 0.8.5. No functional change.</changelog>
  <changelog author="poeml@suse.de" date="1203940800">- clean up /var/run/greylistd/socket on startup, if it is not in
  use. Normally I would expect /etc/init.d/boot.local to do that,
  but apparently it cleans up only regular files.</changelog>
  <changelog author="poeml@suse.de" date="1206360000">- fix typo in init script, introduced with last change.</changelog>
  <changelog author="poeml@suse.de" date="1208260800">- update to 0.8.6. From the Debian upstream changelog:
  * Non-maintainer upload acknowledged by maintainer.
  * Applied patch from Petter Reinholdtsen which add LSB dependency info
    to init.d-script. (Closes: #460151)
  * Applied patch from David L. Anselmi which fixes a syntax error in
    exim4-acl-example.txt. (Closes: #400089)
  * Change acl_whitelist_local_deny to acl_local_deny_exceptions
    for exim4 &gt;= 4.68 (Closes: #452163)
  None of those changes should be relevant for this RPM package.</changelog>
  <changelog author="poeml@suse.de" date="1243944000">- fix Should-Stop/Required-Stop setup in the init script
- remove suse_version check for SuSE Linux 8.2</changelog>
  <changelog author="poeml@suse.de" date="1243944001">- update to 0.8.7+nmu1. Changes (from upstream/Debian changelog):
  greylistd (0.8.7) unstable; urgency=low
  * Declaring myself as maintainer
  * My first ever Debian package
  * Applied patch from myself to fix bug: Singleupdate option is
    broken (Closes: #480365)
  * Applied patch from Alexander Gordienko to fix bug: network ranges
    in whitelist-hosts don't work (Closes: #311652)
  * Simplified whitelist-hosts, because now we can say /12
- greylistd-0.8.3.2-whitelist_for_exim.patch is obsolete now</changelog>
  <changelog author="poeml@suse.de" date="1246622400">- update copyright header in init script</changelog>
  <changelog author="lars@samba.org" date="1322481600">- Start the daemon even if the socket directory is missing; (bnc#733107).
- Attribute the socket directory as %ghost in the files list.</changelog>
</package>
<package pkgid="736536eabc3c033952ba8ae91300b586893586145222ba9f1e87db0868ab06a8" name="hashcash" arch="src">
  <version epoch="0" ver="1.22" rel="4.1"/>
  <changelog author="Adam Back &lt;adam@cypherspace.org&gt;" date="1056628800">- First spec file</changelog>
  <changelog author="Jochen Sch&#xF6;nfelder &lt;arisel@arisel.de&gt;" date="1078574400">- Mandrake-build fixes
- sha1-manpage moved to sha1-hashcash</changelog>
  <changelog author="Jochen Sch&#xF6;nfelder &lt;arisel@arisel.de&gt;" date="1078660800">- tried to merge Mandrake &amp; redhat rpms</changelog>
  <changelog author="Adam Back &lt;adam@cypherspace.org&gt;" date="1078660801">- used general targets {_bin|_man|_doc}dir etc</changelog>
  <changelog author="Adam Back &lt;adam@cypherspace.org&gt;" date="1094558400">- add cpu/platform specific tests to compile best code for platform</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1106308800">- add hashcash-sendmail</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1110974400">- added patch for formatstring bug</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1112961600">- Upgrade to 1.17
- Use 22 bits in hashcash-sendmail
- Strip binaries during installation</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1123156800">- Upgrade to 1.18</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1148904000">- Upgrade to version 1.22</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1159531200">- Integrated dietlibc
- Force x86 version to be built</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1268654400">- Added patch for broken sendmail exitstatus handling
- Extegrated dietlibc because 0.31 (from openSUSE) is broken wrt gcc-4.4</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1274443200">- Changed build target to gnu (for x86_64)</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1289476800">- Various specfile modifications for openSUSE build service</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1289476801">- Fixed encoding in hashcash.changes
- Fixed Group: header
- Re-compressed source using bzip2
- Renamed sha1-hashcash manpage
- Added README.SUSE</changelog>
</package>
<package pkgid="2fe7fc25611a8a0c8337e19c954d6126a6a6be6d8227244c8b8c54250636afe5" name="hashcash" arch="x86_64">
  <version epoch="0" ver="1.22" rel="4.1"/>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1106308800">- add hashcash-sendmail</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1110974400">- added patch for formatstring bug</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1112961600">- Upgrade to 1.17
- Use 22 bits in hashcash-sendmail
- Strip binaries during installation</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1123156800">- Upgrade to 1.18</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1148904000">- Upgrade to version 1.22</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1159531200">- Integrated dietlibc
- Force x86 version to be built</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1268654400">- Added patch for broken sendmail exitstatus handling
- Extegrated dietlibc because 0.31 (from openSUSE) is broken wrt gcc-4.4</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1274443200">- Changed build target to gnu (for x86_64)</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1289476800">- Various specfile modifications for openSUSE build service</changelog>
  <changelog author="Peter Conrad &lt;conrad@quisquis.de&gt;" date="1289476801">- Fixed encoding in hashcash.changes
- Fixed Group: header
- Re-compressed source using bzip2
- Renamed sha1-hashcash manpage
- Added README.SUSE</changelog>
</package>
<package pkgid="3bc2e496cb354b51274c59c39e78abe0008d325a0a2110311dca511cd24ddb08" name="imap" arch="src">
  <version epoch="0" ver="2007e_suse" rel="34.1"/>
  <changelog author="arvin@suse.de" date="1095076800">- fixes for mailbox access over rsh and ssh (bug #43905)</changelog>
  <changelog author="kukuk@suse.de" date="1100520000">- Use common-* PAM config files in imap.pamd and pop.pamd</changelog>
  <changelog author="arvin@suse.de" date="1103025600">- updated to version 2004b RC1</changelog>
  <changelog author="arvin@suse.de" date="1106308800">- updated to version 2004c</changelog>
  <changelog author="rommel@suse.de" date="1124712000">- the FreeFork license used by UW says we have to make it clear in the version
  number that we modified the sources; hinted by our license manager</changelog>
  <changelog author="rommel@suse.de" date="1128945600">- version update to imap-2004g (includes fix for Bug #120608)</changelog>
  <changelog author="seife@suse.de" date="1136980800">- add -fstack-protector</changelog>
  <changelog author="schwab@suse.de" date="1137240000">- Don't strip binaries.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="ro@suse.de" date="1138881600">- give libc-client.so a SONAME</changelog>
  <changelog author="mskibbe@suse.de" date="1163678400">- update to version 2006c1 which
  o fix bugs
  o fix bug( Bug 217287 - imap-2004g_suse-28: use of dangerous
    "gets" function )
  o fix bug( Bug 144598 - imap-2004g_suse-4: dodgy code )</changelog>
  <changelog author="mskibbe@suse.de" date="1172836800">- imap : Support for FATE #300687: Ports for SuSEfirewall added
  via packages (#250579)</changelog>
  <changelog author="mskibbe@suse.de" date="1174046400">- fix ports in firewall file</changelog>
  <changelog author="mskibbe@suse.de" date="1199707200">- Bug 351197 - several packages use wrong dir for SuSEfirewall2
  services files</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="chris@computersalat.de" date="1261137600">- update to 2007e which
  o fix bugs
- cleanup spec
  o sort tags
  o {name} macro
- rework patches
  o imap-2002c-c++.diff &gt; imap-2007e-c++.patch
  o imap-2006c1.diff &gt; imap-2007e.patch
- rpmlint
  o deprecated-use-of-%run_ldconfig
  o shlib-policy-name-error
  - renamed sub-pkg 'lib' to 'libc-client2007e_suse'
  o files-duplicate {_includedir}
  - added rpmlintrc</changelog>
  <changelog author="mls@suse.de" date="1386331200">- link libc-client with -lpam (as we link other packages with
  with --as-needed)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455364800">- imap-openssl.patch: Support TLS 1.2 and ECDH ciphersuites.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1457956800">- spec: most C sources need removal of old K&amp;R extern int errno;
  declaration, which does not actually work with glibc where
  errno is a macro that expands to a function call.
- spec: build with -DOPENSSL_NO_DEPRECATED and
  - DOPENSSL_NO_SSL_INTERN to emulate as close as possible
  API/ABI availability of upcoming openSSL releases.
- imap-openssl.patch: remove ephemeral RSA keys support, it is
  considered insecure.openSSL 1.1 no longer supports this feature
  and package will fail to build.
- imap-openssl.patch: remove code that uses insecure tmpnam()
  function, it is not required on linux systems.
- imap-implicit-decls.patch: fix implicit fortify/pointer
  declaration rpmlint warnings.</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Rename README.SuSE to README.SUSE
- Cleanup with spec-cleaner
- Add patches from RH and Debian:
  * imap-2007e-poll.patch
  * imap-2007f-format-security.patch
  * imap-openssl-1.1.patch</changelog>
</package>
<package pkgid="ffc555347e2ba7c86e09d12f38ad1031dad4c3dac1758f4662771dd9a97f56fd" name="imap" arch="x86_64">
  <version epoch="0" ver="2007e_suse" rel="34.1"/>
  <changelog author="mskibbe@suse.de" date="1163678400">- update to version 2006c1 which
  o fix bugs
  o fix bug( Bug 217287 - imap-2004g_suse-28: use of dangerous
    "gets" function )
  o fix bug( Bug 144598 - imap-2004g_suse-4: dodgy code )</changelog>
  <changelog author="mskibbe@suse.de" date="1172836800">- imap : Support for FATE #300687: Ports for SuSEfirewall added
  via packages (#250579)</changelog>
  <changelog author="mskibbe@suse.de" date="1174046400">- fix ports in firewall file</changelog>
  <changelog author="mskibbe@suse.de" date="1199707200">- Bug 351197 - several packages use wrong dir for SuSEfirewall2
  services files</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="chris@computersalat.de" date="1261137600">- update to 2007e which
  o fix bugs
- cleanup spec
  o sort tags
  o {name} macro
- rework patches
  o imap-2002c-c++.diff &gt; imap-2007e-c++.patch
  o imap-2006c1.diff &gt; imap-2007e.patch
- rpmlint
  o deprecated-use-of-%run_ldconfig
  o shlib-policy-name-error
  - renamed sub-pkg 'lib' to 'libc-client2007e_suse'
  o files-duplicate {_includedir}
  - added rpmlintrc</changelog>
  <changelog author="mls@suse.de" date="1386331200">- link libc-client with -lpam (as we link other packages with
  with --as-needed)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455364800">- imap-openssl.patch: Support TLS 1.2 and ECDH ciphersuites.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1457956800">- spec: most C sources need removal of old K&amp;R extern int errno;
  declaration, which does not actually work with glibc where
  errno is a macro that expands to a function call.
- spec: build with -DOPENSSL_NO_DEPRECATED and
  - DOPENSSL_NO_SSL_INTERN to emulate as close as possible
  API/ABI availability of upcoming openSSL releases.
- imap-openssl.patch: remove ephemeral RSA keys support, it is
  considered insecure.openSSL 1.1 no longer supports this feature
  and package will fail to build.
- imap-openssl.patch: remove code that uses insecure tmpnam()
  function, it is not required on linux systems.
- imap-implicit-decls.patch: fix implicit fortify/pointer
  declaration rpmlint warnings.</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Rename README.SuSE to README.SUSE
- Cleanup with spec-cleaner
- Add patches from RH and Debian:
  * imap-2007e-poll.patch
  * imap-2007f-format-security.patch
  * imap-openssl-1.1.patch</changelog>
</package>
<package pkgid="12ac05ce20b46d23db4dee09225623743edcfefdc40a346f0a6dff5d644768e8" name="imap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2007e_suse" rel="34.1"/>
  <changelog author="arvin@suse.de" date="1095076800">- fixes for mailbox access over rsh and ssh (bug #43905)</changelog>
  <changelog author="kukuk@suse.de" date="1100520000">- Use common-* PAM config files in imap.pamd and pop.pamd</changelog>
  <changelog author="arvin@suse.de" date="1103025600">- updated to version 2004b RC1</changelog>
  <changelog author="arvin@suse.de" date="1106308800">- updated to version 2004c</changelog>
  <changelog author="rommel@suse.de" date="1124712000">- the FreeFork license used by UW says we have to make it clear in the version
  number that we modified the sources; hinted by our license manager</changelog>
  <changelog author="rommel@suse.de" date="1128945600">- version update to imap-2004g (includes fix for Bug #120608)</changelog>
  <changelog author="seife@suse.de" date="1136980800">- add -fstack-protector</changelog>
  <changelog author="schwab@suse.de" date="1137240000">- Don't strip binaries.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="ro@suse.de" date="1138881600">- give libc-client.so a SONAME</changelog>
  <changelog author="mskibbe@suse.de" date="1163678400">- update to version 2006c1 which
  o fix bugs
  o fix bug( Bug 217287 - imap-2004g_suse-28: use of dangerous
    "gets" function )
  o fix bug( Bug 144598 - imap-2004g_suse-4: dodgy code )</changelog>
  <changelog author="mskibbe@suse.de" date="1172836800">- imap : Support for FATE #300687: Ports for SuSEfirewall added
  via packages (#250579)</changelog>
  <changelog author="mskibbe@suse.de" date="1174046400">- fix ports in firewall file</changelog>
  <changelog author="mskibbe@suse.de" date="1199707200">- Bug 351197 - several packages use wrong dir for SuSEfirewall2
  services files</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="chris@computersalat.de" date="1261137600">- update to 2007e which
  o fix bugs
- cleanup spec
  o sort tags
  o {name} macro
- rework patches
  o imap-2002c-c++.diff &gt; imap-2007e-c++.patch
  o imap-2006c1.diff &gt; imap-2007e.patch
- rpmlint
  o deprecated-use-of-%run_ldconfig
  o shlib-policy-name-error
  - renamed sub-pkg 'lib' to 'libc-client2007e_suse'
  o files-duplicate {_includedir}
  - added rpmlintrc</changelog>
  <changelog author="mls@suse.de" date="1386331200">- link libc-client with -lpam (as we link other packages with
  with --as-needed)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455364800">- imap-openssl.patch: Support TLS 1.2 and ECDH ciphersuites.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1457956800">- spec: most C sources need removal of old K&amp;R extern int errno;
  declaration, which does not actually work with glibc where
  errno is a macro that expands to a function call.
- spec: build with -DOPENSSL_NO_DEPRECATED and
  - DOPENSSL_NO_SSL_INTERN to emulate as close as possible
  API/ABI availability of upcoming openSSL releases.
- imap-openssl.patch: remove ephemeral RSA keys support, it is
  considered insecure.openSSL 1.1 no longer supports this feature
  and package will fail to build.
- imap-openssl.patch: remove code that uses insecure tmpnam()
  function, it is not required on linux systems.
- imap-implicit-decls.patch: fix implicit fortify/pointer
  declaration rpmlint warnings.</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Rename README.SuSE to README.SUSE
- Cleanup with spec-cleaner
- Add patches from RH and Debian:
  * imap-2007e-poll.patch
  * imap-2007f-format-security.patch
  * imap-openssl-1.1.patch</changelog>
</package>
<package pkgid="f8a769dea205f3e25c7d0440a4d5f8d011def5aa93f6dc56d7b5e8d43d7d3c06" name="imap-debugsource" arch="x86_64">
  <version epoch="0" ver="2007e_suse" rel="34.1"/>
  <changelog author="mskibbe@suse.de" date="1163678400">- update to version 2006c1 which
  o fix bugs
  o fix bug( Bug 217287 - imap-2004g_suse-28: use of dangerous
    "gets" function )
  o fix bug( Bug 144598 - imap-2004g_suse-4: dodgy code )</changelog>
  <changelog author="mskibbe@suse.de" date="1172836800">- imap : Support for FATE #300687: Ports for SuSEfirewall added
  via packages (#250579)</changelog>
  <changelog author="mskibbe@suse.de" date="1174046400">- fix ports in firewall file</changelog>
  <changelog author="mskibbe@suse.de" date="1199707200">- Bug 351197 - several packages use wrong dir for SuSEfirewall2
  services files</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="chris@computersalat.de" date="1261137600">- update to 2007e which
  o fix bugs
- cleanup spec
  o sort tags
  o {name} macro
- rework patches
  o imap-2002c-c++.diff &gt; imap-2007e-c++.patch
  o imap-2006c1.diff &gt; imap-2007e.patch
- rpmlint
  o deprecated-use-of-%run_ldconfig
  o shlib-policy-name-error
  - renamed sub-pkg 'lib' to 'libc-client2007e_suse'
  o files-duplicate {_includedir}
  - added rpmlintrc</changelog>
  <changelog author="mls@suse.de" date="1386331200">- link libc-client with -lpam (as we link other packages with
  with --as-needed)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455364800">- imap-openssl.patch: Support TLS 1.2 and ECDH ciphersuites.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1457956800">- spec: most C sources need removal of old K&amp;R extern int errno;
  declaration, which does not actually work with glibc where
  errno is a macro that expands to a function call.
- spec: build with -DOPENSSL_NO_DEPRECATED and
  - DOPENSSL_NO_SSL_INTERN to emulate as close as possible
  API/ABI availability of upcoming openSSL releases.
- imap-openssl.patch: remove ephemeral RSA keys support, it is
  considered insecure.openSSL 1.1 no longer supports this feature
  and package will fail to build.
- imap-openssl.patch: remove code that uses insecure tmpnam()
  function, it is not required on linux systems.
- imap-implicit-decls.patch: fix implicit fortify/pointer
  declaration rpmlint warnings.</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Rename README.SuSE to README.SUSE
- Cleanup with spec-cleaner
- Add patches from RH and Debian:
  * imap-2007e-poll.patch
  * imap-2007f-format-security.patch
  * imap-openssl-1.1.patch</changelog>
</package>
<package pkgid="8f7019f760dd9bfc5b3c3eeb2d859450b3dc3f4bc36276adf8cdaf5cc0a568ef" name="imap-devel" arch="x86_64">
  <version epoch="0" ver="2007e_suse" rel="34.1"/>
  <changelog author="mskibbe@suse.de" date="1163678400">- update to version 2006c1 which
  o fix bugs
  o fix bug( Bug 217287 - imap-2004g_suse-28: use of dangerous
    "gets" function )
  o fix bug( Bug 144598 - imap-2004g_suse-4: dodgy code )</changelog>
  <changelog author="mskibbe@suse.de" date="1172836800">- imap : Support for FATE #300687: Ports for SuSEfirewall added
  via packages (#250579)</changelog>
  <changelog author="mskibbe@suse.de" date="1174046400">- fix ports in firewall file</changelog>
  <changelog author="mskibbe@suse.de" date="1199707200">- Bug 351197 - several packages use wrong dir for SuSEfirewall2
  services files</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="chris@computersalat.de" date="1261137600">- update to 2007e which
  o fix bugs
- cleanup spec
  o sort tags
  o {name} macro
- rework patches
  o imap-2002c-c++.diff &gt; imap-2007e-c++.patch
  o imap-2006c1.diff &gt; imap-2007e.patch
- rpmlint
  o deprecated-use-of-%run_ldconfig
  o shlib-policy-name-error
  - renamed sub-pkg 'lib' to 'libc-client2007e_suse'
  o files-duplicate {_includedir}
  - added rpmlintrc</changelog>
  <changelog author="mls@suse.de" date="1386331200">- link libc-client with -lpam (as we link other packages with
  with --as-needed)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455364800">- imap-openssl.patch: Support TLS 1.2 and ECDH ciphersuites.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1457956800">- spec: most C sources need removal of old K&amp;R extern int errno;
  declaration, which does not actually work with glibc where
  errno is a macro that expands to a function call.
- spec: build with -DOPENSSL_NO_DEPRECATED and
  - DOPENSSL_NO_SSL_INTERN to emulate as close as possible
  API/ABI availability of upcoming openSSL releases.
- imap-openssl.patch: remove ephemeral RSA keys support, it is
  considered insecure.openSSL 1.1 no longer supports this feature
  and package will fail to build.
- imap-openssl.patch: remove code that uses insecure tmpnam()
  function, it is not required on linux systems.
- imap-implicit-decls.patch: fix implicit fortify/pointer
  declaration rpmlint warnings.</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Rename README.SuSE to README.SUSE
- Cleanup with spec-cleaner
- Add patches from RH and Debian:
  * imap-2007e-poll.patch
  * imap-2007f-format-security.patch
  * imap-openssl-1.1.patch</changelog>
</package>
<package pkgid="7cf93d738c9a903e6aaa4bdbea74f46e1150d89bd89f92075b4170c2e4c06164" name="imap-utils" arch="src">
  <version epoch="0" ver="0.4" rel="1.1"/>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.4" date="1221480000">- new package</changelog>
</package>
<package pkgid="12e6e860e5ab7ee7e8962ca70731a36b6c90cc88aebd4602be6c88462ad57529" name="imap-utils" arch="x86_64">
  <version epoch="0" ver="0.4" rel="1.1"/>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.4" date="1221480000">- new package</changelog>
</package>
<package pkgid="02465b4d890caa7d1c406c8174b5a32254b14819c7b918b5661e17cf350b79d9" name="imapfilter" arch="src">
  <version epoch="0" ver="2.6.10" rel="39.1"/>
  <changelog author="mskibbe@suse.de" date="1199707200">- update to version 2.0.9 which:
  o on some platforms it is necessary to link against the math
    library
  o the match_*() methods failed to match messages.
  o the match_*() methods failed with an error when no messages
    matched.
  o note added in the documentation about the need to use double
    backslashes inside of regular expression patterns.</changelog>
  <changelog author="mskibbe@suse.de" date="1203336000">- update to version 2.0.10 which:
  o Bug fix; failed a great number (tens of thousands) of commands
    were exchanged with an IMAP server
  o Bug fix; failed to fetch the body of some messages in some
    extremely rare occasions
  o Bug fix; the description for the contain_header() method was
    clarified</changelog>
  <changelog author="coolo@suse.de" date="1206705600">- remove explicit lib require</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1258977600">- update to 2.1:
  * add support for the IMAP IDLE extension
  * add new methods to fetch parts of messages along with the body
    structure of messages
  * add global option for the character to be used during searching
  * minor bugfixes</changelog>
  <changelog author="chris@computersalat.de" date="1259064000">- fix build for SLE_10
  o lua &gt;= 5.1
- spec mods
  o fix header
  o sorted TAGS
  * fix Summary
  o removed changes from spec</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1262260800">- update to 2.2:
  * support for combining searching methods in multiple mailboxes
    at the same or different accounts and processing of the results
    in bulk
  * support for meta-searching that allows searching on the
    previous searching results</changelog>
  <changelog author="hvogel@novell.com" date="1288958400">- Update to version 2.2.2
  * Bug fix; a couple of errors in the extending examples file.
  * A global option for the IDLE refreshing interval was added.
  * Bug fix; more detailed reporting when SSL socket errors occur.</changelog>
  <changelog author="arun@nubati.net" date="1319371200">- Update to version 2.3 (taken from the NEWS file)
  IMAPFilter 2.3 - 6 Aug 2011
  - Support for appending/uploading messages to mailboxes.
  - Debug file option now takes filename argument.
  - New simplified configuration and building procedure.
  - Bug fix; in some cases a mailbox was incorrectly assumed selected.
  - Bug fix; in some cases server capabilities needed update after login.
  - Bug fix; timeout problem with CRAM-MD5 authentication.
  - Bug fix; some servers send non-ASCII characters in their responses.
  IMAPFilter 2.2.3 - 6 Mar 2011
  - Project moved to GitHub.
  - Changed file and directory structure.
  - The next UID is returned as an additional return value of check_status().
  - All processing methods now return a boolean based on their success.
  - Bug fix; a lost connection is now handled better by trying to reconnect.
  - Bug fix; in some cases in IDLE a message had arrived but was ignored.
  - Bug fix; in some servers the initial IDLE reply wasn't handled correctly.
  - Bug fix; typo errors in the documentation.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build</changelog>
  <changelog author="arun@nubati.net" date="1330430400">- updated to version 2.5.1 (taken from the NEWS file)
  IMAPFilter 2.5.1 - 27 Feb 2012
  - Support for recovery of a session after a BYE response is received.
  - Option to control in which cases a terminated session will be restored.
  - Bug fix; a BYE response could sometimes get incorrectly ignored.
  IMAPFilter 2.5 - 23 Feb 2012
  - Support for recovery of a session when a network failure is encountered,
    and other robustness improvements.
  - Informational messages are printed also for the fetch and append methods.
  - Lua 5.2 compatibility, while the codebase can still be compiled with
    version 5.1.
  - The OpenSSL library is now a mandatory build requirement.
  - Bug fix; unrecoverable login failures did not result in aborting of the
    execution of the configuration.
  - Bug fix; when messages were appended to a mailbox that did not exist, it
    failed to create the mailbox and then retry the appending.
  - Bug fix; misleading errors were printed on some SSL failures.
  - Bug fix; protected call of the commands to execute in the daemon function
    could hide important failures.
  - Bug fix; the man page had an incorrect description of the -d option.
  * Support for the old deprecated 1.x configuration format has been removed,
    and the current 2.x format can only be executed from now on.
  IMAPFilter 2.4.2 - 19 Jan 2012
  - Bug fix; some ASCII characters in mailbox names were incorrectly converted
    to UTF-7.
  IMAPFilter 2.4.1 - 8 Dec 2011
  - Bug fix; become_daemon() failure.
  IMAPFilter 2.4 - 6 Dec 2011
  - Support for non-ASCII mailbox names.
  - New environment variable to set the configuration directory.
  - Bug fix; parsing of some server responses was broken since the previous
    release.
  - Bug fix; the match_field() method matched on the whole header field,
    instead of only the header field body.
  - Bug fix; debug file check caused printing of a misleading error message.
  - Bug fix; typo error in a configuration man page example.</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to version 2.5.2
  - Persistent errors or connection failures are now ignored when
    running in daemon mode, and a reconnection is attempted during
    the next loop iteration.
  - Bug fix; problems with failure handling during login/logout.</changelog>
  <changelog author="arun@nubati.net" date="1343217600">- updated to version 2.5.3
  - New implementation for international mailbox names.
  - Bug fix; wrong variable name in one of the examples on extending.
  - Bug fix; an OpenSSL compilation warning.</changelog>
  <changelog author="arun@nubati.net" date="1366372800">- updated to IMAPFilter 2.5.4 - 9 Apr 2013
  - Some server responses are now parsed less stricly.
  - More detailed information is now printed when there's an error.
  - Bug fix; various corrections in the recovery mechanism.</changelog>
  <changelog author="arun@gmx.de" date="1373889600">- updated to IMAPFilter 2.5.5 - 8 Jun 2013
  - Work-around for some servers that send an unexpected APPEND response.
  - The serial number of the certificates is taken into account, because some
    servers send different certificates with the same subject and issuer.
  - Details of the stored certificates are written to the certificates file, in
    order to make it easier to distinguish each of them.
  - Support for TLS versions 1.1 and 1.2 for secure connections.</changelog>
  <changelog author="arun@gmx.de" date="1386244800">- update to IMAPFilter 2.5.6 - 27 Oct 2013
  * Possible to build again with OpenSSL older than version 1.0.1 (was a
    requirement for the previous release due to new protocols TLS 1.1/1.2).
  * Support for reading the configuration from the standard input stream.
  * New makefile dist target, which can be used to create distribution archives.</changelog>
  <changelog author="arun@gmx.de" date="1417867200">- specfile: update copyright year
- update to version 2.5.7
  * Support for automatic validation of SSL connections, using the
  operating system's installed trusted CA certificates (usually from
  authorities that are shipped with web browsers).
  * A new "wakeonany" option makes it possible to end IDLE mode on any
  event, not just on new messages.
  * A new "reenter" option controls whether IDLE mode should be
  re-entered, after the recovery of the session, which makes it
  possible to continue with the execution of the next line in the
  configuration file.
  * The documentation now mentions that the contain_*() methods do
  case-insensitive searching (an IMAP limitation).
  * The documentation now has a better explanation of the arrived_*()
  and sent_*() methods.
  * Bug fix; the value returned by the copy method was incorrect in
  some cases.</changelog>
  <changelog author="arun@gmx.de" date="1444219200">- specfile: update copyright year
- upgrade to version 2.6.3:
  * Support for loading a default CA certificates file.
  * A new has_unkeyword() method to search messages without a keyword
    flag set.
  * Bug fix; double quotation around keyword sent by the has_flag()
    method.
- changes from version 2.6.2:
  * Bug fix; drop connection on local certificate mismatch.
- changes from version 2.6.1:
  * Support for loading the system's CA certificates from a file.
  * Bug fix; flusing of standard output/error in a some cases.
- changes from version 2.6:
  * Optimizations that vastly improve performance of the
    meta-searching functionality, by making subsequent search requests
    limit their scope based on the results already returned by
    previous requests (previously this was the case only for the
    match_*() methods).
  * Lua 5.3 compatibility (the codebase can still be compiled with
    versions 5.2 and 5.1).
  * A new "limit" option can be used as a work-around for problems
    that some servers have with long requests.
  * The documentation now clarifies how to make the client block
    indefinitely.
  * Bug fix; the check_status() method now returns 4 numbers on error
    as described in the documentation (just negative values in this
    case).
  * Bug fix; flushing of default output on password prompt.
  * Bug fix; program fault when very long requests were to be sent.</changelog>
  <changelog author="arun@gmx.de" date="1454760000">- update to version 2.6.6:
  * Bug fix; print an error message if "ssl" has been set to "ssl3".
- changes from version 2.6.5:
  * Possible to build again with OpenSSL when support for SSL 3.0 is
    disabled.
- changes from version 2.6.4:
  * Support for OAuth 2.0 and the XOAUTH2 authentication mechanism.</changelog>
  <changelog author="arun@gmx.de" date="1466683200">- update to version 2.6.7:
  * A dry-run mode that disables all actions that modify data.
  * Bug fix; handle IDLE untagged responses that are received in
    pieces.</changelog>
  <changelog author="arun@gmx.de" date="1487678400">- specfile:
  * update copyright year
- update to version 2.6.10:
  * Bug fix; segmentation fault on some OpenSSL builds.
- changes from version 2.6.9:
  * Bug fix; possible problem during STARTTLS negotiation.
- changes from version 2.6.8:
  * Support building with OpenSSL 1.1.0.</changelog>
</package>
<package pkgid="36f48994a63ec4a33b438ab41131cf99ac74c2f6e4412b51224cb111497722eb" name="imapfilter" arch="x86_64">
  <version epoch="0" ver="2.6.10" rel="39.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1258977600">- update to 2.1:
  * add support for the IMAP IDLE extension
  * add new methods to fetch parts of messages along with the body
    structure of messages
  * add global option for the character to be used during searching
  * minor bugfixes</changelog>
  <changelog author="chris@computersalat.de" date="1259064000">- fix build for SLE_10
  o lua &gt;= 5.1
- spec mods
  o fix header
  o sorted TAGS
  * fix Summary
  o removed changes from spec</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1262260800">- update to 2.2:
  * support for combining searching methods in multiple mailboxes
    at the same or different accounts and processing of the results
    in bulk
  * support for meta-searching that allows searching on the
    previous searching results</changelog>
  <changelog author="hvogel@novell.com" date="1288958400">- Update to version 2.2.2
  * Bug fix; a couple of errors in the extending examples file.
  * A global option for the IDLE refreshing interval was added.
  * Bug fix; more detailed reporting when SSL socket errors occur.</changelog>
  <changelog author="arun@nubati.net" date="1319371200">- Update to version 2.3 (taken from the NEWS file)
  IMAPFilter 2.3 - 6 Aug 2011
  - Support for appending/uploading messages to mailboxes.
  - Debug file option now takes filename argument.
  - New simplified configuration and building procedure.
  - Bug fix; in some cases a mailbox was incorrectly assumed selected.
  - Bug fix; in some cases server capabilities needed update after login.
  - Bug fix; timeout problem with CRAM-MD5 authentication.
  - Bug fix; some servers send non-ASCII characters in their responses.
  IMAPFilter 2.2.3 - 6 Mar 2011
  - Project moved to GitHub.
  - Changed file and directory structure.
  - The next UID is returned as an additional return value of check_status().
  - All processing methods now return a boolean based on their success.
  - Bug fix; a lost connection is now handled better by trying to reconnect.
  - Bug fix; in some cases in IDLE a message had arrived but was ignored.
  - Bug fix; in some servers the initial IDLE reply wasn't handled correctly.
  - Bug fix; typo errors in the documentation.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build</changelog>
  <changelog author="arun@nubati.net" date="1330430400">- updated to version 2.5.1 (taken from the NEWS file)
  IMAPFilter 2.5.1 - 27 Feb 2012
  - Support for recovery of a session after a BYE response is received.
  - Option to control in which cases a terminated session will be restored.
  - Bug fix; a BYE response could sometimes get incorrectly ignored.
  IMAPFilter 2.5 - 23 Feb 2012
  - Support for recovery of a session when a network failure is encountered,
    and other robustness improvements.
  - Informational messages are printed also for the fetch and append methods.
  - Lua 5.2 compatibility, while the codebase can still be compiled with
    version 5.1.
  - The OpenSSL library is now a mandatory build requirement.
  - Bug fix; unrecoverable login failures did not result in aborting of the
    execution of the configuration.
  - Bug fix; when messages were appended to a mailbox that did not exist, it
    failed to create the mailbox and then retry the appending.
  - Bug fix; misleading errors were printed on some SSL failures.
  - Bug fix; protected call of the commands to execute in the daemon function
    could hide important failures.
  - Bug fix; the man page had an incorrect description of the -d option.
  * Support for the old deprecated 1.x configuration format has been removed,
    and the current 2.x format can only be executed from now on.
  IMAPFilter 2.4.2 - 19 Jan 2012
  - Bug fix; some ASCII characters in mailbox names were incorrectly converted
    to UTF-7.
  IMAPFilter 2.4.1 - 8 Dec 2011
  - Bug fix; become_daemon() failure.
  IMAPFilter 2.4 - 6 Dec 2011
  - Support for non-ASCII mailbox names.
  - New environment variable to set the configuration directory.
  - Bug fix; parsing of some server responses was broken since the previous
    release.
  - Bug fix; the match_field() method matched on the whole header field,
    instead of only the header field body.
  - Bug fix; debug file check caused printing of a misleading error message.
  - Bug fix; typo error in a configuration man page example.</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to version 2.5.2
  - Persistent errors or connection failures are now ignored when
    running in daemon mode, and a reconnection is attempted during
    the next loop iteration.
  - Bug fix; problems with failure handling during login/logout.</changelog>
  <changelog author="arun@nubati.net" date="1343217600">- updated to version 2.5.3
  - New implementation for international mailbox names.
  - Bug fix; wrong variable name in one of the examples on extending.
  - Bug fix; an OpenSSL compilation warning.</changelog>
  <changelog author="arun@nubati.net" date="1366372800">- updated to IMAPFilter 2.5.4 - 9 Apr 2013
  - Some server responses are now parsed less stricly.
  - More detailed information is now printed when there's an error.
  - Bug fix; various corrections in the recovery mechanism.</changelog>
  <changelog author="arun@gmx.de" date="1373889600">- updated to IMAPFilter 2.5.5 - 8 Jun 2013
  - Work-around for some servers that send an unexpected APPEND response.
  - The serial number of the certificates is taken into account, because some
    servers send different certificates with the same subject and issuer.
  - Details of the stored certificates are written to the certificates file, in
    order to make it easier to distinguish each of them.
  - Support for TLS versions 1.1 and 1.2 for secure connections.</changelog>
  <changelog author="arun@gmx.de" date="1386244800">- update to IMAPFilter 2.5.6 - 27 Oct 2013
  * Possible to build again with OpenSSL older than version 1.0.1 (was a
    requirement for the previous release due to new protocols TLS 1.1/1.2).
  * Support for reading the configuration from the standard input stream.
  * New makefile dist target, which can be used to create distribution archives.</changelog>
  <changelog author="arun@gmx.de" date="1417867200">- specfile: update copyright year
- update to version 2.5.7
  * Support for automatic validation of SSL connections, using the
  operating system's installed trusted CA certificates (usually from
  authorities that are shipped with web browsers).
  * A new "wakeonany" option makes it possible to end IDLE mode on any
  event, not just on new messages.
  * A new "reenter" option controls whether IDLE mode should be
  re-entered, after the recovery of the session, which makes it
  possible to continue with the execution of the next line in the
  configuration file.
  * The documentation now mentions that the contain_*() methods do
  case-insensitive searching (an IMAP limitation).
  * The documentation now has a better explanation of the arrived_*()
  and sent_*() methods.
  * Bug fix; the value returned by the copy method was incorrect in
  some cases.</changelog>
  <changelog author="arun@gmx.de" date="1444219200">- specfile: update copyright year
- upgrade to version 2.6.3:
  * Support for loading a default CA certificates file.
  * A new has_unkeyword() method to search messages without a keyword
    flag set.
  * Bug fix; double quotation around keyword sent by the has_flag()
    method.
- changes from version 2.6.2:
  * Bug fix; drop connection on local certificate mismatch.
- changes from version 2.6.1:
  * Support for loading the system's CA certificates from a file.
  * Bug fix; flusing of standard output/error in a some cases.
- changes from version 2.6:
  * Optimizations that vastly improve performance of the
    meta-searching functionality, by making subsequent search requests
    limit their scope based on the results already returned by
    previous requests (previously this was the case only for the
    match_*() methods).
  * Lua 5.3 compatibility (the codebase can still be compiled with
    versions 5.2 and 5.1).
  * A new "limit" option can be used as a work-around for problems
    that some servers have with long requests.
  * The documentation now clarifies how to make the client block
    indefinitely.
  * Bug fix; the check_status() method now returns 4 numbers on error
    as described in the documentation (just negative values in this
    case).
  * Bug fix; flushing of default output on password prompt.
  * Bug fix; program fault when very long requests were to be sent.</changelog>
  <changelog author="arun@gmx.de" date="1454760000">- update to version 2.6.6:
  * Bug fix; print an error message if "ssl" has been set to "ssl3".
- changes from version 2.6.5:
  * Possible to build again with OpenSSL when support for SSL 3.0 is
    disabled.
- changes from version 2.6.4:
  * Support for OAuth 2.0 and the XOAUTH2 authentication mechanism.</changelog>
  <changelog author="arun@gmx.de" date="1466683200">- update to version 2.6.7:
  * A dry-run mode that disables all actions that modify data.
  * Bug fix; handle IDLE untagged responses that are received in
    pieces.</changelog>
  <changelog author="arun@gmx.de" date="1487678400">- specfile:
  * update copyright year
- update to version 2.6.10:
  * Bug fix; segmentation fault on some OpenSSL builds.
- changes from version 2.6.9:
  * Bug fix; possible problem during STARTTLS negotiation.
- changes from version 2.6.8:
  * Support building with OpenSSL 1.1.0.</changelog>
</package>
<package pkgid="9891100ca5c7c3f9bd0abbd295e9dbd380086e47949f227cf52e4675701fc21b" name="imapfilter-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.10" rel="39.1"/>
  <changelog author="mskibbe@suse.de" date="1199707200">- update to version 2.0.9 which:
  o on some platforms it is necessary to link against the math
    library
  o the match_*() methods failed to match messages.
  o the match_*() methods failed with an error when no messages
    matched.
  o note added in the documentation about the need to use double
    backslashes inside of regular expression patterns.</changelog>
  <changelog author="mskibbe@suse.de" date="1203336000">- update to version 2.0.10 which:
  o Bug fix; failed a great number (tens of thousands) of commands
    were exchanged with an IMAP server
  o Bug fix; failed to fetch the body of some messages in some
    extremely rare occasions
  o Bug fix; the description for the contain_header() method was
    clarified</changelog>
  <changelog author="coolo@suse.de" date="1206705600">- remove explicit lib require</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1258977600">- update to 2.1:
  * add support for the IMAP IDLE extension
  * add new methods to fetch parts of messages along with the body
    structure of messages
  * add global option for the character to be used during searching
  * minor bugfixes</changelog>
  <changelog author="chris@computersalat.de" date="1259064000">- fix build for SLE_10
  o lua &gt;= 5.1
- spec mods
  o fix header
  o sorted TAGS
  * fix Summary
  o removed changes from spec</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1262260800">- update to 2.2:
  * support for combining searching methods in multiple mailboxes
    at the same or different accounts and processing of the results
    in bulk
  * support for meta-searching that allows searching on the
    previous searching results</changelog>
  <changelog author="hvogel@novell.com" date="1288958400">- Update to version 2.2.2
  * Bug fix; a couple of errors in the extending examples file.
  * A global option for the IDLE refreshing interval was added.
  * Bug fix; more detailed reporting when SSL socket errors occur.</changelog>
  <changelog author="arun@nubati.net" date="1319371200">- Update to version 2.3 (taken from the NEWS file)
  IMAPFilter 2.3 - 6 Aug 2011
  - Support for appending/uploading messages to mailboxes.
  - Debug file option now takes filename argument.
  - New simplified configuration and building procedure.
  - Bug fix; in some cases a mailbox was incorrectly assumed selected.
  - Bug fix; in some cases server capabilities needed update after login.
  - Bug fix; timeout problem with CRAM-MD5 authentication.
  - Bug fix; some servers send non-ASCII characters in their responses.
  IMAPFilter 2.2.3 - 6 Mar 2011
  - Project moved to GitHub.
  - Changed file and directory structure.
  - The next UID is returned as an additional return value of check_status().
  - All processing methods now return a boolean based on their success.
  - Bug fix; a lost connection is now handled better by trying to reconnect.
  - Bug fix; in some cases in IDLE a message had arrived but was ignored.
  - Bug fix; in some servers the initial IDLE reply wasn't handled correctly.
  - Bug fix; typo errors in the documentation.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build</changelog>
  <changelog author="arun@nubati.net" date="1330430400">- updated to version 2.5.1 (taken from the NEWS file)
  IMAPFilter 2.5.1 - 27 Feb 2012
  - Support for recovery of a session after a BYE response is received.
  - Option to control in which cases a terminated session will be restored.
  - Bug fix; a BYE response could sometimes get incorrectly ignored.
  IMAPFilter 2.5 - 23 Feb 2012
  - Support for recovery of a session when a network failure is encountered,
    and other robustness improvements.
  - Informational messages are printed also for the fetch and append methods.
  - Lua 5.2 compatibility, while the codebase can still be compiled with
    version 5.1.
  - The OpenSSL library is now a mandatory build requirement.
  - Bug fix; unrecoverable login failures did not result in aborting of the
    execution of the configuration.
  - Bug fix; when messages were appended to a mailbox that did not exist, it
    failed to create the mailbox and then retry the appending.
  - Bug fix; misleading errors were printed on some SSL failures.
  - Bug fix; protected call of the commands to execute in the daemon function
    could hide important failures.
  - Bug fix; the man page had an incorrect description of the -d option.
  * Support for the old deprecated 1.x configuration format has been removed,
    and the current 2.x format can only be executed from now on.
  IMAPFilter 2.4.2 - 19 Jan 2012
  - Bug fix; some ASCII characters in mailbox names were incorrectly converted
    to UTF-7.
  IMAPFilter 2.4.1 - 8 Dec 2011
  - Bug fix; become_daemon() failure.
  IMAPFilter 2.4 - 6 Dec 2011
  - Support for non-ASCII mailbox names.
  - New environment variable to set the configuration directory.
  - Bug fix; parsing of some server responses was broken since the previous
    release.
  - Bug fix; the match_field() method matched on the whole header field,
    instead of only the header field body.
  - Bug fix; debug file check caused printing of a misleading error message.
  - Bug fix; typo error in a configuration man page example.</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to version 2.5.2
  - Persistent errors or connection failures are now ignored when
    running in daemon mode, and a reconnection is attempted during
    the next loop iteration.
  - Bug fix; problems with failure handling during login/logout.</changelog>
  <changelog author="arun@nubati.net" date="1343217600">- updated to version 2.5.3
  - New implementation for international mailbox names.
  - Bug fix; wrong variable name in one of the examples on extending.
  - Bug fix; an OpenSSL compilation warning.</changelog>
  <changelog author="arun@nubati.net" date="1366372800">- updated to IMAPFilter 2.5.4 - 9 Apr 2013
  - Some server responses are now parsed less stricly.
  - More detailed information is now printed when there's an error.
  - Bug fix; various corrections in the recovery mechanism.</changelog>
  <changelog author="arun@gmx.de" date="1373889600">- updated to IMAPFilter 2.5.5 - 8 Jun 2013
  - Work-around for some servers that send an unexpected APPEND response.
  - The serial number of the certificates is taken into account, because some
    servers send different certificates with the same subject and issuer.
  - Details of the stored certificates are written to the certificates file, in
    order to make it easier to distinguish each of them.
  - Support for TLS versions 1.1 and 1.2 for secure connections.</changelog>
  <changelog author="arun@gmx.de" date="1386244800">- update to IMAPFilter 2.5.6 - 27 Oct 2013
  * Possible to build again with OpenSSL older than version 1.0.1 (was a
    requirement for the previous release due to new protocols TLS 1.1/1.2).
  * Support for reading the configuration from the standard input stream.
  * New makefile dist target, which can be used to create distribution archives.</changelog>
  <changelog author="arun@gmx.de" date="1417867200">- specfile: update copyright year
- update to version 2.5.7
  * Support for automatic validation of SSL connections, using the
  operating system's installed trusted CA certificates (usually from
  authorities that are shipped with web browsers).
  * A new "wakeonany" option makes it possible to end IDLE mode on any
  event, not just on new messages.
  * A new "reenter" option controls whether IDLE mode should be
  re-entered, after the recovery of the session, which makes it
  possible to continue with the execution of the next line in the
  configuration file.
  * The documentation now mentions that the contain_*() methods do
  case-insensitive searching (an IMAP limitation).
  * The documentation now has a better explanation of the arrived_*()
  and sent_*() methods.
  * Bug fix; the value returned by the copy method was incorrect in
  some cases.</changelog>
  <changelog author="arun@gmx.de" date="1444219200">- specfile: update copyright year
- upgrade to version 2.6.3:
  * Support for loading a default CA certificates file.
  * A new has_unkeyword() method to search messages without a keyword
    flag set.
  * Bug fix; double quotation around keyword sent by the has_flag()
    method.
- changes from version 2.6.2:
  * Bug fix; drop connection on local certificate mismatch.
- changes from version 2.6.1:
  * Support for loading the system's CA certificates from a file.
  * Bug fix; flusing of standard output/error in a some cases.
- changes from version 2.6:
  * Optimizations that vastly improve performance of the
    meta-searching functionality, by making subsequent search requests
    limit their scope based on the results already returned by
    previous requests (previously this was the case only for the
    match_*() methods).
  * Lua 5.3 compatibility (the codebase can still be compiled with
    versions 5.2 and 5.1).
  * A new "limit" option can be used as a work-around for problems
    that some servers have with long requests.
  * The documentation now clarifies how to make the client block
    indefinitely.
  * Bug fix; the check_status() method now returns 4 numbers on error
    as described in the documentation (just negative values in this
    case).
  * Bug fix; flushing of default output on password prompt.
  * Bug fix; program fault when very long requests were to be sent.</changelog>
  <changelog author="arun@gmx.de" date="1454760000">- update to version 2.6.6:
  * Bug fix; print an error message if "ssl" has been set to "ssl3".
- changes from version 2.6.5:
  * Possible to build again with OpenSSL when support for SSL 3.0 is
    disabled.
- changes from version 2.6.4:
  * Support for OAuth 2.0 and the XOAUTH2 authentication mechanism.</changelog>
  <changelog author="arun@gmx.de" date="1466683200">- update to version 2.6.7:
  * A dry-run mode that disables all actions that modify data.
  * Bug fix; handle IDLE untagged responses that are received in
    pieces.</changelog>
  <changelog author="arun@gmx.de" date="1487678400">- specfile:
  * update copyright year
- update to version 2.6.10:
  * Bug fix; segmentation fault on some OpenSSL builds.
- changes from version 2.6.9:
  * Bug fix; possible problem during STARTTLS negotiation.
- changes from version 2.6.8:
  * Support building with OpenSSL 1.1.0.</changelog>
</package>
<package pkgid="9f3c47468fe1799fc384c04a11019967e177a4b4103b3eea5b7699b4b146e344" name="imapfilter-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.10" rel="39.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1258977600">- update to 2.1:
  * add support for the IMAP IDLE extension
  * add new methods to fetch parts of messages along with the body
    structure of messages
  * add global option for the character to be used during searching
  * minor bugfixes</changelog>
  <changelog author="chris@computersalat.de" date="1259064000">- fix build for SLE_10
  o lua &gt;= 5.1
- spec mods
  o fix header
  o sorted TAGS
  * fix Summary
  o removed changes from spec</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1262260800">- update to 2.2:
  * support for combining searching methods in multiple mailboxes
    at the same or different accounts and processing of the results
    in bulk
  * support for meta-searching that allows searching on the
    previous searching results</changelog>
  <changelog author="hvogel@novell.com" date="1288958400">- Update to version 2.2.2
  * Bug fix; a couple of errors in the extending examples file.
  * A global option for the IDLE refreshing interval was added.
  * Bug fix; more detailed reporting when SSL socket errors occur.</changelog>
  <changelog author="arun@nubati.net" date="1319371200">- Update to version 2.3 (taken from the NEWS file)
  IMAPFilter 2.3 - 6 Aug 2011
  - Support for appending/uploading messages to mailboxes.
  - Debug file option now takes filename argument.
  - New simplified configuration and building procedure.
  - Bug fix; in some cases a mailbox was incorrectly assumed selected.
  - Bug fix; in some cases server capabilities needed update after login.
  - Bug fix; timeout problem with CRAM-MD5 authentication.
  - Bug fix; some servers send non-ASCII characters in their responses.
  IMAPFilter 2.2.3 - 6 Mar 2011
  - Project moved to GitHub.
  - Changed file and directory structure.
  - The next UID is returned as an additional return value of check_status().
  - All processing methods now return a boolean based on their success.
  - Bug fix; a lost connection is now handled better by trying to reconnect.
  - Bug fix; in some cases in IDLE a message had arrived but was ignored.
  - Bug fix; in some servers the initial IDLE reply wasn't handled correctly.
  - Bug fix; typo errors in the documentation.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build</changelog>
  <changelog author="arun@nubati.net" date="1330430400">- updated to version 2.5.1 (taken from the NEWS file)
  IMAPFilter 2.5.1 - 27 Feb 2012
  - Support for recovery of a session after a BYE response is received.
  - Option to control in which cases a terminated session will be restored.
  - Bug fix; a BYE response could sometimes get incorrectly ignored.
  IMAPFilter 2.5 - 23 Feb 2012
  - Support for recovery of a session when a network failure is encountered,
    and other robustness improvements.
  - Informational messages are printed also for the fetch and append methods.
  - Lua 5.2 compatibility, while the codebase can still be compiled with
    version 5.1.
  - The OpenSSL library is now a mandatory build requirement.
  - Bug fix; unrecoverable login failures did not result in aborting of the
    execution of the configuration.
  - Bug fix; when messages were appended to a mailbox that did not exist, it
    failed to create the mailbox and then retry the appending.
  - Bug fix; misleading errors were printed on some SSL failures.
  - Bug fix; protected call of the commands to execute in the daemon function
    could hide important failures.
  - Bug fix; the man page had an incorrect description of the -d option.
  * Support for the old deprecated 1.x configuration format has been removed,
    and the current 2.x format can only be executed from now on.
  IMAPFilter 2.4.2 - 19 Jan 2012
  - Bug fix; some ASCII characters in mailbox names were incorrectly converted
    to UTF-7.
  IMAPFilter 2.4.1 - 8 Dec 2011
  - Bug fix; become_daemon() failure.
  IMAPFilter 2.4 - 6 Dec 2011
  - Support for non-ASCII mailbox names.
  - New environment variable to set the configuration directory.
  - Bug fix; parsing of some server responses was broken since the previous
    release.
  - Bug fix; the match_field() method matched on the whole header field,
    instead of only the header field body.
  - Bug fix; debug file check caused printing of a misleading error message.
  - Bug fix; typo error in a configuration man page example.</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to version 2.5.2
  - Persistent errors or connection failures are now ignored when
    running in daemon mode, and a reconnection is attempted during
    the next loop iteration.
  - Bug fix; problems with failure handling during login/logout.</changelog>
  <changelog author="arun@nubati.net" date="1343217600">- updated to version 2.5.3
  - New implementation for international mailbox names.
  - Bug fix; wrong variable name in one of the examples on extending.
  - Bug fix; an OpenSSL compilation warning.</changelog>
  <changelog author="arun@nubati.net" date="1366372800">- updated to IMAPFilter 2.5.4 - 9 Apr 2013
  - Some server responses are now parsed less stricly.
  - More detailed information is now printed when there's an error.
  - Bug fix; various corrections in the recovery mechanism.</changelog>
  <changelog author="arun@gmx.de" date="1373889600">- updated to IMAPFilter 2.5.5 - 8 Jun 2013
  - Work-around for some servers that send an unexpected APPEND response.
  - The serial number of the certificates is taken into account, because some
    servers send different certificates with the same subject and issuer.
  - Details of the stored certificates are written to the certificates file, in
    order to make it easier to distinguish each of them.
  - Support for TLS versions 1.1 and 1.2 for secure connections.</changelog>
  <changelog author="arun@gmx.de" date="1386244800">- update to IMAPFilter 2.5.6 - 27 Oct 2013
  * Possible to build again with OpenSSL older than version 1.0.1 (was a
    requirement for the previous release due to new protocols TLS 1.1/1.2).
  * Support for reading the configuration from the standard input stream.
  * New makefile dist target, which can be used to create distribution archives.</changelog>
  <changelog author="arun@gmx.de" date="1417867200">- specfile: update copyright year
- update to version 2.5.7
  * Support for automatic validation of SSL connections, using the
  operating system's installed trusted CA certificates (usually from
  authorities that are shipped with web browsers).
  * A new "wakeonany" option makes it possible to end IDLE mode on any
  event, not just on new messages.
  * A new "reenter" option controls whether IDLE mode should be
  re-entered, after the recovery of the session, which makes it
  possible to continue with the execution of the next line in the
  configuration file.
  * The documentation now mentions that the contain_*() methods do
  case-insensitive searching (an IMAP limitation).
  * The documentation now has a better explanation of the arrived_*()
  and sent_*() methods.
  * Bug fix; the value returned by the copy method was incorrect in
  some cases.</changelog>
  <changelog author="arun@gmx.de" date="1444219200">- specfile: update copyright year
- upgrade to version 2.6.3:
  * Support for loading a default CA certificates file.
  * A new has_unkeyword() method to search messages without a keyword
    flag set.
  * Bug fix; double quotation around keyword sent by the has_flag()
    method.
- changes from version 2.6.2:
  * Bug fix; drop connection on local certificate mismatch.
- changes from version 2.6.1:
  * Support for loading the system's CA certificates from a file.
  * Bug fix; flusing of standard output/error in a some cases.
- changes from version 2.6:
  * Optimizations that vastly improve performance of the
    meta-searching functionality, by making subsequent search requests
    limit their scope based on the results already returned by
    previous requests (previously this was the case only for the
    match_*() methods).
  * Lua 5.3 compatibility (the codebase can still be compiled with
    versions 5.2 and 5.1).
  * A new "limit" option can be used as a work-around for problems
    that some servers have with long requests.
  * The documentation now clarifies how to make the client block
    indefinitely.
  * Bug fix; the check_status() method now returns 4 numbers on error
    as described in the documentation (just negative values in this
    case).
  * Bug fix; flushing of default output on password prompt.
  * Bug fix; program fault when very long requests were to be sent.</changelog>
  <changelog author="arun@gmx.de" date="1454760000">- update to version 2.6.6:
  * Bug fix; print an error message if "ssl" has been set to "ssl3".
- changes from version 2.6.5:
  * Possible to build again with OpenSSL when support for SSL 3.0 is
    disabled.
- changes from version 2.6.4:
  * Support for OAuth 2.0 and the XOAUTH2 authentication mechanism.</changelog>
  <changelog author="arun@gmx.de" date="1466683200">- update to version 2.6.7:
  * A dry-run mode that disables all actions that modify data.
  * Bug fix; handle IDLE untagged responses that are received in
    pieces.</changelog>
  <changelog author="arun@gmx.de" date="1487678400">- specfile:
  * update copyright year
- update to version 2.6.10:
  * Bug fix; segmentation fault on some OpenSSL builds.
- changes from version 2.6.9:
  * Bug fix; possible problem during STARTTLS negotiation.
- changes from version 2.6.8:
  * Support building with OpenSSL 1.1.0.</changelog>
</package>
<package pkgid="884269eaa9da8f5a032911348bca9b9c386c7743bbdcd7438f22c567e8150fb7" name="imapsync" arch="noarch">
  <version epoch="0" ver="1.644" rel="1.1"/>
  <changelog author="mmahut@fedoraproject.org" date="1207828800">- Initial version 1.249</changelog>
  <changelog author="mmahut@fedoraproject.org" date="1211889600">- update to version 1.252
  * Dependency fix (BZ#447800)</changelog>
  <changelog author="chris@computersalat.de" date="1358424000">- update to 1.518
  * Bugfix. When identtifying with header, change tabulations to spaces
    (Gmail bug on with "Received:" on multilines)</changelog>
  <changelog author="chris@computersalat.de" date="1361275200">- update to 1.525
  * Typo synchronise -&gt; synchronize
- for more info see:
  * https://github.com/imapsync/imapsync/blob/imapsync-1.525/ChangeLog</changelog>
  <changelog author="chris@computersalat.de" date="1383912000">- update to 1.569
  * Fixed bug on Windows with --tmpdir "E:\TEMP". The colon was badly
    converted to _, ending with "E_\TEMP".
    The fix also automatically moves the old cache to the new one if
    the new does not exist yet.
  * Fix. Example for --delete2foldersonly "/Junk$/" in help message.
- for more info see ChangeLog file
  * http://imapsync.lamiral.info/ChangeLog</changelog>
  <changelog author="alexandre@exatati.com.br" date="1420113600">- Update to 1.607:
  - Please refer to CHANGELOG.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1438344000">- update to 1.637
  + Bugfix. Win32 regression with long_path_2_prefix test. Was too long.
  + Added errors dump. By default. Use --noerrorsdump to avoid it.
  + Added --errorsmax switch. Default is like --errorsmax 50.
    Exit after 50 errors encountered.
  + Changed basic example to a working one with test1.lamiral.info
  + Bugfix. Remove tmp files upon failure as well.
  + IO::Socket::SSL not mandatory. (Sometimes hard to install).
  + Bugfix. SKIP sections for Unix or Windows tests. Removed no_plan.
    561 non-regression tests.
  + Added tests_live_result() call at the end of --livetests
  + README part review.
- add recommends:
  + perl(IO::Socket::IP)
  + perl(IO::Socket::SSL)
  + perl(Net::SSLeay)
  + perl(Authen::NTLM)
  + perl(URI::Escape)
  + perl(Data::Uniqid)
  + perl(IO::Socket::SSL)</changelog>
  <changelog author="chris@computersalat.de" date="1447848000">- update to 1.644
  * Added NOOP in --dry mode during fake APPEND.
  * Added --fetch_hash_set "1:*" to permit Mail2World success.
  * Need a patched Mail::IMAPClient 3.35 in sub fetch_hash()
  * See https://rt.cpan.org/Public/Bug/Display.html?id=105456
  * Added JSON::WebToken in modules list.
  * Replaced imap servers software list by a link to the web list.
  * Added option --subfolder2 SUB Move whole host1 folders hierarchy under folder SUB.
  * No folders sizes if --justfolders, unless really wanted.
  * *** empty log message ***
  * No warning about messages when --dry --justfolders together.
- fic deps
  * add perl(Test::Pod), perl(IO::Socket::INET6)
- fix License: SUSE-WTFPL-2.0 -&gt; WTFPL
- add missing files to doc
  * LICENSE, TUTORIAL.html
- add examples, FAQ.d to doc</changelog>
</package>
<package pkgid="41b2bce45992fe6d95388d3597112ff8269e33aa0e0dfc9d5e7eb7d0147205c6" name="imapsync" arch="src">
  <version epoch="0" ver="1.644" rel="1.1"/>
  <changelog author="mmahut@fedoraproject.org" date="1207828800">- Initial version 1.249</changelog>
  <changelog author="mmahut@fedoraproject.org" date="1211889600">- update to version 1.252
  * Dependency fix (BZ#447800)</changelog>
  <changelog author="chris@computersalat.de" date="1358424000">- update to 1.518
  * Bugfix. When identtifying with header, change tabulations to spaces
    (Gmail bug on with "Received:" on multilines)</changelog>
  <changelog author="chris@computersalat.de" date="1361275200">- update to 1.525
  * Typo synchronise -&gt; synchronize
- for more info see:
  * https://github.com/imapsync/imapsync/blob/imapsync-1.525/ChangeLog</changelog>
  <changelog author="chris@computersalat.de" date="1383912000">- update to 1.569
  * Fixed bug on Windows with --tmpdir "E:\TEMP". The colon was badly
    converted to _, ending with "E_\TEMP".
    The fix also automatically moves the old cache to the new one if
    the new does not exist yet.
  * Fix. Example for --delete2foldersonly "/Junk$/" in help message.
- for more info see ChangeLog file
  * http://imapsync.lamiral.info/ChangeLog</changelog>
  <changelog author="alexandre@exatati.com.br" date="1420113600">- Update to 1.607:
  - Please refer to CHANGELOG.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1438344000">- update to 1.637
  + Bugfix. Win32 regression with long_path_2_prefix test. Was too long.
  + Added errors dump. By default. Use --noerrorsdump to avoid it.
  + Added --errorsmax switch. Default is like --errorsmax 50.
    Exit after 50 errors encountered.
  + Changed basic example to a working one with test1.lamiral.info
  + Bugfix. Remove tmp files upon failure as well.
  + IO::Socket::SSL not mandatory. (Sometimes hard to install).
  + Bugfix. SKIP sections for Unix or Windows tests. Removed no_plan.
    561 non-regression tests.
  + Added tests_live_result() call at the end of --livetests
  + README part review.
- add recommends:
  + perl(IO::Socket::IP)
  + perl(IO::Socket::SSL)
  + perl(Net::SSLeay)
  + perl(Authen::NTLM)
  + perl(URI::Escape)
  + perl(Data::Uniqid)
  + perl(IO::Socket::SSL)</changelog>
  <changelog author="chris@computersalat.de" date="1447848000">- update to 1.644
  * Added NOOP in --dry mode during fake APPEND.
  * Added --fetch_hash_set "1:*" to permit Mail2World success.
  * Need a patched Mail::IMAPClient 3.35 in sub fetch_hash()
  * See https://rt.cpan.org/Public/Bug/Display.html?id=105456
  * Added JSON::WebToken in modules list.
  * Replaced imap servers software list by a link to the web list.
  * Added option --subfolder2 SUB Move whole host1 folders hierarchy under folder SUB.
  * No folders sizes if --justfolders, unless really wanted.
  * *** empty log message ***
  * No warning about messages when --dry --justfolders together.
- fic deps
  * add perl(Test::Pod), perl(IO::Socket::INET6)
- fix License: SUSE-WTFPL-2.0 -&gt; WTFPL
- add missing files to doc
  * LICENSE, TUTORIAL.html
- add examples, FAQ.d to doc</changelog>
</package>
<package pkgid="d731a8f4e8548d6c37d23249c37a16e383f95ed8f97de47eedc2d8b5575cc545" name="isync" arch="src">
  <version epoch="0" ver="1.2.1" rel="3.1"/>
  <changelog author="mrueckert@suse.de" date="1140350400">- Initial package of version 1.0.1</changelog>
  <changelog author="mrueckert@suse.de" date="1140350401">- added isync-1.0.1_imaphierarchy.patch
  * without the patch you cant mirror imap hierarchies
    when using "Patterns"</changelog>
  <changelog author="mrueckert@suse.de" date="1142856000">- build debuginfo package
- added patch for missing sentinel</changelog>
  <changelog author="mrueckert@suse.de" date="1148040000">- update to 1.0.2</changelog>
  <changelog author="mrueckert@suse.de" date="1169380800">- update to version 1.0.3:
  - new option UseIMAPS to allow use of Tunnel-ed IMAPS servers
    without providing a dummy Host.
  - make config parsing more robust.
  - work around glibc printf bug.
  - fix crash with AltMap UID scheme.
  - compat wrapper: put INBOX under Maildir.</changelog>
  <changelog author="puzel@novell.com" date="1292500800">- update to version 1.0.4
- fix some rpmlint warnings
- drop isync-1.0.1_missing_sentinel.patch (in upstream)</changelog>
  <changelog author="sleep_walker@suse.cz" date="1345809600">- update to 1.0.5</changelog>
  <changelog author="sleep_walker@suse.cz" date="1390478400">- bump to 1.1.0
- drop isync-1.0.1_imaphierarchy.patch</changelog>
  <changelog author="sleep_walker@suse.cz" date="1390478401">- license fix</changelog>
  <changelog author="sleep_walker@suse.cz" date="1390478402">- examples are installed automaticaly - remove manual copying from
  spec file</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1437998400">- bump to 1.2.0
  Changes:
  The 'isync' compatibility wrapper is now deprecated.
  An IMAP Path/NAMESPACE rooted in INBOX won't be handled specially
  any more. This means that some Patterns may need adjustment.
  The default output is a lot less verbose now.
  The meanings of the -V and -D options changed significantly.
  The SSL/TLS configuration has been re-designed. SSL is now
  explicitly enabled or disabled - "use SSL if available" is gone.
  Notice: Tunnels are assumed to be secure and thus default to no SSL.
  Support for SASL (flexible authentication) has been added.
  Support for Windows file systems has been added.
  Support for compressed data transfer has been added.
  Folder deletions can be propagated now.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1447675200">- bump to 1.2.1
  - fixed IPv6-enabled builds crashing upon host name resolution failure
  - fixed updating Maildir flags crashing on OpenBSD
  - fixed deadlocks with NFS home directories
  - fixed SASL authentication with GSS-API
  - fixed messages being uploaded again and again with some servers
  - fixed duplicate mailboxes with IMAP NAMESPACE "INBOX."
  - fixed some problems in the IMAP command submission code
  - fixed build with static libdb, libnsl, and libsocket
  - the dependencies on Berkeley DB and zlib (and the features they enable) can be explicitly disabled now
  - it is now possible to nest a Maildir Store's Path into its Inbox
  - fixed -DN not implying -Dn
- clean the spec with spec-cleaner
- add isync.keyring</changelog>
  <changelog author="mpluskal@suse.com" date="1462536000">- Cleanup spec file with spec-cleaner
- Use pkgconfig() style dependencies
- Update dependencies
  * Enable sasl</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1464868800">- add COPYING README AUTHORS ChangeLog to the package</changelog>
</package>
<package pkgid="46daf4ecca34ca23d3a7ff57571bbe335c34ef788b12181d1fd442657b2f69a2" name="isync" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="3.1"/>
  <changelog author="mrueckert@suse.de" date="1169380800">- update to version 1.0.3:
  - new option UseIMAPS to allow use of Tunnel-ed IMAPS servers
    without providing a dummy Host.
  - make config parsing more robust.
  - work around glibc printf bug.
  - fix crash with AltMap UID scheme.
  - compat wrapper: put INBOX under Maildir.</changelog>
  <changelog author="puzel@novell.com" date="1292500800">- update to version 1.0.4
- fix some rpmlint warnings
- drop isync-1.0.1_missing_sentinel.patch (in upstream)</changelog>
  <changelog author="sleep_walker@suse.cz" date="1345809600">- update to 1.0.5</changelog>
  <changelog author="sleep_walker@suse.cz" date="1390478400">- bump to 1.1.0
- drop isync-1.0.1_imaphierarchy.patch</changelog>
  <changelog author="sleep_walker@suse.cz" date="1390478401">- license fix</changelog>
  <changelog author="sleep_walker@suse.cz" date="1390478402">- examples are installed automaticaly - remove manual copying from
  spec file</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1437998400">- bump to 1.2.0
  Changes:
  The 'isync' compatibility wrapper is now deprecated.
  An IMAP Path/NAMESPACE rooted in INBOX won't be handled specially
  any more. This means that some Patterns may need adjustment.
  The default output is a lot less verbose now.
  The meanings of the -V and -D options changed significantly.
  The SSL/TLS configuration has been re-designed. SSL is now
  explicitly enabled or disabled - "use SSL if available" is gone.
  Notice: Tunnels are assumed to be secure and thus default to no SSL.
  Support for SASL (flexible authentication) has been added.
  Support for Windows file systems has been added.
  Support for compressed data transfer has been added.
  Folder deletions can be propagated now.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1447675200">- bump to 1.2.1
  - fixed IPv6-enabled builds crashing upon host name resolution failure
  - fixed updating Maildir flags crashing on OpenBSD
  - fixed deadlocks with NFS home directories
  - fixed SASL authentication with GSS-API
  - fixed messages being uploaded again and again with some servers
  - fixed duplicate mailboxes with IMAP NAMESPACE "INBOX."
  - fixed some problems in the IMAP command submission code
  - fixed build with static libdb, libnsl, and libsocket
  - the dependencies on Berkeley DB and zlib (and the features they enable) can be explicitly disabled now
  - it is now possible to nest a Maildir Store's Path into its Inbox
  - fixed -DN not implying -Dn
- clean the spec with spec-cleaner
- add isync.keyring</changelog>
  <changelog author="mpluskal@suse.com" date="1462536000">- Cleanup spec file with spec-cleaner
- Use pkgconfig() style dependencies
- Update dependencies
  * Enable sasl</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1464868800">- add COPYING README AUTHORS ChangeLog to the package</changelog>
</package>
<package pkgid="e1e77696a8ec024e7ab3fdfac4a4ea3180613a4111158d35e29d3408ae8eeee0" name="isync-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="3.1"/>
  <changelog author="mrueckert@suse.de" date="1140350400">- Initial package of version 1.0.1</changelog>
  <changelog author="mrueckert@suse.de" date="1140350401">- added isync-1.0.1_imaphierarchy.patch
  * without the patch you cant mirror imap hierarchies
    when using "Patterns"</changelog>
  <changelog author="mrueckert@suse.de" date="1142856000">- build debuginfo package
- added patch for missing sentinel</changelog>
  <changelog author="mrueckert@suse.de" date="1148040000">- update to 1.0.2</changelog>
  <changelog author="mrueckert@suse.de" date="1169380800">- update to version 1.0.3:
  - new option UseIMAPS to allow use of Tunnel-ed IMAPS servers
    without providing a dummy Host.
  - make config parsing more robust.
  - work around glibc printf bug.
  - fix crash with AltMap UID scheme.
  - compat wrapper: put INBOX under Maildir.</changelog>
  <changelog author="puzel@novell.com" date="1292500800">- update to version 1.0.4
- fix some rpmlint warnings
- drop isync-1.0.1_missing_sentinel.patch (in upstream)</changelog>
  <changelog author="sleep_walker@suse.cz" date="1345809600">- update to 1.0.5</changelog>
  <changelog author="sleep_walker@suse.cz" date="1390478400">- bump to 1.1.0
- drop isync-1.0.1_imaphierarchy.patch</changelog>
  <changelog author="sleep_walker@suse.cz" date="1390478401">- license fix</changelog>
  <changelog author="sleep_walker@suse.cz" date="1390478402">- examples are installed automaticaly - remove manual copying from
  spec file</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1437998400">- bump to 1.2.0
  Changes:
  The 'isync' compatibility wrapper is now deprecated.
  An IMAP Path/NAMESPACE rooted in INBOX won't be handled specially
  any more. This means that some Patterns may need adjustment.
  The default output is a lot less verbose now.
  The meanings of the -V and -D options changed significantly.
  The SSL/TLS configuration has been re-designed. SSL is now
  explicitly enabled or disabled - "use SSL if available" is gone.
  Notice: Tunnels are assumed to be secure and thus default to no SSL.
  Support for SASL (flexible authentication) has been added.
  Support for Windows file systems has been added.
  Support for compressed data transfer has been added.
  Folder deletions can be propagated now.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1447675200">- bump to 1.2.1
  - fixed IPv6-enabled builds crashing upon host name resolution failure
  - fixed updating Maildir flags crashing on OpenBSD
  - fixed deadlocks with NFS home directories
  - fixed SASL authentication with GSS-API
  - fixed messages being uploaded again and again with some servers
  - fixed duplicate mailboxes with IMAP NAMESPACE "INBOX."
  - fixed some problems in the IMAP command submission code
  - fixed build with static libdb, libnsl, and libsocket
  - the dependencies on Berkeley DB and zlib (and the features they enable) can be explicitly disabled now
  - it is now possible to nest a Maildir Store's Path into its Inbox
  - fixed -DN not implying -Dn
- clean the spec with spec-cleaner
- add isync.keyring</changelog>
  <changelog author="mpluskal@suse.com" date="1462536000">- Cleanup spec file with spec-cleaner
- Use pkgconfig() style dependencies
- Update dependencies
  * Enable sasl</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1464868800">- add COPYING README AUTHORS ChangeLog to the package</changelog>
</package>
<package pkgid="9219a367cd91f96dc00270b2da2a87aabfaba8aebb77f69cb5ddd9afb0e60ce9" name="isync-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="3.1"/>
  <changelog author="mrueckert@suse.de" date="1169380800">- update to version 1.0.3:
  - new option UseIMAPS to allow use of Tunnel-ed IMAPS servers
    without providing a dummy Host.
  - make config parsing more robust.
  - work around glibc printf bug.
  - fix crash with AltMap UID scheme.
  - compat wrapper: put INBOX under Maildir.</changelog>
  <changelog author="puzel@novell.com" date="1292500800">- update to version 1.0.4
- fix some rpmlint warnings
- drop isync-1.0.1_missing_sentinel.patch (in upstream)</changelog>
  <changelog author="sleep_walker@suse.cz" date="1345809600">- update to 1.0.5</changelog>
  <changelog author="sleep_walker@suse.cz" date="1390478400">- bump to 1.1.0
- drop isync-1.0.1_imaphierarchy.patch</changelog>
  <changelog author="sleep_walker@suse.cz" date="1390478401">- license fix</changelog>
  <changelog author="sleep_walker@suse.cz" date="1390478402">- examples are installed automaticaly - remove manual copying from
  spec file</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1437998400">- bump to 1.2.0
  Changes:
  The 'isync' compatibility wrapper is now deprecated.
  An IMAP Path/NAMESPACE rooted in INBOX won't be handled specially
  any more. This means that some Patterns may need adjustment.
  The default output is a lot less verbose now.
  The meanings of the -V and -D options changed significantly.
  The SSL/TLS configuration has been re-designed. SSL is now
  explicitly enabled or disabled - "use SSL if available" is gone.
  Notice: Tunnels are assumed to be secure and thus default to no SSL.
  Support for SASL (flexible authentication) has been added.
  Support for Windows file systems has been added.
  Support for compressed data transfer has been added.
  Folder deletions can be propagated now.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1447675200">- bump to 1.2.1
  - fixed IPv6-enabled builds crashing upon host name resolution failure
  - fixed updating Maildir flags crashing on OpenBSD
  - fixed deadlocks with NFS home directories
  - fixed SASL authentication with GSS-API
  - fixed messages being uploaded again and again with some servers
  - fixed duplicate mailboxes with IMAP NAMESPACE "INBOX."
  - fixed some problems in the IMAP command submission code
  - fixed build with static libdb, libnsl, and libsocket
  - the dependencies on Berkeley DB and zlib (and the features they enable) can be explicitly disabled now
  - it is now possible to nest a Maildir Store's Path into its Inbox
  - fixed -DN not implying -Dn
- clean the spec with spec-cleaner
- add isync.keyring</changelog>
  <changelog author="mpluskal@suse.com" date="1462536000">- Cleanup spec file with spec-cleaner
- Use pkgconfig() style dependencies
- Update dependencies
  * Enable sasl</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1464868800">- add COPYING README AUTHORS ChangeLog to the package</changelog>
</package>
<package pkgid="ac7047c6d0f111983c9ae8f22d0de61f49d3bb7cc6a16afffcd982088fbf3d9e" name="kelbt" arch="src">
  <version epoch="0" ver="0.16" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1352635200">- Initial package (version 0.15)</changelog>
  <changelog author="jengelh@inai.de" date="1466683200">- Update to new upstream release 0.16
  * No changelog was provided</changelog>
</package>
<package pkgid="54a7d6babe3c6ea9cc6075bba7c91760fbf72522efeba48730fc73ae83b15b4c" name="kelbt" arch="x86_64">
  <version epoch="0" ver="0.16" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1352635200">- Initial package (version 0.15)</changelog>
  <changelog author="jengelh@inai.de" date="1466683200">- Update to new upstream release 0.16
  * No changelog was provided</changelog>
</package>
<package pkgid="90fbadfafa306e0eb7348bed7fb4688bd2363f8935d5493914b2684db1e861cb" name="kelbt-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.16" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1352635200">- Initial package (version 0.15)</changelog>
  <changelog author="jengelh@inai.de" date="1466683200">- Update to new upstream release 0.16
  * No changelog was provided</changelog>
</package>
<package pkgid="30c66b3f71ebdabaa14ee06b49b2e7a0822a49c8a4a11db1c0ae8be1217995ca" name="kelbt-debugsource" arch="x86_64">
  <version epoch="0" ver="0.16" rel="6.1"/>
  <changelog author="jengelh@inai.de" date="1352635200">- Initial package (version 0.15)</changelog>
  <changelog author="jengelh@inai.de" date="1466683200">- Update to new upstream release 0.16
  * No changelog was provided</changelog>
</package>
<package pkgid="2831ea703feeabbb7033607edab1e905323b0f27efc84c61b257e98ca7c4339e" name="leaf" arch="x86_64">
  <version epoch="0" ver="0.92" rel="1.1"/>
  <changelog author="guru@unixtech.be" date="1191153600">- update to 0.70
- moved to openSUSE Build Service</changelog>
  <changelog author="guru@unixtech.be" date="1195992000">- update to 0.74</changelog>
  <changelog author="guru@unixtech.be" date="1219924800">- update to 0.77:
  * adds support for client SSL certificates</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1244462400">- update to 0.78</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1262260800">- update to 0.80:
  * adds support for internationalized domain names</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1273406400">- update to 0.83:
  * fixes several bugs that may result in crashes</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1302264000">- update to 0.86:
  * adds Unicode-based word-wrapping rules that should work better for text
    written in ideographic-based character sets
  * adds support for the most recent plain text message specification (RFC
    3676)
  * adds an option to the standalone leaf editor that edits plain text files
    that use the flowed text format, as specified in RFC 3676</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1303387200">- update to 0.87:
  * fixes bugs in the handling of HTML mail with MIME headers and an
    unsupported character set
  * fixes a bug that resulted in Cone locking up and slowly consuming memory</changelog>
  <changelog author="bjoern@cs.tu-berlin.de" date="1306843200">- update to 0.89:
  * rfc2045/rfc2045cdecode.c: Tolerate lowercase hexadecimal characters
    in quoted-printable-encoded content.
  * cone/cursesmessage.C (reformat): Typo in error message.
  * cone/cone.dist.in (TLS_STARTTLS_PROTOCOL): Provide a default
    setting of TLS_STARTTLS_PROTOCOL for new cone installs only.
  * cone/cursesmessage.C (beginReformat): Fix bug exposed by cache.H
    bug fix.</changelog>
  <changelog author="bjoern@cs.tu-berlin.de" date="1449489600">- update to 0.92</changelog>
</package>
<package pkgid="e9fde08fef16fb0c5930d48a5a80d8a95fe7a25f731428392d546570c8dca135" name="leaf-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.92" rel="1.1"/>
  <changelog author="guru@unixtech.be" date="1191153600">- update to 0.70
- moved to openSUSE Build Service</changelog>
  <changelog author="guru@unixtech.be" date="1195992000">- update to 0.74</changelog>
  <changelog author="guru@unixtech.be" date="1219924800">- update to 0.77:
  * adds support for client SSL certificates</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1244462400">- update to 0.78</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1262260800">- update to 0.80:
  * adds support for internationalized domain names</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1273406400">- update to 0.83:
  * fixes several bugs that may result in crashes</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1302264000">- update to 0.86:
  * adds Unicode-based word-wrapping rules that should work better for text
    written in ideographic-based character sets
  * adds support for the most recent plain text message specification (RFC
    3676)
  * adds an option to the standalone leaf editor that edits plain text files
    that use the flowed text format, as specified in RFC 3676</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1303387200">- update to 0.87:
  * fixes bugs in the handling of HTML mail with MIME headers and an
    unsupported character set
  * fixes a bug that resulted in Cone locking up and slowly consuming memory</changelog>
  <changelog author="bjoern@cs.tu-berlin.de" date="1306843200">- update to 0.89:
  * rfc2045/rfc2045cdecode.c: Tolerate lowercase hexadecimal characters
    in quoted-printable-encoded content.
  * cone/cursesmessage.C (reformat): Typo in error message.
  * cone/cone.dist.in (TLS_STARTTLS_PROTOCOL): Provide a default
    setting of TLS_STARTTLS_PROTOCOL for new cone installs only.
  * cone/cursesmessage.C (beginReformat): Fix bug exposed by cache.H
    bug fix.</changelog>
  <changelog author="bjoern@cs.tu-berlin.de" date="1449489600">- update to 0.92</changelog>
</package>
<package pkgid="a82cd8dd32c1d591669da914e11c1c73a77fad1fab5bd26e54c00869ccd394d4" name="libbsd" arch="src">
  <version epoch="0" ver="0.8.3" rel="8.1"/>
  <changelog author="crrodriguez@suse.de" date="1231070400">- first package version</changelog>
  <changelog author="crrodriguez@suse.de" date="1253016000">-  update to version 0.1.6</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1280491200">- update to version 0.2.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1312286400">- Update to version 0.3.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1319198400">- Fix missing headers, bug in spec file [bnc#725800]</changelog>
  <changelog author="jengelh@medozas.de" date="1328097600">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1329480000">- Cleanup spec file for factory submission</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345464000">- Version 0.4.2, swithes to autoconf build system.</changelog>
  <changelog author="idonmez@suse.com" date="1346932800">- Fix installation on SLE</changelog>
  <changelog author="jengelh@inai.de" date="1346932801">- Avoid unnecessary complex install line on Redhatish
- Compact file list, add helpful URLs to specfile</changelog>
  <changelog author="dhall@wustl.edu" date="1414670400">- update to version 0.7.0</changelog>
  <changelog author="mpluskal@suse.com" date="1431086400">- Add gpg signature
- Use fdupes to remove duplicate files
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1449662400">- Update to 0.8.0
  * See attached ChangeLog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1451131200">- Update to 0.8.1
  * Use local SHA512 header
  * Unify most arc4random Unix hooks into a single file
  * Add support for GNU/kFreeBSD for closefrom() and getentropy()
  * Fix getentropy implementation to use the correct system hooks
  * Add missing copyright and license headers
  * Relicense my contribution to BSD-2-clause
  * Switch COPYING to Debian copyright machine readable format 1.0
  * Use the non-overlayed libbsd headers when we need our own definitions
  * Add missing include to &lt;md5.h&gt;
  * Turn &lt;bsd/bsd.h&gt; inert when using LIBBSD_OVERLAY
  * test: Add new unit tests for individual headers usage
  * Add support for GNU/Hurd to getentropy()</changelog>
  <changelog author="idonmez@suse.com" date="1451304000">- Split static library into libbsd-ctor-static package.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 0.8.3:
  * Fix unportable sizeof() usage
  * Fix file descriptor leak in HASHFileChunk helper
  * Switch URLs from http or git to https
  * build: Support clock_gettime() provided in librt
  * man: Fix ungrammatical construct
  * test: Add a unit test for md5
  * Add missing &lt;fcntl.h&gt; includes
- Changes for 0.8.2:
  * test: Fix success return code for arc4random unit test
  * test: Add missing &lt;sys/stat.h&gt; include
  * Fix heap buffer overflow in fgetwln()
  * test: Fix race condition in headers-*.sh
- Enable internal tests
- Use correct package categories</changelog>
</package>
<package pkgid="5dab08b42ca0cfa003b6ab868e38038e629e5c2ae36bef2d31c521ab066c1846" name="libbsd-ctor-static" arch="x86_64">
  <version epoch="0" ver="0.8.3" rel="8.1"/>
  <changelog author="crrodriguez@suse.de" date="1253016000">-  update to version 0.1.6</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1280491200">- update to version 0.2.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1312286400">- Update to version 0.3.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1319198400">- Fix missing headers, bug in spec file [bnc#725800]</changelog>
  <changelog author="jengelh@medozas.de" date="1328097600">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1329480000">- Cleanup spec file for factory submission</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345464000">- Version 0.4.2, swithes to autoconf build system.</changelog>
  <changelog author="idonmez@suse.com" date="1346932800">- Fix installation on SLE</changelog>
  <changelog author="jengelh@inai.de" date="1346932801">- Avoid unnecessary complex install line on Redhatish
- Compact file list, add helpful URLs to specfile</changelog>
  <changelog author="dhall@wustl.edu" date="1414670400">- update to version 0.7.0</changelog>
  <changelog author="mpluskal@suse.com" date="1431086400">- Add gpg signature
- Use fdupes to remove duplicate files
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1449662400">- Update to 0.8.0
  * See attached ChangeLog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1451131200">- Update to 0.8.1
  * Use local SHA512 header
  * Unify most arc4random Unix hooks into a single file
  * Add support for GNU/kFreeBSD for closefrom() and getentropy()
  * Fix getentropy implementation to use the correct system hooks
  * Add missing copyright and license headers
  * Relicense my contribution to BSD-2-clause
  * Switch COPYING to Debian copyright machine readable format 1.0
  * Use the non-overlayed libbsd headers when we need our own definitions
  * Add missing include to &lt;md5.h&gt;
  * Turn &lt;bsd/bsd.h&gt; inert when using LIBBSD_OVERLAY
  * test: Add new unit tests for individual headers usage
  * Add support for GNU/Hurd to getentropy()</changelog>
  <changelog author="idonmez@suse.com" date="1451304000">- Split static library into libbsd-ctor-static package.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 0.8.3:
  * Fix unportable sizeof() usage
  * Fix file descriptor leak in HASHFileChunk helper
  * Switch URLs from http or git to https
  * build: Support clock_gettime() provided in librt
  * man: Fix ungrammatical construct
  * test: Add a unit test for md5
  * Add missing &lt;fcntl.h&gt; includes
- Changes for 0.8.2:
  * test: Fix success return code for arc4random unit test
  * test: Add missing &lt;sys/stat.h&gt; include
  * Fix heap buffer overflow in fgetwln()
  * test: Fix race condition in headers-*.sh
- Enable internal tests
- Use correct package categories</changelog>
</package>
<package pkgid="0dc0b8e4b9f84e6148d52ac71c96ec186bf59ce94e146add29e77d4f05dfd930" name="libbsd-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8.3" rel="8.1"/>
  <changelog author="crrodriguez@suse.de" date="1253016000">-  update to version 0.1.6</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1280491200">- update to version 0.2.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1312286400">- Update to version 0.3.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1319198400">- Fix missing headers, bug in spec file [bnc#725800]</changelog>
  <changelog author="jengelh@medozas.de" date="1328097600">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1329480000">- Cleanup spec file for factory submission</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345464000">- Version 0.4.2, swithes to autoconf build system.</changelog>
  <changelog author="idonmez@suse.com" date="1346932800">- Fix installation on SLE</changelog>
  <changelog author="jengelh@inai.de" date="1346932801">- Avoid unnecessary complex install line on Redhatish
- Compact file list, add helpful URLs to specfile</changelog>
  <changelog author="dhall@wustl.edu" date="1414670400">- update to version 0.7.0</changelog>
  <changelog author="mpluskal@suse.com" date="1431086400">- Add gpg signature
- Use fdupes to remove duplicate files
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1449662400">- Update to 0.8.0
  * See attached ChangeLog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1451131200">- Update to 0.8.1
  * Use local SHA512 header
  * Unify most arc4random Unix hooks into a single file
  * Add support for GNU/kFreeBSD for closefrom() and getentropy()
  * Fix getentropy implementation to use the correct system hooks
  * Add missing copyright and license headers
  * Relicense my contribution to BSD-2-clause
  * Switch COPYING to Debian copyright machine readable format 1.0
  * Use the non-overlayed libbsd headers when we need our own definitions
  * Add missing include to &lt;md5.h&gt;
  * Turn &lt;bsd/bsd.h&gt; inert when using LIBBSD_OVERLAY
  * test: Add new unit tests for individual headers usage
  * Add support for GNU/Hurd to getentropy()</changelog>
  <changelog author="idonmez@suse.com" date="1451304000">- Split static library into libbsd-ctor-static package.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 0.8.3:
  * Fix unportable sizeof() usage
  * Fix file descriptor leak in HASHFileChunk helper
  * Switch URLs from http or git to https
  * build: Support clock_gettime() provided in librt
  * man: Fix ungrammatical construct
  * test: Add a unit test for md5
  * Add missing &lt;fcntl.h&gt; includes
- Changes for 0.8.2:
  * test: Fix success return code for arc4random unit test
  * test: Add missing &lt;sys/stat.h&gt; include
  * Fix heap buffer overflow in fgetwln()
  * test: Fix race condition in headers-*.sh
- Enable internal tests
- Use correct package categories</changelog>
</package>
<package pkgid="696921804e75893b80099af6138cafe426a3ff05d6c25df31ddf7ff880221ea3" name="libbsd-devel" arch="x86_64">
  <version epoch="0" ver="0.8.3" rel="8.1"/>
  <changelog author="crrodriguez@suse.de" date="1253016000">-  update to version 0.1.6</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1280491200">- update to version 0.2.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1312286400">- Update to version 0.3.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1319198400">- Fix missing headers, bug in spec file [bnc#725800]</changelog>
  <changelog author="jengelh@medozas.de" date="1328097600">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1329480000">- Cleanup spec file for factory submission</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345464000">- Version 0.4.2, swithes to autoconf build system.</changelog>
  <changelog author="idonmez@suse.com" date="1346932800">- Fix installation on SLE</changelog>
  <changelog author="jengelh@inai.de" date="1346932801">- Avoid unnecessary complex install line on Redhatish
- Compact file list, add helpful URLs to specfile</changelog>
  <changelog author="dhall@wustl.edu" date="1414670400">- update to version 0.7.0</changelog>
  <changelog author="mpluskal@suse.com" date="1431086400">- Add gpg signature
- Use fdupes to remove duplicate files
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1449662400">- Update to 0.8.0
  * See attached ChangeLog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1451131200">- Update to 0.8.1
  * Use local SHA512 header
  * Unify most arc4random Unix hooks into a single file
  * Add support for GNU/kFreeBSD for closefrom() and getentropy()
  * Fix getentropy implementation to use the correct system hooks
  * Add missing copyright and license headers
  * Relicense my contribution to BSD-2-clause
  * Switch COPYING to Debian copyright machine readable format 1.0
  * Use the non-overlayed libbsd headers when we need our own definitions
  * Add missing include to &lt;md5.h&gt;
  * Turn &lt;bsd/bsd.h&gt; inert when using LIBBSD_OVERLAY
  * test: Add new unit tests for individual headers usage
  * Add support for GNU/Hurd to getentropy()</changelog>
  <changelog author="idonmez@suse.com" date="1451304000">- Split static library into libbsd-ctor-static package.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 0.8.3:
  * Fix unportable sizeof() usage
  * Fix file descriptor leak in HASHFileChunk helper
  * Switch URLs from http or git to https
  * build: Support clock_gettime() provided in librt
  * man: Fix ungrammatical construct
  * test: Add a unit test for md5
  * Add missing &lt;fcntl.h&gt; includes
- Changes for 0.8.2:
  * test: Fix success return code for arc4random unit test
  * test: Add missing &lt;sys/stat.h&gt; include
  * Fix heap buffer overflow in fgetwln()
  * test: Fix race condition in headers-*.sh
- Enable internal tests
- Use correct package categories</changelog>
</package>
<package pkgid="71a97c340b796989dafeca9fae8b7e3511c01deef4cb89af5b223e9169d0400a" name="libbsd0" arch="x86_64">
  <version epoch="0" ver="0.8.3" rel="8.1"/>
  <changelog author="crrodriguez@suse.de" date="1253016000">-  update to version 0.1.6</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1280491200">- update to version 0.2.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1312286400">- Update to version 0.3.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1319198400">- Fix missing headers, bug in spec file [bnc#725800]</changelog>
  <changelog author="jengelh@medozas.de" date="1328097600">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1329480000">- Cleanup spec file for factory submission</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345464000">- Version 0.4.2, swithes to autoconf build system.</changelog>
  <changelog author="idonmez@suse.com" date="1346932800">- Fix installation on SLE</changelog>
  <changelog author="jengelh@inai.de" date="1346932801">- Avoid unnecessary complex install line on Redhatish
- Compact file list, add helpful URLs to specfile</changelog>
  <changelog author="dhall@wustl.edu" date="1414670400">- update to version 0.7.0</changelog>
  <changelog author="mpluskal@suse.com" date="1431086400">- Add gpg signature
- Use fdupes to remove duplicate files
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1449662400">- Update to 0.8.0
  * See attached ChangeLog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1451131200">- Update to 0.8.1
  * Use local SHA512 header
  * Unify most arc4random Unix hooks into a single file
  * Add support for GNU/kFreeBSD for closefrom() and getentropy()
  * Fix getentropy implementation to use the correct system hooks
  * Add missing copyright and license headers
  * Relicense my contribution to BSD-2-clause
  * Switch COPYING to Debian copyright machine readable format 1.0
  * Use the non-overlayed libbsd headers when we need our own definitions
  * Add missing include to &lt;md5.h&gt;
  * Turn &lt;bsd/bsd.h&gt; inert when using LIBBSD_OVERLAY
  * test: Add new unit tests for individual headers usage
  * Add support for GNU/Hurd to getentropy()</changelog>
  <changelog author="idonmez@suse.com" date="1451304000">- Split static library into libbsd-ctor-static package.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 0.8.3:
  * Fix unportable sizeof() usage
  * Fix file descriptor leak in HASHFileChunk helper
  * Switch URLs from http or git to https
  * build: Support clock_gettime() provided in librt
  * man: Fix ungrammatical construct
  * test: Add a unit test for md5
  * Add missing &lt;fcntl.h&gt; includes
- Changes for 0.8.2:
  * test: Fix success return code for arc4random unit test
  * test: Add missing &lt;sys/stat.h&gt; include
  * Fix heap buffer overflow in fgetwln()
  * test: Fix race condition in headers-*.sh
- Enable internal tests
- Use correct package categories</changelog>
</package>
<package pkgid="1e0bdc559e65a3ddc7b28bd48afd363f783b4c9fb7f5f9bb2f4378ee90e35264" name="libbsd0-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.3" rel="8.1"/>
  <changelog author="crrodriguez@suse.de" date="1253016000">-  update to version 0.1.6</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1280491200">- update to version 0.2.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1312286400">- Update to version 0.3.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1319198400">- Fix missing headers, bug in spec file [bnc#725800]</changelog>
  <changelog author="jengelh@medozas.de" date="1328097600">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1329480000">- Cleanup spec file for factory submission</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345464000">- Version 0.4.2, swithes to autoconf build system.</changelog>
  <changelog author="idonmez@suse.com" date="1346932800">- Fix installation on SLE</changelog>
  <changelog author="jengelh@inai.de" date="1346932801">- Avoid unnecessary complex install line on Redhatish
- Compact file list, add helpful URLs to specfile</changelog>
  <changelog author="dhall@wustl.edu" date="1414670400">- update to version 0.7.0</changelog>
  <changelog author="mpluskal@suse.com" date="1431086400">- Add gpg signature
- Use fdupes to remove duplicate files
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1449662400">- Update to 0.8.0
  * See attached ChangeLog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1451131200">- Update to 0.8.1
  * Use local SHA512 header
  * Unify most arc4random Unix hooks into a single file
  * Add support for GNU/kFreeBSD for closefrom() and getentropy()
  * Fix getentropy implementation to use the correct system hooks
  * Add missing copyright and license headers
  * Relicense my contribution to BSD-2-clause
  * Switch COPYING to Debian copyright machine readable format 1.0
  * Use the non-overlayed libbsd headers when we need our own definitions
  * Add missing include to &lt;md5.h&gt;
  * Turn &lt;bsd/bsd.h&gt; inert when using LIBBSD_OVERLAY
  * test: Add new unit tests for individual headers usage
  * Add support for GNU/Hurd to getentropy()</changelog>
  <changelog author="idonmez@suse.com" date="1451304000">- Split static library into libbsd-ctor-static package.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 0.8.3:
  * Fix unportable sizeof() usage
  * Fix file descriptor leak in HASHFileChunk helper
  * Switch URLs from http or git to https
  * build: Support clock_gettime() provided in librt
  * man: Fix ungrammatical construct
  * test: Add a unit test for md5
  * Add missing &lt;fcntl.h&gt; includes
- Changes for 0.8.2:
  * test: Fix success return code for arc4random unit test
  * test: Add missing &lt;sys/stat.h&gt; include
  * Fix heap buffer overflow in fgetwln()
  * test: Fix race condition in headers-*.sh
- Enable internal tests
- Use correct package categories</changelog>
</package>
<package pkgid="98ed9ccf36eb28568b5cdd11ecda663813414cf41a7a6d1f6e0289c272d58e4d" name="libc-client2007e_suse" arch="x86_64">
  <version epoch="0" ver="2007e_suse" rel="34.1"/>
  <changelog author="mskibbe@suse.de" date="1163678400">- update to version 2006c1 which
  o fix bugs
  o fix bug( Bug 217287 - imap-2004g_suse-28: use of dangerous
    "gets" function )
  o fix bug( Bug 144598 - imap-2004g_suse-4: dodgy code )</changelog>
  <changelog author="mskibbe@suse.de" date="1172836800">- imap : Support for FATE #300687: Ports for SuSEfirewall added
  via packages (#250579)</changelog>
  <changelog author="mskibbe@suse.de" date="1174046400">- fix ports in firewall file</changelog>
  <changelog author="mskibbe@suse.de" date="1199707200">- Bug 351197 - several packages use wrong dir for SuSEfirewall2
  services files</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="chris@computersalat.de" date="1261137600">- update to 2007e which
  o fix bugs
- cleanup spec
  o sort tags
  o {name} macro
- rework patches
  o imap-2002c-c++.diff &gt; imap-2007e-c++.patch
  o imap-2006c1.diff &gt; imap-2007e.patch
- rpmlint
  o deprecated-use-of-%run_ldconfig
  o shlib-policy-name-error
  - renamed sub-pkg 'lib' to 'libc-client2007e_suse'
  o files-duplicate {_includedir}
  - added rpmlintrc</changelog>
  <changelog author="mls@suse.de" date="1386331200">- link libc-client with -lpam (as we link other packages with
  with --as-needed)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455364800">- imap-openssl.patch: Support TLS 1.2 and ECDH ciphersuites.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1457956800">- spec: most C sources need removal of old K&amp;R extern int errno;
  declaration, which does not actually work with glibc where
  errno is a macro that expands to a function call.
- spec: build with -DOPENSSL_NO_DEPRECATED and
  - DOPENSSL_NO_SSL_INTERN to emulate as close as possible
  API/ABI availability of upcoming openSSL releases.
- imap-openssl.patch: remove ephemeral RSA keys support, it is
  considered insecure.openSSL 1.1 no longer supports this feature
  and package will fail to build.
- imap-openssl.patch: remove code that uses insecure tmpnam()
  function, it is not required on linux systems.
- imap-implicit-decls.patch: fix implicit fortify/pointer
  declaration rpmlint warnings.</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Rename README.SuSE to README.SUSE
- Cleanup with spec-cleaner
- Add patches from RH and Debian:
  * imap-2007e-poll.patch
  * imap-2007f-format-security.patch
  * imap-openssl-1.1.patch</changelog>
</package>
<package pkgid="fe3cf4e838ce4934bef39d1c4230ade1086e7615da75733531170a063b428634" name="libc-client2007e_suse-debuginfo" arch="x86_64">
  <version epoch="0" ver="2007e_suse" rel="34.1"/>
  <changelog author="mskibbe@suse.de" date="1163678400">- update to version 2006c1 which
  o fix bugs
  o fix bug( Bug 217287 - imap-2004g_suse-28: use of dangerous
    "gets" function )
  o fix bug( Bug 144598 - imap-2004g_suse-4: dodgy code )</changelog>
  <changelog author="mskibbe@suse.de" date="1172836800">- imap : Support for FATE #300687: Ports for SuSEfirewall added
  via packages (#250579)</changelog>
  <changelog author="mskibbe@suse.de" date="1174046400">- fix ports in firewall file</changelog>
  <changelog author="mskibbe@suse.de" date="1199707200">- Bug 351197 - several packages use wrong dir for SuSEfirewall2
  services files</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="chris@computersalat.de" date="1261137600">- update to 2007e which
  o fix bugs
- cleanup spec
  o sort tags
  o {name} macro
- rework patches
  o imap-2002c-c++.diff &gt; imap-2007e-c++.patch
  o imap-2006c1.diff &gt; imap-2007e.patch
- rpmlint
  o deprecated-use-of-%run_ldconfig
  o shlib-policy-name-error
  - renamed sub-pkg 'lib' to 'libc-client2007e_suse'
  o files-duplicate {_includedir}
  - added rpmlintrc</changelog>
  <changelog author="mls@suse.de" date="1386331200">- link libc-client with -lpam (as we link other packages with
  with --as-needed)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455364800">- imap-openssl.patch: Support TLS 1.2 and ECDH ciphersuites.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1457956800">- spec: most C sources need removal of old K&amp;R extern int errno;
  declaration, which does not actually work with glibc where
  errno is a macro that expands to a function call.
- spec: build with -DOPENSSL_NO_DEPRECATED and
  - DOPENSSL_NO_SSL_INTERN to emulate as close as possible
  API/ABI availability of upcoming openSSL releases.
- imap-openssl.patch: remove ephemeral RSA keys support, it is
  considered insecure.openSSL 1.1 no longer supports this feature
  and package will fail to build.
- imap-openssl.patch: remove code that uses insecure tmpnam()
  function, it is not required on linux systems.
- imap-implicit-decls.patch: fix implicit fortify/pointer
  declaration rpmlint warnings.</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Rename README.SuSE to README.SUSE
- Cleanup with spec-cleaner
- Add patches from RH and Debian:
  * imap-2007e-poll.patch
  * imap-2007f-format-security.patch
  * imap-openssl-1.1.patch</changelog>
</package>
<package pkgid="c212c770310e88d21984eb65b29ecbc369552c3de0863ad01bc3f1c7de3afbc3" name="libcolm-0_13_0_5" arch="x86_64">
  <version epoch="0" ver="0.13.0.5" rel="11.1"/>
  <changelog author="jengelh@inai.de" date="1466683200">- Initial package (version 0.13.0.3) for openSUSE</changelog>
  <changelog author="jengelh@inai.de" date="1480334400">- Update to new upstream release 0.13.0.4
  * No changelog was provided
- Drop colm-type.diff, colm-shared.diff (applied upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1497009600">- Update to new upstream release 0.13.0.5
  * No changelog was provided</changelog>
</package>
<package pkgid="82aa1144ece728985116cddd9c677e7ea9ca3d94265abdb186c8be236ec2e0a8" name="libcolm-0_13_0_5-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.13.0.5" rel="11.1"/>
  <changelog author="jengelh@inai.de" date="1466683200">- Initial package (version 0.13.0.3) for openSUSE</changelog>
  <changelog author="jengelh@inai.de" date="1480334400">- Update to new upstream release 0.13.0.4
  * No changelog was provided
- Drop colm-type.diff, colm-shared.diff (applied upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1497009600">- Update to new upstream release 0.13.0.5
  * No changelog was provided</changelog>
</package>
<package pkgid="d9bf0b5ac57f9f13852ed9450e70007484efc7316bd4622728aff8d49cf30cb8" name="libcourier-unicode3" arch="x86_64">
  <version epoch="0" ver="1.4" rel="6.1"/>
  <changelog author="chris@computersalat.de" date="1414584000">- initial pkg 1.1</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 1.3
  * all: rebased against Unicode 8
  * courier-unicode: Rename unicode.h, library name, to avoid name
    clashing with some old, forgotten, Gnome library.
  * all: rebased against Unicode 7. Added unicode_script(), tr24
    Scripts lookup.
- fix spec for submit to Factory</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- update to 1.4
  * no info about changes available</changelog>
</package>
<package pkgid="c770c8254c1722621b02cdafa7cf199f4305721cfbbe78f47f238a8f1ec3981f" name="libcourier-unicode3-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4" rel="6.1"/>
  <changelog author="chris@computersalat.de" date="1414584000">- initial pkg 1.1</changelog>
  <changelog author="chris@computersalat.de" date="1438776000">- update to 1.3
  * all: rebased against Unicode 8
  * courier-unicode: Rename unicode.h, library name, to avoid name
    clashing with some old, forgotten, Gnome library.
  * all: rebased against Unicode 7. Added unicode_script(), tr24
    Scripts lookup.
- fix spec for submit to Factory</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- update to 1.4
  * no info about changes available</changelog>
</package>
<package pkgid="94174bf3287450682abc33f530152189d403f2473d1a59d6fbad3eb4fe54e640" name="libesmtp" arch="src">
  <version epoch="0" ver="1.0.6" rel="3.1"/>
  <changelog author="hhetter@suse.de" date="1059566400">- initial SuSE package</changelog>
  <changelog author="sbrabec@suse.cz" date="1077192000">- Updated to version 1.0.2.</changelog>
  <changelog author="mmj@suse.de" date="1080302400">- Add postfix to # neededforbuild</changelog>
  <changelog author="mmj@suse.de" date="1115553600">- Don't declare things we have for sure on linux</changelog>
  <changelog author="mls@suse.de" date="1127736000">- move .so symlink into devel package
- make devel package require base package</changelog>
  <changelog author="dmueller@suse.de" date="1130932800">- don't build as root</changelog>
  <changelog author="lmichnovic@suse.cz" date="1137499200">- Updated to version 1.0.4
- enabled support for lwres: lwres_includedir.patch; bind-devel added into NFB
- enabled support for ntlm, etrn</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1188907200">- fix #307257 missing requires of the libesmtp-devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1188907201">- remove postfix from the buildrequires
- do not package generic INSTALL file</changelog>
  <changelog author="bwalle@suse.de" date="1218024000">- allow multiple calls of smtp_set_header() for Cc and Bcc headers
- disable lwres because we don't want to have a daemon (the lwresd)
  running just for address resolution</changelog>
  <changelog author="freitag@novell.com" date="1272456000">- Add libestmp-commonname.diff to do stricter check on commonName
  bnc#585393.</changelog>
  <changelog author="dimstar@opensuse.org" date="1281441600">- Update to version 1.0.6:
  + Each component matched by match-domain() is either a single
    '*' which matches anything or a case-insensitive comparison
    with a string of alphanumeric characters or a '-'.
- Changes from version 1.0.5:
  + The Gmail server reports enhanced status codes but then fails
    to provide them in some cases. The parser is now tolerant of
    this but warns the application using a new event flag
    SMTP_EV_SYNTAXWARNING that it is progressing despite the syntax
    error.
  + Fixed bug where To, Cc, Bcc etc. accepted only single values
    instead of a list.
  + Fix reversed comparison on the return value of gettimeofday().
- Drop upstream fixed patches libesmtp-1.0.4-multiple-cc.patch and
  libestmp-commonname.diff.
- Cleaned spec file using spec-cleaner.</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1475236800">- Add libesmtp-tlsv12.patch: All TLS clients must support and use
  the highest TLS version available if possible not only TLS 1.0.
  Patch sent to upstream long time ago, no response. website
  has also vanished from the internet (bsc#1005909).
- Pass --disable-isoc to configure, pick the compiler's default C
  standard mode (currently gnu11).</changelog>
</package>
<package pkgid="ba41baca22dc4b8ea123d60da326c136994800d02298a054e9c7207d3714b587" name="libesmtp" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="3.1"/>
  <changelog author="dmueller@suse.de" date="1130932800">- don't build as root</changelog>
  <changelog author="lmichnovic@suse.cz" date="1137499200">- Updated to version 1.0.4
- enabled support for lwres: lwres_includedir.patch; bind-devel added into NFB
- enabled support for ntlm, etrn</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1188907200">- fix #307257 missing requires of the libesmtp-devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1188907201">- remove postfix from the buildrequires
- do not package generic INSTALL file</changelog>
  <changelog author="bwalle@suse.de" date="1218024000">- allow multiple calls of smtp_set_header() for Cc and Bcc headers
- disable lwres because we don't want to have a daemon (the lwresd)
  running just for address resolution</changelog>
  <changelog author="freitag@novell.com" date="1272456000">- Add libestmp-commonname.diff to do stricter check on commonName
  bnc#585393.</changelog>
  <changelog author="dimstar@opensuse.org" date="1281441600">- Update to version 1.0.6:
  + Each component matched by match-domain() is either a single
    '*' which matches anything or a case-insensitive comparison
    with a string of alphanumeric characters or a '-'.
- Changes from version 1.0.5:
  + The Gmail server reports enhanced status codes but then fails
    to provide them in some cases. The parser is now tolerant of
    this but warns the application using a new event flag
    SMTP_EV_SYNTAXWARNING that it is progressing despite the syntax
    error.
  + Fixed bug where To, Cc, Bcc etc. accepted only single values
    instead of a list.
  + Fix reversed comparison on the return value of gettimeofday().
- Drop upstream fixed patches libesmtp-1.0.4-multiple-cc.patch and
  libestmp-commonname.diff.
- Cleaned spec file using spec-cleaner.</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1475236800">- Add libesmtp-tlsv12.patch: All TLS clients must support and use
  the highest TLS version available if possible not only TLS 1.0.
  Patch sent to upstream long time ago, no response. website
  has also vanished from the internet (bsc#1005909).
- Pass --disable-isoc to configure, pick the compiler's default C
  standard mode (currently gnu11).</changelog>
</package>
<package pkgid="e36eb7ffb2f5306c99d8a86e178f018dd37cb3094b70016e76bae08a87c9dbae" name="libesmtp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="3.1"/>
  <changelog author="hhetter@suse.de" date="1059566400">- initial SuSE package</changelog>
  <changelog author="sbrabec@suse.cz" date="1077192000">- Updated to version 1.0.2.</changelog>
  <changelog author="mmj@suse.de" date="1080302400">- Add postfix to # neededforbuild</changelog>
  <changelog author="mmj@suse.de" date="1115553600">- Don't declare things we have for sure on linux</changelog>
  <changelog author="mls@suse.de" date="1127736000">- move .so symlink into devel package
- make devel package require base package</changelog>
  <changelog author="dmueller@suse.de" date="1130932800">- don't build as root</changelog>
  <changelog author="lmichnovic@suse.cz" date="1137499200">- Updated to version 1.0.4
- enabled support for lwres: lwres_includedir.patch; bind-devel added into NFB
- enabled support for ntlm, etrn</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1188907200">- fix #307257 missing requires of the libesmtp-devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1188907201">- remove postfix from the buildrequires
- do not package generic INSTALL file</changelog>
  <changelog author="bwalle@suse.de" date="1218024000">- allow multiple calls of smtp_set_header() for Cc and Bcc headers
- disable lwres because we don't want to have a daemon (the lwresd)
  running just for address resolution</changelog>
  <changelog author="freitag@novell.com" date="1272456000">- Add libestmp-commonname.diff to do stricter check on commonName
  bnc#585393.</changelog>
  <changelog author="dimstar@opensuse.org" date="1281441600">- Update to version 1.0.6:
  + Each component matched by match-domain() is either a single
    '*' which matches anything or a case-insensitive comparison
    with a string of alphanumeric characters or a '-'.
- Changes from version 1.0.5:
  + The Gmail server reports enhanced status codes but then fails
    to provide them in some cases. The parser is now tolerant of
    this but warns the application using a new event flag
    SMTP_EV_SYNTAXWARNING that it is progressing despite the syntax
    error.
  + Fixed bug where To, Cc, Bcc etc. accepted only single values
    instead of a list.
  + Fix reversed comparison on the return value of gettimeofday().
- Drop upstream fixed patches libesmtp-1.0.4-multiple-cc.patch and
  libestmp-commonname.diff.
- Cleaned spec file using spec-cleaner.</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1475236800">- Add libesmtp-tlsv12.patch: All TLS clients must support and use
  the highest TLS version available if possible not only TLS 1.0.
  Patch sent to upstream long time ago, no response. website
  has also vanished from the internet (bsc#1005909).
- Pass --disable-isoc to configure, pick the compiler's default C
  standard mode (currently gnu11).</changelog>
</package>
<package pkgid="f0af0d5b1f6567832d99a5627e602771cb8073a07720b7d99d86b4a5cfc69355" name="libesmtp-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="3.1"/>
  <changelog author="dmueller@suse.de" date="1130932800">- don't build as root</changelog>
  <changelog author="lmichnovic@suse.cz" date="1137499200">- Updated to version 1.0.4
- enabled support for lwres: lwres_includedir.patch; bind-devel added into NFB
- enabled support for ntlm, etrn</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1188907200">- fix #307257 missing requires of the libesmtp-devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1188907201">- remove postfix from the buildrequires
- do not package generic INSTALL file</changelog>
  <changelog author="bwalle@suse.de" date="1218024000">- allow multiple calls of smtp_set_header() for Cc and Bcc headers
- disable lwres because we don't want to have a daemon (the lwresd)
  running just for address resolution</changelog>
  <changelog author="freitag@novell.com" date="1272456000">- Add libestmp-commonname.diff to do stricter check on commonName
  bnc#585393.</changelog>
  <changelog author="dimstar@opensuse.org" date="1281441600">- Update to version 1.0.6:
  + Each component matched by match-domain() is either a single
    '*' which matches anything or a case-insensitive comparison
    with a string of alphanumeric characters or a '-'.
- Changes from version 1.0.5:
  + The Gmail server reports enhanced status codes but then fails
    to provide them in some cases. The parser is now tolerant of
    this but warns the application using a new event flag
    SMTP_EV_SYNTAXWARNING that it is progressing despite the syntax
    error.
  + Fixed bug where To, Cc, Bcc etc. accepted only single values
    instead of a list.
  + Fix reversed comparison on the return value of gettimeofday().
- Drop upstream fixed patches libesmtp-1.0.4-multiple-cc.patch and
  libestmp-commonname.diff.
- Cleaned spec file using spec-cleaner.</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1475236800">- Add libesmtp-tlsv12.patch: All TLS clients must support and use
  the highest TLS version available if possible not only TLS 1.0.
  Patch sent to upstream long time ago, no response. website
  has also vanished from the internet (bsc#1005909).
- Pass --disable-isoc to configure, pick the compiler's default C
  standard mode (currently gnu11).</changelog>
</package>
<package pkgid="a67f02e10d8eac97016b12bb9fbde389f3a297ddff9b73004df3f4e0d85ef915" name="libesmtp-devel" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="3.1"/>
  <changelog author="dmueller@suse.de" date="1130932800">- don't build as root</changelog>
  <changelog author="lmichnovic@suse.cz" date="1137499200">- Updated to version 1.0.4
- enabled support for lwres: lwres_includedir.patch; bind-devel added into NFB
- enabled support for ntlm, etrn</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1188907200">- fix #307257 missing requires of the libesmtp-devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1188907201">- remove postfix from the buildrequires
- do not package generic INSTALL file</changelog>
  <changelog author="bwalle@suse.de" date="1218024000">- allow multiple calls of smtp_set_header() for Cc and Bcc headers
- disable lwres because we don't want to have a daemon (the lwresd)
  running just for address resolution</changelog>
  <changelog author="freitag@novell.com" date="1272456000">- Add libestmp-commonname.diff to do stricter check on commonName
  bnc#585393.</changelog>
  <changelog author="dimstar@opensuse.org" date="1281441600">- Update to version 1.0.6:
  + Each component matched by match-domain() is either a single
    '*' which matches anything or a case-insensitive comparison
    with a string of alphanumeric characters or a '-'.
- Changes from version 1.0.5:
  + The Gmail server reports enhanced status codes but then fails
    to provide them in some cases. The parser is now tolerant of
    this but warns the application using a new event flag
    SMTP_EV_SYNTAXWARNING that it is progressing despite the syntax
    error.
  + Fixed bug where To, Cc, Bcc etc. accepted only single values
    instead of a list.
  + Fix reversed comparison on the return value of gettimeofday().
- Drop upstream fixed patches libesmtp-1.0.4-multiple-cc.patch and
  libestmp-commonname.diff.
- Cleaned spec file using spec-cleaner.</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1475236800">- Add libesmtp-tlsv12.patch: All TLS clients must support and use
  the highest TLS version available if possible not only TLS 1.0.
  Patch sent to upstream long time ago, no response. website
  has also vanished from the internet (bsc#1005909).
- Pass --disable-isoc to configure, pick the compiler's default C
  standard mode (currently gnu11).</changelog>
</package>
<package pkgid="f827a4f2149d2b3552d5aadbb71a4f0b2475192ed100015b831996f647671b4b" name="libetpan" arch="src">
  <version epoch="0" ver="1.6" rel="22.1"/>
  <changelog author="ro@suse.de" date="1181908800">- fix specfile (consistently use libetpan-devel)</changelog>
  <changelog author="ro@suse.de" date="1182081600">- fix another typo in  specfile</changelog>
  <changelog author="lrupp@suse.de" date="1183377600">- rsaref =&gt; librsaref2</changelog>
  <changelog author="suse-tux@gmx.de" date="1185192000">- fixed build on older suse versions (&lt; 1030)
- renamed devel package to libetpan-devel (as suggested by
  darix)</changelog>
  <changelog author="anosek@suse.cz" date="1185364800">- updated to version 0.50
  * feature enhancements:
  RSS/ATOM feed implemented
  switched to automake build system
  IMAP IDLE implemented
  fetching by Message-Id implemented
  * fixes:
  several build fixes for Windows
  documentation build fixed
- fixed compilation error (mailsmtp.patch)</changelog>
  <changelog author="anosek@suse.cz" date="1186142400">- updated to version 0.51
  * bugfix release
- dropped obsoleted mailsmtp.patch</changelog>
  <changelog author="bwalle@suse.de" date="1187006400">- sort this changes file to fix build in BuildService</changelog>
  <changelog author="ro@suse.de" date="1189512000">- drop useless requires for librsaref2</changelog>
  <changelog author="anosek@suse.cz" date="1204718400">- updated to version 0.54
  - fixed regression on IMAP APPEND
  - cleanup
  - version fixes
  - IPv6 issue
  - gmail issues</changelog>
  <changelog author="anosek@suse.cz" date="1221220800">- updated to version 0.56
  * bugfix release
- removed libtool from BuildRequires</changelog>
  <changelog author="nadvornik@suse.cz" date="1223899200">- fixed rpmlint errors - implicit decrarations and ldconfig</changelog>
  <changelog author="puzel@suse.cz" date="1228737600">- fix rpmlint warnings: summary not capitalized
- update to 0.57
  - fixed issue with GnuTLS</changelog>
  <changelog author="puzel@suse.cz" date="1245240000">- update to 0.58
  * Improvements on SSL implementation.
  * Gnutls: Better fix (API-compatible with libgnutls13)
  * Gnutls: Use compatibility mode to avoid being unable to
  * connect to some servers. (see Claws Mail's bug #1930)
  * SSL: Rehandshake if server asks to.</changelog>
  <changelog author="rhafer@novell.com" date="1285848000">- Check for libdb-4.8</changelog>
  <changelog author="coolo@suse.de" date="1324296000">- remove very old stuff from spec file</changelog>
  <changelog author="reddwarf@opensuse.org" date="1332072000">- update to 1.1
  * Not summarized changes, look at ChangeLog file.</changelog>
  <changelog author="schwab@suse.de" date="1365854400">- libetpan-configure.patch: Correct configure checks for libcurl and
  libexpat to work with --as-needed</changelog>
  <changelog author="reddwarf@opensuse.org" date="1378382400">- Update to 1.2
  * No summarized changes available, look at ChangeLog file
- Remove libetpan-0.56-uninitialized.patch, fixed upstream
- Remove libetpan-configure.patch, fixed upstrem
- Increase soname number
- Update Url and Source tags
- Use autoreconf (add autotools BuildRequires)
- Remove libcurl-devel and libexpat-devel BuildRequires. Its use
  has been disabled upstream
- Remove misleading --with-gnutls=yes configure option</changelog>
  <changelog author="reddwarf@opensuse.org" date="1405080000">- Update to 1.5
  * Gmail search features: X-GM-MSGID, X-GM-THRID, X-GM-RAW
  * Added POP stat
  * Various fixes for Windows
  * Fixed OpenSSL / GnuTLS implementation of retrieval of certificates
  * Fixed IMAP IDLE in case of COMPRESS-ed streams
  * Fixed base64 encoding</changelog>
  <changelog author="p.drouand@gmail.com" date="1423310400">- Update to version 1.6
  * Improved RFC822 and MIME parser
  * Implemented SEARCH using LITERAL+ for Gmail
  * Fixed SSL connections (don't force SSLv3)</changelog>
</package>
<package pkgid="3ce95f0380cb783b63b7a6d1c2143efab6d92de5f5e36f0f15e3c377e08ed943" name="libetpan-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6" rel="22.1"/>
  <changelog author="nadvornik@suse.cz" date="1223899200">- fixed rpmlint errors - implicit decrarations and ldconfig</changelog>
  <changelog author="puzel@suse.cz" date="1228737600">- fix rpmlint warnings: summary not capitalized
- update to 0.57
  - fixed issue with GnuTLS</changelog>
  <changelog author="puzel@suse.cz" date="1245240000">- update to 0.58
  * Improvements on SSL implementation.
  * Gnutls: Better fix (API-compatible with libgnutls13)
  * Gnutls: Use compatibility mode to avoid being unable to
  * connect to some servers. (see Claws Mail's bug #1930)
  * SSL: Rehandshake if server asks to.</changelog>
  <changelog author="rhafer@novell.com" date="1285848000">- Check for libdb-4.8</changelog>
  <changelog author="coolo@suse.de" date="1324296000">- remove very old stuff from spec file</changelog>
  <changelog author="reddwarf@opensuse.org" date="1332072000">- update to 1.1
  * Not summarized changes, look at ChangeLog file.</changelog>
  <changelog author="schwab@suse.de" date="1365854400">- libetpan-configure.patch: Correct configure checks for libcurl and
  libexpat to work with --as-needed</changelog>
  <changelog author="reddwarf@opensuse.org" date="1378382400">- Update to 1.2
  * No summarized changes available, look at ChangeLog file
- Remove libetpan-0.56-uninitialized.patch, fixed upstream
- Remove libetpan-configure.patch, fixed upstrem
- Increase soname number
- Update Url and Source tags
- Use autoreconf (add autotools BuildRequires)
- Remove libcurl-devel and libexpat-devel BuildRequires. Its use
  has been disabled upstream
- Remove misleading --with-gnutls=yes configure option</changelog>
  <changelog author="reddwarf@opensuse.org" date="1405080000">- Update to 1.5
  * Gmail search features: X-GM-MSGID, X-GM-THRID, X-GM-RAW
  * Added POP stat
  * Various fixes for Windows
  * Fixed OpenSSL / GnuTLS implementation of retrieval of certificates
  * Fixed IMAP IDLE in case of COMPRESS-ed streams
  * Fixed base64 encoding</changelog>
  <changelog author="p.drouand@gmail.com" date="1423310400">- Update to version 1.6
  * Improved RFC822 and MIME parser
  * Implemented SEARCH using LITERAL+ for Gmail
  * Fixed SSL connections (don't force SSLv3)</changelog>
</package>
<package pkgid="1ef069c065610ebf62231bd4bc6ed38977fd6f79a6719c4cb317732ce0c12819" name="libetpan-devel" arch="x86_64">
  <version epoch="0" ver="1.6" rel="22.1"/>
  <changelog author="nadvornik@suse.cz" date="1223899200">- fixed rpmlint errors - implicit decrarations and ldconfig</changelog>
  <changelog author="puzel@suse.cz" date="1228737600">- fix rpmlint warnings: summary not capitalized
- update to 0.57
  - fixed issue with GnuTLS</changelog>
  <changelog author="puzel@suse.cz" date="1245240000">- update to 0.58
  * Improvements on SSL implementation.
  * Gnutls: Better fix (API-compatible with libgnutls13)
  * Gnutls: Use compatibility mode to avoid being unable to
  * connect to some servers. (see Claws Mail's bug #1930)
  * SSL: Rehandshake if server asks to.</changelog>
  <changelog author="rhafer@novell.com" date="1285848000">- Check for libdb-4.8</changelog>
  <changelog author="coolo@suse.de" date="1324296000">- remove very old stuff from spec file</changelog>
  <changelog author="reddwarf@opensuse.org" date="1332072000">- update to 1.1
  * Not summarized changes, look at ChangeLog file.</changelog>
  <changelog author="schwab@suse.de" date="1365854400">- libetpan-configure.patch: Correct configure checks for libcurl and
  libexpat to work with --as-needed</changelog>
  <changelog author="reddwarf@opensuse.org" date="1378382400">- Update to 1.2
  * No summarized changes available, look at ChangeLog file
- Remove libetpan-0.56-uninitialized.patch, fixed upstream
- Remove libetpan-configure.patch, fixed upstrem
- Increase soname number
- Update Url and Source tags
- Use autoreconf (add autotools BuildRequires)
- Remove libcurl-devel and libexpat-devel BuildRequires. Its use
  has been disabled upstream
- Remove misleading --with-gnutls=yes configure option</changelog>
  <changelog author="reddwarf@opensuse.org" date="1405080000">- Update to 1.5
  * Gmail search features: X-GM-MSGID, X-GM-THRID, X-GM-RAW
  * Added POP stat
  * Various fixes for Windows
  * Fixed OpenSSL / GnuTLS implementation of retrieval of certificates
  * Fixed IMAP IDLE in case of COMPRESS-ed streams
  * Fixed base64 encoding</changelog>
  <changelog author="p.drouand@gmail.com" date="1423310400">- Update to version 1.6
  * Improved RFC822 and MIME parser
  * Implemented SEARCH using LITERAL+ for Gmail
  * Fixed SSL connections (don't force SSLv3)</changelog>
</package>
<package pkgid="fb0710f3e02fc9cb6e65f10f594e7563a1d463aca7a6cd1b406134378a432e09" name="libetpan17" arch="x86_64">
  <version epoch="0" ver="1.6" rel="22.1"/>
  <changelog author="nadvornik@suse.cz" date="1223899200">- fixed rpmlint errors - implicit decrarations and ldconfig</changelog>
  <changelog author="puzel@suse.cz" date="1228737600">- fix rpmlint warnings: summary not capitalized
- update to 0.57
  - fixed issue with GnuTLS</changelog>
  <changelog author="puzel@suse.cz" date="1245240000">- update to 0.58
  * Improvements on SSL implementation.
  * Gnutls: Better fix (API-compatible with libgnutls13)
  * Gnutls: Use compatibility mode to avoid being unable to
  * connect to some servers. (see Claws Mail's bug #1930)
  * SSL: Rehandshake if server asks to.</changelog>
  <changelog author="rhafer@novell.com" date="1285848000">- Check for libdb-4.8</changelog>
  <changelog author="coolo@suse.de" date="1324296000">- remove very old stuff from spec file</changelog>
  <changelog author="reddwarf@opensuse.org" date="1332072000">- update to 1.1
  * Not summarized changes, look at ChangeLog file.</changelog>
  <changelog author="schwab@suse.de" date="1365854400">- libetpan-configure.patch: Correct configure checks for libcurl and
  libexpat to work with --as-needed</changelog>
  <changelog author="reddwarf@opensuse.org" date="1378382400">- Update to 1.2
  * No summarized changes available, look at ChangeLog file
- Remove libetpan-0.56-uninitialized.patch, fixed upstream
- Remove libetpan-configure.patch, fixed upstrem
- Increase soname number
- Update Url and Source tags
- Use autoreconf (add autotools BuildRequires)
- Remove libcurl-devel and libexpat-devel BuildRequires. Its use
  has been disabled upstream
- Remove misleading --with-gnutls=yes configure option</changelog>
  <changelog author="reddwarf@opensuse.org" date="1405080000">- Update to 1.5
  * Gmail search features: X-GM-MSGID, X-GM-THRID, X-GM-RAW
  * Added POP stat
  * Various fixes for Windows
  * Fixed OpenSSL / GnuTLS implementation of retrieval of certificates
  * Fixed IMAP IDLE in case of COMPRESS-ed streams
  * Fixed base64 encoding</changelog>
  <changelog author="p.drouand@gmail.com" date="1423310400">- Update to version 1.6
  * Improved RFC822 and MIME parser
  * Implemented SEARCH using LITERAL+ for Gmail
  * Fixed SSL connections (don't force SSLv3)</changelog>
</package>
<package pkgid="b9981edff4fd366429ecd9a48dfe4efcae9a47255560d42ad814ea16585f18be" name="libetpan17-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6" rel="22.1"/>
  <changelog author="nadvornik@suse.cz" date="1223899200">- fixed rpmlint errors - implicit decrarations and ldconfig</changelog>
  <changelog author="puzel@suse.cz" date="1228737600">- fix rpmlint warnings: summary not capitalized
- update to 0.57
  - fixed issue with GnuTLS</changelog>
  <changelog author="puzel@suse.cz" date="1245240000">- update to 0.58
  * Improvements on SSL implementation.
  * Gnutls: Better fix (API-compatible with libgnutls13)
  * Gnutls: Use compatibility mode to avoid being unable to
  * connect to some servers. (see Claws Mail's bug #1930)
  * SSL: Rehandshake if server asks to.</changelog>
  <changelog author="rhafer@novell.com" date="1285848000">- Check for libdb-4.8</changelog>
  <changelog author="coolo@suse.de" date="1324296000">- remove very old stuff from spec file</changelog>
  <changelog author="reddwarf@opensuse.org" date="1332072000">- update to 1.1
  * Not summarized changes, look at ChangeLog file.</changelog>
  <changelog author="schwab@suse.de" date="1365854400">- libetpan-configure.patch: Correct configure checks for libcurl and
  libexpat to work with --as-needed</changelog>
  <changelog author="reddwarf@opensuse.org" date="1378382400">- Update to 1.2
  * No summarized changes available, look at ChangeLog file
- Remove libetpan-0.56-uninitialized.patch, fixed upstream
- Remove libetpan-configure.patch, fixed upstrem
- Increase soname number
- Update Url and Source tags
- Use autoreconf (add autotools BuildRequires)
- Remove libcurl-devel and libexpat-devel BuildRequires. Its use
  has been disabled upstream
- Remove misleading --with-gnutls=yes configure option</changelog>
  <changelog author="reddwarf@opensuse.org" date="1405080000">- Update to 1.5
  * Gmail search features: X-GM-MSGID, X-GM-THRID, X-GM-RAW
  * Added POP stat
  * Various fixes for Windows
  * Fixed OpenSSL / GnuTLS implementation of retrieval of certificates
  * Fixed IMAP IDLE in case of COMPRESS-ed streams
  * Fixed base64 encoding</changelog>
  <changelog author="p.drouand@gmail.com" date="1423310400">- Update to version 1.6
  * Improved RFC822 and MIME parser
  * Implemented SEARCH using LITERAL+ for Gmail
  * Fixed SSL connections (don't force SSLv3)</changelog>
</package>
<package pkgid="34c076528778fd89999bbfe736ad28f5279371db51651d4768afcc47938f5f62" name="libfann-devel" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="8.1"/>
  <changelog author="judas_iscariote@shorewall.net" date="1176811200">- update to version fann-2.1.0.snap20070416 solving several problems
  see the vendor site for more info.</changelog>
  <changelog author="judas_iscariote@shorewall.net" date="1180958400">-adapt to the new library package policy as well.</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Add autotools BuildRequires for factory/12.2
- Ensure pkgconfig symbols are provided</changelog>
  <changelog author="coolo@suse.com" date="1432728000">- update to 2.2
  Added Sarprop training
  Added fann_create_train for creating an empty training data struct
  Added fann_copy for copying an ANN
  Added cascade_min_out_epochs and cascade_min_cand_epochs to improve cascade training
  Added extra checks when training, to ensure that data and network input and output sizes matches
  Added Visual Studio 2010 solution
  Added support for 64bit architecture
  Cleanup in sources</changelog>
  <changelog author="rpm@fthiessen.de" date="1446552000">- Fixed spec file:
  * Use cmake macro
  * Some cleanup
  * Updated URL (new website)
- Added fix-cmake-link-libraries.patch to fix build.
  * This will add libm to the linker flags and install pkgconfig
    file in lib(64)/pkgconfig</changelog>
  <changelog author="jengelh@inai.de" date="1477137600">- Update descriptions, summaries and license field</changelog>
</package>
<package pkgid="a061bf40716b1d39f88972bb00446ee2dd2226f33d604d2bc1f4f71c23793947" name="libfann2" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="8.1"/>
  <changelog author="judas_iscariote@shorewall.net" date="1176811200">- update to version fann-2.1.0.snap20070416 solving several problems
  see the vendor site for more info.</changelog>
  <changelog author="judas_iscariote@shorewall.net" date="1180958400">-adapt to the new library package policy as well.</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Add autotools BuildRequires for factory/12.2
- Ensure pkgconfig symbols are provided</changelog>
  <changelog author="coolo@suse.com" date="1432728000">- update to 2.2
  Added Sarprop training
  Added fann_create_train for creating an empty training data struct
  Added fann_copy for copying an ANN
  Added cascade_min_out_epochs and cascade_min_cand_epochs to improve cascade training
  Added extra checks when training, to ensure that data and network input and output sizes matches
  Added Visual Studio 2010 solution
  Added support for 64bit architecture
  Cleanup in sources</changelog>
  <changelog author="rpm@fthiessen.de" date="1446552000">- Fixed spec file:
  * Use cmake macro
  * Some cleanup
  * Updated URL (new website)
- Added fix-cmake-link-libraries.patch to fix build.
  * This will add libm to the linker flags and install pkgconfig
    file in lib(64)/pkgconfig</changelog>
  <changelog author="jengelh@inai.de" date="1477137600">- Update descriptions, summaries and license field</changelog>
</package>
<package pkgid="22bcafd59e175170dd2344ca818cd8d8b356664e9231e169e2af77e8eb6d1815" name="libfann2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="8.1"/>
  <changelog author="judas_iscariote@shorewall.net" date="1176811200">- update to version fann-2.1.0.snap20070416 solving several problems
  see the vendor site for more info.</changelog>
  <changelog author="judas_iscariote@shorewall.net" date="1180958400">-adapt to the new library package policy as well.</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections
- Parallel build with %_smp_mflags
- Add autotools BuildRequires for factory/12.2
- Ensure pkgconfig symbols are provided</changelog>
  <changelog author="coolo@suse.com" date="1432728000">- update to 2.2
  Added Sarprop training
  Added fann_create_train for creating an empty training data struct
  Added fann_copy for copying an ANN
  Added cascade_min_out_epochs and cascade_min_cand_epochs to improve cascade training
  Added extra checks when training, to ensure that data and network input and output sizes matches
  Added Visual Studio 2010 solution
  Added support for 64bit architecture
  Cleanup in sources</changelog>
  <changelog author="rpm@fthiessen.de" date="1446552000">- Fixed spec file:
  * Use cmake macro
  * Some cleanup
  * Updated URL (new website)
- Added fix-cmake-link-libraries.patch to fix build.
  * This will add libm to the linker flags and install pkgconfig
    file in lib(64)/pkgconfig</changelog>
  <changelog author="jengelh@inai.de" date="1477137600">- Update descriptions, summaries and license field</changelog>
</package>
<package pkgid="69843eec3ca41a645553cb7e0bac22bca5b7dd0ce32c3c739cb0bdf9b7d54399" name="libmilter-doc" arch="noarch">
  <version epoch="0" ver="8.15.2" rel="232.2"/>
  <changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
  <changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
  <changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
  <changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
  <changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
  <changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
  <changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
  <changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
  <changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
  <changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
  <changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
  <changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
  <changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
  <changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
  <changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
  <changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>
</package>
<package pkgid="11cfdac4d80865bf4544f59ee9119c8095c4ff432e9aa0e73ad429293ec1db33" name="libmilter1_0" arch="x86_64">
  <version epoch="0" ver="8.15.2" rel="232.2"/>
  <changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
  <changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
  <changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
  <changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
  <changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
  <changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
  <changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
  <changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
  <changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
  <changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
  <changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
  <changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
  <changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
  <changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
  <changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
  <changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>
</package>
<package pkgid="5ec6f8a3493b5977bb1bb641cc25278426bff6d12eaf9c4a4c3c59d08a620b90" name="libmilter1_0-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.15.2" rel="232.2"/>
  <changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
  <changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
  <changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
  <changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
  <changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
  <changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
  <changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
  <changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
  <changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
  <changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
  <changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
  <changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
  <changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
  <changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
  <changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
  <changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>
</package>
<package pkgid="361980cd9ffa49b004cb3d42e8f9d3ae637f035ed7201b0eb441f8d6afb26736" name="libopendmarc-devel" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="1.3"/>
  <changelog author="opensuse@dstoecker.de" date="1460808000">- first version for openSUSE (based on Fedora version by Steve Jenkins and Todd Lyons)</changelog>
  <changelog author="opensuse@dstoecker.de" date="1486555200">- fix missing dependencies for support scripts</changelog>
  <changelog author="opensuse@dstoecker.de" date="1488888000">- update to 1.3.2</changelog>
</package>
<package pkgid="53d5202d7b6c064fc9720ee4a4cb3e3880706a7e9ea358e7baf5740e17b5370d" name="libopendmarc2" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="1.3"/>
  <changelog author="opensuse@dstoecker.de" date="1460808000">- first version for openSUSE (based on Fedora version by Steve Jenkins and Todd Lyons)</changelog>
  <changelog author="opensuse@dstoecker.de" date="1486555200">- fix missing dependencies for support scripts</changelog>
  <changelog author="opensuse@dstoecker.de" date="1488888000">- update to 1.3.2</changelog>
</package>
<package pkgid="0a3e73276fedfbf58ffd7108750dc1a184c4fa5feb90fefb528afdad9ef6049d" name="libopendmarc2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="1.3"/>
  <changelog author="opensuse@dstoecker.de" date="1460808000">- first version for openSUSE (based on Fedora version by Steve Jenkins and Todd Lyons)</changelog>
  <changelog author="opensuse@dstoecker.de" date="1486555200">- fix missing dependencies for support scripts</changelog>
  <changelog author="opensuse@dstoecker.de" date="1488888000">- update to 1.3.2</changelog>
</package>
<package pkgid="c95ae4b471078a63d5402f67c43064f20e3d8a42b727382cdbcb7399507f3252" name="libsieve" arch="src">
  <version epoch="0" ver="2.2.7" rel="2.1"/>
  <changelog author="bjohnson@symetrix.com" date="1160568000">? Initial package 2.1.13</changelog>
  <changelog author="bjohnson@symetrix.com" date="1163851200">- start with fedora extras template for spec file</changelog>
  <changelog author="bjohnson@symetrix.com" date="1164456000">- bump release to -2
- move .so to -devel
- change %%post command to avoid fork of a shell interpreter</changelog>
  <changelog author="bjohnson@symetrix.com" date="1165838400">- added repotag for anyone who may want to use it
- move ldconfig calls to post and postun with -p
- minor spec file cleanups</changelog>
  <changelog author="bjohnson@symetrix.com" date="1169899200">- add fully versioned dependency on main package for -devel
- remove .a library from -devel
- do not call autoconf, use configure file
- direct download url for source0
- remove buildrequires for autoconf and m4</changelog>
  <changelog author="bjohnson@symetrix.com" date="1169985600">- update to 2.2.4
- change license to GPL based on
  https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216723#c11
- install files preserving timestamps</changelog>
  <changelog author="bjohnson@symetrix.com" date="1170072000">- add note regarding why license tag is GPL
- sed surgery on Makefile.in files so that CFLAGS is passed properly</changelog>
  <changelog author="bjohnson@symetrix.com" date="1170763200">- update to 2.2.5
- remove sed surgery since tarball is fixed to pass CFLAGS</changelog>
  <changelog author="chris@computersalat.de" date="1315224000">- update to 2.2.7
- lib pkging policy
- move changelog to changes file</changelog>
</package>
<package pkgid="454201c978c264c903048560b5ad36d4d9ee94bebdf82d8937b289da55c6ea24" name="libsieve-debugsource" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="2.1"/>
  <changelog author="bjohnson@symetrix.com" date="1160568000">? Initial package 2.1.13</changelog>
  <changelog author="bjohnson@symetrix.com" date="1163851200">- start with fedora extras template for spec file</changelog>
  <changelog author="bjohnson@symetrix.com" date="1164456000">- bump release to -2
- move .so to -devel
- change %%post command to avoid fork of a shell interpreter</changelog>
  <changelog author="bjohnson@symetrix.com" date="1165838400">- added repotag for anyone who may want to use it
- move ldconfig calls to post and postun with -p
- minor spec file cleanups</changelog>
  <changelog author="bjohnson@symetrix.com" date="1169899200">- add fully versioned dependency on main package for -devel
- remove .a library from -devel
- do not call autoconf, use configure file
- direct download url for source0
- remove buildrequires for autoconf and m4</changelog>
  <changelog author="bjohnson@symetrix.com" date="1169985600">- update to 2.2.4
- change license to GPL based on
  https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216723#c11
- install files preserving timestamps</changelog>
  <changelog author="bjohnson@symetrix.com" date="1170072000">- add note regarding why license tag is GPL
- sed surgery on Makefile.in files so that CFLAGS is passed properly</changelog>
  <changelog author="bjohnson@symetrix.com" date="1170763200">- update to 2.2.5
- remove sed surgery since tarball is fixed to pass CFLAGS</changelog>
  <changelog author="chris@computersalat.de" date="1315224000">- update to 2.2.7
- lib pkging policy
- move changelog to changes file</changelog>
</package>
<package pkgid="ce263c1565e7d2f2c9eb8d9b4d186cdf2f4b0e470292b98604bf13a99d16d6d5" name="libsieve-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="2.1"/>
  <changelog author="bjohnson@symetrix.com" date="1160568000">? Initial package 2.1.13</changelog>
  <changelog author="bjohnson@symetrix.com" date="1163851200">- start with fedora extras template for spec file</changelog>
  <changelog author="bjohnson@symetrix.com" date="1164456000">- bump release to -2
- move .so to -devel
- change %%post command to avoid fork of a shell interpreter</changelog>
  <changelog author="bjohnson@symetrix.com" date="1165838400">- added repotag for anyone who may want to use it
- move ldconfig calls to post and postun with -p
- minor spec file cleanups</changelog>
  <changelog author="bjohnson@symetrix.com" date="1169899200">- add fully versioned dependency on main package for -devel
- remove .a library from -devel
- do not call autoconf, use configure file
- direct download url for source0
- remove buildrequires for autoconf and m4</changelog>
  <changelog author="bjohnson@symetrix.com" date="1169985600">- update to 2.2.4
- change license to GPL based on
  https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216723#c11
- install files preserving timestamps</changelog>
  <changelog author="bjohnson@symetrix.com" date="1170072000">- add note regarding why license tag is GPL
- sed surgery on Makefile.in files so that CFLAGS is passed properly</changelog>
  <changelog author="bjohnson@symetrix.com" date="1170763200">- update to 2.2.5
- remove sed surgery since tarball is fixed to pass CFLAGS</changelog>
  <changelog author="chris@computersalat.de" date="1315224000">- update to 2.2.7
- lib pkging policy
- move changelog to changes file</changelog>
</package>
<package pkgid="cf1bfe3320adf93bca13e78c1e2f7897f3a310706eb4c49a672811cd867af729" name="libsieve1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="2.1"/>
  <changelog author="bjohnson@symetrix.com" date="1160568000">? Initial package 2.1.13</changelog>
  <changelog author="bjohnson@symetrix.com" date="1163851200">- start with fedora extras template for spec file</changelog>
  <changelog author="bjohnson@symetrix.com" date="1164456000">- bump release to -2
- move .so to -devel
- change %%post command to avoid fork of a shell interpreter</changelog>
  <changelog author="bjohnson@symetrix.com" date="1165838400">- added repotag for anyone who may want to use it
- move ldconfig calls to post and postun with -p
- minor spec file cleanups</changelog>
  <changelog author="bjohnson@symetrix.com" date="1169899200">- add fully versioned dependency on main package for -devel
- remove .a library from -devel
- do not call autoconf, use configure file
- direct download url for source0
- remove buildrequires for autoconf and m4</changelog>
  <changelog author="bjohnson@symetrix.com" date="1169985600">- update to 2.2.4
- change license to GPL based on
  https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216723#c11
- install files preserving timestamps</changelog>
  <changelog author="bjohnson@symetrix.com" date="1170072000">- add note regarding why license tag is GPL
- sed surgery on Makefile.in files so that CFLAGS is passed properly</changelog>
  <changelog author="bjohnson@symetrix.com" date="1170763200">- update to 2.2.5
- remove sed surgery since tarball is fixed to pass CFLAGS</changelog>
  <changelog author="chris@computersalat.de" date="1315224000">- update to 2.2.7
- lib pkging policy
- move changelog to changes file</changelog>
</package>
<package pkgid="4054a56ae6e3248026c75d525bb7876d04c09ce406ab3506c49280ff1fcff1e6" name="libsieve1-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="2.1"/>
  <changelog author="bjohnson@symetrix.com" date="1160568000">? Initial package 2.1.13</changelog>
  <changelog author="bjohnson@symetrix.com" date="1163851200">- start with fedora extras template for spec file</changelog>
  <changelog author="bjohnson@symetrix.com" date="1164456000">- bump release to -2
- move .so to -devel
- change %%post command to avoid fork of a shell interpreter</changelog>
  <changelog author="bjohnson@symetrix.com" date="1165838400">- added repotag for anyone who may want to use it
- move ldconfig calls to post and postun with -p
- minor spec file cleanups</changelog>
  <changelog author="bjohnson@symetrix.com" date="1169899200">- add fully versioned dependency on main package for -devel
- remove .a library from -devel
- do not call autoconf, use configure file
- direct download url for source0
- remove buildrequires for autoconf and m4</changelog>
  <changelog author="bjohnson@symetrix.com" date="1169985600">- update to 2.2.4
- change license to GPL based on
  https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216723#c11
- install files preserving timestamps</changelog>
  <changelog author="bjohnson@symetrix.com" date="1170072000">- add note regarding why license tag is GPL
- sed surgery on Makefile.in files so that CFLAGS is passed properly</changelog>
  <changelog author="bjohnson@symetrix.com" date="1170763200">- update to 2.2.5
- remove sed surgery since tarball is fixed to pass CFLAGS</changelog>
  <changelog author="chris@computersalat.de" date="1315224000">- update to 2.2.7
- lib pkging policy
- move changelog to changes file</changelog>
</package>
<package pkgid="fdea10899b5cf05a9499aba61315c0b816bf03ad9e0512c733292d6d3854ab0f" name="libspf2" arch="src">
  <version epoch="0" ver="1.2.10" rel="15.1"/>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- initial package (version 1.2.10)</changelog>
  <changelog author="lmuelle@suse.com" date="1422446400">- Add -n libspf2-2 as arguments to post and postun.</changelog>
  <changelog author="lmuelle@suse.com" date="1422532800">- Exclude static binaries and shift the remaining into the spf2 package.</changelog>
  <changelog author="lmuelle@suse.com" date="1422532801">- Rename the spfquery binary to spf_query to avoid a conflict with the
  perl-Mail-SPF package.</changelog>
  <changelog author="lmuelle@suse.com" date="1422619200">- Package LICENSES file as doc.</changelog>
  <changelog author="jengelh@inai.de" date="1431604800">- Rename spf2 to libspf2-tools (like we do for e.g. libwmf-tools)
- Move README file to tools subpackage. Trim description of SRPM
  a bit.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434628800">- Use -std=gnu89, logging macros are broken when __STDC_VERSION__ &gt;= 199901L
  is true, which is the case when using GCC5.</changelog>
</package>
<package pkgid="24d91bf0220192637c0394299f7adf24a4100a19b0cc4fda2f34705ec0d506b3" name="libspf2-2" arch="x86_64">
  <version epoch="0" ver="1.2.10" rel="15.1"/>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- initial package (version 1.2.10)</changelog>
  <changelog author="lmuelle@suse.com" date="1422446400">- Add -n libspf2-2 as arguments to post and postun.</changelog>
  <changelog author="lmuelle@suse.com" date="1422532800">- Exclude static binaries and shift the remaining into the spf2 package.</changelog>
  <changelog author="lmuelle@suse.com" date="1422532801">- Rename the spfquery binary to spf_query to avoid a conflict with the
  perl-Mail-SPF package.</changelog>
  <changelog author="lmuelle@suse.com" date="1422619200">- Package LICENSES file as doc.</changelog>
  <changelog author="jengelh@inai.de" date="1431604800">- Rename spf2 to libspf2-tools (like we do for e.g. libwmf-tools)
- Move README file to tools subpackage. Trim description of SRPM
  a bit.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434628800">- Use -std=gnu89, logging macros are broken when __STDC_VERSION__ &gt;= 199901L
  is true, which is the case when using GCC5.</changelog>
</package>
<package pkgid="d3f48a3a85473eb2d1d915588c68aeaa2131529d8979db24c55f0f90e915804e" name="libspf2-2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.10" rel="15.1"/>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- initial package (version 1.2.10)</changelog>
  <changelog author="lmuelle@suse.com" date="1422446400">- Add -n libspf2-2 as arguments to post and postun.</changelog>
  <changelog author="lmuelle@suse.com" date="1422532800">- Exclude static binaries and shift the remaining into the spf2 package.</changelog>
  <changelog author="lmuelle@suse.com" date="1422532801">- Rename the spfquery binary to spf_query to avoid a conflict with the
  perl-Mail-SPF package.</changelog>
  <changelog author="lmuelle@suse.com" date="1422619200">- Package LICENSES file as doc.</changelog>
  <changelog author="jengelh@inai.de" date="1431604800">- Rename spf2 to libspf2-tools (like we do for e.g. libwmf-tools)
- Move README file to tools subpackage. Trim description of SRPM
  a bit.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434628800">- Use -std=gnu89, logging macros are broken when __STDC_VERSION__ &gt;= 199901L
  is true, which is the case when using GCC5.</changelog>
</package>
<package pkgid="0e9e81da98ae7a5a96954c170dd568ee31c243946339e05e3867938d2b7e7f65" name="libspf2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.10" rel="15.1"/>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- initial package (version 1.2.10)</changelog>
  <changelog author="lmuelle@suse.com" date="1422446400">- Add -n libspf2-2 as arguments to post and postun.</changelog>
  <changelog author="lmuelle@suse.com" date="1422532800">- Exclude static binaries and shift the remaining into the spf2 package.</changelog>
  <changelog author="lmuelle@suse.com" date="1422532801">- Rename the spfquery binary to spf_query to avoid a conflict with the
  perl-Mail-SPF package.</changelog>
  <changelog author="lmuelle@suse.com" date="1422619200">- Package LICENSES file as doc.</changelog>
  <changelog author="jengelh@inai.de" date="1431604800">- Rename spf2 to libspf2-tools (like we do for e.g. libwmf-tools)
- Move README file to tools subpackage. Trim description of SRPM
  a bit.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434628800">- Use -std=gnu89, logging macros are broken when __STDC_VERSION__ &gt;= 199901L
  is true, which is the case when using GCC5.</changelog>
</package>
<package pkgid="6995cae55165f7ee3611e2f2bdee3906e36f6edd8849a1e0c726c7f6839ff724" name="libspf2-devel" arch="x86_64">
  <version epoch="0" ver="1.2.10" rel="15.1"/>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- initial package (version 1.2.10)</changelog>
  <changelog author="lmuelle@suse.com" date="1422446400">- Add -n libspf2-2 as arguments to post and postun.</changelog>
  <changelog author="lmuelle@suse.com" date="1422532800">- Exclude static binaries and shift the remaining into the spf2 package.</changelog>
  <changelog author="lmuelle@suse.com" date="1422532801">- Rename the spfquery binary to spf_query to avoid a conflict with the
  perl-Mail-SPF package.</changelog>
  <changelog author="lmuelle@suse.com" date="1422619200">- Package LICENSES file as doc.</changelog>
  <changelog author="jengelh@inai.de" date="1431604800">- Rename spf2 to libspf2-tools (like we do for e.g. libwmf-tools)
- Move README file to tools subpackage. Trim description of SRPM
  a bit.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434628800">- Use -std=gnu89, logging macros are broken when __STDC_VERSION__ &gt;= 199901L
  is true, which is the case when using GCC5.</changelog>
</package>
<package pkgid="cd7459552d21067cd8ab9c6d0bcd0ee4b5718b8a06d045ed89ce78a27f575bbc" name="libspf2-tools" arch="x86_64">
  <version epoch="0" ver="1.2.10" rel="15.1"/>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- initial package (version 1.2.10)</changelog>
  <changelog author="lmuelle@suse.com" date="1422446400">- Add -n libspf2-2 as arguments to post and postun.</changelog>
  <changelog author="lmuelle@suse.com" date="1422532800">- Exclude static binaries and shift the remaining into the spf2 package.</changelog>
  <changelog author="lmuelle@suse.com" date="1422532801">- Rename the spfquery binary to spf_query to avoid a conflict with the
  perl-Mail-SPF package.</changelog>
  <changelog author="lmuelle@suse.com" date="1422619200">- Package LICENSES file as doc.</changelog>
  <changelog author="jengelh@inai.de" date="1431604800">- Rename spf2 to libspf2-tools (like we do for e.g. libwmf-tools)
- Move README file to tools subpackage. Trim description of SRPM
  a bit.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434628800">- Use -std=gnu89, logging macros are broken when __STDC_VERSION__ &gt;= 199901L
  is true, which is the case when using GCC5.</changelog>
</package>
<package pkgid="fb459384f962a94b74201d7672f369ec9727af946948ee55aa965f567f515b0f" name="libspf2-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.10" rel="15.1"/>
  <changelog author="michal.hrusecky@opensuse.org" date="1419163200">- initial package (version 1.2.10)</changelog>
  <changelog author="lmuelle@suse.com" date="1422446400">- Add -n libspf2-2 as arguments to post and postun.</changelog>
  <changelog author="lmuelle@suse.com" date="1422532800">- Exclude static binaries and shift the remaining into the spf2 package.</changelog>
  <changelog author="lmuelle@suse.com" date="1422532801">- Rename the spfquery binary to spf_query to avoid a conflict with the
  perl-Mail-SPF package.</changelog>
  <changelog author="lmuelle@suse.com" date="1422619200">- Package LICENSES file as doc.</changelog>
  <changelog author="jengelh@inai.de" date="1431604800">- Rename spf2 to libspf2-tools (like we do for e.g. libwmf-tools)
- Move README file to tools subpackage. Trim description of SRPM
  a bit.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434628800">- Use -std=gnu89, logging macros are broken when __STDC_VERSION__ &gt;= 199901L
  is true, which is the case when using GCC5.</changelog>
</package>
<package pkgid="3ffefaa7c612a1abeb15b907b8afcdd8f1e19ac1c07f1c61dbf0e4938d018a71" name="libvanessa_adt1" arch="x86_64">
  <version epoch="0" ver="0.0.9" rel="3.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.5</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1121169600">- updated to 0.0.7</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.0.9
  - lot of changes please see ChangeLog
- lib packaging policy
  o added sub-pkg libsoname
- disable-static
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to spdx license tag</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- use url</changelog>
</package>
<package pkgid="e5877260cc888388323d5ed964fd0b7c4cbd0de303e3fde9086ad33c69f0c303" name="libvanessa_adt1-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.0.9" rel="3.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.5</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1121169600">- updated to 0.0.7</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.0.9
  - lot of changes please see ChangeLog
- lib packaging policy
  o added sub-pkg libsoname
- disable-static
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to spdx license tag</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- use url</changelog>
</package>
<package pkgid="9bf00f13956e19dfd40b412ecb2b2d5c5bf3dc989d4c65a3aeacca6ab686eee6" name="libvanessa_logger0" arch="x86_64">
  <version epoch="0" ver="0.0.10" rel="4.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.5</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1110283200">- updated to 0.0.7</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.10
  * vanessa_logger 0.0.10
  * Add pkgconfig information
  * Remove __VANESSA_LOGGER_SAFE_FREE
  * Reopen syslog loggers
  * Debian: Update standards version to 3.9.0
  * Remove unnecessary call to realloc() in __vanessa_logger_str_dump_oct()
  * Remove duplicate handling of ' ' in __vanessa_logger_str_dump_oct()
  * Don't overrun buffer in vanessa_logger_str_dump_oct()
- lib naming policy
- fix deps
  o add pkg-config
- package baselibs.conf
- build --disable-static
- move changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- spec file clean up and make it build again
  - require things for autoreconf -fi
  - strip some macros and conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- disable the pkg config file rename. it breaks perdition finding
  the libraries.</changelog>
</package>
<package pkgid="7a9657eaad93192080307e858a47c61dd13097097a54d98fd5bdfc35d5ab079f" name="libvanessa_logger0-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.0.10" rel="4.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.5</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1110283200">- updated to 0.0.7</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.10
  * vanessa_logger 0.0.10
  * Add pkgconfig information
  * Remove __VANESSA_LOGGER_SAFE_FREE
  * Reopen syslog loggers
  * Debian: Update standards version to 3.9.0
  * Remove unnecessary call to realloc() in __vanessa_logger_str_dump_oct()
  * Remove duplicate handling of ' ' in __vanessa_logger_str_dump_oct()
  * Don't overrun buffer in vanessa_logger_str_dump_oct()
- lib naming policy
- fix deps
  o add pkg-config
- package baselibs.conf
- build --disable-static
- move changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- spec file clean up and make it build again
  - require things for autoreconf -fi
  - strip some macros and conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- disable the pkg config file rename. it breaks perdition finding
  the libraries.</changelog>
</package>
<package pkgid="d58e49d9677124cf7d7c3ae24b4ff2706f111c539c57ab31d44a7ac3173945a3" name="libvanessa_socket2" arch="x86_64">
  <version epoch="0" ver="0.0.12" rel="4.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.7</changelog>
  <changelog author="simon.matter@invoca.ch" date="1121169600">- changed license tag in spec file</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161518400">- Updated SPEC to work with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.0.12
  * Debian: The new library file is libvanessa_socket.so.2.1.0
  * Update the library from 2:0:0 to 3:1:0
  * Don't use AC_C_CONST
  * Add pkgconfig information
  * Added support for TCP-KEEPALIVE.
  - for further info please see ChangeLog file
- lib packaging policy
  o added sub-pkg libsoname
- package baselibs.conf
- disable-static
- moved changelog to changes file
- add pkgconfig_DATA patch</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- spec file clean up and make it build again
  - require things for autoreconf -fi
  - strip some macros and conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- disable the pkg config file rename. it breaks perdition finding
  the libraries.</changelog>
</package>
<package pkgid="94d22470254ec1a616552acccc6dd6969ae694267f2d7b0de545fb535a96f672" name="libvanessa_socket2-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.0.12" rel="4.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.7</changelog>
  <changelog author="simon.matter@invoca.ch" date="1121169600">- changed license tag in spec file</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161518400">- Updated SPEC to work with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.0.12
  * Debian: The new library file is libvanessa_socket.so.2.1.0
  * Update the library from 2:0:0 to 3:1:0
  * Don't use AC_C_CONST
  * Add pkgconfig information
  * Added support for TCP-KEEPALIVE.
  - for further info please see ChangeLog file
- lib packaging policy
  o added sub-pkg libsoname
- package baselibs.conf
- disable-static
- moved changelog to changes file
- add pkgconfig_DATA patch</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- spec file clean up and make it build again
  - require things for autoreconf -fi
  - strip some macros and conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- disable the pkg config file rename. it breaks perdition finding
  the libraries.</changelog>
</package>
<package pkgid="2c6ece54b675b124ff2f3252c2ce0e5f2bb52e2910875d074fe2cc5f19a9ebce" name="libvmime" arch="src">
  <version epoch="0" ver="0.9.2" rel="15.1"/>
  <changelog author="jengelh@medozas.de" date="1309435200">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@medozas.de" date="1331899200">- Update to new SVN snapshot rev 603 (ZCP 7.0.6 dependency)
  * Set Diffie-Hellman prime size (bug SF#3434852)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1336651200">- Use RPM_OPT_FLAGS
- Do not use -ansi gcc flag.</changelog>
  <changelog author="jengelh@inai.de" date="1342094400">- Enable always generating 7-bit parameters
  (https://jira.zarafa.com/browse/ZCP-9475)</changelog>
  <changelog author="jengelh@inai.de" date="1344686400">- Make the package build on RHEL6</changelog>
  <changelog author="jengelh@inai.de" date="1362312000">- Add vmime-automake1_13.diff to fix up ancient autotools constructs</changelog>
  <changelog author="jengelh@inai.de" date="1364385600">- Update to new git snapshot (54b5fe13f7e7cb6c4f63884e91ff472b42b63147)
- Removed because merged: vmime-0.8.1-charset-catch.diff,
  vmime-mixed-qp-in-parameter.diff, vmime-0.9.2-qp-in-buffers.diff
- Removed because they no longer apply: vmime-automake1_13.diff,
  vmime-noansiflag.patch</changelog>
  <changelog author="ro@suse.de" date="1375704000">- BuildRequire texlive-bin-latex only for &lt;= 12.3</changelog>
  <changelog author="jengelh@inai.de" date="1387454400">- Use existing postscript fonts as BuildRequires
  (suggestion by user WernerFink)</changelog>
  <changelog author="dap@open.by, jengelh@inai.de" date="1408968000">- Update to new git snapshot
  30ea54f269efa673a1eb5bc07e71715b67607dbc
  * No upstream changelog was provided
- Turn on SASL, TLS support
- Remove vmime-0.9.2-header-value-on-next-line.diff
  (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1431518400">- Ship COPYING file</changelog>
  <changelog author="jengelh@inai.de" date="1466596800">- Update to new git snapshot
  4d1a6ad2f267e3b83f7c04122af8d8e7ee9a2113 [0.9.2~g490]
  * handle "x-uuencode" type
  * Skip word on unexpected error when fixing broken words.
  * XOAUTH2 auth mechanism support</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Update to new git snapshot
  047cacb1dba516ca902b36a290f2b81555658c1e [0.9.2~g500]
  * Skip multiple (bogus) colons after header field name
- Add dont-fixup.diff</changelog>
  <changelog author="jengelh@inai.de" date="1483444800">- Update to final release 0.9.2
  * Always ignore newlines between words.
- Drop dont-fixup.diff (issue fixed upstream),
  drop libvmime-sotag.diff (no longer needed).</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Resolve wrong name of cmake variable:
  CMAKE_RELEASE_TYPE -&gt; CMAKE_BUILD_TYPE</changelog>
  <changelog author="bosim@opensuse.org" date="1488974400">- Don't stop the build due to SLES missing GSASL.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Remove openssl because gnutls is preferd already</changelog>
  <changelog author="jengelh@inai.de" date="1499947201">- Update description</changelog>
</package>
<package pkgid="4f242177ed7ae9548a8c64fb7e66fdd977ba63621b2f5c2d2f5af7fcdc9296b0" name="libvmime-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.2" rel="15.1"/>
  <changelog author="jengelh@medozas.de" date="1309435200">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@medozas.de" date="1331899200">- Update to new SVN snapshot rev 603 (ZCP 7.0.6 dependency)
  * Set Diffie-Hellman prime size (bug SF#3434852)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1336651200">- Use RPM_OPT_FLAGS
- Do not use -ansi gcc flag.</changelog>
  <changelog author="jengelh@inai.de" date="1342094400">- Enable always generating 7-bit parameters
  (https://jira.zarafa.com/browse/ZCP-9475)</changelog>
  <changelog author="jengelh@inai.de" date="1344686400">- Make the package build on RHEL6</changelog>
  <changelog author="jengelh@inai.de" date="1362312000">- Add vmime-automake1_13.diff to fix up ancient autotools constructs</changelog>
  <changelog author="jengelh@inai.de" date="1364385600">- Update to new git snapshot (54b5fe13f7e7cb6c4f63884e91ff472b42b63147)
- Removed because merged: vmime-0.8.1-charset-catch.diff,
  vmime-mixed-qp-in-parameter.diff, vmime-0.9.2-qp-in-buffers.diff
- Removed because they no longer apply: vmime-automake1_13.diff,
  vmime-noansiflag.patch</changelog>
  <changelog author="ro@suse.de" date="1375704000">- BuildRequire texlive-bin-latex only for &lt;= 12.3</changelog>
  <changelog author="jengelh@inai.de" date="1387454400">- Use existing postscript fonts as BuildRequires
  (suggestion by user WernerFink)</changelog>
  <changelog author="dap@open.by, jengelh@inai.de" date="1408968000">- Update to new git snapshot
  30ea54f269efa673a1eb5bc07e71715b67607dbc
  * No upstream changelog was provided
- Turn on SASL, TLS support
- Remove vmime-0.9.2-header-value-on-next-line.diff
  (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1431518400">- Ship COPYING file</changelog>
  <changelog author="jengelh@inai.de" date="1466596800">- Update to new git snapshot
  4d1a6ad2f267e3b83f7c04122af8d8e7ee9a2113 [0.9.2~g490]
  * handle "x-uuencode" type
  * Skip word on unexpected error when fixing broken words.
  * XOAUTH2 auth mechanism support</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Update to new git snapshot
  047cacb1dba516ca902b36a290f2b81555658c1e [0.9.2~g500]
  * Skip multiple (bogus) colons after header field name
- Add dont-fixup.diff</changelog>
  <changelog author="jengelh@inai.de" date="1483444800">- Update to final release 0.9.2
  * Always ignore newlines between words.
- Drop dont-fixup.diff (issue fixed upstream),
  drop libvmime-sotag.diff (no longer needed).</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Resolve wrong name of cmake variable:
  CMAKE_RELEASE_TYPE -&gt; CMAKE_BUILD_TYPE</changelog>
  <changelog author="bosim@opensuse.org" date="1488974400">- Don't stop the build due to SLES missing GSASL.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Remove openssl because gnutls is preferd already</changelog>
  <changelog author="jengelh@inai.de" date="1499947201">- Update description</changelog>
</package>
<package pkgid="4ffc85252c0c473f60ab66c2466e2e0f7cbf4dff5b35eca5ddb29b0e2d94ecfc" name="libvmime-devel" arch="x86_64">
  <version epoch="0" ver="0.9.2" rel="15.1"/>
  <changelog author="jengelh@medozas.de" date="1309435200">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@medozas.de" date="1331899200">- Update to new SVN snapshot rev 603 (ZCP 7.0.6 dependency)
  * Set Diffie-Hellman prime size (bug SF#3434852)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1336651200">- Use RPM_OPT_FLAGS
- Do not use -ansi gcc flag.</changelog>
  <changelog author="jengelh@inai.de" date="1342094400">- Enable always generating 7-bit parameters
  (https://jira.zarafa.com/browse/ZCP-9475)</changelog>
  <changelog author="jengelh@inai.de" date="1344686400">- Make the package build on RHEL6</changelog>
  <changelog author="jengelh@inai.de" date="1362312000">- Add vmime-automake1_13.diff to fix up ancient autotools constructs</changelog>
  <changelog author="jengelh@inai.de" date="1364385600">- Update to new git snapshot (54b5fe13f7e7cb6c4f63884e91ff472b42b63147)
- Removed because merged: vmime-0.8.1-charset-catch.diff,
  vmime-mixed-qp-in-parameter.diff, vmime-0.9.2-qp-in-buffers.diff
- Removed because they no longer apply: vmime-automake1_13.diff,
  vmime-noansiflag.patch</changelog>
  <changelog author="ro@suse.de" date="1375704000">- BuildRequire texlive-bin-latex only for &lt;= 12.3</changelog>
  <changelog author="jengelh@inai.de" date="1387454400">- Use existing postscript fonts as BuildRequires
  (suggestion by user WernerFink)</changelog>
  <changelog author="dap@open.by, jengelh@inai.de" date="1408968000">- Update to new git snapshot
  30ea54f269efa673a1eb5bc07e71715b67607dbc
  * No upstream changelog was provided
- Turn on SASL, TLS support
- Remove vmime-0.9.2-header-value-on-next-line.diff
  (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1431518400">- Ship COPYING file</changelog>
  <changelog author="jengelh@inai.de" date="1466596800">- Update to new git snapshot
  4d1a6ad2f267e3b83f7c04122af8d8e7ee9a2113 [0.9.2~g490]
  * handle "x-uuencode" type
  * Skip word on unexpected error when fixing broken words.
  * XOAUTH2 auth mechanism support</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Update to new git snapshot
  047cacb1dba516ca902b36a290f2b81555658c1e [0.9.2~g500]
  * Skip multiple (bogus) colons after header field name
- Add dont-fixup.diff</changelog>
  <changelog author="jengelh@inai.de" date="1483444800">- Update to final release 0.9.2
  * Always ignore newlines between words.
- Drop dont-fixup.diff (issue fixed upstream),
  drop libvmime-sotag.diff (no longer needed).</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Resolve wrong name of cmake variable:
  CMAKE_RELEASE_TYPE -&gt; CMAKE_BUILD_TYPE</changelog>
  <changelog author="bosim@opensuse.org" date="1488974400">- Don't stop the build due to SLES missing GSASL.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Remove openssl because gnutls is preferd already</changelog>
  <changelog author="jengelh@inai.de" date="1499947201">- Update description</changelog>
</package>
<package pkgid="1faed29fd1ddd8a5e7b008b25190de695406cc65d6994c614eceb5b5216a3827" name="libvmime1" arch="x86_64">
  <version epoch="0" ver="0.9.2" rel="15.1"/>
  <changelog author="jengelh@medozas.de" date="1309435200">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@medozas.de" date="1331899200">- Update to new SVN snapshot rev 603 (ZCP 7.0.6 dependency)
  * Set Diffie-Hellman prime size (bug SF#3434852)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1336651200">- Use RPM_OPT_FLAGS
- Do not use -ansi gcc flag.</changelog>
  <changelog author="jengelh@inai.de" date="1342094400">- Enable always generating 7-bit parameters
  (https://jira.zarafa.com/browse/ZCP-9475)</changelog>
  <changelog author="jengelh@inai.de" date="1344686400">- Make the package build on RHEL6</changelog>
  <changelog author="jengelh@inai.de" date="1362312000">- Add vmime-automake1_13.diff to fix up ancient autotools constructs</changelog>
  <changelog author="jengelh@inai.de" date="1364385600">- Update to new git snapshot (54b5fe13f7e7cb6c4f63884e91ff472b42b63147)
- Removed because merged: vmime-0.8.1-charset-catch.diff,
  vmime-mixed-qp-in-parameter.diff, vmime-0.9.2-qp-in-buffers.diff
- Removed because they no longer apply: vmime-automake1_13.diff,
  vmime-noansiflag.patch</changelog>
  <changelog author="ro@suse.de" date="1375704000">- BuildRequire texlive-bin-latex only for &lt;= 12.3</changelog>
  <changelog author="jengelh@inai.de" date="1387454400">- Use existing postscript fonts as BuildRequires
  (suggestion by user WernerFink)</changelog>
  <changelog author="dap@open.by, jengelh@inai.de" date="1408968000">- Update to new git snapshot
  30ea54f269efa673a1eb5bc07e71715b67607dbc
  * No upstream changelog was provided
- Turn on SASL, TLS support
- Remove vmime-0.9.2-header-value-on-next-line.diff
  (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1431518400">- Ship COPYING file</changelog>
  <changelog author="jengelh@inai.de" date="1466596800">- Update to new git snapshot
  4d1a6ad2f267e3b83f7c04122af8d8e7ee9a2113 [0.9.2~g490]
  * handle "x-uuencode" type
  * Skip word on unexpected error when fixing broken words.
  * XOAUTH2 auth mechanism support</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Update to new git snapshot
  047cacb1dba516ca902b36a290f2b81555658c1e [0.9.2~g500]
  * Skip multiple (bogus) colons after header field name
- Add dont-fixup.diff</changelog>
  <changelog author="jengelh@inai.de" date="1483444800">- Update to final release 0.9.2
  * Always ignore newlines between words.
- Drop dont-fixup.diff (issue fixed upstream),
  drop libvmime-sotag.diff (no longer needed).</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Resolve wrong name of cmake variable:
  CMAKE_RELEASE_TYPE -&gt; CMAKE_BUILD_TYPE</changelog>
  <changelog author="bosim@opensuse.org" date="1488974400">- Don't stop the build due to SLES missing GSASL.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Remove openssl because gnutls is preferd already</changelog>
  <changelog author="jengelh@inai.de" date="1499947201">- Update description</changelog>
</package>
<package pkgid="0a26c25166dde585ecff9d7ad530d3482829096e5911d51233c322888e6050fb" name="libvmime1-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.2" rel="15.1"/>
  <changelog author="jengelh@medozas.de" date="1309435200">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@medozas.de" date="1331899200">- Update to new SVN snapshot rev 603 (ZCP 7.0.6 dependency)
  * Set Diffie-Hellman prime size (bug SF#3434852)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1336651200">- Use RPM_OPT_FLAGS
- Do not use -ansi gcc flag.</changelog>
  <changelog author="jengelh@inai.de" date="1342094400">- Enable always generating 7-bit parameters
  (https://jira.zarafa.com/browse/ZCP-9475)</changelog>
  <changelog author="jengelh@inai.de" date="1344686400">- Make the package build on RHEL6</changelog>
  <changelog author="jengelh@inai.de" date="1362312000">- Add vmime-automake1_13.diff to fix up ancient autotools constructs</changelog>
  <changelog author="jengelh@inai.de" date="1364385600">- Update to new git snapshot (54b5fe13f7e7cb6c4f63884e91ff472b42b63147)
- Removed because merged: vmime-0.8.1-charset-catch.diff,
  vmime-mixed-qp-in-parameter.diff, vmime-0.9.2-qp-in-buffers.diff
- Removed because they no longer apply: vmime-automake1_13.diff,
  vmime-noansiflag.patch</changelog>
  <changelog author="ro@suse.de" date="1375704000">- BuildRequire texlive-bin-latex only for &lt;= 12.3</changelog>
  <changelog author="jengelh@inai.de" date="1387454400">- Use existing postscript fonts as BuildRequires
  (suggestion by user WernerFink)</changelog>
  <changelog author="dap@open.by, jengelh@inai.de" date="1408968000">- Update to new git snapshot
  30ea54f269efa673a1eb5bc07e71715b67607dbc
  * No upstream changelog was provided
- Turn on SASL, TLS support
- Remove vmime-0.9.2-header-value-on-next-line.diff
  (no longer applies)</changelog>
  <changelog author="jengelh@inai.de" date="1431518400">- Ship COPYING file</changelog>
  <changelog author="jengelh@inai.de" date="1466596800">- Update to new git snapshot
  4d1a6ad2f267e3b83f7c04122af8d8e7ee9a2113 [0.9.2~g490]
  * handle "x-uuencode" type
  * Skip word on unexpected error when fixing broken words.
  * XOAUTH2 auth mechanism support</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Update to new git snapshot
  047cacb1dba516ca902b36a290f2b81555658c1e [0.9.2~g500]
  * Skip multiple (bogus) colons after header field name
- Add dont-fixup.diff</changelog>
  <changelog author="jengelh@inai.de" date="1483444800">- Update to final release 0.9.2
  * Always ignore newlines between words.
- Drop dont-fixup.diff (issue fixed upstream),
  drop libvmime-sotag.diff (no longer needed).</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Resolve wrong name of cmake variable:
  CMAKE_RELEASE_TYPE -&gt; CMAKE_BUILD_TYPE</changelog>
  <changelog author="bosim@opensuse.org" date="1488974400">- Don't stop the build due to SLES missing GSASL.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Remove openssl because gnutls is preferd already</changelog>
  <changelog author="jengelh@inai.de" date="1499947201">- Update description</changelog>
</package>
<package pkgid="cffe12dcc8490634e18f4bc42a95ea6f88e204bca8336a1c5c5e4629d5365da0" name="maildirproc" arch="noarch">
  <version epoch="0" ver="0.5.0" rel="1.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1270987200">- initial package (0.4.2)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1272888000">- update to 0.4.3:
  * logs are now printed to the log file in a safe way even if the log string doesn't fit within the destination character set</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1288612800">- update to 0.5.0 (no user visible changes)</changelog>
</package>
<package pkgid="fe7576e8f7e323aea67f8fc8574c747b3eea5f853f07098151176fef64c2dec4" name="maildirproc" arch="src">
  <version epoch="0" ver="0.5.0" rel="1.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1270987200">- initial package (0.4.2)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1272888000">- update to 0.4.3:
  * logs are now printed to the log file in a safe way even if the log string doesn't fit within the destination character set</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1288612800">- update to 0.5.0 (no user visible changes)</changelog>
</package>
<package pkgid="d219e00c515b8c988751d068859f57f3122062d59861170c396818cc8f5d32b6" name="mailman" arch="src">
  <version epoch="0" ver="2.1.23" rel="63.1"/>
  <changelog author="rommel@suse.de" date="1226491200">- added fix to work around md5/sha deprecation warning when hashlib is available
  (mailman-python-26-deprecation-md5-sha.diff)
- removed group writable bit from /usr/lib/mailman/Mailman/
- removing Mailman's own version of email when building against &gt;= Python 2.6</changelog>
  <changelog author="rommel@suse.de" date="1228046400">- the previous 'fix' of removing Mailman's own version of email was a bit crude
  and broke Mailman in several places (bug #448530)
  I replaced it with the upstream fix to 'configure' by Barry Warshaw
  (see http://bazaar.launchpad.net/~barry/mailman/py26/changes)</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="dmueller@suse.de" date="1289822400">- update to 2.1.14:
  - Two potential XSS vulnerabilities have been identified and fixed.
  - Various i18n updates
  - A new feature for controlling the addition/replacement of the Sender:
  header in outgoing mail has been implemented.  This allows a list owner
  to set include_sender_header on the list's General Options page in the
  admin GUI.  The default for this setting is Yes which preserves the prior
  behavior of removing any pre-existing Sender: and setting it to the
  list's -bounces address.  Setting this to No stops Mailman from adding or
  modifying the Sender: at all.
  - long list of bug fixes and enhancements, see included NEWS for details</changelog>
  <changelog author="matejcik@suse.cz" date="1298462400">- fixed a XSS vulnerability in confirm.py (CVE-2011-0707, bnc#671745)</changelog>
  <changelog author="jmatejek@novell.com" date="1303300800">- fixed bug where it is impossible to edit archives (updated
  patch 2.1.14-editarch.patch)</changelog>
  <changelog author="opensuse@cboltz.de" date="1330776000">- add "su mailman mailman" to logrotate config (bnc#750259)</changelog>
  <changelog author="jmatejek@suse.com" date="1349179200">- removed SuSEconfig dependency
  * SuSEconfig.mailman is moved to a new location, and works
    pretty much the same way as before. which may or may not
    be a good thing, perhaps this functionality should be
    removed completely</changelog>
  <changelog author="jmatejek@suse.com" date="1351080000">- update to 2.1.15
  * fixes CVE-2011-0707 - patch dropped
  * better CSRF protection
  * better e-mail address validation
  * password reminder button
  * new config options
  * updated translations
- dropped mailman-python24 patch as we no longer care
  about python2.4
- replaced %run_permissions in spec</changelog>
  <changelog author="dmueller@suse.com" date="1392120000">- do not abort post script if postalias fails</changelog>
  <changelog author="jmatejek@suse.com" date="1392379200">- rename README.SuSE
- update to 2.1.17
  * option to strip/keep non-standard headers in anonymous lists
  * option to make membership checks on mail-news gateway
  * UI improvements for admin interface
  * digest_size_threshold = 0 now means that *no* digest is sent
    based on size
  * option to CSRF-protect subscription form
  * admins can add members with mail delivery disabled
  * configurable name of master lock
  * updated translations
- updated list_lists patch because upstream list_lists now has
  an argument -p / --public-archive that does the same as SUSE-specific
  argument -u / --public-archives. Both spellings are supported
  and are synonymous.</changelog>
  <changelog author="hsk@imb-jena.de" date="1413547200">- update to 2.1.18
  * mailman now requires dnspython
  * new dmarc_moderation_action feature and corresponging list and default
    settings
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1425297600">- update to 2.1.19
  * backports from 2.2 development branch
  - new list attribute 'subscribe_auto_approval'
  - added 'automate' option to bin/newlist
  - processing of Topics regular expressions has changed
  - added real name display to the web roster, controlled by new
    ROSTER_DISPLAY_REALNAME setting
  - bug fixes
  * new list attribute dmarc_wrapped_message_text and
    DEFAULT_DMARC_WRAPPED_MESSAGE_TEXT setting
  * new list attribute equivalent_domains and DEFAULT_EQUIVALENT_DOMAINS
    setting
  * new WEB_HEAD_ADD setting
  * new DEFAULT_SUBSCRIBE_OR_INVITE setting
  * new list attribute bounce_notify_owner_on_bounce_increment and
    DEFAULT_BOUNCE_NOTIFY_OWNER_ON_BOUNCE_INCREMENT setting
  * log files, request.pck files and heldmsg-* files are no longer created
    world readable
  * i18n updates
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1427803200">- update to 2.1.20
  * fix for CVE-2015-2775 (path traversal vulnerability)
  * new Address Change sub-section in the web admin Membership
    Management section
  * translation updates and bug fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1454500800">- Use url for source
- Add gpg signature</changelog>
  <changelog author="hsk@imb-jena.de" date="1456747200">- update to 2.1.21
  * new dmarc_none_moderation_action list setting
  * new feature to automatically turn on moderation for single list
    members (spam prevention)
  * new mm_cfg.py setting GLOBAL_BAN_LIST
  * translation updates and bug fixes
  * for more details see NEWS and Mailman/Defaults.py
- mailman-2.1.4-dirmode.patch: adjusted to 2.1.21</changelog>
  <changelog author="hsk@imb-jena.de" date="1459252800">- updated mailman-apache2.conf to support "require" syntax of recent
  apache httpd</changelog>
  <changelog author="hsk@imb-jena.de" date="1460980800">- update to 2.1.22
  * bug fixes, i18n updates; for details see NEWS</changelog>
  <changelog author="hsk17@mail.de" date="1472472000">- update to 2.1.23
  * CSRF protection in user options page (CVE-2016-6893)
  * header_filter_rules matching: headers and patterns are all
    decoded to unicode
  * another possible REMOVE_DKIM_HEADERS setting
  * SMTPDirect.py can now do SASL authentication and STARTTLS
  * bug fixes, i18n updates
  * for further details see NEWS</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Require fillup and insserv if we call them</changelog>
</package>
<package pkgid="4d02f037fa10c435489508b506d0c3cd4d786a6aaac6b99bb2d084c2b23820ad" name="mailman" arch="x86_64">
  <version epoch="0" ver="2.1.23" rel="63.1"/>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="dmueller@suse.de" date="1289822400">- update to 2.1.14:
  - Two potential XSS vulnerabilities have been identified and fixed.
  - Various i18n updates
  - A new feature for controlling the addition/replacement of the Sender:
  header in outgoing mail has been implemented.  This allows a list owner
  to set include_sender_header on the list's General Options page in the
  admin GUI.  The default for this setting is Yes which preserves the prior
  behavior of removing any pre-existing Sender: and setting it to the
  list's -bounces address.  Setting this to No stops Mailman from adding or
  modifying the Sender: at all.
  - long list of bug fixes and enhancements, see included NEWS for details</changelog>
  <changelog author="matejcik@suse.cz" date="1298462400">- fixed a XSS vulnerability in confirm.py (CVE-2011-0707, bnc#671745)</changelog>
  <changelog author="jmatejek@novell.com" date="1303300800">- fixed bug where it is impossible to edit archives (updated
  patch 2.1.14-editarch.patch)</changelog>
  <changelog author="opensuse@cboltz.de" date="1330776000">- add "su mailman mailman" to logrotate config (bnc#750259)</changelog>
  <changelog author="jmatejek@suse.com" date="1349179200">- removed SuSEconfig dependency
  * SuSEconfig.mailman is moved to a new location, and works
    pretty much the same way as before. which may or may not
    be a good thing, perhaps this functionality should be
    removed completely</changelog>
  <changelog author="jmatejek@suse.com" date="1351080000">- update to 2.1.15
  * fixes CVE-2011-0707 - patch dropped
  * better CSRF protection
  * better e-mail address validation
  * password reminder button
  * new config options
  * updated translations
- dropped mailman-python24 patch as we no longer care
  about python2.4
- replaced %run_permissions in spec</changelog>
  <changelog author="dmueller@suse.com" date="1392120000">- do not abort post script if postalias fails</changelog>
  <changelog author="jmatejek@suse.com" date="1392379200">- rename README.SuSE
- update to 2.1.17
  * option to strip/keep non-standard headers in anonymous lists
  * option to make membership checks on mail-news gateway
  * UI improvements for admin interface
  * digest_size_threshold = 0 now means that *no* digest is sent
    based on size
  * option to CSRF-protect subscription form
  * admins can add members with mail delivery disabled
  * configurable name of master lock
  * updated translations
- updated list_lists patch because upstream list_lists now has
  an argument -p / --public-archive that does the same as SUSE-specific
  argument -u / --public-archives. Both spellings are supported
  and are synonymous.</changelog>
  <changelog author="hsk@imb-jena.de" date="1413547200">- update to 2.1.18
  * mailman now requires dnspython
  * new dmarc_moderation_action feature and corresponging list and default
    settings
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1425297600">- update to 2.1.19
  * backports from 2.2 development branch
  - new list attribute 'subscribe_auto_approval'
  - added 'automate' option to bin/newlist
  - processing of Topics regular expressions has changed
  - added real name display to the web roster, controlled by new
    ROSTER_DISPLAY_REALNAME setting
  - bug fixes
  * new list attribute dmarc_wrapped_message_text and
    DEFAULT_DMARC_WRAPPED_MESSAGE_TEXT setting
  * new list attribute equivalent_domains and DEFAULT_EQUIVALENT_DOMAINS
    setting
  * new WEB_HEAD_ADD setting
  * new DEFAULT_SUBSCRIBE_OR_INVITE setting
  * new list attribute bounce_notify_owner_on_bounce_increment and
    DEFAULT_BOUNCE_NOTIFY_OWNER_ON_BOUNCE_INCREMENT setting
  * log files, request.pck files and heldmsg-* files are no longer created
    world readable
  * i18n updates
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1427803200">- update to 2.1.20
  * fix for CVE-2015-2775 (path traversal vulnerability)
  * new Address Change sub-section in the web admin Membership
    Management section
  * translation updates and bug fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1454500800">- Use url for source
- Add gpg signature</changelog>
  <changelog author="hsk@imb-jena.de" date="1456747200">- update to 2.1.21
  * new dmarc_none_moderation_action list setting
  * new feature to automatically turn on moderation for single list
    members (spam prevention)
  * new mm_cfg.py setting GLOBAL_BAN_LIST
  * translation updates and bug fixes
  * for more details see NEWS and Mailman/Defaults.py
- mailman-2.1.4-dirmode.patch: adjusted to 2.1.21</changelog>
  <changelog author="hsk@imb-jena.de" date="1459252800">- updated mailman-apache2.conf to support "require" syntax of recent
  apache httpd</changelog>
  <changelog author="hsk@imb-jena.de" date="1460980800">- update to 2.1.22
  * bug fixes, i18n updates; for details see NEWS</changelog>
  <changelog author="hsk17@mail.de" date="1472472000">- update to 2.1.23
  * CSRF protection in user options page (CVE-2016-6893)
  * header_filter_rules matching: headers and patterns are all
    decoded to unicode
  * another possible REMOVE_DKIM_HEADERS setting
  * SMTPDirect.py can now do SASL authentication and STARTTLS
  * bug fixes, i18n updates
  * for further details see NEWS</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Require fillup and insserv if we call them</changelog>
</package>
<package pkgid="747df559d943da465f3ec3bd9c3f5354627a8f287c574a13ff5e01f2da91f703" name="mailman-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.23" rel="63.1"/>
  <changelog author="rommel@suse.de" date="1226491200">- added fix to work around md5/sha deprecation warning when hashlib is available
  (mailman-python-26-deprecation-md5-sha.diff)
- removed group writable bit from /usr/lib/mailman/Mailman/
- removing Mailman's own version of email when building against &gt;= Python 2.6</changelog>
  <changelog author="rommel@suse.de" date="1228046400">- the previous 'fix' of removing Mailman's own version of email was a bit crude
  and broke Mailman in several places (bug #448530)
  I replaced it with the upstream fix to 'configure' by Barry Warshaw
  (see http://bazaar.launchpad.net/~barry/mailman/py26/changes)</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="dmueller@suse.de" date="1289822400">- update to 2.1.14:
  - Two potential XSS vulnerabilities have been identified and fixed.
  - Various i18n updates
  - A new feature for controlling the addition/replacement of the Sender:
  header in outgoing mail has been implemented.  This allows a list owner
  to set include_sender_header on the list's General Options page in the
  admin GUI.  The default for this setting is Yes which preserves the prior
  behavior of removing any pre-existing Sender: and setting it to the
  list's -bounces address.  Setting this to No stops Mailman from adding or
  modifying the Sender: at all.
  - long list of bug fixes and enhancements, see included NEWS for details</changelog>
  <changelog author="matejcik@suse.cz" date="1298462400">- fixed a XSS vulnerability in confirm.py (CVE-2011-0707, bnc#671745)</changelog>
  <changelog author="jmatejek@novell.com" date="1303300800">- fixed bug where it is impossible to edit archives (updated
  patch 2.1.14-editarch.patch)</changelog>
  <changelog author="opensuse@cboltz.de" date="1330776000">- add "su mailman mailman" to logrotate config (bnc#750259)</changelog>
  <changelog author="jmatejek@suse.com" date="1349179200">- removed SuSEconfig dependency
  * SuSEconfig.mailman is moved to a new location, and works
    pretty much the same way as before. which may or may not
    be a good thing, perhaps this functionality should be
    removed completely</changelog>
  <changelog author="jmatejek@suse.com" date="1351080000">- update to 2.1.15
  * fixes CVE-2011-0707 - patch dropped
  * better CSRF protection
  * better e-mail address validation
  * password reminder button
  * new config options
  * updated translations
- dropped mailman-python24 patch as we no longer care
  about python2.4
- replaced %run_permissions in spec</changelog>
  <changelog author="dmueller@suse.com" date="1392120000">- do not abort post script if postalias fails</changelog>
  <changelog author="jmatejek@suse.com" date="1392379200">- rename README.SuSE
- update to 2.1.17
  * option to strip/keep non-standard headers in anonymous lists
  * option to make membership checks on mail-news gateway
  * UI improvements for admin interface
  * digest_size_threshold = 0 now means that *no* digest is sent
    based on size
  * option to CSRF-protect subscription form
  * admins can add members with mail delivery disabled
  * configurable name of master lock
  * updated translations
- updated list_lists patch because upstream list_lists now has
  an argument -p / --public-archive that does the same as SUSE-specific
  argument -u / --public-archives. Both spellings are supported
  and are synonymous.</changelog>
  <changelog author="hsk@imb-jena.de" date="1413547200">- update to 2.1.18
  * mailman now requires dnspython
  * new dmarc_moderation_action feature and corresponging list and default
    settings
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1425297600">- update to 2.1.19
  * backports from 2.2 development branch
  - new list attribute 'subscribe_auto_approval'
  - added 'automate' option to bin/newlist
  - processing of Topics regular expressions has changed
  - added real name display to the web roster, controlled by new
    ROSTER_DISPLAY_REALNAME setting
  - bug fixes
  * new list attribute dmarc_wrapped_message_text and
    DEFAULT_DMARC_WRAPPED_MESSAGE_TEXT setting
  * new list attribute equivalent_domains and DEFAULT_EQUIVALENT_DOMAINS
    setting
  * new WEB_HEAD_ADD setting
  * new DEFAULT_SUBSCRIBE_OR_INVITE setting
  * new list attribute bounce_notify_owner_on_bounce_increment and
    DEFAULT_BOUNCE_NOTIFY_OWNER_ON_BOUNCE_INCREMENT setting
  * log files, request.pck files and heldmsg-* files are no longer created
    world readable
  * i18n updates
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1427803200">- update to 2.1.20
  * fix for CVE-2015-2775 (path traversal vulnerability)
  * new Address Change sub-section in the web admin Membership
    Management section
  * translation updates and bug fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1454500800">- Use url for source
- Add gpg signature</changelog>
  <changelog author="hsk@imb-jena.de" date="1456747200">- update to 2.1.21
  * new dmarc_none_moderation_action list setting
  * new feature to automatically turn on moderation for single list
    members (spam prevention)
  * new mm_cfg.py setting GLOBAL_BAN_LIST
  * translation updates and bug fixes
  * for more details see NEWS and Mailman/Defaults.py
- mailman-2.1.4-dirmode.patch: adjusted to 2.1.21</changelog>
  <changelog author="hsk@imb-jena.de" date="1459252800">- updated mailman-apache2.conf to support "require" syntax of recent
  apache httpd</changelog>
  <changelog author="hsk@imb-jena.de" date="1460980800">- update to 2.1.22
  * bug fixes, i18n updates; for details see NEWS</changelog>
  <changelog author="hsk17@mail.de" date="1472472000">- update to 2.1.23
  * CSRF protection in user options page (CVE-2016-6893)
  * header_filter_rules matching: headers and patterns are all
    decoded to unicode
  * another possible REMOVE_DKIM_HEADERS setting
  * SMTPDirect.py can now do SASL authentication and STARTTLS
  * bug fixes, i18n updates
  * for further details see NEWS</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Require fillup and insserv if we call them</changelog>
</package>
<package pkgid="e01cb063491ee448a69442d20e8ec79177874897053fda4c8a214f763aa6d2cf" name="mailman-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1.23" rel="63.1"/>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="dmueller@suse.de" date="1289822400">- update to 2.1.14:
  - Two potential XSS vulnerabilities have been identified and fixed.
  - Various i18n updates
  - A new feature for controlling the addition/replacement of the Sender:
  header in outgoing mail has been implemented.  This allows a list owner
  to set include_sender_header on the list's General Options page in the
  admin GUI.  The default for this setting is Yes which preserves the prior
  behavior of removing any pre-existing Sender: and setting it to the
  list's -bounces address.  Setting this to No stops Mailman from adding or
  modifying the Sender: at all.
  - long list of bug fixes and enhancements, see included NEWS for details</changelog>
  <changelog author="matejcik@suse.cz" date="1298462400">- fixed a XSS vulnerability in confirm.py (CVE-2011-0707, bnc#671745)</changelog>
  <changelog author="jmatejek@novell.com" date="1303300800">- fixed bug where it is impossible to edit archives (updated
  patch 2.1.14-editarch.patch)</changelog>
  <changelog author="opensuse@cboltz.de" date="1330776000">- add "su mailman mailman" to logrotate config (bnc#750259)</changelog>
  <changelog author="jmatejek@suse.com" date="1349179200">- removed SuSEconfig dependency
  * SuSEconfig.mailman is moved to a new location, and works
    pretty much the same way as before. which may or may not
    be a good thing, perhaps this functionality should be
    removed completely</changelog>
  <changelog author="jmatejek@suse.com" date="1351080000">- update to 2.1.15
  * fixes CVE-2011-0707 - patch dropped
  * better CSRF protection
  * better e-mail address validation
  * password reminder button
  * new config options
  * updated translations
- dropped mailman-python24 patch as we no longer care
  about python2.4
- replaced %run_permissions in spec</changelog>
  <changelog author="dmueller@suse.com" date="1392120000">- do not abort post script if postalias fails</changelog>
  <changelog author="jmatejek@suse.com" date="1392379200">- rename README.SuSE
- update to 2.1.17
  * option to strip/keep non-standard headers in anonymous lists
  * option to make membership checks on mail-news gateway
  * UI improvements for admin interface
  * digest_size_threshold = 0 now means that *no* digest is sent
    based on size
  * option to CSRF-protect subscription form
  * admins can add members with mail delivery disabled
  * configurable name of master lock
  * updated translations
- updated list_lists patch because upstream list_lists now has
  an argument -p / --public-archive that does the same as SUSE-specific
  argument -u / --public-archives. Both spellings are supported
  and are synonymous.</changelog>
  <changelog author="hsk@imb-jena.de" date="1413547200">- update to 2.1.18
  * mailman now requires dnspython
  * new dmarc_moderation_action feature and corresponging list and default
    settings
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1425297600">- update to 2.1.19
  * backports from 2.2 development branch
  - new list attribute 'subscribe_auto_approval'
  - added 'automate' option to bin/newlist
  - processing of Topics regular expressions has changed
  - added real name display to the web roster, controlled by new
    ROSTER_DISPLAY_REALNAME setting
  - bug fixes
  * new list attribute dmarc_wrapped_message_text and
    DEFAULT_DMARC_WRAPPED_MESSAGE_TEXT setting
  * new list attribute equivalent_domains and DEFAULT_EQUIVALENT_DOMAINS
    setting
  * new WEB_HEAD_ADD setting
  * new DEFAULT_SUBSCRIBE_OR_INVITE setting
  * new list attribute bounce_notify_owner_on_bounce_increment and
    DEFAULT_BOUNCE_NOTIFY_OWNER_ON_BOUNCE_INCREMENT setting
  * log files, request.pck files and heldmsg-* files are no longer created
    world readable
  * i18n updates
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1427803200">- update to 2.1.20
  * fix for CVE-2015-2775 (path traversal vulnerability)
  * new Address Change sub-section in the web admin Membership
    Management section
  * translation updates and bug fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1454500800">- Use url for source
- Add gpg signature</changelog>
  <changelog author="hsk@imb-jena.de" date="1456747200">- update to 2.1.21
  * new dmarc_none_moderation_action list setting
  * new feature to automatically turn on moderation for single list
    members (spam prevention)
  * new mm_cfg.py setting GLOBAL_BAN_LIST
  * translation updates and bug fixes
  * for more details see NEWS and Mailman/Defaults.py
- mailman-2.1.4-dirmode.patch: adjusted to 2.1.21</changelog>
  <changelog author="hsk@imb-jena.de" date="1459252800">- updated mailman-apache2.conf to support "require" syntax of recent
  apache httpd</changelog>
  <changelog author="hsk@imb-jena.de" date="1460980800">- update to 2.1.22
  * bug fixes, i18n updates; for details see NEWS</changelog>
  <changelog author="hsk17@mail.de" date="1472472000">- update to 2.1.23
  * CSRF protection in user options page (CVE-2016-6893)
  * header_filter_rules matching: headers and patterns are all
    decoded to unicode
  * another possible REMOVE_DKIM_HEADERS setting
  * SMTPDirect.py can now do SASL authentication and STARTTLS
  * bug fixes, i18n updates
  * for further details see NEWS</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Require fillup and insserv if we call them</changelog>
</package>
<package pkgid="9fedcc70f87a9ef8aca964b0376fb49645e4e20f448e9d9fd281b7577bbf864a" name="mailnag" arch="noarch">
  <version epoch="0" ver="1.2.1" rel="5.1"/>
  <changelog author="mailaender@opensuse.org" date="1463918400">- initial packaging of version 1.2.0</changelog>
  <changelog author="mailaender@opensuse.org" date="1465819200">- update to version 1.2.1
  * Improved GNOME-Software integration
  * Fixed missing plugin config dialogs in Ubuntu 14.04
  * Fixed IMAP idle folders issue
  * Fixed GTK warnings
  * Misc other fixes and improvements
  * Updated translations</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1467892800">- Correct licence, it is GPL-2.0+.
- Fix dependencies.
- Separate localisation into mailnag-lang package.
- Remove categories alteration: fixed upstream.
- Don't set CFLAGS environment variable: nothing uses it here.</changelog>
</package>
<package pkgid="453cba418ae53113a2ff8b7a261515b2eaf0d52047e6646b63f5766e8cdf61e7" name="mailnag" arch="src">
  <version epoch="0" ver="1.2.1" rel="5.1"/>
  <changelog author="mailaender@opensuse.org" date="1463918400">- initial packaging of version 1.2.0</changelog>
  <changelog author="mailaender@opensuse.org" date="1465819200">- update to version 1.2.1
  * Improved GNOME-Software integration
  * Fixed missing plugin config dialogs in Ubuntu 14.04
  * Fixed IMAP idle folders issue
  * Fixed GTK warnings
  * Misc other fixes and improvements
  * Updated translations</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1467892800">- Correct licence, it is GPL-2.0+.
- Fix dependencies.
- Separate localisation into mailnag-lang package.
- Remove categories alteration: fixed upstream.
- Don't set CFLAGS environment variable: nothing uses it here.</changelog>
</package>
<package pkgid="355f6767889361adaf0ac2643d8de66d43ae85d35eeffa87001727645cdae0bf" name="mailnag-lang" arch="noarch">
  <version epoch="0" ver="1.2.1" rel="5.1"/>
  <changelog author="mailaender@opensuse.org" date="1463918400">- initial packaging of version 1.2.0</changelog>
  <changelog author="mailaender@opensuse.org" date="1465819200">- update to version 1.2.1
  * Improved GNOME-Software integration
  * Fixed missing plugin config dialogs in Ubuntu 14.04
  * Fixed IMAP idle folders issue
  * Fixed GTK warnings
  * Misc other fixes and improvements
  * Updated translations</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1467892800">- Correct licence, it is GPL-2.0+.
- Fix dependencies.
- Separate localisation into mailnag-lang package.
- Remove categories alteration: fixed upstream.
- Don't set CFLAGS environment variable: nothing uses it here.</changelog>
</package>
<package pkgid="d74be1f225fb108e43a77e0c535e19fb1d98d6f9a21f803ebebf094d2666319a" name="mailtool" arch="x86_64">
  <version epoch="0" ver="0.92" rel="1.1"/>
  <changelog author="guru@unixtech.be" date="1191153600">- update to 0.70
- moved to openSUSE Build Service</changelog>
  <changelog author="guru@unixtech.be" date="1195992000">- update to 0.74</changelog>
  <changelog author="guru@unixtech.be" date="1219924800">- update to 0.77:
  * adds support for client SSL certificates</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1244462400">- update to 0.78</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1262260800">- update to 0.80:
  * adds support for internationalized domain names</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1273406400">- update to 0.83:
  * fixes several bugs that may result in crashes</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1302264000">- update to 0.86:
  * adds Unicode-based word-wrapping rules that should work better for text
    written in ideographic-based character sets
  * adds support for the most recent plain text message specification (RFC
    3676)
  * adds an option to the standalone leaf editor that edits plain text files
    that use the flowed text format, as specified in RFC 3676</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1303387200">- update to 0.87:
  * fixes bugs in the handling of HTML mail with MIME headers and an
    unsupported character set
  * fixes a bug that resulted in Cone locking up and slowly consuming memory</changelog>
  <changelog author="bjoern@cs.tu-berlin.de" date="1306843200">- update to 0.89:
  * rfc2045/rfc2045cdecode.c: Tolerate lowercase hexadecimal characters
    in quoted-printable-encoded content.
  * cone/cursesmessage.C (reformat): Typo in error message.
  * cone/cone.dist.in (TLS_STARTTLS_PROTOCOL): Provide a default
    setting of TLS_STARTTLS_PROTOCOL for new cone installs only.
  * cone/cursesmessage.C (beginReformat): Fix bug exposed by cache.H
    bug fix.</changelog>
  <changelog author="bjoern@cs.tu-berlin.de" date="1449489600">- update to 0.92</changelog>
</package>
<package pkgid="89caa103e3341476c22034119e72eef05aade86856df49c32accb075ea5e4396" name="mailtool-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.92" rel="1.1"/>
  <changelog author="guru@unixtech.be" date="1191153600">- update to 0.70
- moved to openSUSE Build Service</changelog>
  <changelog author="guru@unixtech.be" date="1195992000">- update to 0.74</changelog>
  <changelog author="guru@unixtech.be" date="1219924800">- update to 0.77:
  * adds support for client SSL certificates</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1244462400">- update to 0.78</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1262260800">- update to 0.80:
  * adds support for internationalized domain names</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1273406400">- update to 0.83:
  * fixes several bugs that may result in crashes</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1302264000">- update to 0.86:
  * adds Unicode-based word-wrapping rules that should work better for text
    written in ideographic-based character sets
  * adds support for the most recent plain text message specification (RFC
    3676)
  * adds an option to the standalone leaf editor that edits plain text files
    that use the flowed text format, as specified in RFC 3676</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1303387200">- update to 0.87:
  * fixes bugs in the handling of HTML mail with MIME headers and an
    unsupported character set
  * fixes a bug that resulted in Cone locking up and slowly consuming memory</changelog>
  <changelog author="bjoern@cs.tu-berlin.de" date="1306843200">- update to 0.89:
  * rfc2045/rfc2045cdecode.c: Tolerate lowercase hexadecimal characters
    in quoted-printable-encoded content.
  * cone/cursesmessage.C (reformat): Typo in error message.
  * cone/cone.dist.in (TLS_STARTTLS_PROTOCOL): Provide a default
    setting of TLS_STARTTLS_PROTOCOL for new cone installs only.
  * cone/cursesmessage.C (beginReformat): Fix bug exposed by cache.H
    bug fix.</changelog>
  <changelog author="bjoern@cs.tu-berlin.de" date="1449489600">- update to 0.92</changelog>
</package>
<package pkgid="940b8a28bb348e31f720375395bdd7046367226c505a505b4816f06d165527bf" name="mailwatch" arch="noarch">
  <version epoch="0" ver="0.1" rel="2.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1291809600">- initial package (0.1)</changelog>
</package>
<package pkgid="be9d004dc783b08aee871ee3303196f41d5376c6d01050253f530e0ad6dcceba" name="mailwatch" arch="src">
  <version epoch="0" ver="0.1" rel="2.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1291809600">- initial package (0.1)</changelog>
</package>
<package pkgid="877497b76d47566e8018e1c888b7cae8d6c8d658112f4f5cb9f17ba716fcc5a3" name="mailx" arch="src">
  <version epoch="0" ver="12.5" rel="81.1"/>
  <changelog author="meissner@suse.de" date="1271678400">- fixed build issue with openssl 1.0</changelog>
  <changelog author="coolo@novell.com" date="1276257600">- fix parallel make</changelog>
  <changelog author="gber@opensuse.org" date="1296561600">- only recommend smtp_daemon, mailx has builtin SMTP support</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1302350400">- Allow mailx to compile properly when openSSL is built without
  SSLv2 support.</changelog>
  <changelog author="werner@suse.de" date="1305288000">- Update to heirloom mailx 12.5
  * Better detection of base64 encoded text if acrossed a line
  * A null pointer dereference that lead to a segmentation fault
    when the user hit return at a yes/no question has been fixed
  * When both standard input and standard output refer to a
    terminal, ignore SIGPIPE
  * With the "-E" command line option or if the "skipemptybody"
    variable is set, outgoing messages that contain no text in
    their first or only part are not sent but silently discarded.
  * When an attachment that would have a "text/something" content
    type contains illegal byte sequences, it is now reliably sent
    out with the "application/octet-stream" content type instead
  * Fixed a bug that caused messages to be truncated with IMAP servers that
    use LF as line ending in message data, such as Google Mail (reported by
    Matthew L. Shobe).
  * Do not run filename expansion for IMAP or POP3 mailboxes names, making
    it possible to select mailboxes that contain both brackets and spaces
    in their names (reported by Matthew L. Shobe).
  * Fixed the format of the timezone in "Date" header fields for zones in
    the Western Hemisphere whose offsets are not an integral number of hours
    (patch by Matthew Fischer).
  * Fixed a message corruption that occurred when the "inc" command was used
    with a mbox format mailbox after encrypted messages had been viewed
    (reported by Martin Neitzel).
  * Fixed a condition that caused mailx to hang when looking at a message,
    copying that message, and issuing a "z" command evaluating an uncached
    portion of an IMAP folder.
  * Make it compile with OpenSSL 1.0.0-beta2
  * For RFC 2047 MIME "encoded-word" parts in headers, assume that the end of
    each word resets the conversion state (Yedidyah Bar-David).
  * When the ORGANIZATION variable has an empty value, do not generate an
    "Organization:" header field. Previously, this condition resulted in
    mailx refusing to send mail
- Fix my Reply-To patch found by milli</changelog>
  <changelog author="werner@suse.de" date="1332504000">- Try to support not only UTF-8 but also latin text encodings (bnc#753340)</changelog>
  <changelog author="werner@suse.de" date="1332504001">- Avoid header rewrite in case of specified ttycharset in wrong
  locale but subject in ttycharset (bnc#753340)</changelog>
  <changelog author="idonmez@suse.com" date="1347624000">- Add BuildRequires on man to fix build for Factory</changelog>
  <changelog author="cfarrell@suse.com" date="1370952000">- license update: BSD-4-Clause and MPL-1.1
  See COPYING. Fedora also uses this license designation</changelog>
  <changelog author="coolo@suse.com" date="1372161600">- buildrequire groff explicitly</changelog>
  <changelog author="werner@suse.de" date="1372766400">- Do not pseudo detect Latin nor UTF-8 in binary attachments (bnc#827010)
- Add patch mailx-12.5-parentheses.dif, that is try to tranquilize
  gcc due warning about parentheses (please check!)</changelog>
  <changelog author="werner@suse.de" date="1386072000">- Add patch mailx-12.5-ipv6.dif to enable mailx to parse IPv6 addresses
  including a port.  We do only support the [ipv6]:port syntax (bnc#853246)</changelog>
  <changelog author="werner@suse.de" date="1386158400">- Crop off the brackets of an ipv6 addresse if found (bnc#853246)</changelog>
  <changelog author="werner@suse.de" date="1386331200">- Correct comment in spec file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1397908800">- Build with -DOPENSSL_NO_SSL_INTERN asserting that this
  package does not (and should not) use openSSL internals
  that are subject to binary incompatible changes.</changelog>
  <changelog author="werner@suse.de" date="1418299200">- Add patches
  0001-outof-Introduce-expandaddr-flag.patch
  0002-unpack-Disable-option-processing-for-email-addresses.patch
  0003-fio.c-Unconditionally-require-wordexp-support.patch
  0004-globname-Invoke-wordexp-with-WRDE_NOCMD-CVE-2004-277.patch
  to fix bsc#909208 -- CVE-2004-2771, CVE-2014-7844: mailx: shell
  command injection via crafted email addresses</changelog>
  <changelog author="werner@suse.de" date="1426593600">- Modify patch mailx-12.5-mime.dif to allow Form Feed as valid
  characters within mail messages (bsc#922543)</changelog>
  <changelog author="werner@suse.de" date="1460116800">- Correct parenthese expansion to fulfill natural order (bnc#974561)</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n and drop CreationDate from manual.ps
  to make build fully reproducible</changelog>
  <changelog author="werner@suse.de" date="1497268800">- Add patch mailx-12.5-openssl-1.1.0f.patch
  Avoid deprecated/unavailable openSSL client methods (boo#1042663)</changelog>
</package>
<package pkgid="6c48d726ca10fa3206833d05a8a8377e4ba8a55d130eafafeec9c0354e378d15" name="mailx" arch="x86_64">
  <version epoch="0" ver="12.5" rel="81.1"/>
  <changelog author="meissner@suse.de" date="1271678400">- fixed build issue with openssl 1.0</changelog>
  <changelog author="coolo@novell.com" date="1276257600">- fix parallel make</changelog>
  <changelog author="gber@opensuse.org" date="1296561600">- only recommend smtp_daemon, mailx has builtin SMTP support</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1302350400">- Allow mailx to compile properly when openSSL is built without
  SSLv2 support.</changelog>
  <changelog author="werner@suse.de" date="1305288000">- Update to heirloom mailx 12.5
  * Better detection of base64 encoded text if acrossed a line
  * A null pointer dereference that lead to a segmentation fault
    when the user hit return at a yes/no question has been fixed
  * When both standard input and standard output refer to a
    terminal, ignore SIGPIPE
  * With the "-E" command line option or if the "skipemptybody"
    variable is set, outgoing messages that contain no text in
    their first or only part are not sent but silently discarded.
  * When an attachment that would have a "text/something" content
    type contains illegal byte sequences, it is now reliably sent
    out with the "application/octet-stream" content type instead
  * Fixed a bug that caused messages to be truncated with IMAP servers that
    use LF as line ending in message data, such as Google Mail (reported by
    Matthew L. Shobe).
  * Do not run filename expansion for IMAP or POP3 mailboxes names, making
    it possible to select mailboxes that contain both brackets and spaces
    in their names (reported by Matthew L. Shobe).
  * Fixed the format of the timezone in "Date" header fields for zones in
    the Western Hemisphere whose offsets are not an integral number of hours
    (patch by Matthew Fischer).
  * Fixed a message corruption that occurred when the "inc" command was used
    with a mbox format mailbox after encrypted messages had been viewed
    (reported by Martin Neitzel).
  * Fixed a condition that caused mailx to hang when looking at a message,
    copying that message, and issuing a "z" command evaluating an uncached
    portion of an IMAP folder.
  * Make it compile with OpenSSL 1.0.0-beta2
  * For RFC 2047 MIME "encoded-word" parts in headers, assume that the end of
    each word resets the conversion state (Yedidyah Bar-David).
  * When the ORGANIZATION variable has an empty value, do not generate an
    "Organization:" header field. Previously, this condition resulted in
    mailx refusing to send mail
- Fix my Reply-To patch found by milli</changelog>
  <changelog author="werner@suse.de" date="1332504000">- Try to support not only UTF-8 but also latin text encodings (bnc#753340)</changelog>
  <changelog author="werner@suse.de" date="1332504001">- Avoid header rewrite in case of specified ttycharset in wrong
  locale but subject in ttycharset (bnc#753340)</changelog>
  <changelog author="idonmez@suse.com" date="1347624000">- Add BuildRequires on man to fix build for Factory</changelog>
  <changelog author="cfarrell@suse.com" date="1370952000">- license update: BSD-4-Clause and MPL-1.1
  See COPYING. Fedora also uses this license designation</changelog>
  <changelog author="coolo@suse.com" date="1372161600">- buildrequire groff explicitly</changelog>
  <changelog author="werner@suse.de" date="1372766400">- Do not pseudo detect Latin nor UTF-8 in binary attachments (bnc#827010)
- Add patch mailx-12.5-parentheses.dif, that is try to tranquilize
  gcc due warning about parentheses (please check!)</changelog>
  <changelog author="werner@suse.de" date="1386072000">- Add patch mailx-12.5-ipv6.dif to enable mailx to parse IPv6 addresses
  including a port.  We do only support the [ipv6]:port syntax (bnc#853246)</changelog>
  <changelog author="werner@suse.de" date="1386158400">- Crop off the brackets of an ipv6 addresse if found (bnc#853246)</changelog>
  <changelog author="werner@suse.de" date="1386331200">- Correct comment in spec file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1397908800">- Build with -DOPENSSL_NO_SSL_INTERN asserting that this
  package does not (and should not) use openSSL internals
  that are subject to binary incompatible changes.</changelog>
  <changelog author="werner@suse.de" date="1418299200">- Add patches
  0001-outof-Introduce-expandaddr-flag.patch
  0002-unpack-Disable-option-processing-for-email-addresses.patch
  0003-fio.c-Unconditionally-require-wordexp-support.patch
  0004-globname-Invoke-wordexp-with-WRDE_NOCMD-CVE-2004-277.patch
  to fix bsc#909208 -- CVE-2004-2771, CVE-2014-7844: mailx: shell
  command injection via crafted email addresses</changelog>
  <changelog author="werner@suse.de" date="1426593600">- Modify patch mailx-12.5-mime.dif to allow Form Feed as valid
  characters within mail messages (bsc#922543)</changelog>
  <changelog author="werner@suse.de" date="1460116800">- Correct parenthese expansion to fulfill natural order (bnc#974561)</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n and drop CreationDate from manual.ps
  to make build fully reproducible</changelog>
  <changelog author="werner@suse.de" date="1497268800">- Add patch mailx-12.5-openssl-1.1.0f.patch
  Avoid deprecated/unavailable openSSL client methods (boo#1042663)</changelog>
</package>
<package pkgid="ad86e45502e946d74f05ae3788286ad678515f2d38de4fb91b90a694b42458ff" name="mailx-debuginfo" arch="x86_64">
  <version epoch="0" ver="12.5" rel="81.1"/>
  <changelog author="meissner@suse.de" date="1271678400">- fixed build issue with openssl 1.0</changelog>
  <changelog author="coolo@novell.com" date="1276257600">- fix parallel make</changelog>
  <changelog author="gber@opensuse.org" date="1296561600">- only recommend smtp_daemon, mailx has builtin SMTP support</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1302350400">- Allow mailx to compile properly when openSSL is built without
  SSLv2 support.</changelog>
  <changelog author="werner@suse.de" date="1305288000">- Update to heirloom mailx 12.5
  * Better detection of base64 encoded text if acrossed a line
  * A null pointer dereference that lead to a segmentation fault
    when the user hit return at a yes/no question has been fixed
  * When both standard input and standard output refer to a
    terminal, ignore SIGPIPE
  * With the "-E" command line option or if the "skipemptybody"
    variable is set, outgoing messages that contain no text in
    their first or only part are not sent but silently discarded.
  * When an attachment that would have a "text/something" content
    type contains illegal byte sequences, it is now reliably sent
    out with the "application/octet-stream" content type instead
  * Fixed a bug that caused messages to be truncated with IMAP servers that
    use LF as line ending in message data, such as Google Mail (reported by
    Matthew L. Shobe).
  * Do not run filename expansion for IMAP or POP3 mailboxes names, making
    it possible to select mailboxes that contain both brackets and spaces
    in their names (reported by Matthew L. Shobe).
  * Fixed the format of the timezone in "Date" header fields for zones in
    the Western Hemisphere whose offsets are not an integral number of hours
    (patch by Matthew Fischer).
  * Fixed a message corruption that occurred when the "inc" command was used
    with a mbox format mailbox after encrypted messages had been viewed
    (reported by Martin Neitzel).
  * Fixed a condition that caused mailx to hang when looking at a message,
    copying that message, and issuing a "z" command evaluating an uncached
    portion of an IMAP folder.
  * Make it compile with OpenSSL 1.0.0-beta2
  * For RFC 2047 MIME "encoded-word" parts in headers, assume that the end of
    each word resets the conversion state (Yedidyah Bar-David).
  * When the ORGANIZATION variable has an empty value, do not generate an
    "Organization:" header field. Previously, this condition resulted in
    mailx refusing to send mail
- Fix my Reply-To patch found by milli</changelog>
  <changelog author="werner@suse.de" date="1332504000">- Try to support not only UTF-8 but also latin text encodings (bnc#753340)</changelog>
  <changelog author="werner@suse.de" date="1332504001">- Avoid header rewrite in case of specified ttycharset in wrong
  locale but subject in ttycharset (bnc#753340)</changelog>
  <changelog author="idonmez@suse.com" date="1347624000">- Add BuildRequires on man to fix build for Factory</changelog>
  <changelog author="cfarrell@suse.com" date="1370952000">- license update: BSD-4-Clause and MPL-1.1
  See COPYING. Fedora also uses this license designation</changelog>
  <changelog author="coolo@suse.com" date="1372161600">- buildrequire groff explicitly</changelog>
  <changelog author="werner@suse.de" date="1372766400">- Do not pseudo detect Latin nor UTF-8 in binary attachments (bnc#827010)
- Add patch mailx-12.5-parentheses.dif, that is try to tranquilize
  gcc due warning about parentheses (please check!)</changelog>
  <changelog author="werner@suse.de" date="1386072000">- Add patch mailx-12.5-ipv6.dif to enable mailx to parse IPv6 addresses
  including a port.  We do only support the [ipv6]:port syntax (bnc#853246)</changelog>
  <changelog author="werner@suse.de" date="1386158400">- Crop off the brackets of an ipv6 addresse if found (bnc#853246)</changelog>
  <changelog author="werner@suse.de" date="1386331200">- Correct comment in spec file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1397908800">- Build with -DOPENSSL_NO_SSL_INTERN asserting that this
  package does not (and should not) use openSSL internals
  that are subject to binary incompatible changes.</changelog>
  <changelog author="werner@suse.de" date="1418299200">- Add patches
  0001-outof-Introduce-expandaddr-flag.patch
  0002-unpack-Disable-option-processing-for-email-addresses.patch
  0003-fio.c-Unconditionally-require-wordexp-support.patch
  0004-globname-Invoke-wordexp-with-WRDE_NOCMD-CVE-2004-277.patch
  to fix bsc#909208 -- CVE-2004-2771, CVE-2014-7844: mailx: shell
  command injection via crafted email addresses</changelog>
  <changelog author="werner@suse.de" date="1426593600">- Modify patch mailx-12.5-mime.dif to allow Form Feed as valid
  characters within mail messages (bsc#922543)</changelog>
  <changelog author="werner@suse.de" date="1460116800">- Correct parenthese expansion to fulfill natural order (bnc#974561)</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n and drop CreationDate from manual.ps
  to make build fully reproducible</changelog>
  <changelog author="werner@suse.de" date="1497268800">- Add patch mailx-12.5-openssl-1.1.0f.patch
  Avoid deprecated/unavailable openSSL client methods (boo#1042663)</changelog>
</package>
<package pkgid="6bed2728b72c201c8e4be7d783b4717c960cd2e100308e477e5d44e38ae899c7" name="mailx-debugsource" arch="x86_64">
  <version epoch="0" ver="12.5" rel="81.1"/>
  <changelog author="meissner@suse.de" date="1271678400">- fixed build issue with openssl 1.0</changelog>
  <changelog author="coolo@novell.com" date="1276257600">- fix parallel make</changelog>
  <changelog author="gber@opensuse.org" date="1296561600">- only recommend smtp_daemon, mailx has builtin SMTP support</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1302350400">- Allow mailx to compile properly when openSSL is built without
  SSLv2 support.</changelog>
  <changelog author="werner@suse.de" date="1305288000">- Update to heirloom mailx 12.5
  * Better detection of base64 encoded text if acrossed a line
  * A null pointer dereference that lead to a segmentation fault
    when the user hit return at a yes/no question has been fixed
  * When both standard input and standard output refer to a
    terminal, ignore SIGPIPE
  * With the "-E" command line option or if the "skipemptybody"
    variable is set, outgoing messages that contain no text in
    their first or only part are not sent but silently discarded.
  * When an attachment that would have a "text/something" content
    type contains illegal byte sequences, it is now reliably sent
    out with the "application/octet-stream" content type instead
  * Fixed a bug that caused messages to be truncated with IMAP servers that
    use LF as line ending in message data, such as Google Mail (reported by
    Matthew L. Shobe).
  * Do not run filename expansion for IMAP or POP3 mailboxes names, making
    it possible to select mailboxes that contain both brackets and spaces
    in their names (reported by Matthew L. Shobe).
  * Fixed the format of the timezone in "Date" header fields for zones in
    the Western Hemisphere whose offsets are not an integral number of hours
    (patch by Matthew Fischer).
  * Fixed a message corruption that occurred when the "inc" command was used
    with a mbox format mailbox after encrypted messages had been viewed
    (reported by Martin Neitzel).
  * Fixed a condition that caused mailx to hang when looking at a message,
    copying that message, and issuing a "z" command evaluating an uncached
    portion of an IMAP folder.
  * Make it compile with OpenSSL 1.0.0-beta2
  * For RFC 2047 MIME "encoded-word" parts in headers, assume that the end of
    each word resets the conversion state (Yedidyah Bar-David).
  * When the ORGANIZATION variable has an empty value, do not generate an
    "Organization:" header field. Previously, this condition resulted in
    mailx refusing to send mail
- Fix my Reply-To patch found by milli</changelog>
  <changelog author="werner@suse.de" date="1332504000">- Try to support not only UTF-8 but also latin text encodings (bnc#753340)</changelog>
  <changelog author="werner@suse.de" date="1332504001">- Avoid header rewrite in case of specified ttycharset in wrong
  locale but subject in ttycharset (bnc#753340)</changelog>
  <changelog author="idonmez@suse.com" date="1347624000">- Add BuildRequires on man to fix build for Factory</changelog>
  <changelog author="cfarrell@suse.com" date="1370952000">- license update: BSD-4-Clause and MPL-1.1
  See COPYING. Fedora also uses this license designation</changelog>
  <changelog author="coolo@suse.com" date="1372161600">- buildrequire groff explicitly</changelog>
  <changelog author="werner@suse.de" date="1372766400">- Do not pseudo detect Latin nor UTF-8 in binary attachments (bnc#827010)
- Add patch mailx-12.5-parentheses.dif, that is try to tranquilize
  gcc due warning about parentheses (please check!)</changelog>
  <changelog author="werner@suse.de" date="1386072000">- Add patch mailx-12.5-ipv6.dif to enable mailx to parse IPv6 addresses
  including a port.  We do only support the [ipv6]:port syntax (bnc#853246)</changelog>
  <changelog author="werner@suse.de" date="1386158400">- Crop off the brackets of an ipv6 addresse if found (bnc#853246)</changelog>
  <changelog author="werner@suse.de" date="1386331200">- Correct comment in spec file</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1397908800">- Build with -DOPENSSL_NO_SSL_INTERN asserting that this
  package does not (and should not) use openSSL internals
  that are subject to binary incompatible changes.</changelog>
  <changelog author="werner@suse.de" date="1418299200">- Add patches
  0001-outof-Introduce-expandaddr-flag.patch
  0002-unpack-Disable-option-processing-for-email-addresses.patch
  0003-fio.c-Unconditionally-require-wordexp-support.patch
  0004-globname-Invoke-wordexp-with-WRDE_NOCMD-CVE-2004-277.patch
  to fix bsc#909208 -- CVE-2004-2771, CVE-2014-7844: mailx: shell
  command injection via crafted email addresses</changelog>
  <changelog author="werner@suse.de" date="1426593600">- Modify patch mailx-12.5-mime.dif to allow Form Feed as valid
  characters within mail messages (bsc#922543)</changelog>
  <changelog author="werner@suse.de" date="1460116800">- Correct parenthese expansion to fulfill natural order (bnc#974561)</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n and drop CreationDate from manual.ps
  to make build fully reproducible</changelog>
  <changelog author="werner@suse.de" date="1497268800">- Add patch mailx-12.5-openssl-1.1.0f.patch
  Avoid deprecated/unavailable openSSL client methods (boo#1042663)</changelog>
</package>
<package pkgid="a91e6b1de5f6374393cc53686f7482a9c8b736068c8d302342dd44ccaf87d998" name="mairix" arch="src">
  <version epoch="0" ver="0.22" rel="24.1"/>
  <changelog author="bphilips@suse.de" date="1231934400">- created package</changelog>
  <changelog author="bphilips@novell.com" date="1277812800">- Upgrade to bug fix release v0.22
  + Include the existing -x flag in the help message (Mark Hills)
  + Detect a trailing -f or -o with no following argument
  + Display message-ID in search -x mode
  + Skip symlinks when using mbox (R A Lichtensteiger)
  + Improve error message if home directory cannot be determined
  + Honour HOME environment variable (Andreas Amann)
  + MIME types are allowed to have "+" characters in them. (Jonathan Kamens)
  + Fix deficiencies in the parsing of mbox From lines (Jonathan Kamens)
  + Fix documentation nits (Tom Doherty)
  + Remove spurious message when the mtime of a message file has changed
  + Initialize the date header with a known value. (Samuel Tardieu)
  + Merge two conflicting solutions for bad MIME encoding
  + fix for MIME-related crash (Paramjit Oberoi)
  + Add support claws-mail (Anand Kumria)
  + Add MH sub-type support for ezmlm-archives (Claus Alboege)
  + Allow lines starting "From" to occur part-way through the header.o
  + Handle mbox from separators where email address is in angle brackets
  + Fix a bug in rfc822.c: Some headers weren't correctly parsed. (Jaime Velasco Juan)</changelog>
  <changelog author="coolo@suse.com" date="1362484800">- update license to new format</changelog>
  <changelog author="aj@suse.com" date="1363003200">- Since version 0.18 texinfo is not needed any more, remove
  build require on it.</changelog>
  <changelog author="cfarrell@suse.com" date="1363089600">- license update: GPL-2.0
  no indication of aggregation. Fedora also denote this as GPL-2.0</changelog>
</package>
<package pkgid="f9addcbebff57c713846f79e12da67b2d6a87f7592e43c869c9f7e03c5b38947" name="mairix" arch="x86_64">
  <version epoch="0" ver="0.22" rel="24.1"/>
  <changelog author="bphilips@suse.de" date="1231934400">- created package</changelog>
  <changelog author="bphilips@novell.com" date="1277812800">- Upgrade to bug fix release v0.22
  + Include the existing -x flag in the help message (Mark Hills)
  + Detect a trailing -f or -o with no following argument
  + Display message-ID in search -x mode
  + Skip symlinks when using mbox (R A Lichtensteiger)
  + Improve error message if home directory cannot be determined
  + Honour HOME environment variable (Andreas Amann)
  + MIME types are allowed to have "+" characters in them. (Jonathan Kamens)
  + Fix deficiencies in the parsing of mbox From lines (Jonathan Kamens)
  + Fix documentation nits (Tom Doherty)
  + Remove spurious message when the mtime of a message file has changed
  + Initialize the date header with a known value. (Samuel Tardieu)
  + Merge two conflicting solutions for bad MIME encoding
  + fix for MIME-related crash (Paramjit Oberoi)
  + Add support claws-mail (Anand Kumria)
  + Add MH sub-type support for ezmlm-archives (Claus Alboege)
  + Allow lines starting "From" to occur part-way through the header.o
  + Handle mbox from separators where email address is in angle brackets
  + Fix a bug in rfc822.c: Some headers weren't correctly parsed. (Jaime Velasco Juan)</changelog>
  <changelog author="coolo@suse.com" date="1362484800">- update license to new format</changelog>
  <changelog author="aj@suse.com" date="1363003200">- Since version 0.18 texinfo is not needed any more, remove
  build require on it.</changelog>
  <changelog author="cfarrell@suse.com" date="1363089600">- license update: GPL-2.0
  no indication of aggregation. Fedora also denote this as GPL-2.0</changelog>
</package>
<package pkgid="663ab11f66c40362297560257b710e5d3e8ab6f9848e911c8c2b9b3509136ef3" name="mlmmj" arch="src">
  <version epoch="0" ver="1.2.19.0" rel="33.1"/>
  <changelog author="hvogel@suse.de" date="1157544000">- split patches better
- include listtexts
- add nonomail tuneable</changelog>
  <changelog author="hvogel@suse.de" date="1161604800">- update to RC4 from 1.2.12
  o Fixed memory leak in checkwait_smtpreply()
  o Changed mlmmj-process to look at environment variable DEFAULT
    instead of EXT for qmail (Fabio Busatto)
  o Added Frensh listtext unsub-confirm-digest
  o Fixed EOF handling in checkwait_smtpreply()
  o Fixed header unfolding in gethdrline()
  o Changed German listtexts
  o Changed English listtexts
  o Changed chomp() to also remove CR from CRLF sequences
- add default listtext dir</changelog>
  <changelog author="hvogel@suse.de" date="1163160000">- fix header unfolding. gethdrline() did not handle end-of-file in
  headers correct [#219497]</changelog>
  <changelog author="hvogel@suse.de" date="1163678400">- Update to final 1.2.12 which fixes a double free with headers
  containing a = [#220552]
- drop gethdrline patch because its included</changelog>
  <changelog author="hvogel@suse.de" date="1168430400">- Update to version 1.2.13
- drop patches because they are included
  * mlmmj-defaulttextdir.patch
  * mlmmj-faq.patch
  * mlmmj-nodigestsub.patch
  * mlmmj-nonomailsub.patch
  * mlmmj-send_help-generic.patch
- Sascha reworked the log patch to include the from address when
  mails are denied and display the correct access rule</changelog>
  <changelog author="hvogel@suse.de" date="1169726400">- log access output to operation log and not to the general log</changelog>
  <changelog author="hvogel@suse.de" date="1174910400">- Fix to/cc parsing of addresses with brackets and quotations
  * mlmmj-1.2.13-find_email_adr.patch</changelog>
  <changelog author="hvogel@suse.de" date="1176811200">- update to version 1.2.14
  * Fixed a small memory leak in log_oper() log rotation
  * Added contrib/recievestrip/ MIME processor (Sascha Sommer)
  * Fixed digest multipart boundary (Thanks to Ulrich Mueller)
  * Added support for mail size limit (Christoph Wilke)
  * Ignore empty lines in control files
- droppend patches:
  * mlmmj-1.2.13-find_email_adr.patch &lt;- upstream
  * mlmmj-log.patch &lt;- upstream
- add more and recode listtexts to utf8</changelog>
  <changelog author="dbahi@suse.de" date="1178107200">- added mlmmj-1.2.14-discard.patch
  * Implemented discard for the access rules to be able to
    drop unwanted mails without notification</changelog>
  <changelog author="hvogel@suse.de" date="1185883200">- Update to 1.2.15
  o Added --enable-recieve-strip configure option
  o Added unicode support to listtexts
  o Fixed build outside the source directory
  o Moved English listtexts and install all languages
  o Fixed missing exit()s in case of failed execl() calls
  o Changed Message-ID headers to include FQDN
  o Added support for 'discard' keyword in access rules
- fdupe installed files</changelog>
  <changelog author="hvogel@suse.de" date="1194609600">- make deny mails more verbose</changelog>
  <changelog author="hvogel@suse.de" date="1249473600">- Update to 1.2.16
  o Updated Dutch listtexts
  o Updated Italian listtexts
  o Added Postfix pipe backend support
  o Added support for static bounce addresses
  o Added a sanity check in mlmmj-receive-strip
  o Added miscellaneous sanity checks
  o Disabled digest mails when 'noarchive' is set
  o Added Russian listtexts
  o Fixed mmap()ing of zero-sized files
  o Fixed mlmmj-recieve [sic] for architectures where
    sizeof(int) and sizeof(char *) differ
  o Added support for the 'originalmail' keyword</changelog>
  <changelog author="hvogel@novell.com" date="1270555200">- Update to version 1.2.17
  o Added ifmodsendonlymodmoderate tunable
  o Replaced class.FastTemplate.php with class.rFastTemplate.php in
  contrib/web/php-admin (Christoph Thiel)
  o Added information about digest and nomail to listhelp
  o Fixed bug in mlmmj-maintd which caused loss of archive files
  in some requeue cases (Robin H. Johnson)
  o Added README.postfix (Jeremy Hinegardner, Andreas Schneider)
  o Added support for digest and nomail to +list (Christoph Wilke)
  o Caseinsensitive string compare for owner addr when +list is
  invoked. Spotted by Pavel Kolar.
  o Added contrib/web/php-moderation (Thomas Goirand)</changelog>
  <changelog author="hvogel@novell.com" date="1289908800">- Update to version 1.2.17.1
  o Check return status in mlmmj-perl-admin when adding subscribers
  o Better validation of input in php-admin
  o Added Turkish translation
  o Fixed security bug in mlmmj-php-admin
  o Added README.postfix to distribution tarball
  o Added contrib/amime-receive
  o Fixed memory leak in substitute_one()
  o Updated German listtexts
  o Updated TUNABLES file</changelog>
  <changelog author="lars@linux-schulserver.de" date="1386158400">- Update to version 1.2.18.0:
  o Richer list texts (including a new naming scheme, conditionals,
    automatic wrapping and true UTF-8 support).
    See README.listtexts for more details.
  o Notifying posters when their posts are being moderated
    (notifymod tunable).
  o Not-me-too feature to avoid having the poster receiving their
    own messages (notmetoo tunable).
  o Ability to explicitly reject posts (exposed in new list texts).
  o Ability to explicitly obstruct subscriptions
    (exposed in new list texts).
  o Unsubscribe from all versions of a list at once (changed behaviour
    of +unsubscribe[-{digest|nomail}]; they now all remove the
    subscriber from all versions of the list).
  o Ability to switch between different versions of a list by
    using +subscribe[-{digest|nomail|both}] ('both' means normal and
    digest, and is a 'hidden feature' not mentioned in the supplied
    list texts).
  o Subscription ability in php-admin.
- built mlmmj-receive-strip in contrib directory
- move /usr/share/mlmmj/contrib to /usr/share/doc/package/mlmmj/examples
  where it fits better (according to rpmlint)
- addded rpmlintrc to exclude the examples</changelog>
  <changelog author="aj@ajaissle.de" date="1390651200">- Updated source url</changelog>
  <changelog author="ct@kki.org" date="1395662400">- update to version 1.2.18.1
  o simply fixes three bugs, one of which caused mail to be lost,
    so everybody currently running 1.2.18.0 is encouraged to upgrade.</changelog>
  <changelog author="hvogel@suse.com" date="1405339200">- Don't require fdupes on &lt;SLE11</changelog>
  <changelog author="mrueckert@suse.de" date="1432555200">- update to 1.2.19.0
  o Add README.footers and footer-related resources
  o Support ESMTP so OpenSMTPD uses 8 bits (Paul Fariello)
  o Use iconv to convert unknown character sets
  o Handle unfolded header lines better
  o Add a tunable for moderation request lifetime (Timo Boettcher)
  o Ensure mlmmj-send always honours tunables (e.g. relayhost)
  o Fix reason in denial messages for mails without the list in To:
    or CC:
- mlmmj-rpmlintrc
  - removed line about arch dependent files</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Run over with spec-cleaner
- Do not require recode and use iconv for conversions wrt fate#323644</changelog>
</package>
<package pkgid="9563197a6e99cca68866b03f6cbd1b7c01cdc9807ee44370264e7e2e6cb9e825" name="mlmmj" arch="x86_64">
  <version epoch="0" ver="1.2.19.0" rel="33.1"/>
  <changelog author="hvogel@suse.de" date="1194609600">- make deny mails more verbose</changelog>
  <changelog author="hvogel@suse.de" date="1249473600">- Update to 1.2.16
  o Updated Dutch listtexts
  o Updated Italian listtexts
  o Added Postfix pipe backend support
  o Added support for static bounce addresses
  o Added a sanity check in mlmmj-receive-strip
  o Added miscellaneous sanity checks
  o Disabled digest mails when 'noarchive' is set
  o Added Russian listtexts
  o Fixed mmap()ing of zero-sized files
  o Fixed mlmmj-recieve [sic] for architectures where
    sizeof(int) and sizeof(char *) differ
  o Added support for the 'originalmail' keyword</changelog>
  <changelog author="hvogel@novell.com" date="1270555200">- Update to version 1.2.17
  o Added ifmodsendonlymodmoderate tunable
  o Replaced class.FastTemplate.php with class.rFastTemplate.php in
  contrib/web/php-admin (Christoph Thiel)
  o Added information about digest and nomail to listhelp
  o Fixed bug in mlmmj-maintd which caused loss of archive files
  in some requeue cases (Robin H. Johnson)
  o Added README.postfix (Jeremy Hinegardner, Andreas Schneider)
  o Added support for digest and nomail to +list (Christoph Wilke)
  o Caseinsensitive string compare for owner addr when +list is
  invoked. Spotted by Pavel Kolar.
  o Added contrib/web/php-moderation (Thomas Goirand)</changelog>
  <changelog author="hvogel@novell.com" date="1289908800">- Update to version 1.2.17.1
  o Check return status in mlmmj-perl-admin when adding subscribers
  o Better validation of input in php-admin
  o Added Turkish translation
  o Fixed security bug in mlmmj-php-admin
  o Added README.postfix to distribution tarball
  o Added contrib/amime-receive
  o Fixed memory leak in substitute_one()
  o Updated German listtexts
  o Updated TUNABLES file</changelog>
  <changelog author="lars@linux-schulserver.de" date="1386158400">- Update to version 1.2.18.0:
  o Richer list texts (including a new naming scheme, conditionals,
    automatic wrapping and true UTF-8 support).
    See README.listtexts for more details.
  o Notifying posters when their posts are being moderated
    (notifymod tunable).
  o Not-me-too feature to avoid having the poster receiving their
    own messages (notmetoo tunable).
  o Ability to explicitly reject posts (exposed in new list texts).
  o Ability to explicitly obstruct subscriptions
    (exposed in new list texts).
  o Unsubscribe from all versions of a list at once (changed behaviour
    of +unsubscribe[-{digest|nomail}]; they now all remove the
    subscriber from all versions of the list).
  o Ability to switch between different versions of a list by
    using +subscribe[-{digest|nomail|both}] ('both' means normal and
    digest, and is a 'hidden feature' not mentioned in the supplied
    list texts).
  o Subscription ability in php-admin.
- built mlmmj-receive-strip in contrib directory
- move /usr/share/mlmmj/contrib to /usr/share/doc/package/mlmmj/examples
  where it fits better (according to rpmlint)
- addded rpmlintrc to exclude the examples</changelog>
  <changelog author="aj@ajaissle.de" date="1390651200">- Updated source url</changelog>
  <changelog author="ct@kki.org" date="1395662400">- update to version 1.2.18.1
  o simply fixes three bugs, one of which caused mail to be lost,
    so everybody currently running 1.2.18.0 is encouraged to upgrade.</changelog>
  <changelog author="hvogel@suse.com" date="1405339200">- Don't require fdupes on &lt;SLE11</changelog>
  <changelog author="mrueckert@suse.de" date="1432555200">- update to 1.2.19.0
  o Add README.footers and footer-related resources
  o Support ESMTP so OpenSMTPD uses 8 bits (Paul Fariello)
  o Use iconv to convert unknown character sets
  o Handle unfolded header lines better
  o Add a tunable for moderation request lifetime (Timo Boettcher)
  o Ensure mlmmj-send always honours tunables (e.g. relayhost)
  o Fix reason in denial messages for mails without the list in To:
    or CC:
- mlmmj-rpmlintrc
  - removed line about arch dependent files</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Run over with spec-cleaner
- Do not require recode and use iconv for conversions wrt fate#323644</changelog>
</package>
<package pkgid="94a3e92c20970db1eccf3d0de463a2aae7a0aecc41451570b324d9362f0905d5" name="mlmmj-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.19.0" rel="33.1"/>
  <changelog author="hvogel@suse.de" date="1157544000">- split patches better
- include listtexts
- add nonomail tuneable</changelog>
  <changelog author="hvogel@suse.de" date="1161604800">- update to RC4 from 1.2.12
  o Fixed memory leak in checkwait_smtpreply()
  o Changed mlmmj-process to look at environment variable DEFAULT
    instead of EXT for qmail (Fabio Busatto)
  o Added Frensh listtext unsub-confirm-digest
  o Fixed EOF handling in checkwait_smtpreply()
  o Fixed header unfolding in gethdrline()
  o Changed German listtexts
  o Changed English listtexts
  o Changed chomp() to also remove CR from CRLF sequences
- add default listtext dir</changelog>
  <changelog author="hvogel@suse.de" date="1163160000">- fix header unfolding. gethdrline() did not handle end-of-file in
  headers correct [#219497]</changelog>
  <changelog author="hvogel@suse.de" date="1163678400">- Update to final 1.2.12 which fixes a double free with headers
  containing a = [#220552]
- drop gethdrline patch because its included</changelog>
  <changelog author="hvogel@suse.de" date="1168430400">- Update to version 1.2.13
- drop patches because they are included
  * mlmmj-defaulttextdir.patch
  * mlmmj-faq.patch
  * mlmmj-nodigestsub.patch
  * mlmmj-nonomailsub.patch
  * mlmmj-send_help-generic.patch
- Sascha reworked the log patch to include the from address when
  mails are denied and display the correct access rule</changelog>
  <changelog author="hvogel@suse.de" date="1169726400">- log access output to operation log and not to the general log</changelog>
  <changelog author="hvogel@suse.de" date="1174910400">- Fix to/cc parsing of addresses with brackets and quotations
  * mlmmj-1.2.13-find_email_adr.patch</changelog>
  <changelog author="hvogel@suse.de" date="1176811200">- update to version 1.2.14
  * Fixed a small memory leak in log_oper() log rotation
  * Added contrib/recievestrip/ MIME processor (Sascha Sommer)
  * Fixed digest multipart boundary (Thanks to Ulrich Mueller)
  * Added support for mail size limit (Christoph Wilke)
  * Ignore empty lines in control files
- droppend patches:
  * mlmmj-1.2.13-find_email_adr.patch &lt;- upstream
  * mlmmj-log.patch &lt;- upstream
- add more and recode listtexts to utf8</changelog>
  <changelog author="dbahi@suse.de" date="1178107200">- added mlmmj-1.2.14-discard.patch
  * Implemented discard for the access rules to be able to
    drop unwanted mails without notification</changelog>
  <changelog author="hvogel@suse.de" date="1185883200">- Update to 1.2.15
  o Added --enable-recieve-strip configure option
  o Added unicode support to listtexts
  o Fixed build outside the source directory
  o Moved English listtexts and install all languages
  o Fixed missing exit()s in case of failed execl() calls
  o Changed Message-ID headers to include FQDN
  o Added support for 'discard' keyword in access rules
- fdupe installed files</changelog>
  <changelog author="hvogel@suse.de" date="1194609600">- make deny mails more verbose</changelog>
  <changelog author="hvogel@suse.de" date="1249473600">- Update to 1.2.16
  o Updated Dutch listtexts
  o Updated Italian listtexts
  o Added Postfix pipe backend support
  o Added support for static bounce addresses
  o Added a sanity check in mlmmj-receive-strip
  o Added miscellaneous sanity checks
  o Disabled digest mails when 'noarchive' is set
  o Added Russian listtexts
  o Fixed mmap()ing of zero-sized files
  o Fixed mlmmj-recieve [sic] for architectures where
    sizeof(int) and sizeof(char *) differ
  o Added support for the 'originalmail' keyword</changelog>
  <changelog author="hvogel@novell.com" date="1270555200">- Update to version 1.2.17
  o Added ifmodsendonlymodmoderate tunable
  o Replaced class.FastTemplate.php with class.rFastTemplate.php in
  contrib/web/php-admin (Christoph Thiel)
  o Added information about digest and nomail to listhelp
  o Fixed bug in mlmmj-maintd which caused loss of archive files
  in some requeue cases (Robin H. Johnson)
  o Added README.postfix (Jeremy Hinegardner, Andreas Schneider)
  o Added support for digest and nomail to +list (Christoph Wilke)
  o Caseinsensitive string compare for owner addr when +list is
  invoked. Spotted by Pavel Kolar.
  o Added contrib/web/php-moderation (Thomas Goirand)</changelog>
  <changelog author="hvogel@novell.com" date="1289908800">- Update to version 1.2.17.1
  o Check return status in mlmmj-perl-admin when adding subscribers
  o Better validation of input in php-admin
  o Added Turkish translation
  o Fixed security bug in mlmmj-php-admin
  o Added README.postfix to distribution tarball
  o Added contrib/amime-receive
  o Fixed memory leak in substitute_one()
  o Updated German listtexts
  o Updated TUNABLES file</changelog>
  <changelog author="lars@linux-schulserver.de" date="1386158400">- Update to version 1.2.18.0:
  o Richer list texts (including a new naming scheme, conditionals,
    automatic wrapping and true UTF-8 support).
    See README.listtexts for more details.
  o Notifying posters when their posts are being moderated
    (notifymod tunable).
  o Not-me-too feature to avoid having the poster receiving their
    own messages (notmetoo tunable).
  o Ability to explicitly reject posts (exposed in new list texts).
  o Ability to explicitly obstruct subscriptions
    (exposed in new list texts).
  o Unsubscribe from all versions of a list at once (changed behaviour
    of +unsubscribe[-{digest|nomail}]; they now all remove the
    subscriber from all versions of the list).
  o Ability to switch between different versions of a list by
    using +subscribe[-{digest|nomail|both}] ('both' means normal and
    digest, and is a 'hidden feature' not mentioned in the supplied
    list texts).
  o Subscription ability in php-admin.
- built mlmmj-receive-strip in contrib directory
- move /usr/share/mlmmj/contrib to /usr/share/doc/package/mlmmj/examples
  where it fits better (according to rpmlint)
- addded rpmlintrc to exclude the examples</changelog>
  <changelog author="aj@ajaissle.de" date="1390651200">- Updated source url</changelog>
  <changelog author="ct@kki.org" date="1395662400">- update to version 1.2.18.1
  o simply fixes three bugs, one of which caused mail to be lost,
    so everybody currently running 1.2.18.0 is encouraged to upgrade.</changelog>
  <changelog author="hvogel@suse.com" date="1405339200">- Don't require fdupes on &lt;SLE11</changelog>
  <changelog author="mrueckert@suse.de" date="1432555200">- update to 1.2.19.0
  o Add README.footers and footer-related resources
  o Support ESMTP so OpenSMTPD uses 8 bits (Paul Fariello)
  o Use iconv to convert unknown character sets
  o Handle unfolded header lines better
  o Add a tunable for moderation request lifetime (Timo Boettcher)
  o Ensure mlmmj-send always honours tunables (e.g. relayhost)
  o Fix reason in denial messages for mails without the list in To:
    or CC:
- mlmmj-rpmlintrc
  - removed line about arch dependent files</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Run over with spec-cleaner
- Do not require recode and use iconv for conversions wrt fate#323644</changelog>
</package>
<package pkgid="e6e8cb2d869504c5b425c081556b584e83f6029df70f6acb119f2e3c424dbae4" name="mlmmj-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.19.0" rel="33.1"/>
  <changelog author="hvogel@suse.de" date="1194609600">- make deny mails more verbose</changelog>
  <changelog author="hvogel@suse.de" date="1249473600">- Update to 1.2.16
  o Updated Dutch listtexts
  o Updated Italian listtexts
  o Added Postfix pipe backend support
  o Added support for static bounce addresses
  o Added a sanity check in mlmmj-receive-strip
  o Added miscellaneous sanity checks
  o Disabled digest mails when 'noarchive' is set
  o Added Russian listtexts
  o Fixed mmap()ing of zero-sized files
  o Fixed mlmmj-recieve [sic] for architectures where
    sizeof(int) and sizeof(char *) differ
  o Added support for the 'originalmail' keyword</changelog>
  <changelog author="hvogel@novell.com" date="1270555200">- Update to version 1.2.17
  o Added ifmodsendonlymodmoderate tunable
  o Replaced class.FastTemplate.php with class.rFastTemplate.php in
  contrib/web/php-admin (Christoph Thiel)
  o Added information about digest and nomail to listhelp
  o Fixed bug in mlmmj-maintd which caused loss of archive files
  in some requeue cases (Robin H. Johnson)
  o Added README.postfix (Jeremy Hinegardner, Andreas Schneider)
  o Added support for digest and nomail to +list (Christoph Wilke)
  o Caseinsensitive string compare for owner addr when +list is
  invoked. Spotted by Pavel Kolar.
  o Added contrib/web/php-moderation (Thomas Goirand)</changelog>
  <changelog author="hvogel@novell.com" date="1289908800">- Update to version 1.2.17.1
  o Check return status in mlmmj-perl-admin when adding subscribers
  o Better validation of input in php-admin
  o Added Turkish translation
  o Fixed security bug in mlmmj-php-admin
  o Added README.postfix to distribution tarball
  o Added contrib/amime-receive
  o Fixed memory leak in substitute_one()
  o Updated German listtexts
  o Updated TUNABLES file</changelog>
  <changelog author="lars@linux-schulserver.de" date="1386158400">- Update to version 1.2.18.0:
  o Richer list texts (including a new naming scheme, conditionals,
    automatic wrapping and true UTF-8 support).
    See README.listtexts for more details.
  o Notifying posters when their posts are being moderated
    (notifymod tunable).
  o Not-me-too feature to avoid having the poster receiving their
    own messages (notmetoo tunable).
  o Ability to explicitly reject posts (exposed in new list texts).
  o Ability to explicitly obstruct subscriptions
    (exposed in new list texts).
  o Unsubscribe from all versions of a list at once (changed behaviour
    of +unsubscribe[-{digest|nomail}]; they now all remove the
    subscriber from all versions of the list).
  o Ability to switch between different versions of a list by
    using +subscribe[-{digest|nomail|both}] ('both' means normal and
    digest, and is a 'hidden feature' not mentioned in the supplied
    list texts).
  o Subscription ability in php-admin.
- built mlmmj-receive-strip in contrib directory
- move /usr/share/mlmmj/contrib to /usr/share/doc/package/mlmmj/examples
  where it fits better (according to rpmlint)
- addded rpmlintrc to exclude the examples</changelog>
  <changelog author="aj@ajaissle.de" date="1390651200">- Updated source url</changelog>
  <changelog author="ct@kki.org" date="1395662400">- update to version 1.2.18.1
  o simply fixes three bugs, one of which caused mail to be lost,
    so everybody currently running 1.2.18.0 is encouraged to upgrade.</changelog>
  <changelog author="hvogel@suse.com" date="1405339200">- Don't require fdupes on &lt;SLE11</changelog>
  <changelog author="mrueckert@suse.de" date="1432555200">- update to 1.2.19.0
  o Add README.footers and footer-related resources
  o Support ESMTP so OpenSMTPD uses 8 bits (Paul Fariello)
  o Use iconv to convert unknown character sets
  o Handle unfolded header lines better
  o Add a tunable for moderation request lifetime (Timo Boettcher)
  o Ensure mlmmj-send always honours tunables (e.g. relayhost)
  o Fix reason in denial messages for mails without the list in To:
    or CC:
- mlmmj-rpmlintrc
  - removed line about arch dependent files</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Run over with spec-cleaner
- Do not require recode and use iconv for conversions wrt fate#323644</changelog>
</package>
<package pkgid="9fe1727eeb243957857d4fd731d9ee7674cdd69cb55a76d8fa3ed23118086dc9" name="mlmmj-webarchiver" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="1.1"/>
  <changelog author="asn@cryptomilk.org" date="1390392000">- Initial release.</changelog>
</package>
<package pkgid="cffaea0dbf5e57a770f71309d04f0cf1f211d5bd6d051ea94c7177f610623178" name="mlmmj-webarchiver" arch="src">
  <version epoch="0" ver="1.0.0" rel="1.1"/>
  <changelog author="asn@cryptomilk.org" date="1390392000">- Initial release.</changelog>
</package>
<package pkgid="e23d5b3d48e4a44bcdb636f7d40c642ad7959e61d361fb3f3894aad1902e3506" name="msfetch" arch="noarch">
  <version epoch="0" ver="0.5" rel="2.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1289995200">- initial package (0.5)</changelog>
</package>
<package pkgid="935b5147c19b0c0d71ad4a879e8f36249fedb3772ac1a70a8a4ced7ac807e797" name="msfetch" arch="src">
  <version epoch="0" ver="0.5" rel="2.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1289995200">- initial package (0.5)</changelog>
</package>
<package pkgid="25772e04008a4d8da1672935ce74cd4e118ca0af44de414f393a54bfe579f80d" name="muttprint" arch="noarch">
  <version epoch="0" ver="0.73" rel="1.1"/>
  <changelog author="Bernhard Walle &lt;Bernhard.Walle@gmx.de&gt;" date="1002283200">- new version
- new URL: http://muttprint.sourceforge.net
- new directory: /prefix/lib/muttprint for translation file
  (in earlier versions the translation were included in the
  muttprint-executable)</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.Walle@gmx.de&gt;" date="1008417600">- new version</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.Walle@gmx.de&gt;" date="1045742400">- changed translation place to /prefix/share/muttprint/translations</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.walle@gmx.de&gt;" date="1049716800">- changed translation place to /prefix/lib/muttprint/translations</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.walle@gmx.de&gt;" date="1050321600">- changed translation place to /prefix/share/muttprint/translations</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.Walle@gmx.de&gt;" date="1059393600">- added rule to build muttprint-langinfo</changelog>
  <changelog author="Bernhard Walle &lt;bernhard.walle@gmx.de&gt;" date="1081166400">- Removed muttprint-langinfo, use i18n module</changelog>
  <changelog author="Lukas Ruf &lt;lukas.ruf@lpr.ch&gt;" date="1109937600">- Set current Maintainer with bug reports</changelog>
  <changelog author="Lukas Ruf &lt;lukas.ruf@lpr.ch&gt;" date="1230206400">- Release version 0.73, see Changelog</changelog>
  <changelog author="&lt;dnh@opensuse.org&gt; - 0.73" date="1389009600">- adapt for current openSUSE distributions</changelog>
</package>
<package pkgid="b9b3bee264dff66711ab396a98cee5861850ff1e38634bba946fd8f14f2b7055" name="muttprint" arch="src">
  <version epoch="0" ver="0.73" rel="1.1"/>
  <changelog author="Bernhard Walle &lt;Bernhard.Walle@gmx.de&gt;" date="989668800">- first release with changelog</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.Walle@gmx.de&gt;" date="993211200">- new version</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.Walle@gmx.de&gt;" date="993988800">- new version =&gt; changed dependencies</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.Walle@gmx.de&gt;" date="994507200">- new version</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.Walle@gmx.de&gt;" date="997012800">- new version
- changed specfile because of writing a Makefile
- new Spanish description
- new Italian description</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.Walle@gmx.de&gt;" date="1002283200">- new version
- new URL: http://muttprint.sourceforge.net
- new directory: /prefix/lib/muttprint for translation file
  (in earlier versions the translation were included in the
  muttprint-executable)</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.Walle@gmx.de&gt;" date="1008417600">- new version</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.Walle@gmx.de&gt;" date="1045742400">- changed translation place to /prefix/share/muttprint/translations</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.walle@gmx.de&gt;" date="1049716800">- changed translation place to /prefix/lib/muttprint/translations</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.walle@gmx.de&gt;" date="1050321600">- changed translation place to /prefix/share/muttprint/translations</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.Walle@gmx.de&gt;" date="1059393600">- added rule to build muttprint-langinfo</changelog>
  <changelog author="Bernhard Walle &lt;bernhard.walle@gmx.de&gt;" date="1081166400">- Removed muttprint-langinfo, use i18n module</changelog>
  <changelog author="Lukas Ruf &lt;lukas.ruf@lpr.ch&gt;" date="1109937600">- Set current Maintainer with bug reports</changelog>
  <changelog author="Lukas Ruf &lt;lukas.ruf@lpr.ch&gt;" date="1230206400">- Release version 0.73, see Changelog</changelog>
  <changelog author="&lt;dnh@opensuse.org&gt; - 0.73" date="1389009600">- adapt for current openSUSE distributions</changelog>
</package>
<package pkgid="ab4e5dd43a7aea84e26404ca63a77f7cb41e0838a3a5cf783850ddf79db11013" name="muttprint-lang" arch="noarch">
  <version epoch="0" ver="0.73" rel="1.1"/>
  <changelog author="Bernhard Walle &lt;Bernhard.Walle@gmx.de&gt;" date="1002283200">- new version
- new URL: http://muttprint.sourceforge.net
- new directory: /prefix/lib/muttprint for translation file
  (in earlier versions the translation were included in the
  muttprint-executable)</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.Walle@gmx.de&gt;" date="1008417600">- new version</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.Walle@gmx.de&gt;" date="1045742400">- changed translation place to /prefix/share/muttprint/translations</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.walle@gmx.de&gt;" date="1049716800">- changed translation place to /prefix/lib/muttprint/translations</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.walle@gmx.de&gt;" date="1050321600">- changed translation place to /prefix/share/muttprint/translations</changelog>
  <changelog author="Bernhard Walle &lt;Bernhard.Walle@gmx.de&gt;" date="1059393600">- added rule to build muttprint-langinfo</changelog>
  <changelog author="Bernhard Walle &lt;bernhard.walle@gmx.de&gt;" date="1081166400">- Removed muttprint-langinfo, use i18n module</changelog>
  <changelog author="Lukas Ruf &lt;lukas.ruf@lpr.ch&gt;" date="1109937600">- Set current Maintainer with bug reports</changelog>
  <changelog author="Lukas Ruf &lt;lukas.ruf@lpr.ch&gt;" date="1230206400">- Release version 0.73, see Changelog</changelog>
  <changelog author="&lt;dnh@opensuse.org&gt; - 0.73" date="1389009600">- adapt for current openSUSE distributions</changelog>
</package>
<package pkgid="4a32a222a642d71d80acfae5f61b1bf37218d42188c996aaaaff374b2f5faa93" name="nmzmail" arch="src">
  <version epoch="0" ver="1.1" rel="1.1"/>
  <changelog author="puzel@suse.cz" date="1225281600">- fix-implicit-declarations.patch (fix gcc warnings)</changelog>
  <changelog author="puzel@suse.cz" date="1240315200">- update to 1.1
  * Include string.h instead of strings.h.
  * Update README and manpage.
- remove fix-implicit-declarations.patch (obsolete)</changelog>
  <changelog author="puzel@novell.com" date="1302523200">- use spec-cleaner</changelog>
</package>
<package pkgid="d838e5bee7ef29a88135f7afb2825be3a42ac56626b8d7eeb03f21aff5504bb2" name="nmzmail" arch="x86_64">
  <version epoch="0" ver="1.1" rel="1.1"/>
  <changelog author="puzel@suse.cz" date="1225281600">- fix-implicit-declarations.patch (fix gcc warnings)</changelog>
  <changelog author="puzel@suse.cz" date="1240315200">- update to 1.1
  * Include string.h instead of strings.h.
  * Update README and manpage.
- remove fix-implicit-declarations.patch (obsolete)</changelog>
  <changelog author="puzel@novell.com" date="1302523200">- use spec-cleaner</changelog>
</package>
<package pkgid="50c86bad6f60938a4d29fa20969fe9fbe98c4c11118f30e2b1d5d00f12a477fd" name="nmzmail-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1" rel="1.1"/>
  <changelog author="puzel@suse.cz" date="1225281600">- fix-implicit-declarations.patch (fix gcc warnings)</changelog>
  <changelog author="puzel@suse.cz" date="1240315200">- update to 1.1
  * Include string.h instead of strings.h.
  * Update README and manpage.
- remove fix-implicit-declarations.patch (obsolete)</changelog>
  <changelog author="puzel@novell.com" date="1302523200">- use spec-cleaner</changelog>
</package>
<package pkgid="36c725513b76098b59c99a7a3cff906d52adc31111cf016e5a382592bf8b607b" name="nmzmail-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1" rel="1.1"/>
  <changelog author="puzel@suse.cz" date="1225281600">- fix-implicit-declarations.patch (fix gcc warnings)</changelog>
  <changelog author="puzel@suse.cz" date="1240315200">- update to 1.1
  * Include string.h instead of strings.h.
  * Update README and manpage.
- remove fix-implicit-declarations.patch (obsolete)</changelog>
  <changelog author="puzel@novell.com" date="1302523200">- use spec-cleaner</changelog>
</package>
<package pkgid="9cc41db77e00ae73007f7f0fb7d894ce257fcf5b698e877dcc7ba04f54502912" name="opendmarc" arch="src">
  <version epoch="0" ver="1.3.2" rel="1.3"/>
  <changelog author="opensuse@dstoecker.de" date="1460808000">- first version for openSUSE (based on Fedora version by Steve Jenkins and Todd Lyons)</changelog>
  <changelog author="opensuse@dstoecker.de" date="1486555200">- fix missing dependencies for support scripts</changelog>
  <changelog author="opensuse@dstoecker.de" date="1488888000">- update to 1.3.2</changelog>
</package>
<package pkgid="982e513a46eb39ae355705c06cb0e654ea5c1bb472ceac7c5a1a5f30eaa5fd40" name="opendmarc" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="1.3"/>
  <changelog author="opensuse@dstoecker.de" date="1460808000">- first version for openSUSE (based on Fedora version by Steve Jenkins and Todd Lyons)</changelog>
  <changelog author="opensuse@dstoecker.de" date="1486555200">- fix missing dependencies for support scripts</changelog>
  <changelog author="opensuse@dstoecker.de" date="1488888000">- update to 1.3.2</changelog>
</package>
<package pkgid="9bb88e9aa5552ad2788ff7b5919c5fc7c37277586990f5593225b899d086dcdc" name="opendmarc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="1.3"/>
  <changelog author="opensuse@dstoecker.de" date="1460808000">- first version for openSUSE (based on Fedora version by Steve Jenkins and Todd Lyons)</changelog>
  <changelog author="opensuse@dstoecker.de" date="1486555200">- fix missing dependencies for support scripts</changelog>
  <changelog author="opensuse@dstoecker.de" date="1488888000">- update to 1.3.2</changelog>
</package>
<package pkgid="d8cdee9f0329bb31b3cdce1305a2b4c18dd041d4c8a36df339000820264d2160" name="opendmarc-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="1.3"/>
  <changelog author="opensuse@dstoecker.de" date="1460808000">- first version for openSUSE (based on Fedora version by Steve Jenkins and Todd Lyons)</changelog>
  <changelog author="opensuse@dstoecker.de" date="1486555200">- fix missing dependencies for support scripts</changelog>
  <changelog author="opensuse@dstoecker.de" date="1488888000">- update to 1.3.2</changelog>
</package>
<package pkgid="dd0f8341f2bce8a697fdc15a0e3babafff8bd7da419c06c7a175efec396baac4" name="perdition" arch="src">
  <version epoch="0" ver="2.1" rel="1.1"/>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 1.12</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071662400">- added patch to prevent segfaulting when outgoing_server was set</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071748800">- updated to 1.13beta1</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071835200">- updated to 1.13</changelog>
  <changelog author="simon.matter@invoca.ch" date="1076932800">- added ldap patch</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 1.14beta1</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080907200">- updated to 1.14</changelog>
  <changelog author="simon.matter@invoca.ch" date="1083067200">- updated to 1.15beta1</changelog>
  <changelog author="simon.matter@invoca.ch" date="1085659200">- updated to 1.15</changelog>
  <changelog author="simon.matter@invoca.ch" date="1119441600">- updated to 1.17</changelog>
  <changelog author="simon.matter@invoca.ch" date="1121774400">- change Copyright to License in specfile</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124452800">- fix ssl pki stuff to handle new locations</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124712000">- cosmetic changes in pre and post scripts</changelog>
  <changelog author="simon.matter@invoca.ch" date="1135166400">- fix default config file
- pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136203200">- remove ldap latex docs</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136289600">- add fix to detect mysql libs on 64bit systems
- update ldap patch from CVS
- build with -fPIC</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136462400">- don't overwrite config files on upgrade</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161432000">- Fix spec file so it works with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 1.18
  o lot of changes please see ChangeLog
    http://hg.vergenet.net/perdition/perdition/
- removed obsolete ldap patch
- no pki_dir
- many rpmlint fixes
  o added rpmlintrc
  o init: LSB header
  o pam: common-{auth,account}
  o ldconfig: post/postun
  o macros:
  * stop_on_removal
  * fillup_and_inssserv
  * restart_on_update
  * insserv_cleanup
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to 2.1
  - Apply configured ciperhsuite preferences for outpand connections.
    This is a fix for for CVE-2013-4584.
  - Use 1.0 as the managesieve version
  - Correct base64 calculation errors that resulted in managesieve
    authentication failing in some circumstances.
  - Use "imap" instead of "imap2" as default port for IMAP protocol
  - ldap: fix segmentation fault in dbserver_get2()
  - Manage-sieve: Fix handling of plain login which would
    segmentation fault in some cases
  - Manage-sieve: Fix handling of long authentication hashes
  - Enhance --bind_address option parsing to handle IPv6 addresses
  - Fix 8/4byte integer type miss-matches which may lead to
    undefined behaviour
  - Fix parsing of NIS maps
  - Fix a segmentation fault on start-up when the bind_address
    configuration option is used.
  - Fix handling of the debug and quiet options when specified a
    configuration file
  - Building without PAM libraries installed
  - Documentation enhancements
  - This release fixes several problems. Perhaps most
    significantly, Thunderbird 3.1 can now re-connect to perdition
    SSL/TLS.
  - This fixes a bug in perdition whereby it will exit very early
    on when run in managesieve mode if the default capability is
    used.
  - This includes numerous bug fixes and support for the manage
    sieve protocol.
- refreshed patch to apply cleanly again
  old: perdition-1.17-conf.patch
  new: perdition-2.1-conf.patch
- drop run level 4 from init script
- disable gdbm for now. needs a patch to make it build again</changelog>
</package>
<package pkgid="375764e905115edf9e4b12f0af37d44c9524b3b29f6b5d03ee22a876d00acfa5" name="perdition" arch="x86_64">
  <version epoch="0" ver="2.1" rel="1.1"/>
  <changelog author="simon.matter@invoca.ch" date="1121774400">- change Copyright to License in specfile</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124452800">- fix ssl pki stuff to handle new locations</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124712000">- cosmetic changes in pre and post scripts</changelog>
  <changelog author="simon.matter@invoca.ch" date="1135166400">- fix default config file
- pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136203200">- remove ldap latex docs</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136289600">- add fix to detect mysql libs on 64bit systems
- update ldap patch from CVS
- build with -fPIC</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136462400">- don't overwrite config files on upgrade</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161432000">- Fix spec file so it works with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 1.18
  o lot of changes please see ChangeLog
    http://hg.vergenet.net/perdition/perdition/
- removed obsolete ldap patch
- no pki_dir
- many rpmlint fixes
  o added rpmlintrc
  o init: LSB header
  o pam: common-{auth,account}
  o ldconfig: post/postun
  o macros:
  * stop_on_removal
  * fillup_and_inssserv
  * restart_on_update
  * insserv_cleanup
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to 2.1
  - Apply configured ciperhsuite preferences for outpand connections.
    This is a fix for for CVE-2013-4584.
  - Use 1.0 as the managesieve version
  - Correct base64 calculation errors that resulted in managesieve
    authentication failing in some circumstances.
  - Use "imap" instead of "imap2" as default port for IMAP protocol
  - ldap: fix segmentation fault in dbserver_get2()
  - Manage-sieve: Fix handling of plain login which would
    segmentation fault in some cases
  - Manage-sieve: Fix handling of long authentication hashes
  - Enhance --bind_address option parsing to handle IPv6 addresses
  - Fix 8/4byte integer type miss-matches which may lead to
    undefined behaviour
  - Fix parsing of NIS maps
  - Fix a segmentation fault on start-up when the bind_address
    configuration option is used.
  - Fix handling of the debug and quiet options when specified a
    configuration file
  - Building without PAM libraries installed
  - Documentation enhancements
  - This release fixes several problems. Perhaps most
    significantly, Thunderbird 3.1 can now re-connect to perdition
    SSL/TLS.
  - This fixes a bug in perdition whereby it will exit very early
    on when run in managesieve mode if the default capability is
    used.
  - This includes numerous bug fixes and support for the manage
    sieve protocol.
- refreshed patch to apply cleanly again
  old: perdition-1.17-conf.patch
  new: perdition-2.1-conf.patch
- drop run level 4 from init script
- disable gdbm for now. needs a patch to make it build again</changelog>
</package>
<package pkgid="b42cc760857635fbc621eeaeaf337bc9350d8fb636f00a595b99b499926fd94f" name="perdition-bdb" arch="x86_64">
  <version epoch="0" ver="2.1" rel="1.1"/>
  <changelog author="simon.matter@invoca.ch" date="1121774400">- change Copyright to License in specfile</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124452800">- fix ssl pki stuff to handle new locations</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124712000">- cosmetic changes in pre and post scripts</changelog>
  <changelog author="simon.matter@invoca.ch" date="1135166400">- fix default config file
- pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136203200">- remove ldap latex docs</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136289600">- add fix to detect mysql libs on 64bit systems
- update ldap patch from CVS
- build with -fPIC</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136462400">- don't overwrite config files on upgrade</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161432000">- Fix spec file so it works with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 1.18
  o lot of changes please see ChangeLog
    http://hg.vergenet.net/perdition/perdition/
- removed obsolete ldap patch
- no pki_dir
- many rpmlint fixes
  o added rpmlintrc
  o init: LSB header
  o pam: common-{auth,account}
  o ldconfig: post/postun
  o macros:
  * stop_on_removal
  * fillup_and_inssserv
  * restart_on_update
  * insserv_cleanup
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to 2.1
  - Apply configured ciperhsuite preferences for outpand connections.
    This is a fix for for CVE-2013-4584.
  - Use 1.0 as the managesieve version
  - Correct base64 calculation errors that resulted in managesieve
    authentication failing in some circumstances.
  - Use "imap" instead of "imap2" as default port for IMAP protocol
  - ldap: fix segmentation fault in dbserver_get2()
  - Manage-sieve: Fix handling of plain login which would
    segmentation fault in some cases
  - Manage-sieve: Fix handling of long authentication hashes
  - Enhance --bind_address option parsing to handle IPv6 addresses
  - Fix 8/4byte integer type miss-matches which may lead to
    undefined behaviour
  - Fix parsing of NIS maps
  - Fix a segmentation fault on start-up when the bind_address
    configuration option is used.
  - Fix handling of the debug and quiet options when specified a
    configuration file
  - Building without PAM libraries installed
  - Documentation enhancements
  - This release fixes several problems. Perhaps most
    significantly, Thunderbird 3.1 can now re-connect to perdition
    SSL/TLS.
  - This fixes a bug in perdition whereby it will exit very early
    on when run in managesieve mode if the default capability is
    used.
  - This includes numerous bug fixes and support for the manage
    sieve protocol.
- refreshed patch to apply cleanly again
  old: perdition-1.17-conf.patch
  new: perdition-2.1-conf.patch
- drop run level 4 from init script
- disable gdbm for now. needs a patch to make it build again</changelog>
</package>
<package pkgid="331cbbafa758c240339b70a1e8ceeef42d35c1eea0839e18ed3ef0fc2f4a0a1b" name="perdition-bdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1" rel="1.1"/>
  <changelog author="simon.matter@invoca.ch" date="1121774400">- change Copyright to License in specfile</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124452800">- fix ssl pki stuff to handle new locations</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124712000">- cosmetic changes in pre and post scripts</changelog>
  <changelog author="simon.matter@invoca.ch" date="1135166400">- fix default config file
- pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136203200">- remove ldap latex docs</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136289600">- add fix to detect mysql libs on 64bit systems
- update ldap patch from CVS
- build with -fPIC</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136462400">- don't overwrite config files on upgrade</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161432000">- Fix spec file so it works with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 1.18
  o lot of changes please see ChangeLog
    http://hg.vergenet.net/perdition/perdition/
- removed obsolete ldap patch
- no pki_dir
- many rpmlint fixes
  o added rpmlintrc
  o init: LSB header
  o pam: common-{auth,account}
  o ldconfig: post/postun
  o macros:
  * stop_on_removal
  * fillup_and_inssserv
  * restart_on_update
  * insserv_cleanup
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to 2.1
  - Apply configured ciperhsuite preferences for outpand connections.
    This is a fix for for CVE-2013-4584.
  - Use 1.0 as the managesieve version
  - Correct base64 calculation errors that resulted in managesieve
    authentication failing in some circumstances.
  - Use "imap" instead of "imap2" as default port for IMAP protocol
  - ldap: fix segmentation fault in dbserver_get2()
  - Manage-sieve: Fix handling of plain login which would
    segmentation fault in some cases
  - Manage-sieve: Fix handling of long authentication hashes
  - Enhance --bind_address option parsing to handle IPv6 addresses
  - Fix 8/4byte integer type miss-matches which may lead to
    undefined behaviour
  - Fix parsing of NIS maps
  - Fix a segmentation fault on start-up when the bind_address
    configuration option is used.
  - Fix handling of the debug and quiet options when specified a
    configuration file
  - Building without PAM libraries installed
  - Documentation enhancements
  - This release fixes several problems. Perhaps most
    significantly, Thunderbird 3.1 can now re-connect to perdition
    SSL/TLS.
  - This fixes a bug in perdition whereby it will exit very early
    on when run in managesieve mode if the default capability is
    used.
  - This includes numerous bug fixes and support for the manage
    sieve protocol.
- refreshed patch to apply cleanly again
  old: perdition-1.17-conf.patch
  new: perdition-2.1-conf.patch
- drop run level 4 from init script
- disable gdbm for now. needs a patch to make it build again</changelog>
</package>
<package pkgid="60f96e7d178739cab1e4874dd03f271e1a6da849e828043b4fd52dc37e3ad5fb" name="perdition-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1" rel="1.1"/>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 1.12</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071662400">- added patch to prevent segfaulting when outgoing_server was set</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071748800">- updated to 1.13beta1</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071835200">- updated to 1.13</changelog>
  <changelog author="simon.matter@invoca.ch" date="1076932800">- added ldap patch</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 1.14beta1</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080907200">- updated to 1.14</changelog>
  <changelog author="simon.matter@invoca.ch" date="1083067200">- updated to 1.15beta1</changelog>
  <changelog author="simon.matter@invoca.ch" date="1085659200">- updated to 1.15</changelog>
  <changelog author="simon.matter@invoca.ch" date="1119441600">- updated to 1.17</changelog>
  <changelog author="simon.matter@invoca.ch" date="1121774400">- change Copyright to License in specfile</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124452800">- fix ssl pki stuff to handle new locations</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124712000">- cosmetic changes in pre and post scripts</changelog>
  <changelog author="simon.matter@invoca.ch" date="1135166400">- fix default config file
- pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136203200">- remove ldap latex docs</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136289600">- add fix to detect mysql libs on 64bit systems
- update ldap patch from CVS
- build with -fPIC</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136462400">- don't overwrite config files on upgrade</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161432000">- Fix spec file so it works with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 1.18
  o lot of changes please see ChangeLog
    http://hg.vergenet.net/perdition/perdition/
- removed obsolete ldap patch
- no pki_dir
- many rpmlint fixes
  o added rpmlintrc
  o init: LSB header
  o pam: common-{auth,account}
  o ldconfig: post/postun
  o macros:
  * stop_on_removal
  * fillup_and_inssserv
  * restart_on_update
  * insserv_cleanup
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to 2.1
  - Apply configured ciperhsuite preferences for outpand connections.
    This is a fix for for CVE-2013-4584.
  - Use 1.0 as the managesieve version
  - Correct base64 calculation errors that resulted in managesieve
    authentication failing in some circumstances.
  - Use "imap" instead of "imap2" as default port for IMAP protocol
  - ldap: fix segmentation fault in dbserver_get2()
  - Manage-sieve: Fix handling of plain login which would
    segmentation fault in some cases
  - Manage-sieve: Fix handling of long authentication hashes
  - Enhance --bind_address option parsing to handle IPv6 addresses
  - Fix 8/4byte integer type miss-matches which may lead to
    undefined behaviour
  - Fix parsing of NIS maps
  - Fix a segmentation fault on start-up when the bind_address
    configuration option is used.
  - Fix handling of the debug and quiet options when specified a
    configuration file
  - Building without PAM libraries installed
  - Documentation enhancements
  - This release fixes several problems. Perhaps most
    significantly, Thunderbird 3.1 can now re-connect to perdition
    SSL/TLS.
  - This fixes a bug in perdition whereby it will exit very early
    on when run in managesieve mode if the default capability is
    used.
  - This includes numerous bug fixes and support for the manage
    sieve protocol.
- refreshed patch to apply cleanly again
  old: perdition-1.17-conf.patch
  new: perdition-2.1-conf.patch
- drop run level 4 from init script
- disable gdbm for now. needs a patch to make it build again</changelog>
</package>
<package pkgid="17a84114d5d3357ccc058fc212155298e1f45fa415e93414c1ac7a30b8fab2e9" name="perdition-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1" rel="1.1"/>
  <changelog author="simon.matter@invoca.ch" date="1121774400">- change Copyright to License in specfile</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124452800">- fix ssl pki stuff to handle new locations</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124712000">- cosmetic changes in pre and post scripts</changelog>
  <changelog author="simon.matter@invoca.ch" date="1135166400">- fix default config file
- pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136203200">- remove ldap latex docs</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136289600">- add fix to detect mysql libs on 64bit systems
- update ldap patch from CVS
- build with -fPIC</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136462400">- don't overwrite config files on upgrade</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161432000">- Fix spec file so it works with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 1.18
  o lot of changes please see ChangeLog
    http://hg.vergenet.net/perdition/perdition/
- removed obsolete ldap patch
- no pki_dir
- many rpmlint fixes
  o added rpmlintrc
  o init: LSB header
  o pam: common-{auth,account}
  o ldconfig: post/postun
  o macros:
  * stop_on_removal
  * fillup_and_inssserv
  * restart_on_update
  * insserv_cleanup
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to 2.1
  - Apply configured ciperhsuite preferences for outpand connections.
    This is a fix for for CVE-2013-4584.
  - Use 1.0 as the managesieve version
  - Correct base64 calculation errors that resulted in managesieve
    authentication failing in some circumstances.
  - Use "imap" instead of "imap2" as default port for IMAP protocol
  - ldap: fix segmentation fault in dbserver_get2()
  - Manage-sieve: Fix handling of plain login which would
    segmentation fault in some cases
  - Manage-sieve: Fix handling of long authentication hashes
  - Enhance --bind_address option parsing to handle IPv6 addresses
  - Fix 8/4byte integer type miss-matches which may lead to
    undefined behaviour
  - Fix parsing of NIS maps
  - Fix a segmentation fault on start-up when the bind_address
    configuration option is used.
  - Fix handling of the debug and quiet options when specified a
    configuration file
  - Building without PAM libraries installed
  - Documentation enhancements
  - This release fixes several problems. Perhaps most
    significantly, Thunderbird 3.1 can now re-connect to perdition
    SSL/TLS.
  - This fixes a bug in perdition whereby it will exit very early
    on when run in managesieve mode if the default capability is
    used.
  - This includes numerous bug fixes and support for the manage
    sieve protocol.
- refreshed patch to apply cleanly again
  old: perdition-1.17-conf.patch
  new: perdition-2.1-conf.patch
- drop run level 4 from init script
- disable gdbm for now. needs a patch to make it build again</changelog>
</package>
<package pkgid="e1ebd0a2f2ec4fe95298fa825f45d4078298ed114f8acfe1a35fe025a34415f7" name="perdition-devel" arch="x86_64">
  <version epoch="0" ver="2.1" rel="1.1"/>
  <changelog author="simon.matter@invoca.ch" date="1121774400">- change Copyright to License in specfile</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124452800">- fix ssl pki stuff to handle new locations</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124712000">- cosmetic changes in pre and post scripts</changelog>
  <changelog author="simon.matter@invoca.ch" date="1135166400">- fix default config file
- pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136203200">- remove ldap latex docs</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136289600">- add fix to detect mysql libs on 64bit systems
- update ldap patch from CVS
- build with -fPIC</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136462400">- don't overwrite config files on upgrade</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161432000">- Fix spec file so it works with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 1.18
  o lot of changes please see ChangeLog
    http://hg.vergenet.net/perdition/perdition/
- removed obsolete ldap patch
- no pki_dir
- many rpmlint fixes
  o added rpmlintrc
  o init: LSB header
  o pam: common-{auth,account}
  o ldconfig: post/postun
  o macros:
  * stop_on_removal
  * fillup_and_inssserv
  * restart_on_update
  * insserv_cleanup
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to 2.1
  - Apply configured ciperhsuite preferences for outpand connections.
    This is a fix for for CVE-2013-4584.
  - Use 1.0 as the managesieve version
  - Correct base64 calculation errors that resulted in managesieve
    authentication failing in some circumstances.
  - Use "imap" instead of "imap2" as default port for IMAP protocol
  - ldap: fix segmentation fault in dbserver_get2()
  - Manage-sieve: Fix handling of plain login which would
    segmentation fault in some cases
  - Manage-sieve: Fix handling of long authentication hashes
  - Enhance --bind_address option parsing to handle IPv6 addresses
  - Fix 8/4byte integer type miss-matches which may lead to
    undefined behaviour
  - Fix parsing of NIS maps
  - Fix a segmentation fault on start-up when the bind_address
    configuration option is used.
  - Fix handling of the debug and quiet options when specified a
    configuration file
  - Building without PAM libraries installed
  - Documentation enhancements
  - This release fixes several problems. Perhaps most
    significantly, Thunderbird 3.1 can now re-connect to perdition
    SSL/TLS.
  - This fixes a bug in perdition whereby it will exit very early
    on when run in managesieve mode if the default capability is
    used.
  - This includes numerous bug fixes and support for the manage
    sieve protocol.
- refreshed patch to apply cleanly again
  old: perdition-1.17-conf.patch
  new: perdition-2.1-conf.patch
- drop run level 4 from init script
- disable gdbm for now. needs a patch to make it build again</changelog>
</package>
<package pkgid="c560bf01e890ddebeaa560f2e9f460eeca9f38cf3a4a58b1de7230dce35603f0" name="perdition-ldap" arch="x86_64">
  <version epoch="0" ver="2.1" rel="1.1"/>
  <changelog author="simon.matter@invoca.ch" date="1121774400">- change Copyright to License in specfile</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124452800">- fix ssl pki stuff to handle new locations</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124712000">- cosmetic changes in pre and post scripts</changelog>
  <changelog author="simon.matter@invoca.ch" date="1135166400">- fix default config file
- pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136203200">- remove ldap latex docs</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136289600">- add fix to detect mysql libs on 64bit systems
- update ldap patch from CVS
- build with -fPIC</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136462400">- don't overwrite config files on upgrade</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161432000">- Fix spec file so it works with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 1.18
  o lot of changes please see ChangeLog
    http://hg.vergenet.net/perdition/perdition/
- removed obsolete ldap patch
- no pki_dir
- many rpmlint fixes
  o added rpmlintrc
  o init: LSB header
  o pam: common-{auth,account}
  o ldconfig: post/postun
  o macros:
  * stop_on_removal
  * fillup_and_inssserv
  * restart_on_update
  * insserv_cleanup
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to 2.1
  - Apply configured ciperhsuite preferences for outpand connections.
    This is a fix for for CVE-2013-4584.
  - Use 1.0 as the managesieve version
  - Correct base64 calculation errors that resulted in managesieve
    authentication failing in some circumstances.
  - Use "imap" instead of "imap2" as default port for IMAP protocol
  - ldap: fix segmentation fault in dbserver_get2()
  - Manage-sieve: Fix handling of plain login which would
    segmentation fault in some cases
  - Manage-sieve: Fix handling of long authentication hashes
  - Enhance --bind_address option parsing to handle IPv6 addresses
  - Fix 8/4byte integer type miss-matches which may lead to
    undefined behaviour
  - Fix parsing of NIS maps
  - Fix a segmentation fault on start-up when the bind_address
    configuration option is used.
  - Fix handling of the debug and quiet options when specified a
    configuration file
  - Building without PAM libraries installed
  - Documentation enhancements
  - This release fixes several problems. Perhaps most
    significantly, Thunderbird 3.1 can now re-connect to perdition
    SSL/TLS.
  - This fixes a bug in perdition whereby it will exit very early
    on when run in managesieve mode if the default capability is
    used.
  - This includes numerous bug fixes and support for the manage
    sieve protocol.
- refreshed patch to apply cleanly again
  old: perdition-1.17-conf.patch
  new: perdition-2.1-conf.patch
- drop run level 4 from init script
- disable gdbm for now. needs a patch to make it build again</changelog>
</package>
<package pkgid="12550374b537336e27f4930b381ce853b2574b19951c187b1e4a6ea8c59db4ff" name="perdition-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1" rel="1.1"/>
  <changelog author="simon.matter@invoca.ch" date="1121774400">- change Copyright to License in specfile</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124452800">- fix ssl pki stuff to handle new locations</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124712000">- cosmetic changes in pre and post scripts</changelog>
  <changelog author="simon.matter@invoca.ch" date="1135166400">- fix default config file
- pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136203200">- remove ldap latex docs</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136289600">- add fix to detect mysql libs on 64bit systems
- update ldap patch from CVS
- build with -fPIC</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136462400">- don't overwrite config files on upgrade</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161432000">- Fix spec file so it works with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 1.18
  o lot of changes please see ChangeLog
    http://hg.vergenet.net/perdition/perdition/
- removed obsolete ldap patch
- no pki_dir
- many rpmlint fixes
  o added rpmlintrc
  o init: LSB header
  o pam: common-{auth,account}
  o ldconfig: post/postun
  o macros:
  * stop_on_removal
  * fillup_and_inssserv
  * restart_on_update
  * insserv_cleanup
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to 2.1
  - Apply configured ciperhsuite preferences for outpand connections.
    This is a fix for for CVE-2013-4584.
  - Use 1.0 as the managesieve version
  - Correct base64 calculation errors that resulted in managesieve
    authentication failing in some circumstances.
  - Use "imap" instead of "imap2" as default port for IMAP protocol
  - ldap: fix segmentation fault in dbserver_get2()
  - Manage-sieve: Fix handling of plain login which would
    segmentation fault in some cases
  - Manage-sieve: Fix handling of long authentication hashes
  - Enhance --bind_address option parsing to handle IPv6 addresses
  - Fix 8/4byte integer type miss-matches which may lead to
    undefined behaviour
  - Fix parsing of NIS maps
  - Fix a segmentation fault on start-up when the bind_address
    configuration option is used.
  - Fix handling of the debug and quiet options when specified a
    configuration file
  - Building without PAM libraries installed
  - Documentation enhancements
  - This release fixes several problems. Perhaps most
    significantly, Thunderbird 3.1 can now re-connect to perdition
    SSL/TLS.
  - This fixes a bug in perdition whereby it will exit very early
    on when run in managesieve mode if the default capability is
    used.
  - This includes numerous bug fixes and support for the manage
    sieve protocol.
- refreshed patch to apply cleanly again
  old: perdition-1.17-conf.patch
  new: perdition-2.1-conf.patch
- drop run level 4 from init script
- disable gdbm for now. needs a patch to make it build again</changelog>
</package>
<package pkgid="eea06fd61e4215538ef5803bf4014e339e2be8a30338d636c0cfa0d966be2a43" name="perdition-mysql" arch="x86_64">
  <version epoch="0" ver="2.1" rel="1.1"/>
  <changelog author="simon.matter@invoca.ch" date="1121774400">- change Copyright to License in specfile</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124452800">- fix ssl pki stuff to handle new locations</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124712000">- cosmetic changes in pre and post scripts</changelog>
  <changelog author="simon.matter@invoca.ch" date="1135166400">- fix default config file
- pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136203200">- remove ldap latex docs</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136289600">- add fix to detect mysql libs on 64bit systems
- update ldap patch from CVS
- build with -fPIC</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136462400">- don't overwrite config files on upgrade</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161432000">- Fix spec file so it works with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 1.18
  o lot of changes please see ChangeLog
    http://hg.vergenet.net/perdition/perdition/
- removed obsolete ldap patch
- no pki_dir
- many rpmlint fixes
  o added rpmlintrc
  o init: LSB header
  o pam: common-{auth,account}
  o ldconfig: post/postun
  o macros:
  * stop_on_removal
  * fillup_and_inssserv
  * restart_on_update
  * insserv_cleanup
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to 2.1
  - Apply configured ciperhsuite preferences for outpand connections.
    This is a fix for for CVE-2013-4584.
  - Use 1.0 as the managesieve version
  - Correct base64 calculation errors that resulted in managesieve
    authentication failing in some circumstances.
  - Use "imap" instead of "imap2" as default port for IMAP protocol
  - ldap: fix segmentation fault in dbserver_get2()
  - Manage-sieve: Fix handling of plain login which would
    segmentation fault in some cases
  - Manage-sieve: Fix handling of long authentication hashes
  - Enhance --bind_address option parsing to handle IPv6 addresses
  - Fix 8/4byte integer type miss-matches which may lead to
    undefined behaviour
  - Fix parsing of NIS maps
  - Fix a segmentation fault on start-up when the bind_address
    configuration option is used.
  - Fix handling of the debug and quiet options when specified a
    configuration file
  - Building without PAM libraries installed
  - Documentation enhancements
  - This release fixes several problems. Perhaps most
    significantly, Thunderbird 3.1 can now re-connect to perdition
    SSL/TLS.
  - This fixes a bug in perdition whereby it will exit very early
    on when run in managesieve mode if the default capability is
    used.
  - This includes numerous bug fixes and support for the manage
    sieve protocol.
- refreshed patch to apply cleanly again
  old: perdition-1.17-conf.patch
  new: perdition-2.1-conf.patch
- drop run level 4 from init script
- disable gdbm for now. needs a patch to make it build again</changelog>
</package>
<package pkgid="042d2a64a5e2ed94a93f9cffb3eecb99cf18fc0b6e9dda37a491373b8cae5e31" name="perdition-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1" rel="1.1"/>
  <changelog author="simon.matter@invoca.ch" date="1121774400">- change Copyright to License in specfile</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124452800">- fix ssl pki stuff to handle new locations</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124712000">- cosmetic changes in pre and post scripts</changelog>
  <changelog author="simon.matter@invoca.ch" date="1135166400">- fix default config file
- pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136203200">- remove ldap latex docs</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136289600">- add fix to detect mysql libs on 64bit systems
- update ldap patch from CVS
- build with -fPIC</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136462400">- don't overwrite config files on upgrade</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161432000">- Fix spec file so it works with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 1.18
  o lot of changes please see ChangeLog
    http://hg.vergenet.net/perdition/perdition/
- removed obsolete ldap patch
- no pki_dir
- many rpmlint fixes
  o added rpmlintrc
  o init: LSB header
  o pam: common-{auth,account}
  o ldconfig: post/postun
  o macros:
  * stop_on_removal
  * fillup_and_inssserv
  * restart_on_update
  * insserv_cleanup
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to 2.1
  - Apply configured ciperhsuite preferences for outpand connections.
    This is a fix for for CVE-2013-4584.
  - Use 1.0 as the managesieve version
  - Correct base64 calculation errors that resulted in managesieve
    authentication failing in some circumstances.
  - Use "imap" instead of "imap2" as default port for IMAP protocol
  - ldap: fix segmentation fault in dbserver_get2()
  - Manage-sieve: Fix handling of plain login which would
    segmentation fault in some cases
  - Manage-sieve: Fix handling of long authentication hashes
  - Enhance --bind_address option parsing to handle IPv6 addresses
  - Fix 8/4byte integer type miss-matches which may lead to
    undefined behaviour
  - Fix parsing of NIS maps
  - Fix a segmentation fault on start-up when the bind_address
    configuration option is used.
  - Fix handling of the debug and quiet options when specified a
    configuration file
  - Building without PAM libraries installed
  - Documentation enhancements
  - This release fixes several problems. Perhaps most
    significantly, Thunderbird 3.1 can now re-connect to perdition
    SSL/TLS.
  - This fixes a bug in perdition whereby it will exit very early
    on when run in managesieve mode if the default capability is
    used.
  - This includes numerous bug fixes and support for the manage
    sieve protocol.
- refreshed patch to apply cleanly again
  old: perdition-1.17-conf.patch
  new: perdition-2.1-conf.patch
- drop run level 4 from init script
- disable gdbm for now. needs a patch to make it build again</changelog>
</package>
<package pkgid="a7e482adc921294c41a7497e84614b89b8dea08c53f653159a78ff0bb8dc5db2" name="perdition-odbc" arch="x86_64">
  <version epoch="0" ver="2.1" rel="1.1"/>
  <changelog author="simon.matter@invoca.ch" date="1121774400">- change Copyright to License in specfile</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124452800">- fix ssl pki stuff to handle new locations</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124712000">- cosmetic changes in pre and post scripts</changelog>
  <changelog author="simon.matter@invoca.ch" date="1135166400">- fix default config file
- pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136203200">- remove ldap latex docs</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136289600">- add fix to detect mysql libs on 64bit systems
- update ldap patch from CVS
- build with -fPIC</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136462400">- don't overwrite config files on upgrade</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161432000">- Fix spec file so it works with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 1.18
  o lot of changes please see ChangeLog
    http://hg.vergenet.net/perdition/perdition/
- removed obsolete ldap patch
- no pki_dir
- many rpmlint fixes
  o added rpmlintrc
  o init: LSB header
  o pam: common-{auth,account}
  o ldconfig: post/postun
  o macros:
  * stop_on_removal
  * fillup_and_inssserv
  * restart_on_update
  * insserv_cleanup
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to 2.1
  - Apply configured ciperhsuite preferences for outpand connections.
    This is a fix for for CVE-2013-4584.
  - Use 1.0 as the managesieve version
  - Correct base64 calculation errors that resulted in managesieve
    authentication failing in some circumstances.
  - Use "imap" instead of "imap2" as default port for IMAP protocol
  - ldap: fix segmentation fault in dbserver_get2()
  - Manage-sieve: Fix handling of plain login which would
    segmentation fault in some cases
  - Manage-sieve: Fix handling of long authentication hashes
  - Enhance --bind_address option parsing to handle IPv6 addresses
  - Fix 8/4byte integer type miss-matches which may lead to
    undefined behaviour
  - Fix parsing of NIS maps
  - Fix a segmentation fault on start-up when the bind_address
    configuration option is used.
  - Fix handling of the debug and quiet options when specified a
    configuration file
  - Building without PAM libraries installed
  - Documentation enhancements
  - This release fixes several problems. Perhaps most
    significantly, Thunderbird 3.1 can now re-connect to perdition
    SSL/TLS.
  - This fixes a bug in perdition whereby it will exit very early
    on when run in managesieve mode if the default capability is
    used.
  - This includes numerous bug fixes and support for the manage
    sieve protocol.
- refreshed patch to apply cleanly again
  old: perdition-1.17-conf.patch
  new: perdition-2.1-conf.patch
- drop run level 4 from init script
- disable gdbm for now. needs a patch to make it build again</changelog>
</package>
<package pkgid="d3efa20aabbb06a1ff7f7311c6bc3e3c9ddfaf2d7f776a933a885ee5de9d1b1e" name="perdition-odbc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1" rel="1.1"/>
  <changelog author="simon.matter@invoca.ch" date="1121774400">- change Copyright to License in specfile</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124452800">- fix ssl pki stuff to handle new locations</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124712000">- cosmetic changes in pre and post scripts</changelog>
  <changelog author="simon.matter@invoca.ch" date="1135166400">- fix default config file
- pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136203200">- remove ldap latex docs</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136289600">- add fix to detect mysql libs on 64bit systems
- update ldap patch from CVS
- build with -fPIC</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136462400">- don't overwrite config files on upgrade</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161432000">- Fix spec file so it works with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 1.18
  o lot of changes please see ChangeLog
    http://hg.vergenet.net/perdition/perdition/
- removed obsolete ldap patch
- no pki_dir
- many rpmlint fixes
  o added rpmlintrc
  o init: LSB header
  o pam: common-{auth,account}
  o ldconfig: post/postun
  o macros:
  * stop_on_removal
  * fillup_and_inssserv
  * restart_on_update
  * insserv_cleanup
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to 2.1
  - Apply configured ciperhsuite preferences for outpand connections.
    This is a fix for for CVE-2013-4584.
  - Use 1.0 as the managesieve version
  - Correct base64 calculation errors that resulted in managesieve
    authentication failing in some circumstances.
  - Use "imap" instead of "imap2" as default port for IMAP protocol
  - ldap: fix segmentation fault in dbserver_get2()
  - Manage-sieve: Fix handling of plain login which would
    segmentation fault in some cases
  - Manage-sieve: Fix handling of long authentication hashes
  - Enhance --bind_address option parsing to handle IPv6 addresses
  - Fix 8/4byte integer type miss-matches which may lead to
    undefined behaviour
  - Fix parsing of NIS maps
  - Fix a segmentation fault on start-up when the bind_address
    configuration option is used.
  - Fix handling of the debug and quiet options when specified a
    configuration file
  - Building without PAM libraries installed
  - Documentation enhancements
  - This release fixes several problems. Perhaps most
    significantly, Thunderbird 3.1 can now re-connect to perdition
    SSL/TLS.
  - This fixes a bug in perdition whereby it will exit very early
    on when run in managesieve mode if the default capability is
    used.
  - This includes numerous bug fixes and support for the manage
    sieve protocol.
- refreshed patch to apply cleanly again
  old: perdition-1.17-conf.patch
  new: perdition-2.1-conf.patch
- drop run level 4 from init script
- disable gdbm for now. needs a patch to make it build again</changelog>
</package>
<package pkgid="e77c2d6a8e11f4ebda3167f5d720f270ed63835b88463d0f00531ae9acd489f1" name="perdition-pgsql" arch="x86_64">
  <version epoch="0" ver="2.1" rel="1.1"/>
  <changelog author="simon.matter@invoca.ch" date="1121774400">- change Copyright to License in specfile</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124452800">- fix ssl pki stuff to handle new locations</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124712000">- cosmetic changes in pre and post scripts</changelog>
  <changelog author="simon.matter@invoca.ch" date="1135166400">- fix default config file
- pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136203200">- remove ldap latex docs</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136289600">- add fix to detect mysql libs on 64bit systems
- update ldap patch from CVS
- build with -fPIC</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136462400">- don't overwrite config files on upgrade</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161432000">- Fix spec file so it works with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 1.18
  o lot of changes please see ChangeLog
    http://hg.vergenet.net/perdition/perdition/
- removed obsolete ldap patch
- no pki_dir
- many rpmlint fixes
  o added rpmlintrc
  o init: LSB header
  o pam: common-{auth,account}
  o ldconfig: post/postun
  o macros:
  * stop_on_removal
  * fillup_and_inssserv
  * restart_on_update
  * insserv_cleanup
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to 2.1
  - Apply configured ciperhsuite preferences for outpand connections.
    This is a fix for for CVE-2013-4584.
  - Use 1.0 as the managesieve version
  - Correct base64 calculation errors that resulted in managesieve
    authentication failing in some circumstances.
  - Use "imap" instead of "imap2" as default port for IMAP protocol
  - ldap: fix segmentation fault in dbserver_get2()
  - Manage-sieve: Fix handling of plain login which would
    segmentation fault in some cases
  - Manage-sieve: Fix handling of long authentication hashes
  - Enhance --bind_address option parsing to handle IPv6 addresses
  - Fix 8/4byte integer type miss-matches which may lead to
    undefined behaviour
  - Fix parsing of NIS maps
  - Fix a segmentation fault on start-up when the bind_address
    configuration option is used.
  - Fix handling of the debug and quiet options when specified a
    configuration file
  - Building without PAM libraries installed
  - Documentation enhancements
  - This release fixes several problems. Perhaps most
    significantly, Thunderbird 3.1 can now re-connect to perdition
    SSL/TLS.
  - This fixes a bug in perdition whereby it will exit very early
    on when run in managesieve mode if the default capability is
    used.
  - This includes numerous bug fixes and support for the manage
    sieve protocol.
- refreshed patch to apply cleanly again
  old: perdition-1.17-conf.patch
  new: perdition-2.1-conf.patch
- drop run level 4 from init script
- disable gdbm for now. needs a patch to make it build again</changelog>
</package>
<package pkgid="2dc9f18a3674b059ad4c9b5e163776bacb536a326870aa1219d4b6f7cbbe39aa" name="perdition-pgsql-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1" rel="1.1"/>
  <changelog author="simon.matter@invoca.ch" date="1121774400">- change Copyright to License in specfile</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124452800">- fix ssl pki stuff to handle new locations</changelog>
  <changelog author="simon.matter@invoca.ch" date="1124712000">- cosmetic changes in pre and post scripts</changelog>
  <changelog author="simon.matter@invoca.ch" date="1135166400">- fix default config file
- pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136203200">- remove ldap latex docs</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136289600">- add fix to detect mysql libs on 64bit systems
- update ldap patch from CVS
- build with -fPIC</changelog>
  <changelog author="simon.matter@invoca.ch" date="1136462400">- don't overwrite config files on upgrade</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161432000">- Fix spec file so it works with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 1.18
  o lot of changes please see ChangeLog
    http://hg.vergenet.net/perdition/perdition/
- removed obsolete ldap patch
- no pki_dir
- many rpmlint fixes
  o added rpmlintrc
  o init: LSB header
  o pam: common-{auth,account}
  o ldconfig: post/postun
  o macros:
  * stop_on_removal
  * fillup_and_inssserv
  * restart_on_update
  * insserv_cleanup
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to 2.1
  - Apply configured ciperhsuite preferences for outpand connections.
    This is a fix for for CVE-2013-4584.
  - Use 1.0 as the managesieve version
  - Correct base64 calculation errors that resulted in managesieve
    authentication failing in some circumstances.
  - Use "imap" instead of "imap2" as default port for IMAP protocol
  - ldap: fix segmentation fault in dbserver_get2()
  - Manage-sieve: Fix handling of plain login which would
    segmentation fault in some cases
  - Manage-sieve: Fix handling of long authentication hashes
  - Enhance --bind_address option parsing to handle IPv6 addresses
  - Fix 8/4byte integer type miss-matches which may lead to
    undefined behaviour
  - Fix parsing of NIS maps
  - Fix a segmentation fault on start-up when the bind_address
    configuration option is used.
  - Fix handling of the debug and quiet options when specified a
    configuration file
  - Building without PAM libraries installed
  - Documentation enhancements
  - This release fixes several problems. Perhaps most
    significantly, Thunderbird 3.1 can now re-connect to perdition
    SSL/TLS.
  - This fixes a bug in perdition whereby it will exit very early
    on when run in managesieve mode if the default capability is
    used.
  - This includes numerous bug fixes and support for the manage
    sieve protocol.
- refreshed patch to apply cleanly again
  old: perdition-1.17-conf.patch
  new: perdition-2.1-conf.patch
- drop run level 4 from init script
- disable gdbm for now. needs a patch to make it build again</changelog>
</package>
<package pkgid="4693d6048bc3f6cdef8cf0491e6df66e219d8c50abe09e4c7f1d0eb7c9b09768" name="perl-Authen-NTLM" arch="noarch">
  <version epoch="0" ver="1.09" rel="2.1"/>
  <changelog author="chris@computersalat.de" date="1359115200">- initial package 1.09
  * created by cpanspec 1.78.03</changelog>
</package>
<package pkgid="0c52cc5031936d4c9d2f8b3c833a16f17df2fce9c63078a453ead7b94c521738" name="perl-Authen-NTLM" arch="src">
  <version epoch="0" ver="1.09" rel="2.1"/>
  <changelog author="chris@computersalat.de" date="1359115200">- initial package 1.09
  * created by cpanspec 1.78.03</changelog>
</package>
<package pkgid="61301e24a1016846a6b798d6dfb7021731ccac3fcb9d63dd160ac99083728fad" name="perl-Cyrus-IMAP" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="149.1"/>
  <changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
  <changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
  <changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
  <changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
  <changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
  <changelog author="aj@ajaissle.de" date="1390564800">- Updated to upstream release 2.4.17 (fate#311137)
  Changes to the Cyrus IMAP Server since 2.3.x:
  * All databases are now default skiplist, and ctl_cyrusdb will automatically convert database type on startup.
  * make_sha1 and make_md5 are removed (replaced by GUID and reconstruct changes)
  * Charset subsystem rewritten - Unicode 5.2 rather than Unicode 2, and UTF-8 support in sieve.
  * Core mailbox handling code largely rewritten with new APIs, CRC checksums, new locking mechanisms, merging of cyrus.index and cyrus.expunge, inclusion of user \Seen flag, and much more.
  * Replication code largely rewritten to provide better performance, consistency checking, and recovery from "split-brain" scenarios.
  * Added support for LIST-EXTENDED IMAP extension. Removed support for deprecated (compile-time) LISTEXT IMAP extension. Based on work by Martin Konold &lt;martin.konold@erfrakon.de&gt;
  * Added support for ESEARCH IMAP extension.
  * Added support for WITHIN extension to IMAP SEARCH.
  * Added support for ENABLE IMAP extension.
  * Added support for QRESYNC IMAP extension.
  * Added support for URLAUTH=BINARY IMAP extension.
  * Removed legacy IMAP[2|3|4] cruft. We now only support IMAPrev1 + extensions.
  * Added support for marking QoS on traffic. (courtesy of Philip Prindeville &lt;philipp@redfish-solutions.com&gt;)
  * Modified user_deny.db code to open database once at service startup time.
  * ... and hundreds of tiny things too numerous to mention in a short change log ...
- Added the following patches:
  - cyrus-imapd-2.4.17_drac_auth.patch -- this is a rebased version of contrib/drac_auth.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch -- Allow a result attribute to be specified with ptclient/ldap.c
  * Supersedes KOLAB_cyrus-imapd-2.3.18_UID.patch
- Renamed the following patches:
  - syslog-facility-doc.patch to cyrus-imapd-2.3.16_syslog-facility-doc.patch
- Rebased the following patches for cyrus-imapd-2.4.17:
  - cyrus-imapd-db6.diff as cyrus-imapd-2.4.17_db6.patch
  - cyrus-imapd-openslp.patch as cyrus-imapd-2.4.17_openslp.patch
  - luser_relay.patch as cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  * Option 'lmtp_luser_relay' was renamed to 'lmtp_catchall_mailbox'
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2360
  - cyrus-imapd_tls-session-leak.dif as cyrus-imapd-2.4.17_tls-session-leak.patch
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3252
  - cyrus-imapd-2.3.16-autocreate-0.10-0.drac.diff as cyrus-imapd-2.4.17_autocreate-0.10-0.patch
  - pie.patch as cyrus-imapd-2.4.17_pie.patch
- Removed the following patches (unknown upstream status):
  - KOLAB_cyrus-imapd-2.3.18_Folder-names.patch
  * There is no need for us to extend the mailbox name restrictions
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2633
  - KOLAB_cyrus-imapd-2.3.18_Groups2.patch
  * optional/not needed
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2632
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3282
  - KOLAB_cyrus-imapd-2.3.18_timsieved_starttls-sendcaps.patch
  * Workaround for an issue with kontact/kio ~ KDE 3.5.9
  - KOLAB_cyrus-imapd-2.3.18_UID.patch
  * Superseded by cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
- Removed the following patches (upstream inclusion):
  - charset.patch
  - cyrus-imapd-perl-5.14.patch
  - cyrus-imapd-perl-path.patch
  - cyrus-imapd_references_header-dos.dif
  - KOLAB_cyrus-imapd-2.3.18_Cyradm_Annotations.patch
  * http://git.cyrusimap.org/cyrus-imapd/commit/?h=cyrus-imapd-2.4&amp;id=98dd7a9130653ac848c0782a7688d26a090b494b
  - KOLAB_cyrus-imapd-2.3.18_Logging.patch
  * Use 'auditlog: 1' in imapd.conf
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2964
  - user_deny_db-once.patch
- Changed cyrus-imapd-rc.tar.gz contents, now having cyrus-imapd-rc-2.tar.gz:
  - dir name now is SUSE (was: SuSE)
  - renamed README.SuSE -&gt; README.SUSE
  - added annotation definitions for groupware folders
  - imapd.conf: added annotaion definitions and lmtp_fuzzy_mailbox_match
  - imapd.conf: changed path to TLS certs form /usr/ssl/ to /etc/SSL_accept
  - imapd.conf: set default 'delete_mode' and 'expunge_mode' to 'delayed'
  - cyrus.conf: added more services, added deleteprune and expungeprune
  - moved DB_CONFIG into cyrus-imapd-rc.tar.gz
- Spec file cleanup
- Prepared systemd support
  * with systemd, we use cyrus-imapd as service name
  * we have a symlink 'rccyrus-imapd' to '/usr/sbin/service'
  * for compatibility, we have an alias 'rccyrus' = 'rccyrus-imapd'
- New package: cyrus-imapd-utils, which now contains tools to test mail servers
- New package: cyrus-imapd-cyradm, which now contains the cyradm tool
- TODO:
  - Check KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch
  * Patch is optional
  * https://roundup.kolab.org/issue1141
  - systemd service not yet working as expected, so we disabled it atm</changelog>
  <changelog author="aj@ajaissle.de" date="1390996800">- Added -snmp and -snmp-mibs sub-packages
- Added README.SNMP to cyrus-imapd-rc-2.tar.gz
- Added sysconfig option to use SNMP
  * TODO: convert to a yesno option</changelog>
  <changelog author="johannes@lst.de" date="1413633600">- Add two patches from Kristian Kraemmer Nielsen found on the info-cyrus mailing list
  (http://lists.andrew.cmu.edu/pipermail/info-cyrus/2014-October/037708.html)
  * cyrus-imapd.tls_ec.patch		- adding tls_ec for Perfect Forward Secrecy
  * cyrus-imapd.tls_tlsonly.patch	- add tlsonly config option to fix POODLE vulnerability</changelog>
  <changelog author="rhafer@suse.com" date="1415966400">- Replace the TLS/POODLE patch with what was merged into the upstream
  git repo:
  * cyrus-imapd.tls_options.patch
  * Obsoletes patches cyrus-imapd.tls_tlsonly.patch and
    cyrus-imapd.tls_ec.patch
- Add a default tls_versions settings to imapd.conf which disables
  POODLE affected SSL versions.</changelog>
  <changelog author="tchvatal@suse.com" date="1416571200">- Drop unused patch:
  * KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch</changelog>
  <changelog author="aj@ajaissle.de" date="1418040000">- Changed cyrus-imapd-rc-2.tar.gz/cron.daily.cyrus to use 'su -s
  /bin/bash - cyrus', as the default shell is now /sbin/nologin
  [boo#908014]
- Changed cyrus-imapd-rc-2.tar.gz/rc.cyrus to set
  /var/run/cyrus-master.pid as the PID file (was: /var/run/cyrus.pid)
  [boo#908006]</changelog>
  <changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.4.18 [boo#945844]
  * Security fix: handle urlfetch range starting outside message range
  * A bunch of cleanups and fixes to compiling
  * A bunch of sieve cleanups
  * Enhanced SSL/TLS configuration options
  * Disable use of SSLv2/SSLv3
  * Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos)
  * Fixed Task #116: correct LIST response for domains starting with ?inbox.?
  * Fixed Task #76: fixed lmtpd userdeny db checks (thanks Leena Heino)
  * Fixed bug #3856: lmtpd now performs userdeny checks
  * Fixed bug #3848: support charset aliases in encoded headers
  * Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha)
  * Fixed bug #3415: fixed nntpd LIST/GROUP bug
  * Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves
  * Fixed bug #3757: don?t segfault on mailbox close with no user
  * New ssl/tls configuration options
    tls_compression: 0
    Enable TLS compression. Disabled by default.
    tls_eccurve: prime256v1
    Select the elliptic curve used for ECDHE.
    tls_prefer_server_ciphers: 0
    Prefer the cipher order configured on the server-side.
    tls_versions: tls1_0 tls1_1 tls1_2
    Disable SSL/TLS protocols not in this list.
- Removed the following patches (included upstream):
  - cyrus-imapd-2.4.17_tls-session-leak.patch
  - cyrus-imapd.tls_options.patch
- Added patch cyrus-imapd-2.4.18-implicit_definitions.patch:
  - Have the correct #include when using implicit definitions</changelog>
  <changelog author="aj@ajaissle.de" date="1447588800">- Added cyrus-imapd-2.4.18-CVE-2015-8077.patch:
  boo#954200, CVE-2015-8077: Integer overflow in range checks
- Added cyrus-imapd-2.4.18-CVE-2015-8078.patch:
  boo#954201, CVE-2015-8078: Integer overflow in index_urlfetch</changelog>
  <changelog author="aj@ajaissle.de" date="1450699200">- Add cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch to add
  Outlook 2013-compatible XLIST behaviour.</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Try to cleanup with spec-cleaner
- Remove exit 0 in pre that stopped execution of the rest of the code
- Update pre/post requires to be acutally correct
- Disable stict-aliasing to avoid some problems</changelog>
  <changelog author="aj@ajaissle.de" date="1497441600">- Update to 2.4.19
  * Complete backport of the new (2.5 and later) IMAP IDLE implementation (thanks Thomas Jarosh). This fixes a bunch of bugs and race conditions that were inherent to the older implementation
  * New option ?imapidletimeout? overrides ?timeout? specifically for connections in IDLE state
  * OpenSSL 1.1.0 is now supported
  * Fixed: imap ENABLED doesn?t print * ENABLED when nothing new enabled
  * Fixed: mailbox lock management over rename (thanks Thomas Jarosh)
  * Fixed: added overflow protection to urlfetch range checks
  * Fixed: lmtpd can now deliver when mupdate server isn?t available (thanks Michael Menge)
  * Fixed task 227: service processes no longer divide by zero when invoked with -T 0 argument (thanks Ian Batten and Jens Erat)
  * Fixed task 229: ctl_cyrusdb now uses database paths from imapd.conf (thanks Simon Matter)
  * Fixed bug #3862: mailbox database changes now rolled back on mupdate failure during rename (thanks Michael Menge)
  * Fixed: XFER to 2.5 and later no longer downgrades index to oldest version
  * Fixed: nonsensical ?TEXT.MIME? section now handled as ?HEADER?
  * Fixed: added missing ?auditlog: ? prefix to backend connections (thanks Wolfgang Breyha)
  * Fixed: IMAP SEARCH crash on some platforms
  * Fixed: memory leaks in IMAP SEARCH and IMAP APPEND
  * Fixed Issue #1967: EXISTS count reported earlier if fetching past size of previous message set
- Rebased patches:
  * cyrus-imapd-2.4.17_drac_auth.patch as cyrus-imapd-2.4.19_drac_auth.patch
  * cyrus-imapd-2.4.17_autocreate-0.10-0.patch as cyrus-imapd-2.4.19_autocreate-0.10-0.patch
- Removed patches:
  - cyrus-imapd-2.4.18-CVE-2015-8077.patch (upstream)
  - cyrus-imapd-2.4.18-CVE-2015-8078.patch (upstream)
- Added cyrus-imapd-2.4.19.tar.gz.sig</changelog>
  <changelog author="aj@ajaissle.de" date="1498046400">- Rebased patch:
  * cyrus-imapd-2.4.18-implicit_definitions.patch as cyrus-imapd-2.4.19-implicit_definitions.patch
    Add fix for implicit-fortify-decl in ldap.c</changelog>
  <changelog author="aj@ajaissle.de" date="1498392000">- Add cyrus-imapd-2.4.19-lmtpd_crash.patch:
  * lmtpd: fix uninitialised variable crash [boo#1045899]</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Remove filler wording from description.
- Improve find commands.</changelog>
</package>
<package pkgid="63e86ea56971e08ae60e84fc54d42daace39b8069ef49b2d62b69c336d92fd53" name="perl-Cyrus-IMAP-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="149.1"/>
  <changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
  <changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
  <changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
  <changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
  <changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
  <changelog author="aj@ajaissle.de" date="1390564800">- Updated to upstream release 2.4.17 (fate#311137)
  Changes to the Cyrus IMAP Server since 2.3.x:
  * All databases are now default skiplist, and ctl_cyrusdb will automatically convert database type on startup.
  * make_sha1 and make_md5 are removed (replaced by GUID and reconstruct changes)
  * Charset subsystem rewritten - Unicode 5.2 rather than Unicode 2, and UTF-8 support in sieve.
  * Core mailbox handling code largely rewritten with new APIs, CRC checksums, new locking mechanisms, merging of cyrus.index and cyrus.expunge, inclusion of user \Seen flag, and much more.
  * Replication code largely rewritten to provide better performance, consistency checking, and recovery from "split-brain" scenarios.
  * Added support for LIST-EXTENDED IMAP extension. Removed support for deprecated (compile-time) LISTEXT IMAP extension. Based on work by Martin Konold &lt;martin.konold@erfrakon.de&gt;
  * Added support for ESEARCH IMAP extension.
  * Added support for WITHIN extension to IMAP SEARCH.
  * Added support for ENABLE IMAP extension.
  * Added support for QRESYNC IMAP extension.
  * Added support for URLAUTH=BINARY IMAP extension.
  * Removed legacy IMAP[2|3|4] cruft. We now only support IMAPrev1 + extensions.
  * Added support for marking QoS on traffic. (courtesy of Philip Prindeville &lt;philipp@redfish-solutions.com&gt;)
  * Modified user_deny.db code to open database once at service startup time.
  * ... and hundreds of tiny things too numerous to mention in a short change log ...
- Added the following patches:
  - cyrus-imapd-2.4.17_drac_auth.patch -- this is a rebased version of contrib/drac_auth.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch -- Allow a result attribute to be specified with ptclient/ldap.c
  * Supersedes KOLAB_cyrus-imapd-2.3.18_UID.patch
- Renamed the following patches:
  - syslog-facility-doc.patch to cyrus-imapd-2.3.16_syslog-facility-doc.patch
- Rebased the following patches for cyrus-imapd-2.4.17:
  - cyrus-imapd-db6.diff as cyrus-imapd-2.4.17_db6.patch
  - cyrus-imapd-openslp.patch as cyrus-imapd-2.4.17_openslp.patch
  - luser_relay.patch as cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  * Option 'lmtp_luser_relay' was renamed to 'lmtp_catchall_mailbox'
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2360
  - cyrus-imapd_tls-session-leak.dif as cyrus-imapd-2.4.17_tls-session-leak.patch
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3252
  - cyrus-imapd-2.3.16-autocreate-0.10-0.drac.diff as cyrus-imapd-2.4.17_autocreate-0.10-0.patch
  - pie.patch as cyrus-imapd-2.4.17_pie.patch
- Removed the following patches (unknown upstream status):
  - KOLAB_cyrus-imapd-2.3.18_Folder-names.patch
  * There is no need for us to extend the mailbox name restrictions
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2633
  - KOLAB_cyrus-imapd-2.3.18_Groups2.patch
  * optional/not needed
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2632
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3282
  - KOLAB_cyrus-imapd-2.3.18_timsieved_starttls-sendcaps.patch
  * Workaround for an issue with kontact/kio ~ KDE 3.5.9
  - KOLAB_cyrus-imapd-2.3.18_UID.patch
  * Superseded by cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
- Removed the following patches (upstream inclusion):
  - charset.patch
  - cyrus-imapd-perl-5.14.patch
  - cyrus-imapd-perl-path.patch
  - cyrus-imapd_references_header-dos.dif
  - KOLAB_cyrus-imapd-2.3.18_Cyradm_Annotations.patch
  * http://git.cyrusimap.org/cyrus-imapd/commit/?h=cyrus-imapd-2.4&amp;id=98dd7a9130653ac848c0782a7688d26a090b494b
  - KOLAB_cyrus-imapd-2.3.18_Logging.patch
  * Use 'auditlog: 1' in imapd.conf
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2964
  - user_deny_db-once.patch
- Changed cyrus-imapd-rc.tar.gz contents, now having cyrus-imapd-rc-2.tar.gz:
  - dir name now is SUSE (was: SuSE)
  - renamed README.SuSE -&gt; README.SUSE
  - added annotation definitions for groupware folders
  - imapd.conf: added annotaion definitions and lmtp_fuzzy_mailbox_match
  - imapd.conf: changed path to TLS certs form /usr/ssl/ to /etc/SSL_accept
  - imapd.conf: set default 'delete_mode' and 'expunge_mode' to 'delayed'
  - cyrus.conf: added more services, added deleteprune and expungeprune
  - moved DB_CONFIG into cyrus-imapd-rc.tar.gz
- Spec file cleanup
- Prepared systemd support
  * with systemd, we use cyrus-imapd as service name
  * we have a symlink 'rccyrus-imapd' to '/usr/sbin/service'
  * for compatibility, we have an alias 'rccyrus' = 'rccyrus-imapd'
- New package: cyrus-imapd-utils, which now contains tools to test mail servers
- New package: cyrus-imapd-cyradm, which now contains the cyradm tool
- TODO:
  - Check KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch
  * Patch is optional
  * https://roundup.kolab.org/issue1141
  - systemd service not yet working as expected, so we disabled it atm</changelog>
  <changelog author="aj@ajaissle.de" date="1390996800">- Added -snmp and -snmp-mibs sub-packages
- Added README.SNMP to cyrus-imapd-rc-2.tar.gz
- Added sysconfig option to use SNMP
  * TODO: convert to a yesno option</changelog>
  <changelog author="johannes@lst.de" date="1413633600">- Add two patches from Kristian Kraemmer Nielsen found on the info-cyrus mailing list
  (http://lists.andrew.cmu.edu/pipermail/info-cyrus/2014-October/037708.html)
  * cyrus-imapd.tls_ec.patch		- adding tls_ec for Perfect Forward Secrecy
  * cyrus-imapd.tls_tlsonly.patch	- add tlsonly config option to fix POODLE vulnerability</changelog>
  <changelog author="rhafer@suse.com" date="1415966400">- Replace the TLS/POODLE patch with what was merged into the upstream
  git repo:
  * cyrus-imapd.tls_options.patch
  * Obsoletes patches cyrus-imapd.tls_tlsonly.patch and
    cyrus-imapd.tls_ec.patch
- Add a default tls_versions settings to imapd.conf which disables
  POODLE affected SSL versions.</changelog>
  <changelog author="tchvatal@suse.com" date="1416571200">- Drop unused patch:
  * KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch</changelog>
  <changelog author="aj@ajaissle.de" date="1418040000">- Changed cyrus-imapd-rc-2.tar.gz/cron.daily.cyrus to use 'su -s
  /bin/bash - cyrus', as the default shell is now /sbin/nologin
  [boo#908014]
- Changed cyrus-imapd-rc-2.tar.gz/rc.cyrus to set
  /var/run/cyrus-master.pid as the PID file (was: /var/run/cyrus.pid)
  [boo#908006]</changelog>
  <changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.4.18 [boo#945844]
  * Security fix: handle urlfetch range starting outside message range
  * A bunch of cleanups and fixes to compiling
  * A bunch of sieve cleanups
  * Enhanced SSL/TLS configuration options
  * Disable use of SSLv2/SSLv3
  * Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos)
  * Fixed Task #116: correct LIST response for domains starting with ?inbox.?
  * Fixed Task #76: fixed lmtpd userdeny db checks (thanks Leena Heino)
  * Fixed bug #3856: lmtpd now performs userdeny checks
  * Fixed bug #3848: support charset aliases in encoded headers
  * Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha)
  * Fixed bug #3415: fixed nntpd LIST/GROUP bug
  * Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves
  * Fixed bug #3757: don?t segfault on mailbox close with no user
  * New ssl/tls configuration options
    tls_compression: 0
    Enable TLS compression. Disabled by default.
    tls_eccurve: prime256v1
    Select the elliptic curve used for ECDHE.
    tls_prefer_server_ciphers: 0
    Prefer the cipher order configured on the server-side.
    tls_versions: tls1_0 tls1_1 tls1_2
    Disable SSL/TLS protocols not in this list.
- Removed the following patches (included upstream):
  - cyrus-imapd-2.4.17_tls-session-leak.patch
  - cyrus-imapd.tls_options.patch
- Added patch cyrus-imapd-2.4.18-implicit_definitions.patch:
  - Have the correct #include when using implicit definitions</changelog>
  <changelog author="aj@ajaissle.de" date="1447588800">- Added cyrus-imapd-2.4.18-CVE-2015-8077.patch:
  boo#954200, CVE-2015-8077: Integer overflow in range checks
- Added cyrus-imapd-2.4.18-CVE-2015-8078.patch:
  boo#954201, CVE-2015-8078: Integer overflow in index_urlfetch</changelog>
  <changelog author="aj@ajaissle.de" date="1450699200">- Add cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch to add
  Outlook 2013-compatible XLIST behaviour.</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Try to cleanup with spec-cleaner
- Remove exit 0 in pre that stopped execution of the rest of the code
- Update pre/post requires to be acutally correct
- Disable stict-aliasing to avoid some problems</changelog>
  <changelog author="aj@ajaissle.de" date="1497441600">- Update to 2.4.19
  * Complete backport of the new (2.5 and later) IMAP IDLE implementation (thanks Thomas Jarosh). This fixes a bunch of bugs and race conditions that were inherent to the older implementation
  * New option ?imapidletimeout? overrides ?timeout? specifically for connections in IDLE state
  * OpenSSL 1.1.0 is now supported
  * Fixed: imap ENABLED doesn?t print * ENABLED when nothing new enabled
  * Fixed: mailbox lock management over rename (thanks Thomas Jarosh)
  * Fixed: added overflow protection to urlfetch range checks
  * Fixed: lmtpd can now deliver when mupdate server isn?t available (thanks Michael Menge)
  * Fixed task 227: service processes no longer divide by zero when invoked with -T 0 argument (thanks Ian Batten and Jens Erat)
  * Fixed task 229: ctl_cyrusdb now uses database paths from imapd.conf (thanks Simon Matter)
  * Fixed bug #3862: mailbox database changes now rolled back on mupdate failure during rename (thanks Michael Menge)
  * Fixed: XFER to 2.5 and later no longer downgrades index to oldest version
  * Fixed: nonsensical ?TEXT.MIME? section now handled as ?HEADER?
  * Fixed: added missing ?auditlog: ? prefix to backend connections (thanks Wolfgang Breyha)
  * Fixed: IMAP SEARCH crash on some platforms
  * Fixed: memory leaks in IMAP SEARCH and IMAP APPEND
  * Fixed Issue #1967: EXISTS count reported earlier if fetching past size of previous message set
- Rebased patches:
  * cyrus-imapd-2.4.17_drac_auth.patch as cyrus-imapd-2.4.19_drac_auth.patch
  * cyrus-imapd-2.4.17_autocreate-0.10-0.patch as cyrus-imapd-2.4.19_autocreate-0.10-0.patch
- Removed patches:
  - cyrus-imapd-2.4.18-CVE-2015-8077.patch (upstream)
  - cyrus-imapd-2.4.18-CVE-2015-8078.patch (upstream)
- Added cyrus-imapd-2.4.19.tar.gz.sig</changelog>
  <changelog author="aj@ajaissle.de" date="1498046400">- Rebased patch:
  * cyrus-imapd-2.4.18-implicit_definitions.patch as cyrus-imapd-2.4.19-implicit_definitions.patch
    Add fix for implicit-fortify-decl in ldap.c</changelog>
  <changelog author="aj@ajaissle.de" date="1498392000">- Add cyrus-imapd-2.4.19-lmtpd_crash.patch:
  * lmtpd: fix uninitialised variable crash [boo#1045899]</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Remove filler wording from description.
- Improve find commands.</changelog>
</package>
<package pkgid="70f8d87ff324da1a96b151b827cc8b6cfe42ff1540d2dafb3cbb96ff2b57ec74" name="perl-Cyrus-SIEVE-managesieve" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="149.1"/>
  <changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
  <changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
  <changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
  <changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
  <changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
  <changelog author="aj@ajaissle.de" date="1390564800">- Updated to upstream release 2.4.17 (fate#311137)
  Changes to the Cyrus IMAP Server since 2.3.x:
  * All databases are now default skiplist, and ctl_cyrusdb will automatically convert database type on startup.
  * make_sha1 and make_md5 are removed (replaced by GUID and reconstruct changes)
  * Charset subsystem rewritten - Unicode 5.2 rather than Unicode 2, and UTF-8 support in sieve.
  * Core mailbox handling code largely rewritten with new APIs, CRC checksums, new locking mechanisms, merging of cyrus.index and cyrus.expunge, inclusion of user \Seen flag, and much more.
  * Replication code largely rewritten to provide better performance, consistency checking, and recovery from "split-brain" scenarios.
  * Added support for LIST-EXTENDED IMAP extension. Removed support for deprecated (compile-time) LISTEXT IMAP extension. Based on work by Martin Konold &lt;martin.konold@erfrakon.de&gt;
  * Added support for ESEARCH IMAP extension.
  * Added support for WITHIN extension to IMAP SEARCH.
  * Added support for ENABLE IMAP extension.
  * Added support for QRESYNC IMAP extension.
  * Added support for URLAUTH=BINARY IMAP extension.
  * Removed legacy IMAP[2|3|4] cruft. We now only support IMAPrev1 + extensions.
  * Added support for marking QoS on traffic. (courtesy of Philip Prindeville &lt;philipp@redfish-solutions.com&gt;)
  * Modified user_deny.db code to open database once at service startup time.
  * ... and hundreds of tiny things too numerous to mention in a short change log ...
- Added the following patches:
  - cyrus-imapd-2.4.17_drac_auth.patch -- this is a rebased version of contrib/drac_auth.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch -- Allow a result attribute to be specified with ptclient/ldap.c
  * Supersedes KOLAB_cyrus-imapd-2.3.18_UID.patch
- Renamed the following patches:
  - syslog-facility-doc.patch to cyrus-imapd-2.3.16_syslog-facility-doc.patch
- Rebased the following patches for cyrus-imapd-2.4.17:
  - cyrus-imapd-db6.diff as cyrus-imapd-2.4.17_db6.patch
  - cyrus-imapd-openslp.patch as cyrus-imapd-2.4.17_openslp.patch
  - luser_relay.patch as cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  * Option 'lmtp_luser_relay' was renamed to 'lmtp_catchall_mailbox'
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2360
  - cyrus-imapd_tls-session-leak.dif as cyrus-imapd-2.4.17_tls-session-leak.patch
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3252
  - cyrus-imapd-2.3.16-autocreate-0.10-0.drac.diff as cyrus-imapd-2.4.17_autocreate-0.10-0.patch
  - pie.patch as cyrus-imapd-2.4.17_pie.patch
- Removed the following patches (unknown upstream status):
  - KOLAB_cyrus-imapd-2.3.18_Folder-names.patch
  * There is no need for us to extend the mailbox name restrictions
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2633
  - KOLAB_cyrus-imapd-2.3.18_Groups2.patch
  * optional/not needed
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2632
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3282
  - KOLAB_cyrus-imapd-2.3.18_timsieved_starttls-sendcaps.patch
  * Workaround for an issue with kontact/kio ~ KDE 3.5.9
  - KOLAB_cyrus-imapd-2.3.18_UID.patch
  * Superseded by cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
- Removed the following patches (upstream inclusion):
  - charset.patch
  - cyrus-imapd-perl-5.14.patch
  - cyrus-imapd-perl-path.patch
  - cyrus-imapd_references_header-dos.dif
  - KOLAB_cyrus-imapd-2.3.18_Cyradm_Annotations.patch
  * http://git.cyrusimap.org/cyrus-imapd/commit/?h=cyrus-imapd-2.4&amp;id=98dd7a9130653ac848c0782a7688d26a090b494b
  - KOLAB_cyrus-imapd-2.3.18_Logging.patch
  * Use 'auditlog: 1' in imapd.conf
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2964
  - user_deny_db-once.patch
- Changed cyrus-imapd-rc.tar.gz contents, now having cyrus-imapd-rc-2.tar.gz:
  - dir name now is SUSE (was: SuSE)
  - renamed README.SuSE -&gt; README.SUSE
  - added annotation definitions for groupware folders
  - imapd.conf: added annotaion definitions and lmtp_fuzzy_mailbox_match
  - imapd.conf: changed path to TLS certs form /usr/ssl/ to /etc/SSL_accept
  - imapd.conf: set default 'delete_mode' and 'expunge_mode' to 'delayed'
  - cyrus.conf: added more services, added deleteprune and expungeprune
  - moved DB_CONFIG into cyrus-imapd-rc.tar.gz
- Spec file cleanup
- Prepared systemd support
  * with systemd, we use cyrus-imapd as service name
  * we have a symlink 'rccyrus-imapd' to '/usr/sbin/service'
  * for compatibility, we have an alias 'rccyrus' = 'rccyrus-imapd'
- New package: cyrus-imapd-utils, which now contains tools to test mail servers
- New package: cyrus-imapd-cyradm, which now contains the cyradm tool
- TODO:
  - Check KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch
  * Patch is optional
  * https://roundup.kolab.org/issue1141
  - systemd service not yet working as expected, so we disabled it atm</changelog>
  <changelog author="aj@ajaissle.de" date="1390996800">- Added -snmp and -snmp-mibs sub-packages
- Added README.SNMP to cyrus-imapd-rc-2.tar.gz
- Added sysconfig option to use SNMP
  * TODO: convert to a yesno option</changelog>
  <changelog author="johannes@lst.de" date="1413633600">- Add two patches from Kristian Kraemmer Nielsen found on the info-cyrus mailing list
  (http://lists.andrew.cmu.edu/pipermail/info-cyrus/2014-October/037708.html)
  * cyrus-imapd.tls_ec.patch		- adding tls_ec for Perfect Forward Secrecy
  * cyrus-imapd.tls_tlsonly.patch	- add tlsonly config option to fix POODLE vulnerability</changelog>
  <changelog author="rhafer@suse.com" date="1415966400">- Replace the TLS/POODLE patch with what was merged into the upstream
  git repo:
  * cyrus-imapd.tls_options.patch
  * Obsoletes patches cyrus-imapd.tls_tlsonly.patch and
    cyrus-imapd.tls_ec.patch
- Add a default tls_versions settings to imapd.conf which disables
  POODLE affected SSL versions.</changelog>
  <changelog author="tchvatal@suse.com" date="1416571200">- Drop unused patch:
  * KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch</changelog>
  <changelog author="aj@ajaissle.de" date="1418040000">- Changed cyrus-imapd-rc-2.tar.gz/cron.daily.cyrus to use 'su -s
  /bin/bash - cyrus', as the default shell is now /sbin/nologin
  [boo#908014]
- Changed cyrus-imapd-rc-2.tar.gz/rc.cyrus to set
  /var/run/cyrus-master.pid as the PID file (was: /var/run/cyrus.pid)
  [boo#908006]</changelog>
  <changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.4.18 [boo#945844]
  * Security fix: handle urlfetch range starting outside message range
  * A bunch of cleanups and fixes to compiling
  * A bunch of sieve cleanups
  * Enhanced SSL/TLS configuration options
  * Disable use of SSLv2/SSLv3
  * Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos)
  * Fixed Task #116: correct LIST response for domains starting with ?inbox.?
  * Fixed Task #76: fixed lmtpd userdeny db checks (thanks Leena Heino)
  * Fixed bug #3856: lmtpd now performs userdeny checks
  * Fixed bug #3848: support charset aliases in encoded headers
  * Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha)
  * Fixed bug #3415: fixed nntpd LIST/GROUP bug
  * Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves
  * Fixed bug #3757: don?t segfault on mailbox close with no user
  * New ssl/tls configuration options
    tls_compression: 0
    Enable TLS compression. Disabled by default.
    tls_eccurve: prime256v1
    Select the elliptic curve used for ECDHE.
    tls_prefer_server_ciphers: 0
    Prefer the cipher order configured on the server-side.
    tls_versions: tls1_0 tls1_1 tls1_2
    Disable SSL/TLS protocols not in this list.
- Removed the following patches (included upstream):
  - cyrus-imapd-2.4.17_tls-session-leak.patch
  - cyrus-imapd.tls_options.patch
- Added patch cyrus-imapd-2.4.18-implicit_definitions.patch:
  - Have the correct #include when using implicit definitions</changelog>
  <changelog author="aj@ajaissle.de" date="1447588800">- Added cyrus-imapd-2.4.18-CVE-2015-8077.patch:
  boo#954200, CVE-2015-8077: Integer overflow in range checks
- Added cyrus-imapd-2.4.18-CVE-2015-8078.patch:
  boo#954201, CVE-2015-8078: Integer overflow in index_urlfetch</changelog>
  <changelog author="aj@ajaissle.de" date="1450699200">- Add cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch to add
  Outlook 2013-compatible XLIST behaviour.</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Try to cleanup with spec-cleaner
- Remove exit 0 in pre that stopped execution of the rest of the code
- Update pre/post requires to be acutally correct
- Disable stict-aliasing to avoid some problems</changelog>
  <changelog author="aj@ajaissle.de" date="1497441600">- Update to 2.4.19
  * Complete backport of the new (2.5 and later) IMAP IDLE implementation (thanks Thomas Jarosh). This fixes a bunch of bugs and race conditions that were inherent to the older implementation
  * New option ?imapidletimeout? overrides ?timeout? specifically for connections in IDLE state
  * OpenSSL 1.1.0 is now supported
  * Fixed: imap ENABLED doesn?t print * ENABLED when nothing new enabled
  * Fixed: mailbox lock management over rename (thanks Thomas Jarosh)
  * Fixed: added overflow protection to urlfetch range checks
  * Fixed: lmtpd can now deliver when mupdate server isn?t available (thanks Michael Menge)
  * Fixed task 227: service processes no longer divide by zero when invoked with -T 0 argument (thanks Ian Batten and Jens Erat)
  * Fixed task 229: ctl_cyrusdb now uses database paths from imapd.conf (thanks Simon Matter)
  * Fixed bug #3862: mailbox database changes now rolled back on mupdate failure during rename (thanks Michael Menge)
  * Fixed: XFER to 2.5 and later no longer downgrades index to oldest version
  * Fixed: nonsensical ?TEXT.MIME? section now handled as ?HEADER?
  * Fixed: added missing ?auditlog: ? prefix to backend connections (thanks Wolfgang Breyha)
  * Fixed: IMAP SEARCH crash on some platforms
  * Fixed: memory leaks in IMAP SEARCH and IMAP APPEND
  * Fixed Issue #1967: EXISTS count reported earlier if fetching past size of previous message set
- Rebased patches:
  * cyrus-imapd-2.4.17_drac_auth.patch as cyrus-imapd-2.4.19_drac_auth.patch
  * cyrus-imapd-2.4.17_autocreate-0.10-0.patch as cyrus-imapd-2.4.19_autocreate-0.10-0.patch
- Removed patches:
  - cyrus-imapd-2.4.18-CVE-2015-8077.patch (upstream)
  - cyrus-imapd-2.4.18-CVE-2015-8078.patch (upstream)
- Added cyrus-imapd-2.4.19.tar.gz.sig</changelog>
  <changelog author="aj@ajaissle.de" date="1498046400">- Rebased patch:
  * cyrus-imapd-2.4.18-implicit_definitions.patch as cyrus-imapd-2.4.19-implicit_definitions.patch
    Add fix for implicit-fortify-decl in ldap.c</changelog>
  <changelog author="aj@ajaissle.de" date="1498392000">- Add cyrus-imapd-2.4.19-lmtpd_crash.patch:
  * lmtpd: fix uninitialised variable crash [boo#1045899]</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Remove filler wording from description.
- Improve find commands.</changelog>
</package>
<package pkgid="492aca82adb254ab14d6d90bd9cb87d7959cbfe57fa663238071e859b73769c0" name="perl-Cyrus-SIEVE-managesieve-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.19" rel="149.1"/>
  <changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
  <changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
  <changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
  <changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
  <changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
  <changelog author="aj@ajaissle.de" date="1390564800">- Updated to upstream release 2.4.17 (fate#311137)
  Changes to the Cyrus IMAP Server since 2.3.x:
  * All databases are now default skiplist, and ctl_cyrusdb will automatically convert database type on startup.
  * make_sha1 and make_md5 are removed (replaced by GUID and reconstruct changes)
  * Charset subsystem rewritten - Unicode 5.2 rather than Unicode 2, and UTF-8 support in sieve.
  * Core mailbox handling code largely rewritten with new APIs, CRC checksums, new locking mechanisms, merging of cyrus.index and cyrus.expunge, inclusion of user \Seen flag, and much more.
  * Replication code largely rewritten to provide better performance, consistency checking, and recovery from "split-brain" scenarios.
  * Added support for LIST-EXTENDED IMAP extension. Removed support for deprecated (compile-time) LISTEXT IMAP extension. Based on work by Martin Konold &lt;martin.konold@erfrakon.de&gt;
  * Added support for ESEARCH IMAP extension.
  * Added support for WITHIN extension to IMAP SEARCH.
  * Added support for ENABLE IMAP extension.
  * Added support for QRESYNC IMAP extension.
  * Added support for URLAUTH=BINARY IMAP extension.
  * Removed legacy IMAP[2|3|4] cruft. We now only support IMAPrev1 + extensions.
  * Added support for marking QoS on traffic. (courtesy of Philip Prindeville &lt;philipp@redfish-solutions.com&gt;)
  * Modified user_deny.db code to open database once at service startup time.
  * ... and hundreds of tiny things too numerous to mention in a short change log ...
- Added the following patches:
  - cyrus-imapd-2.4.17_drac_auth.patch -- this is a rebased version of contrib/drac_auth.patch
  - cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch -- Allow a result attribute to be specified with ptclient/ldap.c
  * Supersedes KOLAB_cyrus-imapd-2.3.18_UID.patch
- Renamed the following patches:
  - syslog-facility-doc.patch to cyrus-imapd-2.3.16_syslog-facility-doc.patch
- Rebased the following patches for cyrus-imapd-2.4.17:
  - cyrus-imapd-db6.diff as cyrus-imapd-2.4.17_db6.patch
  - cyrus-imapd-openslp.patch as cyrus-imapd-2.4.17_openslp.patch
  - luser_relay.patch as cyrus-imapd-2.4.17_lmtp_catchall_mailbox.patch
  * Option 'lmtp_luser_relay' was renamed to 'lmtp_catchall_mailbox'
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2360
  - cyrus-imapd_tls-session-leak.dif as cyrus-imapd-2.4.17_tls-session-leak.patch
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3252
  - cyrus-imapd-2.3.16-autocreate-0.10-0.drac.diff as cyrus-imapd-2.4.17_autocreate-0.10-0.patch
  - pie.patch as cyrus-imapd-2.4.17_pie.patch
- Removed the following patches (unknown upstream status):
  - KOLAB_cyrus-imapd-2.3.18_Folder-names.patch
  * There is no need for us to extend the mailbox name restrictions
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2633
  - KOLAB_cyrus-imapd-2.3.18_Groups2.patch
  * optional/not needed
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2632
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=3282
  - KOLAB_cyrus-imapd-2.3.18_timsieved_starttls-sendcaps.patch
  * Workaround for an issue with kontact/kio ~ KDE 3.5.9
  - KOLAB_cyrus-imapd-2.3.18_UID.patch
  * Superseded by cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch
- Removed the following patches (upstream inclusion):
  - charset.patch
  - cyrus-imapd-perl-5.14.patch
  - cyrus-imapd-perl-path.patch
  - cyrus-imapd_references_header-dos.dif
  - KOLAB_cyrus-imapd-2.3.18_Cyradm_Annotations.patch
  * http://git.cyrusimap.org/cyrus-imapd/commit/?h=cyrus-imapd-2.4&amp;id=98dd7a9130653ac848c0782a7688d26a090b494b
  - KOLAB_cyrus-imapd-2.3.18_Logging.patch
  * Use 'auditlog: 1' in imapd.conf
  * https://bugzilla.cyrusimap.org/show_bug.cgi?id=2964
  - user_deny_db-once.patch
- Changed cyrus-imapd-rc.tar.gz contents, now having cyrus-imapd-rc-2.tar.gz:
  - dir name now is SUSE (was: SuSE)
  - renamed README.SuSE -&gt; README.SUSE
  - added annotation definitions for groupware folders
  - imapd.conf: added annotaion definitions and lmtp_fuzzy_mailbox_match
  - imapd.conf: changed path to TLS certs form /usr/ssl/ to /etc/SSL_accept
  - imapd.conf: set default 'delete_mode' and 'expunge_mode' to 'delayed'
  - cyrus.conf: added more services, added deleteprune and expungeprune
  - moved DB_CONFIG into cyrus-imapd-rc.tar.gz
- Spec file cleanup
- Prepared systemd support
  * with systemd, we use cyrus-imapd as service name
  * we have a symlink 'rccyrus-imapd' to '/usr/sbin/service'
  * for compatibility, we have an alias 'rccyrus' = 'rccyrus-imapd'
- New package: cyrus-imapd-utils, which now contains tools to test mail servers
- New package: cyrus-imapd-cyradm, which now contains the cyradm tool
- TODO:
  - Check KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch
  * Patch is optional
  * https://roundup.kolab.org/issue1141
  - systemd service not yet working as expected, so we disabled it atm</changelog>
  <changelog author="aj@ajaissle.de" date="1390996800">- Added -snmp and -snmp-mibs sub-packages
- Added README.SNMP to cyrus-imapd-rc-2.tar.gz
- Added sysconfig option to use SNMP
  * TODO: convert to a yesno option</changelog>
  <changelog author="johannes@lst.de" date="1413633600">- Add two patches from Kristian Kraemmer Nielsen found on the info-cyrus mailing list
  (http://lists.andrew.cmu.edu/pipermail/info-cyrus/2014-October/037708.html)
  * cyrus-imapd.tls_ec.patch		- adding tls_ec for Perfect Forward Secrecy
  * cyrus-imapd.tls_tlsonly.patch	- add tlsonly config option to fix POODLE vulnerability</changelog>
  <changelog author="rhafer@suse.com" date="1415966400">- Replace the TLS/POODLE patch with what was merged into the upstream
  git repo:
  * cyrus-imapd.tls_options.patch
  * Obsoletes patches cyrus-imapd.tls_tlsonly.patch and
    cyrus-imapd.tls_ec.patch
- Add a default tls_versions settings to imapd.conf which disables
  POODLE affected SSL versions.</changelog>
  <changelog author="tchvatal@suse.com" date="1416571200">- Drop unused patch:
  * KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch</changelog>
  <changelog author="aj@ajaissle.de" date="1418040000">- Changed cyrus-imapd-rc-2.tar.gz/cron.daily.cyrus to use 'su -s
  /bin/bash - cyrus', as the default shell is now /sbin/nologin
  [boo#908014]
- Changed cyrus-imapd-rc-2.tar.gz/rc.cyrus to set
  /var/run/cyrus-master.pid as the PID file (was: /var/run/cyrus.pid)
  [boo#908006]</changelog>
  <changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.4.18 [boo#945844]
  * Security fix: handle urlfetch range starting outside message range
  * A bunch of cleanups and fixes to compiling
  * A bunch of sieve cleanups
  * Enhanced SSL/TLS configuration options
  * Disable use of SSLv2/SSLv3
  * Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos)
  * Fixed Task #116: correct LIST response for domains starting with ?inbox.?
  * Fixed Task #76: fixed lmtpd userdeny db checks (thanks Leena Heino)
  * Fixed bug #3856: lmtpd now performs userdeny checks
  * Fixed bug #3848: support charset aliases in encoded headers
  * Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha)
  * Fixed bug #3415: fixed nntpd LIST/GROUP bug
  * Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves
  * Fixed bug #3757: don?t segfault on mailbox close with no user
  * New ssl/tls configuration options
    tls_compression: 0
    Enable TLS compression. Disabled by default.
    tls_eccurve: prime256v1
    Select the elliptic curve used for ECDHE.
    tls_prefer_server_ciphers: 0
    Prefer the cipher order configured on the server-side.
    tls_versions: tls1_0 tls1_1 tls1_2
    Disable SSL/TLS protocols not in this list.
- Removed the following patches (included upstream):
  - cyrus-imapd-2.4.17_tls-session-leak.patch
  - cyrus-imapd.tls_options.patch
- Added patch cyrus-imapd-2.4.18-implicit_definitions.patch:
  - Have the correct #include when using implicit definitions</changelog>
  <changelog author="aj@ajaissle.de" date="1447588800">- Added cyrus-imapd-2.4.18-CVE-2015-8077.patch:
  boo#954200, CVE-2015-8077: Integer overflow in range checks
- Added cyrus-imapd-2.4.18-CVE-2015-8078.patch:
  boo#954201, CVE-2015-8078: Integer overflow in index_urlfetch</changelog>
  <changelog author="aj@ajaissle.de" date="1450699200">- Add cyrus-imapd-2.4.18-D19-Outlook_2013_XLIST.patch to add
  Outlook 2013-compatible XLIST behaviour.</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Try to cleanup with spec-cleaner
- Remove exit 0 in pre that stopped execution of the rest of the code
- Update pre/post requires to be acutally correct
- Disable stict-aliasing to avoid some problems</changelog>
  <changelog author="aj@ajaissle.de" date="1497441600">- Update to 2.4.19
  * Complete backport of the new (2.5 and later) IMAP IDLE implementation (thanks Thomas Jarosh). This fixes a bunch of bugs and race conditions that were inherent to the older implementation
  * New option ?imapidletimeout? overrides ?timeout? specifically for connections in IDLE state
  * OpenSSL 1.1.0 is now supported
  * Fixed: imap ENABLED doesn?t print * ENABLED when nothing new enabled
  * Fixed: mailbox lock management over rename (thanks Thomas Jarosh)
  * Fixed: added overflow protection to urlfetch range checks
  * Fixed: lmtpd can now deliver when mupdate server isn?t available (thanks Michael Menge)
  * Fixed task 227: service processes no longer divide by zero when invoked with -T 0 argument (thanks Ian Batten and Jens Erat)
  * Fixed task 229: ctl_cyrusdb now uses database paths from imapd.conf (thanks Simon Matter)
  * Fixed bug #3862: mailbox database changes now rolled back on mupdate failure during rename (thanks Michael Menge)
  * Fixed: XFER to 2.5 and later no longer downgrades index to oldest version
  * Fixed: nonsensical ?TEXT.MIME? section now handled as ?HEADER?
  * Fixed: added missing ?auditlog: ? prefix to backend connections (thanks Wolfgang Breyha)
  * Fixed: IMAP SEARCH crash on some platforms
  * Fixed: memory leaks in IMAP SEARCH and IMAP APPEND
  * Fixed Issue #1967: EXISTS count reported earlier if fetching past size of previous message set
- Rebased patches:
  * cyrus-imapd-2.4.17_drac_auth.patch as cyrus-imapd-2.4.19_drac_auth.patch
  * cyrus-imapd-2.4.17_autocreate-0.10-0.patch as cyrus-imapd-2.4.19_autocreate-0.10-0.patch
- Removed patches:
  - cyrus-imapd-2.4.18-CVE-2015-8077.patch (upstream)
  - cyrus-imapd-2.4.18-CVE-2015-8078.patch (upstream)
- Added cyrus-imapd-2.4.19.tar.gz.sig</changelog>
  <changelog author="aj@ajaissle.de" date="1498046400">- Rebased patch:
  * cyrus-imapd-2.4.18-implicit_definitions.patch as cyrus-imapd-2.4.19-implicit_definitions.patch
    Add fix for implicit-fortify-decl in ldap.c</changelog>
  <changelog author="aj@ajaissle.de" date="1498392000">- Add cyrus-imapd-2.4.19-lmtpd_crash.patch:
  * lmtpd: fix uninitialised variable crash [boo#1045899]</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Remove filler wording from description.
- Improve find commands.</changelog>
</package>
<package pkgid="35ee439ce6b198f8da8067e8207d092d93e3c8c12e8a9c7309c4e11ef973ac4a" name="perl-Data-Uniqid" arch="noarch">
  <version epoch="0" ver="0.12" rel="6.1"/>
  <changelog author="coolo@opensuse.org" date="1302782400">- initial package 0.12
  * created by cpanspec 1.78.04</changelog>
  <changelog author="mlin@suse.com" date="1466164800">- Remove CHECK() in License field and use Artistic-1.0 or GPL-2.0+
  as same as what license we had for perl.</changelog>
  <changelog author="jengelh@inai.de" date="1466337600">- Drop redundant clean section and throw out unnecessary macros</changelog>
</package>
<package pkgid="9bf932dee2f699d0fa0b1818dadf362df8fc559f0e952988eed355a69915d6c1" name="perl-Data-Uniqid" arch="src">
  <version epoch="0" ver="0.12" rel="6.1"/>
  <changelog author="coolo@opensuse.org" date="1302782400">- initial package 0.12
  * created by cpanspec 1.78.04</changelog>
  <changelog author="mlin@suse.com" date="1466164800">- Remove CHECK() in License field and use Artistic-1.0 or GPL-2.0+
  as same as what license we had for perl.</changelog>
  <changelog author="jengelh@inai.de" date="1466337600">- Drop redundant clean section and throw out unnecessary macros</changelog>
</package>
<package pkgid="cd80bbce630721f0cb7367c86fdbf9276fb6ba39f14e1bf749028db6e1eceef3" name="perl-File-Copy-Recursive" arch="noarch">
  <version epoch="0" ver="0.38" rel="14.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1293451200">- initial package (0.38)</changelog>
  <changelog author="idoenmez@suse.de" date="1322740800">- Cleanup spec formatting
- Add license boilerplate</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- regenerate with cpanspec (to fix license)</changelog>
</package>
<package pkgid="16cf4a61732298ad015dcbe34594bd274660c4637bf59b1d2b60c9d4681f81b2" name="perl-File-Copy-Recursive" arch="src">
  <version epoch="0" ver="0.38" rel="14.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1293451200">- initial package (0.38)</changelog>
  <changelog author="idoenmez@suse.de" date="1322740800">- Cleanup spec formatting
- Add license boilerplate</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- regenerate with cpanspec (to fix license)</changelog>
</package>
<package pkgid="e13b25b68d00e7e2da2429f99ca581ccb6056a0f2989ac4a44e0681aeefdf8cb" name="perl-HTML-Parser" arch="src">
  <version epoch="0" ver="3.72" rel="2.1"/>
  <changelog author="chris@computersalat.de" date="1248523200">- spec mods
  * removed ^----------
  * removed ^#---------</changelog>
  <changelog author="coolo@novell.com" date="1251374400">- remove strange obsoletes</changelog>
  <changelog author="anicka@suse.cz" date="1256817600">- fixed CVE-2009-3627 (bnc#550076)</changelog>
  <changelog author="jengelh@medozas.de" date="1263124800">- enable parallel build</changelog>
  <changelog author="anicka@suse.cz" date="1263384000">- update to 3.64
  * Convert files to UTF-8
  * Don't allow decode_entities() to generate illegal Unicode chars
  * Copyright 2009
  * Remove rendundant (repeated) test
  * Make parse_file() method use 3-arg open [RT#49434]
  * Take more care to prepare the char range for encode_entities [RT#50170]
  * decode_entities confused by trailing incomplete entity
  * HTTP::Header doc typo fix.
  * Do not bother tracking style or script, they're ignored.
  * Bring HTML 5 head elements up to date with WD-html5-20090423.
  * Improve HeadParser performance.
  * Doc patch: Make it clearer what the return value from -&gt;parse is
- remove last patch (fixed in upstream)</changelog>
  <changelog author="chris@computersalat.de" date="1270641600">- update to 3.65
  * Eliminate buggy entities_decode_old
  * Fixed endianness typo [RT#50811]
  * Documentation fixes.</changelog>
  <changelog author="dmueller@suse.de" date="1278936000">- update to 3.66:
  * Fix entity decoding in utf8_mode for the title header</changelog>
  <changelog author="dmueller@suse.de" date="1282132800">- update to 3.67:
  * bleadperl 2154eca7 breaks HTML::Parser 3.66</changelog>
  <changelog author="chris@computersalat.de" date="1282305600">- recreated by cpanspec 1.78
  o fix deps
- added bcond_with opt</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1283428800">- replaced auto-generated spec file
- update to 3.68:
  * declare the encoding of the POD to be utf8</changelog>
  <changelog author="chris@computersalat.de" date="1283774400">- recreated by cpanspec 1.78
- fix deps
  o Recommends HTTP::Headers not HTML::Headers</changelog>
  <changelog author="coolo@novell.com" date="1291204800">- switch to perl_requires macro</changelog>
  <changelog author="chris@computersalat.de" date="1297339200">- remove Author</changelog>
  <changelog author="vcizek@novell.com" date="1297425600">- changed Recommends: perl(HTTP:Headers) to Suggests
  (bnc#570870)</changelog>
  <changelog author="chris@computersalat.de" date="1314273600">- fix build for RHEL, CentOS
  * Unknown tag: Suggests:</changelog>
  <changelog author="vcizek@suse.com" date="1318852800">- update to 3.69
    Documentation fix; encode_utf8 mixup [RT#71151]
    Make it clearer that there are 2 (actually 3) options for handing "UTF-8 garbage"
    Github is the official repo
    Can't be bothered to try to fix the failures that occur on perl-5.6
    fix to TokeParser to correctly handle option configuration
    Aesthetic change: remove extra ;
    Trim surrounding whitespace from extracted URLs.
  _______________________________________________________________________________</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="nine@detonation.org" date="1381838400">- update to 3.71
    Transform ':' in headers to '-' [RT#80524]
    Fix for cross-compiling with Buildroot
    Comment typo fix
    Fix Issue #3 / RT #84144: HTML::Entities::decode_entities() needs
    to call SV_CHECK_THINKFIRST() before checking READONLY flag</changelog>
  <changelog author="coolo@suse.com" date="1428926400">- regnererate spec file to be in line with current template</changelog>
  <changelog author="coolo@suse.com" date="1453291200">- updated to 3.72
  see /usr/share/doc/packages/perl-HTML-Parser/Changes
  2016-01-19  Release 3.72
  Gisle Aas (3):
    Avoid more clang casting warnings
    Remove trailing whitespace
    Ensure entities expand to utf8 sequences under 'utf8_mode' [RT#99755]
  David Steinbrunner (2):
    typo fix
    typo fixes
  Jacques Germishuys (1):
    Silence clang warning
  bulk88 (1):
    const+static-ing
  _______________________________________________________________________________</changelog>
</package>
<package pkgid="42cf8604dda29b82aaa5f8dace5af7c811b2eb1515835fd2a61f5dde3be1a33b" name="perl-HTML-Parser" arch="x86_64">
  <version epoch="0" ver="3.72" rel="2.1"/>
  <changelog author="chris@computersalat.de" date="1248523200">- spec mods
  * removed ^----------
  * removed ^#---------</changelog>
  <changelog author="coolo@novell.com" date="1251374400">- remove strange obsoletes</changelog>
  <changelog author="anicka@suse.cz" date="1256817600">- fixed CVE-2009-3627 (bnc#550076)</changelog>
  <changelog author="jengelh@medozas.de" date="1263124800">- enable parallel build</changelog>
  <changelog author="anicka@suse.cz" date="1263384000">- update to 3.64
  * Convert files to UTF-8
  * Don't allow decode_entities() to generate illegal Unicode chars
  * Copyright 2009
  * Remove rendundant (repeated) test
  * Make parse_file() method use 3-arg open [RT#49434]
  * Take more care to prepare the char range for encode_entities [RT#50170]
  * decode_entities confused by trailing incomplete entity
  * HTTP::Header doc typo fix.
  * Do not bother tracking style or script, they're ignored.
  * Bring HTML 5 head elements up to date with WD-html5-20090423.
  * Improve HeadParser performance.
  * Doc patch: Make it clearer what the return value from -&gt;parse is
- remove last patch (fixed in upstream)</changelog>
  <changelog author="chris@computersalat.de" date="1270641600">- update to 3.65
  * Eliminate buggy entities_decode_old
  * Fixed endianness typo [RT#50811]
  * Documentation fixes.</changelog>
  <changelog author="dmueller@suse.de" date="1278936000">- update to 3.66:
  * Fix entity decoding in utf8_mode for the title header</changelog>
  <changelog author="dmueller@suse.de" date="1282132800">- update to 3.67:
  * bleadperl 2154eca7 breaks HTML::Parser 3.66</changelog>
  <changelog author="chris@computersalat.de" date="1282305600">- recreated by cpanspec 1.78
  o fix deps
- added bcond_with opt</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1283428800">- replaced auto-generated spec file
- update to 3.68:
  * declare the encoding of the POD to be utf8</changelog>
  <changelog author="chris@computersalat.de" date="1283774400">- recreated by cpanspec 1.78
- fix deps
  o Recommends HTTP::Headers not HTML::Headers</changelog>
  <changelog author="coolo@novell.com" date="1291204800">- switch to perl_requires macro</changelog>
  <changelog author="chris@computersalat.de" date="1297339200">- remove Author</changelog>
  <changelog author="vcizek@novell.com" date="1297425600">- changed Recommends: perl(HTTP:Headers) to Suggests
  (bnc#570870)</changelog>
  <changelog author="chris@computersalat.de" date="1314273600">- fix build for RHEL, CentOS
  * Unknown tag: Suggests:</changelog>
  <changelog author="vcizek@suse.com" date="1318852800">- update to 3.69
    Documentation fix; encode_utf8 mixup [RT#71151]
    Make it clearer that there are 2 (actually 3) options for handing "UTF-8 garbage"
    Github is the official repo
    Can't be bothered to try to fix the failures that occur on perl-5.6
    fix to TokeParser to correctly handle option configuration
    Aesthetic change: remove extra ;
    Trim surrounding whitespace from extracted URLs.
  _______________________________________________________________________________</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="nine@detonation.org" date="1381838400">- update to 3.71
    Transform ':' in headers to '-' [RT#80524]
    Fix for cross-compiling with Buildroot
    Comment typo fix
    Fix Issue #3 / RT #84144: HTML::Entities::decode_entities() needs
    to call SV_CHECK_THINKFIRST() before checking READONLY flag</changelog>
  <changelog author="coolo@suse.com" date="1428926400">- regnererate spec file to be in line with current template</changelog>
  <changelog author="coolo@suse.com" date="1453291200">- updated to 3.72
  see /usr/share/doc/packages/perl-HTML-Parser/Changes
  2016-01-19  Release 3.72
  Gisle Aas (3):
    Avoid more clang casting warnings
    Remove trailing whitespace
    Ensure entities expand to utf8 sequences under 'utf8_mode' [RT#99755]
  David Steinbrunner (2):
    typo fix
    typo fixes
  Jacques Germishuys (1):
    Silence clang warning
  bulk88 (1):
    const+static-ing
  _______________________________________________________________________________</changelog>
</package>
<package pkgid="f58ee62a5ad91c02472d0e141f34a6aeeb82b0a904557c8b58246fc3d00839fb" name="perl-HTML-Parser-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.72" rel="2.1"/>
  <changelog author="chris@computersalat.de" date="1248523200">- spec mods
  * removed ^----------
  * removed ^#---------</changelog>
  <changelog author="coolo@novell.com" date="1251374400">- remove strange obsoletes</changelog>
  <changelog author="anicka@suse.cz" date="1256817600">- fixed CVE-2009-3627 (bnc#550076)</changelog>
  <changelog author="jengelh@medozas.de" date="1263124800">- enable parallel build</changelog>
  <changelog author="anicka@suse.cz" date="1263384000">- update to 3.64
  * Convert files to UTF-8
  * Don't allow decode_entities() to generate illegal Unicode chars
  * Copyright 2009
  * Remove rendundant (repeated) test
  * Make parse_file() method use 3-arg open [RT#49434]
  * Take more care to prepare the char range for encode_entities [RT#50170]
  * decode_entities confused by trailing incomplete entity
  * HTTP::Header doc typo fix.
  * Do not bother tracking style or script, they're ignored.
  * Bring HTML 5 head elements up to date with WD-html5-20090423.
  * Improve HeadParser performance.
  * Doc patch: Make it clearer what the return value from -&gt;parse is
- remove last patch (fixed in upstream)</changelog>
  <changelog author="chris@computersalat.de" date="1270641600">- update to 3.65
  * Eliminate buggy entities_decode_old
  * Fixed endianness typo [RT#50811]
  * Documentation fixes.</changelog>
  <changelog author="dmueller@suse.de" date="1278936000">- update to 3.66:
  * Fix entity decoding in utf8_mode for the title header</changelog>
  <changelog author="dmueller@suse.de" date="1282132800">- update to 3.67:
  * bleadperl 2154eca7 breaks HTML::Parser 3.66</changelog>
  <changelog author="chris@computersalat.de" date="1282305600">- recreated by cpanspec 1.78
  o fix deps
- added bcond_with opt</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1283428800">- replaced auto-generated spec file
- update to 3.68:
  * declare the encoding of the POD to be utf8</changelog>
  <changelog author="chris@computersalat.de" date="1283774400">- recreated by cpanspec 1.78
- fix deps
  o Recommends HTTP::Headers not HTML::Headers</changelog>
  <changelog author="coolo@novell.com" date="1291204800">- switch to perl_requires macro</changelog>
  <changelog author="chris@computersalat.de" date="1297339200">- remove Author</changelog>
  <changelog author="vcizek@novell.com" date="1297425600">- changed Recommends: perl(HTTP:Headers) to Suggests
  (bnc#570870)</changelog>
  <changelog author="chris@computersalat.de" date="1314273600">- fix build for RHEL, CentOS
  * Unknown tag: Suggests:</changelog>
  <changelog author="vcizek@suse.com" date="1318852800">- update to 3.69
    Documentation fix; encode_utf8 mixup [RT#71151]
    Make it clearer that there are 2 (actually 3) options for handing "UTF-8 garbage"
    Github is the official repo
    Can't be bothered to try to fix the failures that occur on perl-5.6
    fix to TokeParser to correctly handle option configuration
    Aesthetic change: remove extra ;
    Trim surrounding whitespace from extracted URLs.
  _______________________________________________________________________________</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="nine@detonation.org" date="1381838400">- update to 3.71
    Transform ':' in headers to '-' [RT#80524]
    Fix for cross-compiling with Buildroot
    Comment typo fix
    Fix Issue #3 / RT #84144: HTML::Entities::decode_entities() needs
    to call SV_CHECK_THINKFIRST() before checking READONLY flag</changelog>
  <changelog author="coolo@suse.com" date="1428926400">- regnererate spec file to be in line with current template</changelog>
  <changelog author="coolo@suse.com" date="1453291200">- updated to 3.72
  see /usr/share/doc/packages/perl-HTML-Parser/Changes
  2016-01-19  Release 3.72
  Gisle Aas (3):
    Avoid more clang casting warnings
    Remove trailing whitespace
    Ensure entities expand to utf8 sequences under 'utf8_mode' [RT#99755]
  David Steinbrunner (2):
    typo fix
    typo fixes
  Jacques Germishuys (1):
    Silence clang warning
  bulk88 (1):
    const+static-ing
  _______________________________________________________________________________</changelog>
</package>
<package pkgid="cc29508232574d1cb60ff32a4057733c426cf94a4c21ebe15bc57d4c7220d47e" name="perl-HTML-Parser-debugsource" arch="x86_64">
  <version epoch="0" ver="3.72" rel="2.1"/>
  <changelog author="chris@computersalat.de" date="1248523200">- spec mods
  * removed ^----------
  * removed ^#---------</changelog>
  <changelog author="coolo@novell.com" date="1251374400">- remove strange obsoletes</changelog>
  <changelog author="anicka@suse.cz" date="1256817600">- fixed CVE-2009-3627 (bnc#550076)</changelog>
  <changelog author="jengelh@medozas.de" date="1263124800">- enable parallel build</changelog>
  <changelog author="anicka@suse.cz" date="1263384000">- update to 3.64
  * Convert files to UTF-8
  * Don't allow decode_entities() to generate illegal Unicode chars
  * Copyright 2009
  * Remove rendundant (repeated) test
  * Make parse_file() method use 3-arg open [RT#49434]
  * Take more care to prepare the char range for encode_entities [RT#50170]
  * decode_entities confused by trailing incomplete entity
  * HTTP::Header doc typo fix.
  * Do not bother tracking style or script, they're ignored.
  * Bring HTML 5 head elements up to date with WD-html5-20090423.
  * Improve HeadParser performance.
  * Doc patch: Make it clearer what the return value from -&gt;parse is
- remove last patch (fixed in upstream)</changelog>
  <changelog author="chris@computersalat.de" date="1270641600">- update to 3.65
  * Eliminate buggy entities_decode_old
  * Fixed endianness typo [RT#50811]
  * Documentation fixes.</changelog>
  <changelog author="dmueller@suse.de" date="1278936000">- update to 3.66:
  * Fix entity decoding in utf8_mode for the title header</changelog>
  <changelog author="dmueller@suse.de" date="1282132800">- update to 3.67:
  * bleadperl 2154eca7 breaks HTML::Parser 3.66</changelog>
  <changelog author="chris@computersalat.de" date="1282305600">- recreated by cpanspec 1.78
  o fix deps
- added bcond_with opt</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1283428800">- replaced auto-generated spec file
- update to 3.68:
  * declare the encoding of the POD to be utf8</changelog>
  <changelog author="chris@computersalat.de" date="1283774400">- recreated by cpanspec 1.78
- fix deps
  o Recommends HTTP::Headers not HTML::Headers</changelog>
  <changelog author="coolo@novell.com" date="1291204800">- switch to perl_requires macro</changelog>
  <changelog author="chris@computersalat.de" date="1297339200">- remove Author</changelog>
  <changelog author="vcizek@novell.com" date="1297425600">- changed Recommends: perl(HTTP:Headers) to Suggests
  (bnc#570870)</changelog>
  <changelog author="chris@computersalat.de" date="1314273600">- fix build for RHEL, CentOS
  * Unknown tag: Suggests:</changelog>
  <changelog author="vcizek@suse.com" date="1318852800">- update to 3.69
    Documentation fix; encode_utf8 mixup [RT#71151]
    Make it clearer that there are 2 (actually 3) options for handing "UTF-8 garbage"
    Github is the official repo
    Can't be bothered to try to fix the failures that occur on perl-5.6
    fix to TokeParser to correctly handle option configuration
    Aesthetic change: remove extra ;
    Trim surrounding whitespace from extracted URLs.
  _______________________________________________________________________________</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="nine@detonation.org" date="1381838400">- update to 3.71
    Transform ':' in headers to '-' [RT#80524]
    Fix for cross-compiling with Buildroot
    Comment typo fix
    Fix Issue #3 / RT #84144: HTML::Entities::decode_entities() needs
    to call SV_CHECK_THINKFIRST() before checking READONLY flag</changelog>
  <changelog author="coolo@suse.com" date="1428926400">- regnererate spec file to be in line with current template</changelog>
  <changelog author="coolo@suse.com" date="1453291200">- updated to 3.72
  see /usr/share/doc/packages/perl-HTML-Parser/Changes
  2016-01-19  Release 3.72
  Gisle Aas (3):
    Avoid more clang casting warnings
    Remove trailing whitespace
    Ensure entities expand to utf8 sequences under 'utf8_mode' [RT#99755]
  David Steinbrunner (2):
    typo fix
    typo fixes
  Jacques Germishuys (1):
    Silence clang warning
  bulk88 (1):
    const+static-ing
  _______________________________________________________________________________</changelog>
</package>
<package pkgid="84c3125d287088828031bc2c29e2315ebcc9fb4c09c752d885e4d366ca5bc732" name="perl-IO-Socket-IP" arch="noarch">
  <version epoch="0" ver="0.38" rel="2.1"/>
  <changelog author="opensuse@dstoecker.de" date="1392292800">- created</changelog>
  <changelog author="opensuse@dstoecker.de" date="1394107200">- update to 0.29
  [BUGFIXES]
  * Workaround for OSes that disobey AI_ADDRCONFIG and yield AIs on
    families the kernel will not support anyway (e.g. HPUX)
  * Workaround for OSes that lack getprotobyname() (e.g. Android)</changelog>
  <changelog author="coolo@suse.com" date="1428926400">- updated to 0.37
  see /usr/share/doc/packages/perl-IO-Socket-IP/Changes
  0.37    2015/03/12 20:44:07
    [CHANGES]
  * Earlier detection/reporting of erroneous Listen + Peer* argument
    combination; don't rely on resolveable hostname to do it (RT92930)
    [BUGFIXES]
  * Skip t/16v6only.t on irix (RT102662)
  * Remember to eval() $IO::Socket::VERSION in case it's a devel
    release (RT101954)
  * s/Port/LocalPort/ in unit tests (RT96064)
  0.36    2014/01/10 20:54:58
    [BUGFIXES]
  * Always bind() on MSWin32 because Windows doesn't like it if we
    listen() having not done so (RT101396)
  0.35    2015/01/02 19:45:20
    [BUGFIXES]
  * Restore blocking mode after timeout connect immediate success
    (RT100947)
  * Avoid CORE:: prefixing so global override modules work (RT101174)
  * Ensure that -&gt;peer{host,port,hostname,service} never die even when
    unconnected (RT98759)
  0.34    2014/12/03 00:04:56
    [BUGFIXES]
  * Don't select() for read-readiness when waiting for non-blocking
    connect() because it upsets VMS (RT100654)
  0.33    2014/11/21 16:17:39
    [BUGFIXES]
  * Use SOL_SOCKET/SO_ERROR sockopt rather than 2nd connect() error
    hoisting to detect nonblocking connect/failure when implementing
    Timeout (RT98976) (thanks Arthur Axel 'fREW' Schmidt)
  0.32    2014/09/12 10:11:27
    [CHANGES]
  * Implementation of Timeout for -&gt;connect (RT92075)
  0.31    2014/07/11 01:24:49
    [BUGFIXES]
  * A better fix for subclassing -&gt;connect (RT95983) because 0.30 broke
    the way IO::Socket::SSL works (RT97050)
  0.30    2014/07/03 23:28:43
    [CHANGES]
  * Invoke $self-&gt;connect fully-qualified in case of subclasses with
    override (RT95983)
  * Added extra diag() call in t/15io-socket.t (RT96914)</changelog>
  <changelog author="coolo@suse.com" date="1470225600">- updated to 0.38
  see /usr/share/doc/packages/perl-IO-Socket-IP/Changes
  0.38    2016/08/02 18:33:50
    [CHANGES]
  * Support setting custom socket options with new 'Sockopts'
    constructor parameter
    [BUGFIXES]
  * Restore blocking mode after -&gt;connect errors (RT112334)</changelog>
</package>
<package pkgid="87989db88ee3ea17951d959b6b023c3a62bf2c17b15c75a69271f186da5bb198" name="perl-IO-Socket-IP" arch="src">
  <version epoch="0" ver="0.38" rel="2.1"/>
  <changelog author="opensuse@dstoecker.de" date="1392292800">- created</changelog>
  <changelog author="opensuse@dstoecker.de" date="1394107200">- update to 0.29
  [BUGFIXES]
  * Workaround for OSes that disobey AI_ADDRCONFIG and yield AIs on
    families the kernel will not support anyway (e.g. HPUX)
  * Workaround for OSes that lack getprotobyname() (e.g. Android)</changelog>
  <changelog author="coolo@suse.com" date="1428926400">- updated to 0.37
  see /usr/share/doc/packages/perl-IO-Socket-IP/Changes
  0.37    2015/03/12 20:44:07
    [CHANGES]
  * Earlier detection/reporting of erroneous Listen + Peer* argument
    combination; don't rely on resolveable hostname to do it (RT92930)
    [BUGFIXES]
  * Skip t/16v6only.t on irix (RT102662)
  * Remember to eval() $IO::Socket::VERSION in case it's a devel
    release (RT101954)
  * s/Port/LocalPort/ in unit tests (RT96064)
  0.36    2014/01/10 20:54:58
    [BUGFIXES]
  * Always bind() on MSWin32 because Windows doesn't like it if we
    listen() having not done so (RT101396)
  0.35    2015/01/02 19:45:20
    [BUGFIXES]
  * Restore blocking mode after timeout connect immediate success
    (RT100947)
  * Avoid CORE:: prefixing so global override modules work (RT101174)
  * Ensure that -&gt;peer{host,port,hostname,service} never die even when
    unconnected (RT98759)
  0.34    2014/12/03 00:04:56
    [BUGFIXES]
  * Don't select() for read-readiness when waiting for non-blocking
    connect() because it upsets VMS (RT100654)
  0.33    2014/11/21 16:17:39
    [BUGFIXES]
  * Use SOL_SOCKET/SO_ERROR sockopt rather than 2nd connect() error
    hoisting to detect nonblocking connect/failure when implementing
    Timeout (RT98976) (thanks Arthur Axel 'fREW' Schmidt)
  0.32    2014/09/12 10:11:27
    [CHANGES]
  * Implementation of Timeout for -&gt;connect (RT92075)
  0.31    2014/07/11 01:24:49
    [BUGFIXES]
  * A better fix for subclassing -&gt;connect (RT95983) because 0.30 broke
    the way IO::Socket::SSL works (RT97050)
  0.30    2014/07/03 23:28:43
    [CHANGES]
  * Invoke $self-&gt;connect fully-qualified in case of subclasses with
    override (RT95983)
  * Added extra diag() call in t/15io-socket.t (RT96914)</changelog>
  <changelog author="coolo@suse.com" date="1470225600">- updated to 0.38
  see /usr/share/doc/packages/perl-IO-Socket-IP/Changes
  0.38    2016/08/02 18:33:50
    [CHANGES]
  * Support setting custom socket options with new 'Sockopts'
    constructor parameter
    [BUGFIXES]
  * Restore blocking mode after -&gt;connect errors (RT112334)</changelog>
</package>
<package pkgid="5096f5e10b404f373d41e0bcb7dc1cf2ca2cf567f504034c30f661b7ab6d70a5" name="perl-IO-Tee" arch="noarch">
  <version epoch="0" ver="0.64" rel="2.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1327579200">- initial version (0.64)</changelog>
</package>
<package pkgid="388e36e92f9c3271f2898bf464dd3855783fb658706365b3606c9c7afcd50af8" name="perl-IO-Tee" arch="src">
  <version epoch="0" ver="0.64" rel="2.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1327579200">- initial version (0.64)</changelog>
</package>
<package pkgid="43b6d58d435476ed10b1fb75d6d0c13b6b73f32213240c665e7ba75a703934ae" name="perl-Mail-IMAPClient" arch="noarch">
  <version epoch="0" ver="3.37" rel="3.1"/>
  <changelog author="rbos@opensuse.org" date="1225454400">- Fixed rpmlint errors</changelog>
  <changelog author="chris@computersalat.de" date="1270296000">- update to 3.23
  - new beta idle_data() method to retrieve untagged messages during idle
    similar to method suggested by Daniel Richard G
  - added/updated documentation for idle, idle_data, and done
  - rt.cpan.org#53998: fix NTLM auth: call ntlm with challenge string
    [Dragoslav Mlakar]
  - report the return value from select/_read_more on errors
  - logout() again returns the success/failure of the LOGOUT command
  - set/return error when $response-&gt;() returns undef in authenticate()
  - new internal method _load_module() centralizing some 'require' calls
  - localize use $@ in several places to avoid stomping on global val
  - refactor code calling _read_more() to centralize error handling
- version 3.22: Thu Jan 21 15:25:54 EST 2010
  - rt.cpan.org#52313: Getting read errors if Fast_io is set to 1
    [Jukka Huhta]
  - updated Maxttemperrors docs related to EAGAIN handling
  - new starttls() method and Starttls attribute to support STARTTLS
  - update parse_headers to try harder to find UID in fetch response
- for older changes please see Changes file
- spec mods
  o added HEADER
  o sort TAGS
  o fixed deps
  o updated description
  o macros
- added perl-macros
- moved changelog to changes file</changelog>
  <changelog author="coolo@novell.com" date="1291204800">- switch to perl_requires macro</changelog>
  <changelog author="coolo@opensuse.org" date="1303819200">- updated to 3.28
  * tons of bug fixes, see Changes</changelog>
  <changelog author="aj@suse.de" date="1322481600">- update to 3.29
  * bugfixes, see Changes.
- Fix examples to use proper perl path.</changelog>
  <changelog author="chris@computersalat.de" date="1359115200">- update to 3.32
  * document RFC2087 quota related calls
    [Mathias Reitinger] documentation request
  * rt.cpan.org#78474: idle/idle_data documentation error
    [Dima Kogan]
  * Quote()/Massage() now uses literals for non ascii data
    [Mathias Reitinger] reported issues with utf8 data in password
  * use Quote()/Massage() consistently now in:
    login() proxyauth() deleteacl() setacl() listrights() rename()
  * documented deleteacl() and other minor pod cleanup
  * ran Mail::IMAPClient::BodyStructure through perltidy
  * update year in README/pod to 2012
  * rt.cpan.org#74733: Fails with Parse::RecDescent &gt;= 1.966_002
    rt.cpan.org#74593: Recent changes break Module::ExtractUse and ...
    [ANDK, TEAM, SREZIC, NBEBOUT at CPAN and nine from detonation]
  - Makefile.PL avoid buggy Parse::RecDescent 1.966_002 until 1.967_009
  * rt.cpan.org#76989: Mail::IMAPClient::BodyStructure usage/docs
    [Pierluigi Frullani]
  - fix incorrect documentation on new()
  - lots of doc verbiage updates
- fix deps
  * Parse-RecDescent HACK needs perl(persion) &gt; 0.74
  * add missing Recommends</changelog>
  <changelog author="coolo@suse.com" date="1429012800">- updated to 3.35
  see /usr/share/doc/packages/perl-Mail-IMAPClient/Changes
  version 3.35: Fri, Nov 22, 2013  2:18:41 PM
  - *use Quote() over Massage() to avoid stripping double quotes from arg
  + removed constant NonFolderArg
  + may deprecate Massage() in a future release
  - _list_or_lsub failed to handle folder names with double quotes
  + cleanup Escaped_results()
  + new methods: Escaped_history() _escaped_trans_data()
  + removed method: _list_response_preprocess()
  [Gilles Lamiral, Victor Lé]
  - rt.cpan.org#90315: getacl on a folder returned as literal failed
  + _read_line could remove extra space when literal data was received
  [Carl Karcher]
  - rt.cpan.org#89040: typo fixes
  [David Steinbrunner]
  version 3.34: Fri, Sep 27, 2013 12:50:17 AM
  - make Makefile.PL use non-interactive and document test.txt usage
  - new attribute: Socketargs =&gt; [ (IO::Socket::.. args) ]
  + cleanup connect() to more flexible with IO::Socket::* args
  - untagged server data during send literal may cause client to hang
  [Arthur Wolfe, Josh Hillman]
  + _send_line() needs '+' only to know it is OK to send LITERAL data
  + created _response_code_sub() to simplify _get_response()
  - remove internal "Folders" cache
  - Allow for RFC 6154 "IMAP LIST Extension for Special-Use Mailboxes"
  [Mathias Reitinger]
  + new method: folders_hash()
  + deprecate: xlist_folders(), xlist()
  version 3.33: Tue, May 14, 2013 10:12:43 AM
  - more cleanup on use of $@ and $!
  - cleanup get_bodystructure / get_envelope
  - allow Ssl arg as an arrayref to pass args to IO::Socket::SSL
  [Ramana V Mokkapati]
  - no need to Massage() the folder name in uidnext()
  - rt.cpan.org#84028: get_envelope() fails when subject ends w/backslash
  [Andy Lyttle]
  - rt.cpan.org#79476: move()/copy() with sequence causes numeric warning
  [Oleg G]
  - *move()/copy() no longer sort message(s) provided by caller</changelog>
  <changelog author="coolo@suse.com" date="1440331200">- updated to 3.37
  see /usr/share/doc/packages/perl-Mail-IMAPClient/Changes
  version 3.37: Fri Aug 14 11:04:53 EDT 2015
  - regex fix in rt.cpan.org#96575 required Perl 5.10
  updated regex to be backwards compatible with Perl 5.8
  [Paul Howarth]
  version 3.36: Fri Aug 14 01:40:50 UTC 2015
  - rt.cpan.org#96575: parsing fixes for fetch_hash and bodystructure
  + better handling of data containing escaped characters
  [Ken Neighbors]
  - rt.cpan.org#97718: hang waiting for tag if DONE sent outside of IDLE
  [Laurence Darby]
  - rt.cpan.org#100683: failed literal commands hang waiting for '+'
  [Matthias Pitzl]
  - rt.cpan.org#100601: login() fails if username requires use of literals
  [Andy Lyttle]
  - *rt.cpan.org#103823: is_parent() should return undef on \NoInferiors
  [Gilles Lamiral]
  - rt.cpan.org#105456: fetch_hash fails if sequence number contains '*'
  + *no longer removing unrequested data (except UID) in returned hashes
  [Gilles Lamiral]
  - rt.cpan.org#91912: selectable broke in 3.29 due to  around \NoSelect
  [Justin Vallon, Gilles Lamiral]
  - some documentation, test cleanup and new tests</changelog>
  <changelog author="chris@computersalat.de" date="1457870400">- fix deps
  * perl(version) &gt;= 0.77
  * perl(IO::Socket::INET) &gt;= 1.26</changelog>
</package>
<package pkgid="f7f248ea91b6c77599cef4d9246e0a9cb253a635f6e35258c30ab78a73e320e5" name="perl-Mail-IMAPClient" arch="src">
  <version epoch="0" ver="3.37" rel="3.1"/>
  <changelog author="rbos@opensuse.org" date="1225454400">- Fixed rpmlint errors</changelog>
  <changelog author="chris@computersalat.de" date="1270296000">- update to 3.23
  - new beta idle_data() method to retrieve untagged messages during idle
    similar to method suggested by Daniel Richard G
  - added/updated documentation for idle, idle_data, and done
  - rt.cpan.org#53998: fix NTLM auth: call ntlm with challenge string
    [Dragoslav Mlakar]
  - report the return value from select/_read_more on errors
  - logout() again returns the success/failure of the LOGOUT command
  - set/return error when $response-&gt;() returns undef in authenticate()
  - new internal method _load_module() centralizing some 'require' calls
  - localize use $@ in several places to avoid stomping on global val
  - refactor code calling _read_more() to centralize error handling
- version 3.22: Thu Jan 21 15:25:54 EST 2010
  - rt.cpan.org#52313: Getting read errors if Fast_io is set to 1
    [Jukka Huhta]
  - updated Maxttemperrors docs related to EAGAIN handling
  - new starttls() method and Starttls attribute to support STARTTLS
  - update parse_headers to try harder to find UID in fetch response
- for older changes please see Changes file
- spec mods
  o added HEADER
  o sort TAGS
  o fixed deps
  o updated description
  o macros
- added perl-macros
- moved changelog to changes file</changelog>
  <changelog author="coolo@novell.com" date="1291204800">- switch to perl_requires macro</changelog>
  <changelog author="coolo@opensuse.org" date="1303819200">- updated to 3.28
  * tons of bug fixes, see Changes</changelog>
  <changelog author="aj@suse.de" date="1322481600">- update to 3.29
  * bugfixes, see Changes.
- Fix examples to use proper perl path.</changelog>
  <changelog author="chris@computersalat.de" date="1359115200">- update to 3.32
  * document RFC2087 quota related calls
    [Mathias Reitinger] documentation request
  * rt.cpan.org#78474: idle/idle_data documentation error
    [Dima Kogan]
  * Quote()/Massage() now uses literals for non ascii data
    [Mathias Reitinger] reported issues with utf8 data in password
  * use Quote()/Massage() consistently now in:
    login() proxyauth() deleteacl() setacl() listrights() rename()
  * documented deleteacl() and other minor pod cleanup
  * ran Mail::IMAPClient::BodyStructure through perltidy
  * update year in README/pod to 2012
  * rt.cpan.org#74733: Fails with Parse::RecDescent &gt;= 1.966_002
    rt.cpan.org#74593: Recent changes break Module::ExtractUse and ...
    [ANDK, TEAM, SREZIC, NBEBOUT at CPAN and nine from detonation]
  - Makefile.PL avoid buggy Parse::RecDescent 1.966_002 until 1.967_009
  * rt.cpan.org#76989: Mail::IMAPClient::BodyStructure usage/docs
    [Pierluigi Frullani]
  - fix incorrect documentation on new()
  - lots of doc verbiage updates
- fix deps
  * Parse-RecDescent HACK needs perl(persion) &gt; 0.74
  * add missing Recommends</changelog>
  <changelog author="coolo@suse.com" date="1429012800">- updated to 3.35
  see /usr/share/doc/packages/perl-Mail-IMAPClient/Changes
  version 3.35: Fri, Nov 22, 2013  2:18:41 PM
  - *use Quote() over Massage() to avoid stripping double quotes from arg
  + removed constant NonFolderArg
  + may deprecate Massage() in a future release
  - _list_or_lsub failed to handle folder names with double quotes
  + cleanup Escaped_results()
  + new methods: Escaped_history() _escaped_trans_data()
  + removed method: _list_response_preprocess()
  [Gilles Lamiral, Victor Lé]
  - rt.cpan.org#90315: getacl on a folder returned as literal failed
  + _read_line could remove extra space when literal data was received
  [Carl Karcher]
  - rt.cpan.org#89040: typo fixes
  [David Steinbrunner]
  version 3.34: Fri, Sep 27, 2013 12:50:17 AM
  - make Makefile.PL use non-interactive and document test.txt usage
  - new attribute: Socketargs =&gt; [ (IO::Socket::.. args) ]
  + cleanup connect() to more flexible with IO::Socket::* args
  - untagged server data during send literal may cause client to hang
  [Arthur Wolfe, Josh Hillman]
  + _send_line() needs '+' only to know it is OK to send LITERAL data
  + created _response_code_sub() to simplify _get_response()
  - remove internal "Folders" cache
  - Allow for RFC 6154 "IMAP LIST Extension for Special-Use Mailboxes"
  [Mathias Reitinger]
  + new method: folders_hash()
  + deprecate: xlist_folders(), xlist()
  version 3.33: Tue, May 14, 2013 10:12:43 AM
  - more cleanup on use of $@ and $!
  - cleanup get_bodystructure / get_envelope
  - allow Ssl arg as an arrayref to pass args to IO::Socket::SSL
  [Ramana V Mokkapati]
  - no need to Massage() the folder name in uidnext()
  - rt.cpan.org#84028: get_envelope() fails when subject ends w/backslash
  [Andy Lyttle]
  - rt.cpan.org#79476: move()/copy() with sequence causes numeric warning
  [Oleg G]
  - *move()/copy() no longer sort message(s) provided by caller</changelog>
  <changelog author="coolo@suse.com" date="1440331200">- updated to 3.37
  see /usr/share/doc/packages/perl-Mail-IMAPClient/Changes
  version 3.37: Fri Aug 14 11:04:53 EDT 2015
  - regex fix in rt.cpan.org#96575 required Perl 5.10
  updated regex to be backwards compatible with Perl 5.8
  [Paul Howarth]
  version 3.36: Fri Aug 14 01:40:50 UTC 2015
  - rt.cpan.org#96575: parsing fixes for fetch_hash and bodystructure
  + better handling of data containing escaped characters
  [Ken Neighbors]
  - rt.cpan.org#97718: hang waiting for tag if DONE sent outside of IDLE
  [Laurence Darby]
  - rt.cpan.org#100683: failed literal commands hang waiting for '+'
  [Matthias Pitzl]
  - rt.cpan.org#100601: login() fails if username requires use of literals
  [Andy Lyttle]
  - *rt.cpan.org#103823: is_parent() should return undef on \NoInferiors
  [Gilles Lamiral]
  - rt.cpan.org#105456: fetch_hash fails if sequence number contains '*'
  + *no longer removing unrequested data (except UID) in returned hashes
  [Gilles Lamiral]
  - rt.cpan.org#91912: selectable broke in 3.29 due to  around \NoSelect
  [Justin Vallon, Gilles Lamiral]
  - some documentation, test cleanup and new tests</changelog>
  <changelog author="chris@computersalat.de" date="1457870400">- fix deps
  * perl(version) &gt;= 0.77
  * perl(IO::Socket::INET) &gt;= 1.26</changelog>
</package>
<package pkgid="9865c70ae87c3d73f576b519008db509a11fa6495335be3aa438d9475b7468c4" name="perl-Object-Realize-Later" arch="noarch">
  <version epoch="0" ver="0.19" rel="2.1"/>
  <changelog author="suse-tux@gmx.de" date="1149940800">- initial build</changelog>
  <changelog author="suse-tux@gmx.de" date="1173873600">- fixed BuildRequires</changelog>
  <changelog author="rbos@opensuse.org" date="1225454400">- Fixed rpmlint errors</changelog>
  <changelog author="coolo@novell.com" date="1290945600">- remove .packlist file</changelog>
  <changelog author="coolo@novell.com" date="1291032000">- remove /var/adm/perl-modules</changelog>
  <changelog author="coolo@novell.com" date="1291204800">- switch to perl_requires macro</changelog>
  <changelog author="chris@computersalat.de" date="1359115200">- update to 0.18: Fri Jun  8 16:12:16 CEST 2007
  * add Test::Pod to pre-requisits.
- version 0.17: Fri Jun  8 16:09:52 CEST 2007
  * added t/pod.t
  * use oodist to generate documentation
- version 0.16: Sun Mar 25 17:10:24 CEST 2007
  * generate pod with OODoc 0.99
  * removed need for version, mkdist, mkdoc
  * removed README.oodoc</changelog>
  <changelog author="coolo@suse.com" date="1429012800">- updated to 0.19
  see /usr/share/doc/packages/perl-Object-Realize-Later/Changes
  version 0.19: Fri Jan 24 11:09:06 CET 2014
  Improvements:
  - mv t/99pod.t to xt/ and removed dependency to Test::Pod
  - changed documentation syntax</changelog>
</package>
<package pkgid="79b8201fe70c09c82d902f27a51f49a0a14ea7ccd37587302a60d983ac0232fe" name="perl-Object-Realize-Later" arch="src">
  <version epoch="0" ver="0.19" rel="2.1"/>
  <changelog author="suse-tux@gmx.de" date="1149940800">- initial build</changelog>
  <changelog author="suse-tux@gmx.de" date="1173873600">- fixed BuildRequires</changelog>
  <changelog author="rbos@opensuse.org" date="1225454400">- Fixed rpmlint errors</changelog>
  <changelog author="coolo@novell.com" date="1290945600">- remove .packlist file</changelog>
  <changelog author="coolo@novell.com" date="1291032000">- remove /var/adm/perl-modules</changelog>
  <changelog author="coolo@novell.com" date="1291204800">- switch to perl_requires macro</changelog>
  <changelog author="chris@computersalat.de" date="1359115200">- update to 0.18: Fri Jun  8 16:12:16 CEST 2007
  * add Test::Pod to pre-requisits.
- version 0.17: Fri Jun  8 16:09:52 CEST 2007
  * added t/pod.t
  * use oodist to generate documentation
- version 0.16: Sun Mar 25 17:10:24 CEST 2007
  * generate pod with OODoc 0.99
  * removed need for version, mkdist, mkdoc
  * removed README.oodoc</changelog>
  <changelog author="coolo@suse.com" date="1429012800">- updated to 0.19
  see /usr/share/doc/packages/perl-Object-Realize-Later/Changes
  version 0.19: Fri Jan 24 11:09:06 CET 2014
  Improvements:
  - mv t/99pod.t to xt/ and removed dependency to Test::Pod
  - changed documentation syntax</changelog>
</package>
<package pkgid="a18248f4bc5505703720da27b7d265d66aeb8284aefcc6ad1c7491c518b3be67" name="perl-Test-Mock-Guard" arch="noarch">
  <version epoch="0" ver="0.10" rel="2.1"/>
  <changelog author="coolo@suse.com" date="1405771200">- initial package 0.10
  * created by cpanspec 1.78.08</changelog>
</package>
<package pkgid="6dc109afd1cd946b07bf83f1f419b9b6a306352b91c62d5c11070715024e7349" name="perl-Test-Mock-Guard" arch="src">
  <version epoch="0" ver="0.10" rel="2.1"/>
  <changelog author="coolo@suse.com" date="1405771200">- initial package 0.10
  * created by cpanspec 1.78.08</changelog>
</package>
<package pkgid="22a80f0f8f481bda3c24f1c43ff551a30e2bbceeb969cdb1be5cee6c210b1d6e" name="perl-User-Identity" arch="noarch">
  <version epoch="0" ver="0.97" rel="2.1"/>
  <changelog author="rbos@opensuse.org" date="1225454400">- fixed rpmlint errorsj
- new upstream version 0.91
- fixed BuildRequires</changelog>
  <changelog author="chris@computersalat.de" date="1270209600">- update to version 0.93
  o Fixes:
  - Mail::Identity-&gt;from(Mail::Address) produced error
    rt.cpan.org#52115 [Dmitry Bigunyak]
  o Improvements:
  - do not run t/pod.t in devel environment.
- version 0.92: Wed Jul 25 08:50:51 CEST 2007
  o Improvements:
  - add t/pod.t and distribution clean-ups.
- spec mods
  o fixed HEADER
  o sort TAGS
  o fixed deps
  o macros
  o updated description
  o changelog to changes file</changelog>
  <changelog author="coolo@novell.com" date="1291204800">- switch to perl_requires macro</changelog>
  <changelog author="coolo@suse.com" date="1321617600">- use tar.gz</changelog>
  <changelog author="coolo@suse.com" date="1429012800">- updated to 0.94
  see /usr/share/doc/packages/perl-User-Identity/Changes
  version 0.94: Fri Jan 24 10:55:26 CET 2014
  Improvements:
  - changed documentation style</changelog>
  <changelog author="coolo@suse.com" date="1474545600">- updated to 0.96
  see /usr/share/doc/packages/perl-User-Identity/Changes
  version 0.96: Mon Sep 19 23:15:07 CEST 2016
  Fixes:
  - include examples in the manual-pages
  version 0.95:
  Improvements:
  - move t/99pod.t to xt/ and remove dependency on Test::Pod
  - spell checks from Debian.
  rt.cpan.org#92483 [Salvatore Bonaccorso]</changelog>
  <changelog author="coolo@suse.com" date="1487073600">- updated to 0.97
  see /usr/share/doc/packages/perl-User-Identity/Changes
  version 0.97: Thu  2 Feb 15:52:27 CET 2017
  Improvements:
  - spell checks from Debian.
  rt.cpan.org#118328 [Angel Abad]
  - share podtail with MailBox</changelog>
</package>
<package pkgid="cccd296ecb27dd9c1da33ec53a29b82907c4c8c9a8ff2a6ecab4db7925e384a8" name="perl-User-Identity" arch="src">
  <version epoch="0" ver="0.97" rel="2.1"/>
  <changelog author="rbos@opensuse.org" date="1225454400">- fixed rpmlint errorsj
- new upstream version 0.91
- fixed BuildRequires</changelog>
  <changelog author="chris@computersalat.de" date="1270209600">- update to version 0.93
  o Fixes:
  - Mail::Identity-&gt;from(Mail::Address) produced error
    rt.cpan.org#52115 [Dmitry Bigunyak]
  o Improvements:
  - do not run t/pod.t in devel environment.
- version 0.92: Wed Jul 25 08:50:51 CEST 2007
  o Improvements:
  - add t/pod.t and distribution clean-ups.
- spec mods
  o fixed HEADER
  o sort TAGS
  o fixed deps
  o macros
  o updated description
  o changelog to changes file</changelog>
  <changelog author="coolo@novell.com" date="1291204800">- switch to perl_requires macro</changelog>
  <changelog author="coolo@suse.com" date="1321617600">- use tar.gz</changelog>
  <changelog author="coolo@suse.com" date="1429012800">- updated to 0.94
  see /usr/share/doc/packages/perl-User-Identity/Changes
  version 0.94: Fri Jan 24 10:55:26 CET 2014
  Improvements:
  - changed documentation style</changelog>
  <changelog author="coolo@suse.com" date="1474545600">- updated to 0.96
  see /usr/share/doc/packages/perl-User-Identity/Changes
  version 0.96: Mon Sep 19 23:15:07 CEST 2016
  Fixes:
  - include examples in the manual-pages
  version 0.95:
  Improvements:
  - move t/99pod.t to xt/ and remove dependency on Test::Pod
  - spell checks from Debian.
  rt.cpan.org#92483 [Salvatore Bonaccorso]</changelog>
  <changelog author="coolo@suse.com" date="1487073600">- updated to 0.97
  see /usr/share/doc/packages/perl-User-Identity/Changes
  version 0.97: Thu  2 Feb 15:52:27 CET 2017
  Improvements:
  - spell checks from Debian.
  rt.cpan.org#118328 [Angel Abad]
  - share podtail with MailBox</changelog>
</package>
<package pkgid="24cda66fa61db47afbf42ae3d7719f5ad1bf1cfe1a0977960ae65da0a2782b54" name="pfqueue" arch="src">
  <version epoch="0" ver="0.5.6" rel="3.1"/>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.1.3" date="1103889600">- new package</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.1.4" date="1104321600">- Minor bugfixes were made. It is no longer necessary to be root to use the program.</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.2.1" date="1105617600">- version 0.2.1</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.0" date="1107000000">- version 0.3.0</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.1-1" date="1108036800">- version 0.3.1</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.2-1" date="1108641600">- version 0.3.2</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.3-1" date="1109592000">- version 0.3.3</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.4-1" date="1110283200">- version 0.3.4</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.5-1" date="1111579200">- version 0.3.5</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.6-1" date="1114257600">- added suse_update_config
- version 0.3.6</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.7-1" date="1115812800">- version 0.3.7</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.8-1" date="1116590400">- version 0.3.8</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.4.0-1" date="1118491200">- version 0.4.0</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.4.1-1" date="1119009600">- version 0.4.1</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.4.2-1" date="1120478400">- version 0.4.2</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.0-1" date="1125489600">- added suse_update_libdir
- added c_compiler and make to BuildRequires
- added TODO to doc files
- set attr on doc files
- added libpfqueue (added in upstream)
- added lib*.so files (added in upstream)
- version 0.5.0</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.1-1" date="1136980800">- x86_64 builds
- added debuginfo support
- new upstream version
- rewrote spec file</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.2-1" date="1138881600">- fixed Source URL
- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.2-2" date="1149422400">- moved to openSUSE Build Service</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.6" date="1207137600">- new upstream version</changelog>
</package>
<package pkgid="4a5271230e0c856e2c892339ec3a20d17c31887fb797a7501e230f103b1bdba5" name="pfqueue" arch="x86_64">
  <version epoch="0" ver="0.5.6" rel="3.1"/>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.7-1" date="1115812800">- version 0.3.7</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.8-1" date="1116590400">- version 0.3.8</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.4.0-1" date="1118491200">- version 0.4.0</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.4.1-1" date="1119009600">- version 0.4.1</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.4.2-1" date="1120478400">- version 0.4.2</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.0-1" date="1125489600">- added suse_update_libdir
- added c_compiler and make to BuildRequires
- added TODO to doc files
- set attr on doc files
- added libpfqueue (added in upstream)
- added lib*.so files (added in upstream)
- version 0.5.0</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.1-1" date="1136980800">- x86_64 builds
- added debuginfo support
- new upstream version
- rewrote spec file</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.2-1" date="1138881600">- fixed Source URL
- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.2-2" date="1149422400">- moved to openSUSE Build Service</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.6" date="1207137600">- new upstream version</changelog>
</package>
<package pkgid="47b34e12ddb06d467341ddf9279fe6d83b3e209bb48f07e7a90db56f06379f98" name="pfqueue-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.5.6" rel="3.1"/>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.1.3" date="1103889600">- new package</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.1.4" date="1104321600">- Minor bugfixes were made. It is no longer necessary to be root to use the program.</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.2.1" date="1105617600">- version 0.2.1</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.0" date="1107000000">- version 0.3.0</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.1-1" date="1108036800">- version 0.3.1</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.2-1" date="1108641600">- version 0.3.2</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.3-1" date="1109592000">- version 0.3.3</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.4-1" date="1110283200">- version 0.3.4</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.5-1" date="1111579200">- version 0.3.5</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.6-1" date="1114257600">- added suse_update_config
- version 0.3.6</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.7-1" date="1115812800">- version 0.3.7</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.8-1" date="1116590400">- version 0.3.8</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.4.0-1" date="1118491200">- version 0.4.0</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.4.1-1" date="1119009600">- version 0.4.1</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.4.2-1" date="1120478400">- version 0.4.2</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.0-1" date="1125489600">- added suse_update_libdir
- added c_compiler and make to BuildRequires
- added TODO to doc files
- set attr on doc files
- added libpfqueue (added in upstream)
- added lib*.so files (added in upstream)
- version 0.5.0</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.1-1" date="1136980800">- x86_64 builds
- added debuginfo support
- new upstream version
- rewrote spec file</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.2-1" date="1138881600">- fixed Source URL
- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.2-2" date="1149422400">- moved to openSUSE Build Service</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.6" date="1207137600">- new upstream version</changelog>
</package>
<package pkgid="83661a9941cb56c5e10e82e526a2c6b98c94ad86bd3b43403638248eab60b192" name="pfqueue-debugsource" arch="x86_64">
  <version epoch="0" ver="0.5.6" rel="3.1"/>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.7-1" date="1115812800">- version 0.3.7</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.8-1" date="1116590400">- version 0.3.8</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.4.0-1" date="1118491200">- version 0.4.0</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.4.1-1" date="1119009600">- version 0.4.1</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.4.2-1" date="1120478400">- version 0.4.2</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.0-1" date="1125489600">- added suse_update_libdir
- added c_compiler and make to BuildRequires
- added TODO to doc files
- set attr on doc files
- added libpfqueue (added in upstream)
- added lib*.so files (added in upstream)
- version 0.5.0</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.1-1" date="1136980800">- x86_64 builds
- added debuginfo support
- new upstream version
- rewrote spec file</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.2-1" date="1138881600">- fixed Source URL
- new upstream version</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.2-2" date="1149422400">- moved to openSUSE Build Service</changelog>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.5.6" date="1207137600">- new upstream version</changelog>
</package>
<package pkgid="7b0c25d632a7de94775b717bd7813e02ffe18202f85522e804429c5401177517" name="pico" arch="x86_64">
  <version epoch="0" ver="5.07" rel="102.1"/>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1315051200">- Fix build with no-add-needed</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="max@suse.com" date="1318248000">- Explicitly set the ssl prefix dir to fix build on ARM.</changelog>
  <changelog author="max@suse.com" date="1318334400">- Fix and extend operation-may-be-undefined-warning.diff
  (bnc#558841)
- Overhaul RPM summary and description.
- Month names containing non-ASCII characters were rendered
  incorrectly in non-UTF8 locales (bnc#597744).</changelog>
  <changelog author="max@suse.com" date="1318852800">- Fix two instances of premature closedir() and a potential buffer
  overflow in the maildir handler (alpine-maildir-closedir.patch).</changelog>
  <changelog author="puzel@suse.com" date="1328702400">- clean up spec file</changelog>
  <changelog author="aj@suse.de" date="1343390400">- Include sys/resource.h for getrlimit.</changelog>
  <changelog author="jengelh@inai.de" date="1369224000">- Remove old SUSE definitions</changelog>
  <changelog author="jengelh@inai.de" date="1369224001">- Update to new upstream release 2.10
  * Quota report for IMAP folders that support it
  (press the "@" command in the index screen of such folder).
  * Search a folder for the content of any header with the ";"
  command.
  * Foreign characters are decoded correctly in IMAP folders.
  * Recognition of proper mime type for docx, xlsx, and pptx files.
  * When composing a message, Alpine will create a new thread when
  the subject is erased.
- Uncompress patches, since quilt does not like working with them
- Remove because merged upstream: chappa-filterflagbug.patch(.gz),
  chappa-nlinfobug.patch(.gz), chappa-replacebug.patch(.gz),
  chappa-searchheader.patch(.gz), chappa-streamlock.patch(.gz)
- Rediff to clear fuzz: alpine-no-add-needed.patch,
  pine-nonvoid-function.patch
- Remove because no longer applies and total lack of description
  as per Patch Guidelines:
  alpine-no-add-needed.patch</changelog>
  <changelog author="jengelh@inai.de" date="1378123200">- Update to new upstream release 2.11
  * Increase encryption of S/MIME encrypted messages.
  * Pico: Improvements in justification of paragraphs: lines that
  begin with a quote string, followed by a space were considered
  individual paragraphs, now they are considered part of a paragraph.
  * Unix Alpine: Allow local .pinerc file to be a symbolic link.
  * Experimental extended support of recognition of UTF-8 in urls
  * Added recognition of ws and wss URIs.
  * Add ability to color folder names, directory names, and text in
  the FOLDER SCREEN.
  * Add the ability to color any token used in the display of the
  INDEX SCREEN.
  * New option preserve-original-fields that adds the ability to
  preserve To: and Cc: fields when replying to a message, as
  specified by original sender.
  * Added Quota subcommands for printing, forwarding, saving, etc.
- Refresh from homepage (and save as unified): chappa-*.patch
- Refresh for -p1: operation-may-be-undefined-warning.diff,
  fix-implicit.patch, alpine-gcc44.diff
- Drop quilt-patches/alpine-2.00-as_needed.patch (merged upstream)</changelog>
  <changelog author="max@suse.com" date="1390392000">- Add alpine-mime-type-workaround.patch:
  Send mime type in lowercase to work around MUAs that can't cope
  with upper case mime type strings in the Content-Type header
  such as the webmailer of GMX.  This is a backport from the
  current development release and will become obsolete with the
  next version upgrade.</changelog>
  <changelog author="jengelh@inai.de" date="1393848000">- The pico and pilot standalone programs have version numbers of
  their own; expose these in the .spec file</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 2.20
  * Upgrade UW-IMAP to Panda IMAP from github.com/jonabbey/panda-imap
  * S/MIME: Add screen to manage certificates.
  * S/MIME: Signatures are validated using the user's certificates
  instead of the ones included in the message. Behavior can be
  disabled by disabling the option "Validate Using Certificate
  Store Only" which is enabled by default.
  * S/MIME: add the sender certificate to the list of certificates
  in encrypted messages to make it possible for the sender to
  decrypt the message they sent.
  * S/MIME: Forwarding a message will include the signed part as part
  of the text and not as a multipart message, just as the reply
  command does.
  * Add support to selective expunge through a subcommand of the
  select-apply commands.
  * Pico: New subcommand of the search command, allows to reverse the
  direction of search.
  * Add /tls1, /tls1_1, /tls1_2 and /dtls1 to the definition of a
  server to use different ways to connect using ssl, for example
  {server.com/tls1} will attempt to connect to server.com at the
  ssl imap port (port 993) and establish a connection using TLSv1.
  These flags can be used in conjunction with the /ssl flag, the
  ssl flag is redundant. Conversely, however, the /ssl flag does
  not imply any of these flags; the /ssl flag means SSLv3 or, if
  not available, SSLv2 in the SSL port.
  * Alpine does not attempt to automatically reopen a collection that
  was not opened due to cancellation by the user. Instead, the user
  must try to open it explicitly.
  * Experimental: Write the content-type of a message in lowercase,
  as some non-compliant servers do not understand uppercase
  content-type.
  * Opening a folder updates recent count in maildrops (this
  already works for other types of folders)
  * Pico: Justification works without need of a predefined quote
  string. This allows justification of blocks of text that are
  indented with spaces.
  * Decode the name of attachment names, so they can be written as
  part of the description of the part.
  * Replace tabs by spaces in From and Subject fields to control for
  size in screen of these fields. Change only in index screen
  display.
- Drop alpine-month_name-utf8.patch (solved differently upstream),
  drop alpine-mime-type-workaround.patch (merged upstream)
- Add lint.diff to workaround new source code problems</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from binary
  alpine-timestamp.patch</changelog>
  <changelog author="kukuk@suse.de" date="1459771200">- Remove BuildRequires for libgssglue (via libgssapi provides),
  unused since krb5_gssapi is used.</changelog>
  <changelog author="max@suse.com" date="1490097600">- New version 2.21:
  * New SHORTSUBJECT, SHORTSUBJKEY and SHORTSUBJKEYINIT token for
    index format
  * New SMARTTIME24 token for index screen.
  * Added support for RFC 2971 - IMAP ID extension.
  * SMIME: Upgrade the default signature digest from SHA-1 to
    SHA-256.
  * SMIME: Turn off automatic signing and encrypting of a message
    when bouncing.
  * The complete change list can be viewed by pressing "R"
    in the Alpine main menu.
- Updated "Chappa" patches to the latest version.
- Obsolete patches:
  * alpine-no-add-needed.patch
  * chappa-ignoresize.patch
  * chappa-unixnullbug.patch
  * pico-stripwhitespace.diff
  * pine-nonvoid-function.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1490097601">- add chappa patch to add own rules (chappa-rules.patch)
- add chappa patch to change from header (chappa-fromheader.patch)
- add chappa patch to better justify paragraphs (chappa-fillpara.patch)
- drop empty lint.diff</changelog>
  <changelog author="jengelh@inai.de" date="1499083200">- imap is bundled with alpine since a while, so there is no need
  for imap-devel anymore (whose removal is planned for
  openSUSE:Factory).</changelog>
</package>
<package pkgid="9718a0d9221d7eb547a38e602b1b84d3b96564cfcd11d38eb43a2b9fed165c79" name="pico-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.07" rel="102.1"/>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1315051200">- Fix build with no-add-needed</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="max@suse.com" date="1318248000">- Explicitly set the ssl prefix dir to fix build on ARM.</changelog>
  <changelog author="max@suse.com" date="1318334400">- Fix and extend operation-may-be-undefined-warning.diff
  (bnc#558841)
- Overhaul RPM summary and description.
- Month names containing non-ASCII characters were rendered
  incorrectly in non-UTF8 locales (bnc#597744).</changelog>
  <changelog author="max@suse.com" date="1318852800">- Fix two instances of premature closedir() and a potential buffer
  overflow in the maildir handler (alpine-maildir-closedir.patch).</changelog>
  <changelog author="puzel@suse.com" date="1328702400">- clean up spec file</changelog>
  <changelog author="aj@suse.de" date="1343390400">- Include sys/resource.h for getrlimit.</changelog>
  <changelog author="jengelh@inai.de" date="1369224000">- Remove old SUSE definitions</changelog>
  <changelog author="jengelh@inai.de" date="1369224001">- Update to new upstream release 2.10
  * Quota report for IMAP folders that support it
  (press the "@" command in the index screen of such folder).
  * Search a folder for the content of any header with the ";"
  command.
  * Foreign characters are decoded correctly in IMAP folders.
  * Recognition of proper mime type for docx, xlsx, and pptx files.
  * When composing a message, Alpine will create a new thread when
  the subject is erased.
- Uncompress patches, since quilt does not like working with them
- Remove because merged upstream: chappa-filterflagbug.patch(.gz),
  chappa-nlinfobug.patch(.gz), chappa-replacebug.patch(.gz),
  chappa-searchheader.patch(.gz), chappa-streamlock.patch(.gz)
- Rediff to clear fuzz: alpine-no-add-needed.patch,
  pine-nonvoid-function.patch
- Remove because no longer applies and total lack of description
  as per Patch Guidelines:
  alpine-no-add-needed.patch</changelog>
  <changelog author="jengelh@inai.de" date="1378123200">- Update to new upstream release 2.11
  * Increase encryption of S/MIME encrypted messages.
  * Pico: Improvements in justification of paragraphs: lines that
  begin with a quote string, followed by a space were considered
  individual paragraphs, now they are considered part of a paragraph.
  * Unix Alpine: Allow local .pinerc file to be a symbolic link.
  * Experimental extended support of recognition of UTF-8 in urls
  * Added recognition of ws and wss URIs.
  * Add ability to color folder names, directory names, and text in
  the FOLDER SCREEN.
  * Add the ability to color any token used in the display of the
  INDEX SCREEN.
  * New option preserve-original-fields that adds the ability to
  preserve To: and Cc: fields when replying to a message, as
  specified by original sender.
  * Added Quota subcommands for printing, forwarding, saving, etc.
- Refresh from homepage (and save as unified): chappa-*.patch
- Refresh for -p1: operation-may-be-undefined-warning.diff,
  fix-implicit.patch, alpine-gcc44.diff
- Drop quilt-patches/alpine-2.00-as_needed.patch (merged upstream)</changelog>
  <changelog author="max@suse.com" date="1390392000">- Add alpine-mime-type-workaround.patch:
  Send mime type in lowercase to work around MUAs that can't cope
  with upper case mime type strings in the Content-Type header
  such as the webmailer of GMX.  This is a backport from the
  current development release and will become obsolete with the
  next version upgrade.</changelog>
  <changelog author="jengelh@inai.de" date="1393848000">- The pico and pilot standalone programs have version numbers of
  their own; expose these in the .spec file</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 2.20
  * Upgrade UW-IMAP to Panda IMAP from github.com/jonabbey/panda-imap
  * S/MIME: Add screen to manage certificates.
  * S/MIME: Signatures are validated using the user's certificates
  instead of the ones included in the message. Behavior can be
  disabled by disabling the option "Validate Using Certificate
  Store Only" which is enabled by default.
  * S/MIME: add the sender certificate to the list of certificates
  in encrypted messages to make it possible for the sender to
  decrypt the message they sent.
  * S/MIME: Forwarding a message will include the signed part as part
  of the text and not as a multipart message, just as the reply
  command does.
  * Add support to selective expunge through a subcommand of the
  select-apply commands.
  * Pico: New subcommand of the search command, allows to reverse the
  direction of search.
  * Add /tls1, /tls1_1, /tls1_2 and /dtls1 to the definition of a
  server to use different ways to connect using ssl, for example
  {server.com/tls1} will attempt to connect to server.com at the
  ssl imap port (port 993) and establish a connection using TLSv1.
  These flags can be used in conjunction with the /ssl flag, the
  ssl flag is redundant. Conversely, however, the /ssl flag does
  not imply any of these flags; the /ssl flag means SSLv3 or, if
  not available, SSLv2 in the SSL port.
  * Alpine does not attempt to automatically reopen a collection that
  was not opened due to cancellation by the user. Instead, the user
  must try to open it explicitly.
  * Experimental: Write the content-type of a message in lowercase,
  as some non-compliant servers do not understand uppercase
  content-type.
  * Opening a folder updates recent count in maildrops (this
  already works for other types of folders)
  * Pico: Justification works without need of a predefined quote
  string. This allows justification of blocks of text that are
  indented with spaces.
  * Decode the name of attachment names, so they can be written as
  part of the description of the part.
  * Replace tabs by spaces in From and Subject fields to control for
  size in screen of these fields. Change only in index screen
  display.
- Drop alpine-month_name-utf8.patch (solved differently upstream),
  drop alpine-mime-type-workaround.patch (merged upstream)
- Add lint.diff to workaround new source code problems</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from binary
  alpine-timestamp.patch</changelog>
  <changelog author="kukuk@suse.de" date="1459771200">- Remove BuildRequires for libgssglue (via libgssapi provides),
  unused since krb5_gssapi is used.</changelog>
  <changelog author="max@suse.com" date="1490097600">- New version 2.21:
  * New SHORTSUBJECT, SHORTSUBJKEY and SHORTSUBJKEYINIT token for
    index format
  * New SMARTTIME24 token for index screen.
  * Added support for RFC 2971 - IMAP ID extension.
  * SMIME: Upgrade the default signature digest from SHA-1 to
    SHA-256.
  * SMIME: Turn off automatic signing and encrypting of a message
    when bouncing.
  * The complete change list can be viewed by pressing "R"
    in the Alpine main menu.
- Updated "Chappa" patches to the latest version.
- Obsolete patches:
  * alpine-no-add-needed.patch
  * chappa-ignoresize.patch
  * chappa-unixnullbug.patch
  * pico-stripwhitespace.diff
  * pine-nonvoid-function.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1490097601">- add chappa patch to add own rules (chappa-rules.patch)
- add chappa patch to change from header (chappa-fromheader.patch)
- add chappa patch to better justify paragraphs (chappa-fillpara.patch)
- drop empty lint.diff</changelog>
  <changelog author="jengelh@inai.de" date="1499083200">- imap is bundled with alpine since a while, so there is no need
  for imap-devel anymore (whose removal is planned for
  openSUSE:Factory).</changelog>
</package>
<package pkgid="e554a3134ec1cad843a5c8f6322938300df10b216e52242e95ec85709d2bb388" name="pilot" arch="x86_64">
  <version epoch="0" ver="2.99" rel="102.1"/>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1315051200">- Fix build with no-add-needed</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="max@suse.com" date="1318248000">- Explicitly set the ssl prefix dir to fix build on ARM.</changelog>
  <changelog author="max@suse.com" date="1318334400">- Fix and extend operation-may-be-undefined-warning.diff
  (bnc#558841)
- Overhaul RPM summary and description.
- Month names containing non-ASCII characters were rendered
  incorrectly in non-UTF8 locales (bnc#597744).</changelog>
  <changelog author="max@suse.com" date="1318852800">- Fix two instances of premature closedir() and a potential buffer
  overflow in the maildir handler (alpine-maildir-closedir.patch).</changelog>
  <changelog author="puzel@suse.com" date="1328702400">- clean up spec file</changelog>
  <changelog author="aj@suse.de" date="1343390400">- Include sys/resource.h for getrlimit.</changelog>
  <changelog author="jengelh@inai.de" date="1369224000">- Remove old SUSE definitions</changelog>
  <changelog author="jengelh@inai.de" date="1369224001">- Update to new upstream release 2.10
  * Quota report for IMAP folders that support it
  (press the "@" command in the index screen of such folder).
  * Search a folder for the content of any header with the ";"
  command.
  * Foreign characters are decoded correctly in IMAP folders.
  * Recognition of proper mime type for docx, xlsx, and pptx files.
  * When composing a message, Alpine will create a new thread when
  the subject is erased.
- Uncompress patches, since quilt does not like working with them
- Remove because merged upstream: chappa-filterflagbug.patch(.gz),
  chappa-nlinfobug.patch(.gz), chappa-replacebug.patch(.gz),
  chappa-searchheader.patch(.gz), chappa-streamlock.patch(.gz)
- Rediff to clear fuzz: alpine-no-add-needed.patch,
  pine-nonvoid-function.patch
- Remove because no longer applies and total lack of description
  as per Patch Guidelines:
  alpine-no-add-needed.patch</changelog>
  <changelog author="jengelh@inai.de" date="1378123200">- Update to new upstream release 2.11
  * Increase encryption of S/MIME encrypted messages.
  * Pico: Improvements in justification of paragraphs: lines that
  begin with a quote string, followed by a space were considered
  individual paragraphs, now they are considered part of a paragraph.
  * Unix Alpine: Allow local .pinerc file to be a symbolic link.
  * Experimental extended support of recognition of UTF-8 in urls
  * Added recognition of ws and wss URIs.
  * Add ability to color folder names, directory names, and text in
  the FOLDER SCREEN.
  * Add the ability to color any token used in the display of the
  INDEX SCREEN.
  * New option preserve-original-fields that adds the ability to
  preserve To: and Cc: fields when replying to a message, as
  specified by original sender.
  * Added Quota subcommands for printing, forwarding, saving, etc.
- Refresh from homepage (and save as unified): chappa-*.patch
- Refresh for -p1: operation-may-be-undefined-warning.diff,
  fix-implicit.patch, alpine-gcc44.diff
- Drop quilt-patches/alpine-2.00-as_needed.patch (merged upstream)</changelog>
  <changelog author="max@suse.com" date="1390392000">- Add alpine-mime-type-workaround.patch:
  Send mime type in lowercase to work around MUAs that can't cope
  with upper case mime type strings in the Content-Type header
  such as the webmailer of GMX.  This is a backport from the
  current development release and will become obsolete with the
  next version upgrade.</changelog>
  <changelog author="jengelh@inai.de" date="1393848000">- The pico and pilot standalone programs have version numbers of
  their own; expose these in the .spec file</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 2.20
  * Upgrade UW-IMAP to Panda IMAP from github.com/jonabbey/panda-imap
  * S/MIME: Add screen to manage certificates.
  * S/MIME: Signatures are validated using the user's certificates
  instead of the ones included in the message. Behavior can be
  disabled by disabling the option "Validate Using Certificate
  Store Only" which is enabled by default.
  * S/MIME: add the sender certificate to the list of certificates
  in encrypted messages to make it possible for the sender to
  decrypt the message they sent.
  * S/MIME: Forwarding a message will include the signed part as part
  of the text and not as a multipart message, just as the reply
  command does.
  * Add support to selective expunge through a subcommand of the
  select-apply commands.
  * Pico: New subcommand of the search command, allows to reverse the
  direction of search.
  * Add /tls1, /tls1_1, /tls1_2 and /dtls1 to the definition of a
  server to use different ways to connect using ssl, for example
  {server.com/tls1} will attempt to connect to server.com at the
  ssl imap port (port 993) and establish a connection using TLSv1.
  These flags can be used in conjunction with the /ssl flag, the
  ssl flag is redundant. Conversely, however, the /ssl flag does
  not imply any of these flags; the /ssl flag means SSLv3 or, if
  not available, SSLv2 in the SSL port.
  * Alpine does not attempt to automatically reopen a collection that
  was not opened due to cancellation by the user. Instead, the user
  must try to open it explicitly.
  * Experimental: Write the content-type of a message in lowercase,
  as some non-compliant servers do not understand uppercase
  content-type.
  * Opening a folder updates recent count in maildrops (this
  already works for other types of folders)
  * Pico: Justification works without need of a predefined quote
  string. This allows justification of blocks of text that are
  indented with spaces.
  * Decode the name of attachment names, so they can be written as
  part of the description of the part.
  * Replace tabs by spaces in From and Subject fields to control for
  size in screen of these fields. Change only in index screen
  display.
- Drop alpine-month_name-utf8.patch (solved differently upstream),
  drop alpine-mime-type-workaround.patch (merged upstream)
- Add lint.diff to workaround new source code problems</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from binary
  alpine-timestamp.patch</changelog>
  <changelog author="kukuk@suse.de" date="1459771200">- Remove BuildRequires for libgssglue (via libgssapi provides),
  unused since krb5_gssapi is used.</changelog>
  <changelog author="max@suse.com" date="1490097600">- New version 2.21:
  * New SHORTSUBJECT, SHORTSUBJKEY and SHORTSUBJKEYINIT token for
    index format
  * New SMARTTIME24 token for index screen.
  * Added support for RFC 2971 - IMAP ID extension.
  * SMIME: Upgrade the default signature digest from SHA-1 to
    SHA-256.
  * SMIME: Turn off automatic signing and encrypting of a message
    when bouncing.
  * The complete change list can be viewed by pressing "R"
    in the Alpine main menu.
- Updated "Chappa" patches to the latest version.
- Obsolete patches:
  * alpine-no-add-needed.patch
  * chappa-ignoresize.patch
  * chappa-unixnullbug.patch
  * pico-stripwhitespace.diff
  * pine-nonvoid-function.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1490097601">- add chappa patch to add own rules (chappa-rules.patch)
- add chappa patch to change from header (chappa-fromheader.patch)
- add chappa patch to better justify paragraphs (chappa-fillpara.patch)
- drop empty lint.diff</changelog>
  <changelog author="jengelh@inai.de" date="1499083200">- imap is bundled with alpine since a while, so there is no need
  for imap-devel anymore (whose removal is planned for
  openSUSE:Factory).</changelog>
</package>
<package pkgid="ab87ca51ed601c8531f18a8df880dbf4a36aed60ab30d9be6c6b4932b87c9abd" name="pilot-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.99" rel="102.1"/>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1315051200">- Fix build with no-add-needed</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="max@suse.com" date="1318248000">- Explicitly set the ssl prefix dir to fix build on ARM.</changelog>
  <changelog author="max@suse.com" date="1318334400">- Fix and extend operation-may-be-undefined-warning.diff
  (bnc#558841)
- Overhaul RPM summary and description.
- Month names containing non-ASCII characters were rendered
  incorrectly in non-UTF8 locales (bnc#597744).</changelog>
  <changelog author="max@suse.com" date="1318852800">- Fix two instances of premature closedir() and a potential buffer
  overflow in the maildir handler (alpine-maildir-closedir.patch).</changelog>
  <changelog author="puzel@suse.com" date="1328702400">- clean up spec file</changelog>
  <changelog author="aj@suse.de" date="1343390400">- Include sys/resource.h for getrlimit.</changelog>
  <changelog author="jengelh@inai.de" date="1369224000">- Remove old SUSE definitions</changelog>
  <changelog author="jengelh@inai.de" date="1369224001">- Update to new upstream release 2.10
  * Quota report for IMAP folders that support it
  (press the "@" command in the index screen of such folder).
  * Search a folder for the content of any header with the ";"
  command.
  * Foreign characters are decoded correctly in IMAP folders.
  * Recognition of proper mime type for docx, xlsx, and pptx files.
  * When composing a message, Alpine will create a new thread when
  the subject is erased.
- Uncompress patches, since quilt does not like working with them
- Remove because merged upstream: chappa-filterflagbug.patch(.gz),
  chappa-nlinfobug.patch(.gz), chappa-replacebug.patch(.gz),
  chappa-searchheader.patch(.gz), chappa-streamlock.patch(.gz)
- Rediff to clear fuzz: alpine-no-add-needed.patch,
  pine-nonvoid-function.patch
- Remove because no longer applies and total lack of description
  as per Patch Guidelines:
  alpine-no-add-needed.patch</changelog>
  <changelog author="jengelh@inai.de" date="1378123200">- Update to new upstream release 2.11
  * Increase encryption of S/MIME encrypted messages.
  * Pico: Improvements in justification of paragraphs: lines that
  begin with a quote string, followed by a space were considered
  individual paragraphs, now they are considered part of a paragraph.
  * Unix Alpine: Allow local .pinerc file to be a symbolic link.
  * Experimental extended support of recognition of UTF-8 in urls
  * Added recognition of ws and wss URIs.
  * Add ability to color folder names, directory names, and text in
  the FOLDER SCREEN.
  * Add the ability to color any token used in the display of the
  INDEX SCREEN.
  * New option preserve-original-fields that adds the ability to
  preserve To: and Cc: fields when replying to a message, as
  specified by original sender.
  * Added Quota subcommands for printing, forwarding, saving, etc.
- Refresh from homepage (and save as unified): chappa-*.patch
- Refresh for -p1: operation-may-be-undefined-warning.diff,
  fix-implicit.patch, alpine-gcc44.diff
- Drop quilt-patches/alpine-2.00-as_needed.patch (merged upstream)</changelog>
  <changelog author="max@suse.com" date="1390392000">- Add alpine-mime-type-workaround.patch:
  Send mime type in lowercase to work around MUAs that can't cope
  with upper case mime type strings in the Content-Type header
  such as the webmailer of GMX.  This is a backport from the
  current development release and will become obsolete with the
  next version upgrade.</changelog>
  <changelog author="jengelh@inai.de" date="1393848000">- The pico and pilot standalone programs have version numbers of
  their own; expose these in the .spec file</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 2.20
  * Upgrade UW-IMAP to Panda IMAP from github.com/jonabbey/panda-imap
  * S/MIME: Add screen to manage certificates.
  * S/MIME: Signatures are validated using the user's certificates
  instead of the ones included in the message. Behavior can be
  disabled by disabling the option "Validate Using Certificate
  Store Only" which is enabled by default.
  * S/MIME: add the sender certificate to the list of certificates
  in encrypted messages to make it possible for the sender to
  decrypt the message they sent.
  * S/MIME: Forwarding a message will include the signed part as part
  of the text and not as a multipart message, just as the reply
  command does.
  * Add support to selective expunge through a subcommand of the
  select-apply commands.
  * Pico: New subcommand of the search command, allows to reverse the
  direction of search.
  * Add /tls1, /tls1_1, /tls1_2 and /dtls1 to the definition of a
  server to use different ways to connect using ssl, for example
  {server.com/tls1} will attempt to connect to server.com at the
  ssl imap port (port 993) and establish a connection using TLSv1.
  These flags can be used in conjunction with the /ssl flag, the
  ssl flag is redundant. Conversely, however, the /ssl flag does
  not imply any of these flags; the /ssl flag means SSLv3 or, if
  not available, SSLv2 in the SSL port.
  * Alpine does not attempt to automatically reopen a collection that
  was not opened due to cancellation by the user. Instead, the user
  must try to open it explicitly.
  * Experimental: Write the content-type of a message in lowercase,
  as some non-compliant servers do not understand uppercase
  content-type.
  * Opening a folder updates recent count in maildrops (this
  already works for other types of folders)
  * Pico: Justification works without need of a predefined quote
  string. This allows justification of blocks of text that are
  indented with spaces.
  * Decode the name of attachment names, so they can be written as
  part of the description of the part.
  * Replace tabs by spaces in From and Subject fields to control for
  size in screen of these fields. Change only in index screen
  display.
- Drop alpine-month_name-utf8.patch (solved differently upstream),
  drop alpine-mime-type-workaround.patch (merged upstream)
- Add lint.diff to workaround new source code problems</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from binary
  alpine-timestamp.patch</changelog>
  <changelog author="kukuk@suse.de" date="1459771200">- Remove BuildRequires for libgssglue (via libgssapi provides),
  unused since krb5_gssapi is used.</changelog>
  <changelog author="max@suse.com" date="1490097600">- New version 2.21:
  * New SHORTSUBJECT, SHORTSUBJKEY and SHORTSUBJKEYINIT token for
    index format
  * New SMARTTIME24 token for index screen.
  * Added support for RFC 2971 - IMAP ID extension.
  * SMIME: Upgrade the default signature digest from SHA-1 to
    SHA-256.
  * SMIME: Turn off automatic signing and encrypting of a message
    when bouncing.
  * The complete change list can be viewed by pressing "R"
    in the Alpine main menu.
- Updated "Chappa" patches to the latest version.
- Obsolete patches:
  * alpine-no-add-needed.patch
  * chappa-ignoresize.patch
  * chappa-unixnullbug.patch
  * pico-stripwhitespace.diff
  * pine-nonvoid-function.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1490097601">- add chappa patch to add own rules (chappa-rules.patch)
- add chappa patch to change from header (chappa-fromheader.patch)
- add chappa patch to better justify paragraphs (chappa-fillpara.patch)
- drop empty lint.diff</changelog>
  <changelog author="jengelh@inai.de" date="1499083200">- imap is bundled with alpine since a while, so there is no need
  for imap-devel anymore (whose removal is planned for
  openSUSE:Factory).</changelog>
</package>
<package pkgid="75cdd98568955f4ff23d30a786c0e34e7c8afe537852baf820086554b08c4db3" name="pop-before-smtp" arch="noarch">
  <version epoch="0" ver="1.42" rel="3.1"/>
  <changelog author="chris@computersalat.de" date="1247313600">- initial package 1.42
- some spec fixes
  o post fillup_and_insserv
  o preun stop_on_removal
  o postun insserv_cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1259064000">- cleanup spec
  o removed ^'----
  o simplify install section
- moved init script from patch to S:1</changelog>
  <changelog author="chris@computersalat.de" date="1476705600">- add simple support for IPv6 and Courier-IMAP/POP3
- rework pop-before-smtp-1.42-SuSE.patch patch
- add pop-before-smtp_IPv6.patch</changelog>
  <changelog author="chris@computersalat.de" date="1479643200">- change to Net::IP::Lite for IPv6 support, cause Net::IP (1.26)
  is brocken
- rework pattern for dovecot 2.2</changelog>
  <changelog author="chris@computersalat.de" date="1486036800">- fix deps
  * add missing perl(Net::IP::Lite)</changelog>
  <changelog author="chris@computersalat.de" date="1486382400">- update pop-before-smtp_IPv6.patch
  * improve courier out_pat</changelog>
</package>
<package pkgid="7e9ee50d47d849aa7326b4f06a7d817ccc84be0d43560e592963cc8274b297af" name="pop-before-smtp" arch="src">
  <version epoch="0" ver="1.42" rel="3.1"/>
  <changelog author="chris@computersalat.de" date="1247313600">- initial package 1.42
- some spec fixes
  o post fillup_and_insserv
  o preun stop_on_removal
  o postun insserv_cleanup</changelog>
  <changelog author="chris@computersalat.de" date="1259064000">- cleanup spec
  o removed ^'----
  o simplify install section
- moved init script from patch to S:1</changelog>
  <changelog author="chris@computersalat.de" date="1476705600">- add simple support for IPv6 and Courier-IMAP/POP3
- rework pop-before-smtp-1.42-SuSE.patch patch
- add pop-before-smtp_IPv6.patch</changelog>
  <changelog author="chris@computersalat.de" date="1479643200">- change to Net::IP::Lite for IPv6 support, cause Net::IP (1.26)
  is brocken
- rework pattern for dovecot 2.2</changelog>
  <changelog author="chris@computersalat.de" date="1486036800">- fix deps
  * add missing perl(Net::IP::Lite)</changelog>
  <changelog author="chris@computersalat.de" date="1486382400">- update pop-before-smtp_IPv6.patch
  * improve courier out_pat</changelog>
</package>
<package pkgid="052ac1e63264eee18ace5459bf41ef5948d0417f3e62c1a00d4527970991739c" name="postfix" arch="src">
  <version epoch="0" ver="3.2.2" rel="295.1"/>
  <changelog author="varkoly@suse.com" date="1464091200">- Fix typo in config.postfix</changelog>
  <changelog author="chris@computersalat.de" date="1464523200">- fix Changelog cause of Factory decline</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- postfix-post-install.patch: remove empty patch</changelog>
  <changelog author="michael@stroeder.com" date="1472990400">- update to 3.1.2:
  * Changes to make Postfix build with OpenSSL 1.1.0.
  * The makedefs script ignored readme_directory=pathname overrides.
    Fix by Todd C. Olson.
  * The tls_session_ticket_cipher documentation says that the default
    cipher for TLS session tickets is aes-256-cbc, but the implemented
    default was aes-128-cbc. Note that TLS session ticket keys are
    rotated after 1/2 hour, to limit the impact of attacks on session
    ticket keys.</changelog>
  <changelog author="michael@stroeder.com" date="1476014400">- update to 3.1.3:
  * The Postfix SMTP server did not reset a previous session's
    failed/total command counts before rejecting a client that
    exceeds request or concurrency rates. This resulted in incorrect
    failed/total command counts being logged at the end of the
    rejected session.
  * The unionmap multi-table interface did not propagate table
    lookup errors, resulting in false "user unknown" responses.
  * The documentation was updated with a workaround for false "not
    found" errors with MySQL map queries that contain UTF8-encoded
    text. The workaround is to specify "option_group = client" in
    Postfix MySQL configuration files. This will be the default
    setting with Postfix 3.2 and later.</changelog>
  <changelog author="chris@computersalat.de" date="1478520000">- update vda patch to latest available
  * remove postfix-vda-v13-3.10.0.patch
  * add postfix-vda-v14-3.0.3.patch
- rebase patches (and to be p0)
  * pointer_to_literals.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
- add /etc/postfix/ssl as default DIR for SSL stuff
  * cacerts -&gt; ../../ssl/certs/
  * certs/
- revert POSTFIX_SSL_PATH from '/etc/ssl' to '/etc/postfix/ssl'
- improve config.postfix
  * revert smtpd_tls_CApath to POSTFIX_SSL_PATH/cacerts which is a
    symlink to /etc/ssl/certs
    Without reverting, 'gen_CA' would create files which would then be on
    the previous defined 'sslpath(/etc/ssl)/certs' (smtpd_tls_CApath)
    Cert reqs would be placed in 'sslpath(/etc/ssl)/certs/postfixreq.pem'
    which is not a good idea.
  * mkchroot: sync '/etc/postfix/ssl' to chroot
  * improve PCONF for smtp{,d}_tls_{cert,key}_file, adding/removing from
    main.cf, show warning if enabled and file is missing</changelog>
  <changelog author="chris@computersalat.de" date="1479124800">- improve config.postfix
  * improve with MySQL stuff</changelog>
  <changelog author="chris@computersalat.de" date="1480161600">- improve config.postfix
  * improve SASL stuff
  * add POSTFIX_SMTP_AUTH_SERVICE=(cyrus|dovecot)</changelog>
  <changelog author="varkoly@suse.com" date="1483444800">- update to 3.1.4
  * The postscreen daemon did not merge the client test status information
    for concurrent sessions from the same IP address.
  * The Postfix SMTP server falsely rejected a sender address when validating
    a sender address with "smtpd_reject_unlisted_recipient = yes" or with
    "reject_unlisted_sender". Cause: the address validation code did not query sender_canonical_maps.
  * The virtual delivery agent did not detect failure to skip to the end
    of a mailbox file, so that mail would be delivered to the beginning of the file.
    This could happen when a mailbox file was already larger than the virtual mailbox size limit.
  * The postsuper logged an incorrect rename operation count after creating a missing directory.
  * The Postfix SMTP server falsely rejected mail when a sender-dependent "error"
    transport was configured. Cause: the SMTP server address validation code
    was not updated when the sender_dependent_default_transport_maps feature
    was introduced.
  * The Postfix SMTP server falsely rejected an SMTPUTF8 sender address, when "smtpd_delay_reject = no".
  * The "postfix tls deploy-server-cert" command used the wrong certificate
    and key file. This was caused by a cut-and-paste error in the postfix-tls-script file.</changelog>
  <changelog author="varkoly@suse.com" date="1484136000">- FATE#322322 Update postfix to version 3.X
  Merging changes with SLES12-SP2
  Removeved patches: add_missed_library.patch bnc#947707.diff dynamic_maps.patch postfix-db6.diff
    postfix-opensslconfig.patch bnc#947519.diff dynamic_maps_pie.patch
    postfix-post-install.patch
    These are included in the new version of postfix
- Remove references to SuSEconfig.postfix from sysconfig docs.
  (bsc#871575)
- bnc#947519 SuSEconfig.postfix should enforce umask 022
- bnc#947707 mail generated by Amavis being prevented from being re-adressed by /etc/postfix/virtual
- bnc#972346 /usr/sbin/SuSEconfig.postfix is wrong
- postfix-linux45.patch: handle Linux 4.x and Linux 5.x (used by aarch64)
  (bsc#940289)</changelog>
  <changelog author="chris@computersalat.de" date="1485000000">- update postfix-mysql
  * update  mysql_*.cf files
  * update postfix-mysql.sql (INNODB, utf8)
- update postfix-main.cf.patch
  * uncomment smtpd_sasl_path, smtpd_sasl_type
    can be changed via POSTFIX_SMTP_AUTH_SERVICE=(cyrus,dovecot)
  * add option for smtp_tls_policy_maps (commented)
- update postfix-master.cf.patch
  * fix indentation of submission, smtps options for correct
    enabling via config.postfix
- update config.postfix
  * fix sync of CA certificates
  * fix master.cf generation for submission, smtps
- rebase postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Fix requires:
  - shadow is needed for postfix-mysql pre-install section
  - insserv is not needed if systemd is used</changelog>
  <changelog author="wr@rosenauer.org" date="1488801600">- make sure that system users can be created in %pre</changelog>
  <changelog author="mrueckert@suse.de" date="1488801601">- update to 3.2.0
  - [Feature 20170128] Postfix 3.2 fixes the handling of address
    extensions with email addresses that contain spaces. For
    example, the virtual_alias_maps, canonical_maps, and
    smtp_generic_maps features now correctly propagate an address
    extension from "aa bb+ext"@example.com to "cc
    dd+ext"@other.example, instead of producing broken output.
  - [Feature 20161008] "PASS" and "STRIP" actions in
    header/body_checks.  "STRIP" is similar to "IGNORE" but also
    logs the action, and "PASS" disables header, body, and Milter
    inspection for the remainder of the message content.
    Contributed by Hobbit.
  - [Feature 20160330] The collate.pl script by Viktor Dukhovni for
    grouping Postfix logfile records into "sessions" based on queue
    ID and process ID information. It's in the auxiliary/collate
    directory of the Postfix source tree.
  - [Feature 20160527] Postfix 3.2 cidr tables support if/endif and
    negation (by prepending ! to a pattern), just like regexp and
    pcre tables.  The primarily purpose is to improve readability
    of complex tables. See the cidr_table(5) manpage for syntax
    details.
  - [Incompat 20160925] In the Postfix MySQL database client, the
    default option_group value has changed to "client", to enable
    reading of "client" option group settings in the MySQL options
    file. This fixes a "not found" problem with Postfix queries
    that contain UTF8-encoded non-ASCII text.  Specify an empty
    option_group value (option_group =) to get backwards-compatible
    behavior.
  - [Feature 20161217] Stored-procedure support for MySQL
    databases.  Contributed by John Fawcett. See mysql_table(5) for
    instructions.
  - [Feature 20170128] The postmap command, and the inline: and
    texthash: maps now support spaces in left-hand field of the
    lookup table "source text". Use double quotes (") around a
    left-hand field that contains spaces, and use backslash (\) to
    protect embedded quotes in a left-hand field. There is no
    change in the processing of the right-hand field.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Feature 20161024] smtpd_milter_maps support for per-client
    Milter configuration that overrides smtpd_milters, and that has
    the same syntax. A lookup result of "DISABLE" turns off Milter
    support. See MILTER_README.html for details.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Incompat 20170129] The postqueue command no longer forces all
    message arrival times to be reported in UTC. To get the old
    behavior, set TZ=UTC in main.cf:import_environment (this
    override is not recommended, as it affects all Postfix utities
    and daemons).
  - [Incompat 20161227] For safety reasons, the sendmail -C option
    must specify an authorized directory: the default configuration
    directory, a directory that is listed in the default main.cf
    file with alternate_config_directories or
    multi_instance_directories, or the command must be invoked with
    root privileges (UID 0 and EUID 0).  This mitigates a recurring
    problem with the PHP mail() function.
  - [Feature 20160625] The Postfix SMTP server now passes remote
    client and local server network address and port information to
    the Cyrus SASL library. Build with ``make makefiles
    "CCARGS=$CCARGS -DNO_IP_CYRUS_SASL_AUTH"'' for backwards
    compatibility.
  - [Feature 20161103] Postfix 3.2 disables the 'transitional'
    compatibility between the IDNA2003 and IDNA2008 standards for
    internationalized domain names (domain names beyond the limits
    of US-ASCII).
    This change makes Postfix behavior consistent with contemporary
    web browsers. It affects the handling of some corner cases such
    as German sz and Greek zeta. See
    http://unicode.org/cldr/utility/idna.jsp for more examples.
    Specify "enable_idna2003_compatibility = yes" to restore
    historical behavior (but keep in mind that the rest of the
    world may not make that same choice).
  - [Feature 20160828] Fixes for deprecated OpenSSL 1.1.0 API
    features, so that Postfix will build without depending on
    backwards-compatibility support.
    [Incompat 20161204] Postfix 3.2 removes tentative features that
    were implemented before the DANE spec was finalized:
  - Support for certificate usage PKIX-EE(1),
  - The ability to disable digest agility (Postfix now behaves as
    if "tls_dane_digest_agility = on"), and
  - The ability to disable support for "TLSA 2 [01] [12]" records
    that specify the digest of a trust anchor (Postfix now
    behaves as if "tls_dane_trust_anchor_digest_enable = yes).
  - [Feature 20161217] Postfix 3.2 enables elliptic curve
    negotiation with OpenSSL &gt;= 1.0.2.  This changes the default
    smtpd_tls_eecdh_grade setting to "auto", and introduces a new
    parameter tls_eecdh_auto_curves with the names of curves that
    may be negotiated.
    The default tls_eecdh_auto_curves setting is determined at
    compile time, and depends on the Postfix and OpenSSL versions.
    At runtime, Postfix will skip curve names that aren't supported
    by the OpenSSL library.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
- refresh postfix-master.cf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system group mail
- Use mail group name instead of GID</changelog>
  <changelog author="chris@computersalat.de" date="1491652800">- update postfix-master.cf.patch
  * recover lost (with 3.2.0 update) submission, smtps sections
  * merge with upstream update
- update config.postfix
  * update master.cf generation for submission
- rebase patches against 3.2.0
  * pointer_to_literals.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="werner@suse.de" date="1492084800">- Some cleanups
  * Fix SUSE postfix-files to avoid chown errors (anyway this file
    seems to be obsolete)
  * Avoid installing shared libraries twice
  * Refresh patch postfix-linux45.patch</changelog>
  <changelog author="chris@computersalat.de" date="1492603200">- revert changes of postfix-main.cf.patch from rev=261
  * config.postfix will not 'enable' (remove #) var, but place
    modified (enabled) var at end of file, far away from place
    where it should be
  * keep vars enabled but empty</changelog>
  <changelog author="michael@stroeder.com" date="1497614400">- update to 3.2.2
  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    &lt; 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.
  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.
  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.</changelog>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
</package>
<package pkgid="63e8c2de614a6a480052c0eb4cc318c261c4ced4e9798168849dc0e5c8dd45bf" name="postfix" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="295.1"/>
  <changelog author="varkoly@suse.com" date="1464091200">- Fix typo in config.postfix</changelog>
  <changelog author="chris@computersalat.de" date="1464523200">- fix Changelog cause of Factory decline</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- postfix-post-install.patch: remove empty patch</changelog>
  <changelog author="michael@stroeder.com" date="1472990400">- update to 3.1.2:
  * Changes to make Postfix build with OpenSSL 1.1.0.
  * The makedefs script ignored readme_directory=pathname overrides.
    Fix by Todd C. Olson.
  * The tls_session_ticket_cipher documentation says that the default
    cipher for TLS session tickets is aes-256-cbc, but the implemented
    default was aes-128-cbc. Note that TLS session ticket keys are
    rotated after 1/2 hour, to limit the impact of attacks on session
    ticket keys.</changelog>
  <changelog author="michael@stroeder.com" date="1476014400">- update to 3.1.3:
  * The Postfix SMTP server did not reset a previous session's
    failed/total command counts before rejecting a client that
    exceeds request or concurrency rates. This resulted in incorrect
    failed/total command counts being logged at the end of the
    rejected session.
  * The unionmap multi-table interface did not propagate table
    lookup errors, resulting in false "user unknown" responses.
  * The documentation was updated with a workaround for false "not
    found" errors with MySQL map queries that contain UTF8-encoded
    text. The workaround is to specify "option_group = client" in
    Postfix MySQL configuration files. This will be the default
    setting with Postfix 3.2 and later.</changelog>
  <changelog author="chris@computersalat.de" date="1478520000">- update vda patch to latest available
  * remove postfix-vda-v13-3.10.0.patch
  * add postfix-vda-v14-3.0.3.patch
- rebase patches (and to be p0)
  * pointer_to_literals.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
- add /etc/postfix/ssl as default DIR for SSL stuff
  * cacerts -&gt; ../../ssl/certs/
  * certs/
- revert POSTFIX_SSL_PATH from '/etc/ssl' to '/etc/postfix/ssl'
- improve config.postfix
  * revert smtpd_tls_CApath to POSTFIX_SSL_PATH/cacerts which is a
    symlink to /etc/ssl/certs
    Without reverting, 'gen_CA' would create files which would then be on
    the previous defined 'sslpath(/etc/ssl)/certs' (smtpd_tls_CApath)
    Cert reqs would be placed in 'sslpath(/etc/ssl)/certs/postfixreq.pem'
    which is not a good idea.
  * mkchroot: sync '/etc/postfix/ssl' to chroot
  * improve PCONF for smtp{,d}_tls_{cert,key}_file, adding/removing from
    main.cf, show warning if enabled and file is missing</changelog>
  <changelog author="chris@computersalat.de" date="1479124800">- improve config.postfix
  * improve with MySQL stuff</changelog>
  <changelog author="chris@computersalat.de" date="1480161600">- improve config.postfix
  * improve SASL stuff
  * add POSTFIX_SMTP_AUTH_SERVICE=(cyrus|dovecot)</changelog>
  <changelog author="varkoly@suse.com" date="1483444800">- update to 3.1.4
  * The postscreen daemon did not merge the client test status information
    for concurrent sessions from the same IP address.
  * The Postfix SMTP server falsely rejected a sender address when validating
    a sender address with "smtpd_reject_unlisted_recipient = yes" or with
    "reject_unlisted_sender". Cause: the address validation code did not query sender_canonical_maps.
  * The virtual delivery agent did not detect failure to skip to the end
    of a mailbox file, so that mail would be delivered to the beginning of the file.
    This could happen when a mailbox file was already larger than the virtual mailbox size limit.
  * The postsuper logged an incorrect rename operation count after creating a missing directory.
  * The Postfix SMTP server falsely rejected mail when a sender-dependent "error"
    transport was configured. Cause: the SMTP server address validation code
    was not updated when the sender_dependent_default_transport_maps feature
    was introduced.
  * The Postfix SMTP server falsely rejected an SMTPUTF8 sender address, when "smtpd_delay_reject = no".
  * The "postfix tls deploy-server-cert" command used the wrong certificate
    and key file. This was caused by a cut-and-paste error in the postfix-tls-script file.</changelog>
  <changelog author="varkoly@suse.com" date="1484136000">- FATE#322322 Update postfix to version 3.X
  Merging changes with SLES12-SP2
  Removeved patches: add_missed_library.patch bnc#947707.diff dynamic_maps.patch postfix-db6.diff
    postfix-opensslconfig.patch bnc#947519.diff dynamic_maps_pie.patch
    postfix-post-install.patch
    These are included in the new version of postfix
- Remove references to SuSEconfig.postfix from sysconfig docs.
  (bsc#871575)
- bnc#947519 SuSEconfig.postfix should enforce umask 022
- bnc#947707 mail generated by Amavis being prevented from being re-adressed by /etc/postfix/virtual
- bnc#972346 /usr/sbin/SuSEconfig.postfix is wrong
- postfix-linux45.patch: handle Linux 4.x and Linux 5.x (used by aarch64)
  (bsc#940289)</changelog>
  <changelog author="chris@computersalat.de" date="1485000000">- update postfix-mysql
  * update  mysql_*.cf files
  * update postfix-mysql.sql (INNODB, utf8)
- update postfix-main.cf.patch
  * uncomment smtpd_sasl_path, smtpd_sasl_type
    can be changed via POSTFIX_SMTP_AUTH_SERVICE=(cyrus,dovecot)
  * add option for smtp_tls_policy_maps (commented)
- update postfix-master.cf.patch
  * fix indentation of submission, smtps options for correct
    enabling via config.postfix
- update config.postfix
  * fix sync of CA certificates
  * fix master.cf generation for submission, smtps
- rebase postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Fix requires:
  - shadow is needed for postfix-mysql pre-install section
  - insserv is not needed if systemd is used</changelog>
  <changelog author="wr@rosenauer.org" date="1488801600">- make sure that system users can be created in %pre</changelog>
  <changelog author="mrueckert@suse.de" date="1488801601">- update to 3.2.0
  - [Feature 20170128] Postfix 3.2 fixes the handling of address
    extensions with email addresses that contain spaces. For
    example, the virtual_alias_maps, canonical_maps, and
    smtp_generic_maps features now correctly propagate an address
    extension from "aa bb+ext"@example.com to "cc
    dd+ext"@other.example, instead of producing broken output.
  - [Feature 20161008] "PASS" and "STRIP" actions in
    header/body_checks.  "STRIP" is similar to "IGNORE" but also
    logs the action, and "PASS" disables header, body, and Milter
    inspection for the remainder of the message content.
    Contributed by Hobbit.
  - [Feature 20160330] The collate.pl script by Viktor Dukhovni for
    grouping Postfix logfile records into "sessions" based on queue
    ID and process ID information. It's in the auxiliary/collate
    directory of the Postfix source tree.
  - [Feature 20160527] Postfix 3.2 cidr tables support if/endif and
    negation (by prepending ! to a pattern), just like regexp and
    pcre tables.  The primarily purpose is to improve readability
    of complex tables. See the cidr_table(5) manpage for syntax
    details.
  - [Incompat 20160925] In the Postfix MySQL database client, the
    default option_group value has changed to "client", to enable
    reading of "client" option group settings in the MySQL options
    file. This fixes a "not found" problem with Postfix queries
    that contain UTF8-encoded non-ASCII text.  Specify an empty
    option_group value (option_group =) to get backwards-compatible
    behavior.
  - [Feature 20161217] Stored-procedure support for MySQL
    databases.  Contributed by John Fawcett. See mysql_table(5) for
    instructions.
  - [Feature 20170128] The postmap command, and the inline: and
    texthash: maps now support spaces in left-hand field of the
    lookup table "source text". Use double quotes (") around a
    left-hand field that contains spaces, and use backslash (\) to
    protect embedded quotes in a left-hand field. There is no
    change in the processing of the right-hand field.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Feature 20161024] smtpd_milter_maps support for per-client
    Milter configuration that overrides smtpd_milters, and that has
    the same syntax. A lookup result of "DISABLE" turns off Milter
    support. See MILTER_README.html for details.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Incompat 20170129] The postqueue command no longer forces all
    message arrival times to be reported in UTC. To get the old
    behavior, set TZ=UTC in main.cf:import_environment (this
    override is not recommended, as it affects all Postfix utities
    and daemons).
  - [Incompat 20161227] For safety reasons, the sendmail -C option
    must specify an authorized directory: the default configuration
    directory, a directory that is listed in the default main.cf
    file with alternate_config_directories or
    multi_instance_directories, or the command must be invoked with
    root privileges (UID 0 and EUID 0).  This mitigates a recurring
    problem with the PHP mail() function.
  - [Feature 20160625] The Postfix SMTP server now passes remote
    client and local server network address and port information to
    the Cyrus SASL library. Build with ``make makefiles
    "CCARGS=$CCARGS -DNO_IP_CYRUS_SASL_AUTH"'' for backwards
    compatibility.
  - [Feature 20161103] Postfix 3.2 disables the 'transitional'
    compatibility between the IDNA2003 and IDNA2008 standards for
    internationalized domain names (domain names beyond the limits
    of US-ASCII).
    This change makes Postfix behavior consistent with contemporary
    web browsers. It affects the handling of some corner cases such
    as German sz and Greek zeta. See
    http://unicode.org/cldr/utility/idna.jsp for more examples.
    Specify "enable_idna2003_compatibility = yes" to restore
    historical behavior (but keep in mind that the rest of the
    world may not make that same choice).
  - [Feature 20160828] Fixes for deprecated OpenSSL 1.1.0 API
    features, so that Postfix will build without depending on
    backwards-compatibility support.
    [Incompat 20161204] Postfix 3.2 removes tentative features that
    were implemented before the DANE spec was finalized:
  - Support for certificate usage PKIX-EE(1),
  - The ability to disable digest agility (Postfix now behaves as
    if "tls_dane_digest_agility = on"), and
  - The ability to disable support for "TLSA 2 [01] [12]" records
    that specify the digest of a trust anchor (Postfix now
    behaves as if "tls_dane_trust_anchor_digest_enable = yes).
  - [Feature 20161217] Postfix 3.2 enables elliptic curve
    negotiation with OpenSSL &gt;= 1.0.2.  This changes the default
    smtpd_tls_eecdh_grade setting to "auto", and introduces a new
    parameter tls_eecdh_auto_curves with the names of curves that
    may be negotiated.
    The default tls_eecdh_auto_curves setting is determined at
    compile time, and depends on the Postfix and OpenSSL versions.
    At runtime, Postfix will skip curve names that aren't supported
    by the OpenSSL library.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
- refresh postfix-master.cf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system group mail
- Use mail group name instead of GID</changelog>
  <changelog author="chris@computersalat.de" date="1491652800">- update postfix-master.cf.patch
  * recover lost (with 3.2.0 update) submission, smtps sections
  * merge with upstream update
- update config.postfix
  * update master.cf generation for submission
- rebase patches against 3.2.0
  * pointer_to_literals.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="werner@suse.de" date="1492084800">- Some cleanups
  * Fix SUSE postfix-files to avoid chown errors (anyway this file
    seems to be obsolete)
  * Avoid installing shared libraries twice
  * Refresh patch postfix-linux45.patch</changelog>
  <changelog author="chris@computersalat.de" date="1492603200">- revert changes of postfix-main.cf.patch from rev=261
  * config.postfix will not 'enable' (remove #) var, but place
    modified (enabled) var at end of file, far away from place
    where it should be
  * keep vars enabled but empty</changelog>
  <changelog author="michael@stroeder.com" date="1497614400">- update to 3.2.2
  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    &lt; 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.
  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.
  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.</changelog>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
</package>
<package pkgid="4e925c321b4dca9ec893c6fb81109f99c20fff9c4d8291951590fa5680aeb6fa" name="postfix-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="295.1"/>
  <changelog author="varkoly@suse.com" date="1464091200">- Fix typo in config.postfix</changelog>
  <changelog author="chris@computersalat.de" date="1464523200">- fix Changelog cause of Factory decline</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- postfix-post-install.patch: remove empty patch</changelog>
  <changelog author="michael@stroeder.com" date="1472990400">- update to 3.1.2:
  * Changes to make Postfix build with OpenSSL 1.1.0.
  * The makedefs script ignored readme_directory=pathname overrides.
    Fix by Todd C. Olson.
  * The tls_session_ticket_cipher documentation says that the default
    cipher for TLS session tickets is aes-256-cbc, but the implemented
    default was aes-128-cbc. Note that TLS session ticket keys are
    rotated after 1/2 hour, to limit the impact of attacks on session
    ticket keys.</changelog>
  <changelog author="michael@stroeder.com" date="1476014400">- update to 3.1.3:
  * The Postfix SMTP server did not reset a previous session's
    failed/total command counts before rejecting a client that
    exceeds request or concurrency rates. This resulted in incorrect
    failed/total command counts being logged at the end of the
    rejected session.
  * The unionmap multi-table interface did not propagate table
    lookup errors, resulting in false "user unknown" responses.
  * The documentation was updated with a workaround for false "not
    found" errors with MySQL map queries that contain UTF8-encoded
    text. The workaround is to specify "option_group = client" in
    Postfix MySQL configuration files. This will be the default
    setting with Postfix 3.2 and later.</changelog>
  <changelog author="chris@computersalat.de" date="1478520000">- update vda patch to latest available
  * remove postfix-vda-v13-3.10.0.patch
  * add postfix-vda-v14-3.0.3.patch
- rebase patches (and to be p0)
  * pointer_to_literals.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
- add /etc/postfix/ssl as default DIR for SSL stuff
  * cacerts -&gt; ../../ssl/certs/
  * certs/
- revert POSTFIX_SSL_PATH from '/etc/ssl' to '/etc/postfix/ssl'
- improve config.postfix
  * revert smtpd_tls_CApath to POSTFIX_SSL_PATH/cacerts which is a
    symlink to /etc/ssl/certs
    Without reverting, 'gen_CA' would create files which would then be on
    the previous defined 'sslpath(/etc/ssl)/certs' (smtpd_tls_CApath)
    Cert reqs would be placed in 'sslpath(/etc/ssl)/certs/postfixreq.pem'
    which is not a good idea.
  * mkchroot: sync '/etc/postfix/ssl' to chroot
  * improve PCONF for smtp{,d}_tls_{cert,key}_file, adding/removing from
    main.cf, show warning if enabled and file is missing</changelog>
  <changelog author="chris@computersalat.de" date="1479124800">- improve config.postfix
  * improve with MySQL stuff</changelog>
  <changelog author="chris@computersalat.de" date="1480161600">- improve config.postfix
  * improve SASL stuff
  * add POSTFIX_SMTP_AUTH_SERVICE=(cyrus|dovecot)</changelog>
  <changelog author="varkoly@suse.com" date="1483444800">- update to 3.1.4
  * The postscreen daemon did not merge the client test status information
    for concurrent sessions from the same IP address.
  * The Postfix SMTP server falsely rejected a sender address when validating
    a sender address with "smtpd_reject_unlisted_recipient = yes" or with
    "reject_unlisted_sender". Cause: the address validation code did not query sender_canonical_maps.
  * The virtual delivery agent did not detect failure to skip to the end
    of a mailbox file, so that mail would be delivered to the beginning of the file.
    This could happen when a mailbox file was already larger than the virtual mailbox size limit.
  * The postsuper logged an incorrect rename operation count after creating a missing directory.
  * The Postfix SMTP server falsely rejected mail when a sender-dependent "error"
    transport was configured. Cause: the SMTP server address validation code
    was not updated when the sender_dependent_default_transport_maps feature
    was introduced.
  * The Postfix SMTP server falsely rejected an SMTPUTF8 sender address, when "smtpd_delay_reject = no".
  * The "postfix tls deploy-server-cert" command used the wrong certificate
    and key file. This was caused by a cut-and-paste error in the postfix-tls-script file.</changelog>
  <changelog author="varkoly@suse.com" date="1484136000">- FATE#322322 Update postfix to version 3.X
  Merging changes with SLES12-SP2
  Removeved patches: add_missed_library.patch bnc#947707.diff dynamic_maps.patch postfix-db6.diff
    postfix-opensslconfig.patch bnc#947519.diff dynamic_maps_pie.patch
    postfix-post-install.patch
    These are included in the new version of postfix
- Remove references to SuSEconfig.postfix from sysconfig docs.
  (bsc#871575)
- bnc#947519 SuSEconfig.postfix should enforce umask 022
- bnc#947707 mail generated by Amavis being prevented from being re-adressed by /etc/postfix/virtual
- bnc#972346 /usr/sbin/SuSEconfig.postfix is wrong
- postfix-linux45.patch: handle Linux 4.x and Linux 5.x (used by aarch64)
  (bsc#940289)</changelog>
  <changelog author="chris@computersalat.de" date="1485000000">- update postfix-mysql
  * update  mysql_*.cf files
  * update postfix-mysql.sql (INNODB, utf8)
- update postfix-main.cf.patch
  * uncomment smtpd_sasl_path, smtpd_sasl_type
    can be changed via POSTFIX_SMTP_AUTH_SERVICE=(cyrus,dovecot)
  * add option for smtp_tls_policy_maps (commented)
- update postfix-master.cf.patch
  * fix indentation of submission, smtps options for correct
    enabling via config.postfix
- update config.postfix
  * fix sync of CA certificates
  * fix master.cf generation for submission, smtps
- rebase postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Fix requires:
  - shadow is needed for postfix-mysql pre-install section
  - insserv is not needed if systemd is used</changelog>
  <changelog author="wr@rosenauer.org" date="1488801600">- make sure that system users can be created in %pre</changelog>
  <changelog author="mrueckert@suse.de" date="1488801601">- update to 3.2.0
  - [Feature 20170128] Postfix 3.2 fixes the handling of address
    extensions with email addresses that contain spaces. For
    example, the virtual_alias_maps, canonical_maps, and
    smtp_generic_maps features now correctly propagate an address
    extension from "aa bb+ext"@example.com to "cc
    dd+ext"@other.example, instead of producing broken output.
  - [Feature 20161008] "PASS" and "STRIP" actions in
    header/body_checks.  "STRIP" is similar to "IGNORE" but also
    logs the action, and "PASS" disables header, body, and Milter
    inspection for the remainder of the message content.
    Contributed by Hobbit.
  - [Feature 20160330] The collate.pl script by Viktor Dukhovni for
    grouping Postfix logfile records into "sessions" based on queue
    ID and process ID information. It's in the auxiliary/collate
    directory of the Postfix source tree.
  - [Feature 20160527] Postfix 3.2 cidr tables support if/endif and
    negation (by prepending ! to a pattern), just like regexp and
    pcre tables.  The primarily purpose is to improve readability
    of complex tables. See the cidr_table(5) manpage for syntax
    details.
  - [Incompat 20160925] In the Postfix MySQL database client, the
    default option_group value has changed to "client", to enable
    reading of "client" option group settings in the MySQL options
    file. This fixes a "not found" problem with Postfix queries
    that contain UTF8-encoded non-ASCII text.  Specify an empty
    option_group value (option_group =) to get backwards-compatible
    behavior.
  - [Feature 20161217] Stored-procedure support for MySQL
    databases.  Contributed by John Fawcett. See mysql_table(5) for
    instructions.
  - [Feature 20170128] The postmap command, and the inline: and
    texthash: maps now support spaces in left-hand field of the
    lookup table "source text". Use double quotes (") around a
    left-hand field that contains spaces, and use backslash (\) to
    protect embedded quotes in a left-hand field. There is no
    change in the processing of the right-hand field.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Feature 20161024] smtpd_milter_maps support for per-client
    Milter configuration that overrides smtpd_milters, and that has
    the same syntax. A lookup result of "DISABLE" turns off Milter
    support. See MILTER_README.html for details.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Incompat 20170129] The postqueue command no longer forces all
    message arrival times to be reported in UTC. To get the old
    behavior, set TZ=UTC in main.cf:import_environment (this
    override is not recommended, as it affects all Postfix utities
    and daemons).
  - [Incompat 20161227] For safety reasons, the sendmail -C option
    must specify an authorized directory: the default configuration
    directory, a directory that is listed in the default main.cf
    file with alternate_config_directories or
    multi_instance_directories, or the command must be invoked with
    root privileges (UID 0 and EUID 0).  This mitigates a recurring
    problem with the PHP mail() function.
  - [Feature 20160625] The Postfix SMTP server now passes remote
    client and local server network address and port information to
    the Cyrus SASL library. Build with ``make makefiles
    "CCARGS=$CCARGS -DNO_IP_CYRUS_SASL_AUTH"'' for backwards
    compatibility.
  - [Feature 20161103] Postfix 3.2 disables the 'transitional'
    compatibility between the IDNA2003 and IDNA2008 standards for
    internationalized domain names (domain names beyond the limits
    of US-ASCII).
    This change makes Postfix behavior consistent with contemporary
    web browsers. It affects the handling of some corner cases such
    as German sz and Greek zeta. See
    http://unicode.org/cldr/utility/idna.jsp for more examples.
    Specify "enable_idna2003_compatibility = yes" to restore
    historical behavior (but keep in mind that the rest of the
    world may not make that same choice).
  - [Feature 20160828] Fixes for deprecated OpenSSL 1.1.0 API
    features, so that Postfix will build without depending on
    backwards-compatibility support.
    [Incompat 20161204] Postfix 3.2 removes tentative features that
    were implemented before the DANE spec was finalized:
  - Support for certificate usage PKIX-EE(1),
  - The ability to disable digest agility (Postfix now behaves as
    if "tls_dane_digest_agility = on"), and
  - The ability to disable support for "TLSA 2 [01] [12]" records
    that specify the digest of a trust anchor (Postfix now
    behaves as if "tls_dane_trust_anchor_digest_enable = yes).
  - [Feature 20161217] Postfix 3.2 enables elliptic curve
    negotiation with OpenSSL &gt;= 1.0.2.  This changes the default
    smtpd_tls_eecdh_grade setting to "auto", and introduces a new
    parameter tls_eecdh_auto_curves with the names of curves that
    may be negotiated.
    The default tls_eecdh_auto_curves setting is determined at
    compile time, and depends on the Postfix and OpenSSL versions.
    At runtime, Postfix will skip curve names that aren't supported
    by the OpenSSL library.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
- refresh postfix-master.cf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system group mail
- Use mail group name instead of GID</changelog>
  <changelog author="chris@computersalat.de" date="1491652800">- update postfix-master.cf.patch
  * recover lost (with 3.2.0 update) submission, smtps sections
  * merge with upstream update
- update config.postfix
  * update master.cf generation for submission
- rebase patches against 3.2.0
  * pointer_to_literals.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="werner@suse.de" date="1492084800">- Some cleanups
  * Fix SUSE postfix-files to avoid chown errors (anyway this file
    seems to be obsolete)
  * Avoid installing shared libraries twice
  * Refresh patch postfix-linux45.patch</changelog>
  <changelog author="chris@computersalat.de" date="1492603200">- revert changes of postfix-main.cf.patch from rev=261
  * config.postfix will not 'enable' (remove #) var, but place
    modified (enabled) var at end of file, far away from place
    where it should be
  * keep vars enabled but empty</changelog>
  <changelog author="michael@stroeder.com" date="1497614400">- update to 3.2.2
  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    &lt; 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.
  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.
  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.</changelog>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
</package>
<package pkgid="e9da8ec16c0d1a3a79cc1d6832b71aa00b9d21127907aca6e39cbc15a7b92f65" name="postfix-debugsource" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="295.1"/>
  <changelog author="varkoly@suse.com" date="1464091200">- Fix typo in config.postfix</changelog>
  <changelog author="chris@computersalat.de" date="1464523200">- fix Changelog cause of Factory decline</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- postfix-post-install.patch: remove empty patch</changelog>
  <changelog author="michael@stroeder.com" date="1472990400">- update to 3.1.2:
  * Changes to make Postfix build with OpenSSL 1.1.0.
  * The makedefs script ignored readme_directory=pathname overrides.
    Fix by Todd C. Olson.
  * The tls_session_ticket_cipher documentation says that the default
    cipher for TLS session tickets is aes-256-cbc, but the implemented
    default was aes-128-cbc. Note that TLS session ticket keys are
    rotated after 1/2 hour, to limit the impact of attacks on session
    ticket keys.</changelog>
  <changelog author="michael@stroeder.com" date="1476014400">- update to 3.1.3:
  * The Postfix SMTP server did not reset a previous session's
    failed/total command counts before rejecting a client that
    exceeds request or concurrency rates. This resulted in incorrect
    failed/total command counts being logged at the end of the
    rejected session.
  * The unionmap multi-table interface did not propagate table
    lookup errors, resulting in false "user unknown" responses.
  * The documentation was updated with a workaround for false "not
    found" errors with MySQL map queries that contain UTF8-encoded
    text. The workaround is to specify "option_group = client" in
    Postfix MySQL configuration files. This will be the default
    setting with Postfix 3.2 and later.</changelog>
  <changelog author="chris@computersalat.de" date="1478520000">- update vda patch to latest available
  * remove postfix-vda-v13-3.10.0.patch
  * add postfix-vda-v14-3.0.3.patch
- rebase patches (and to be p0)
  * pointer_to_literals.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
- add /etc/postfix/ssl as default DIR for SSL stuff
  * cacerts -&gt; ../../ssl/certs/
  * certs/
- revert POSTFIX_SSL_PATH from '/etc/ssl' to '/etc/postfix/ssl'
- improve config.postfix
  * revert smtpd_tls_CApath to POSTFIX_SSL_PATH/cacerts which is a
    symlink to /etc/ssl/certs
    Without reverting, 'gen_CA' would create files which would then be on
    the previous defined 'sslpath(/etc/ssl)/certs' (smtpd_tls_CApath)
    Cert reqs would be placed in 'sslpath(/etc/ssl)/certs/postfixreq.pem'
    which is not a good idea.
  * mkchroot: sync '/etc/postfix/ssl' to chroot
  * improve PCONF for smtp{,d}_tls_{cert,key}_file, adding/removing from
    main.cf, show warning if enabled and file is missing</changelog>
  <changelog author="chris@computersalat.de" date="1479124800">- improve config.postfix
  * improve with MySQL stuff</changelog>
  <changelog author="chris@computersalat.de" date="1480161600">- improve config.postfix
  * improve SASL stuff
  * add POSTFIX_SMTP_AUTH_SERVICE=(cyrus|dovecot)</changelog>
  <changelog author="varkoly@suse.com" date="1483444800">- update to 3.1.4
  * The postscreen daemon did not merge the client test status information
    for concurrent sessions from the same IP address.
  * The Postfix SMTP server falsely rejected a sender address when validating
    a sender address with "smtpd_reject_unlisted_recipient = yes" or with
    "reject_unlisted_sender". Cause: the address validation code did not query sender_canonical_maps.
  * The virtual delivery agent did not detect failure to skip to the end
    of a mailbox file, so that mail would be delivered to the beginning of the file.
    This could happen when a mailbox file was already larger than the virtual mailbox size limit.
  * The postsuper logged an incorrect rename operation count after creating a missing directory.
  * The Postfix SMTP server falsely rejected mail when a sender-dependent "error"
    transport was configured. Cause: the SMTP server address validation code
    was not updated when the sender_dependent_default_transport_maps feature
    was introduced.
  * The Postfix SMTP server falsely rejected an SMTPUTF8 sender address, when "smtpd_delay_reject = no".
  * The "postfix tls deploy-server-cert" command used the wrong certificate
    and key file. This was caused by a cut-and-paste error in the postfix-tls-script file.</changelog>
  <changelog author="varkoly@suse.com" date="1484136000">- FATE#322322 Update postfix to version 3.X
  Merging changes with SLES12-SP2
  Removeved patches: add_missed_library.patch bnc#947707.diff dynamic_maps.patch postfix-db6.diff
    postfix-opensslconfig.patch bnc#947519.diff dynamic_maps_pie.patch
    postfix-post-install.patch
    These are included in the new version of postfix
- Remove references to SuSEconfig.postfix from sysconfig docs.
  (bsc#871575)
- bnc#947519 SuSEconfig.postfix should enforce umask 022
- bnc#947707 mail generated by Amavis being prevented from being re-adressed by /etc/postfix/virtual
- bnc#972346 /usr/sbin/SuSEconfig.postfix is wrong
- postfix-linux45.patch: handle Linux 4.x and Linux 5.x (used by aarch64)
  (bsc#940289)</changelog>
  <changelog author="chris@computersalat.de" date="1485000000">- update postfix-mysql
  * update  mysql_*.cf files
  * update postfix-mysql.sql (INNODB, utf8)
- update postfix-main.cf.patch
  * uncomment smtpd_sasl_path, smtpd_sasl_type
    can be changed via POSTFIX_SMTP_AUTH_SERVICE=(cyrus,dovecot)
  * add option for smtp_tls_policy_maps (commented)
- update postfix-master.cf.patch
  * fix indentation of submission, smtps options for correct
    enabling via config.postfix
- update config.postfix
  * fix sync of CA certificates
  * fix master.cf generation for submission, smtps
- rebase postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Fix requires:
  - shadow is needed for postfix-mysql pre-install section
  - insserv is not needed if systemd is used</changelog>
  <changelog author="wr@rosenauer.org" date="1488801600">- make sure that system users can be created in %pre</changelog>
  <changelog author="mrueckert@suse.de" date="1488801601">- update to 3.2.0
  - [Feature 20170128] Postfix 3.2 fixes the handling of address
    extensions with email addresses that contain spaces. For
    example, the virtual_alias_maps, canonical_maps, and
    smtp_generic_maps features now correctly propagate an address
    extension from "aa bb+ext"@example.com to "cc
    dd+ext"@other.example, instead of producing broken output.
  - [Feature 20161008] "PASS" and "STRIP" actions in
    header/body_checks.  "STRIP" is similar to "IGNORE" but also
    logs the action, and "PASS" disables header, body, and Milter
    inspection for the remainder of the message content.
    Contributed by Hobbit.
  - [Feature 20160330] The collate.pl script by Viktor Dukhovni for
    grouping Postfix logfile records into "sessions" based on queue
    ID and process ID information. It's in the auxiliary/collate
    directory of the Postfix source tree.
  - [Feature 20160527] Postfix 3.2 cidr tables support if/endif and
    negation (by prepending ! to a pattern), just like regexp and
    pcre tables.  The primarily purpose is to improve readability
    of complex tables. See the cidr_table(5) manpage for syntax
    details.
  - [Incompat 20160925] In the Postfix MySQL database client, the
    default option_group value has changed to "client", to enable
    reading of "client" option group settings in the MySQL options
    file. This fixes a "not found" problem with Postfix queries
    that contain UTF8-encoded non-ASCII text.  Specify an empty
    option_group value (option_group =) to get backwards-compatible
    behavior.
  - [Feature 20161217] Stored-procedure support for MySQL
    databases.  Contributed by John Fawcett. See mysql_table(5) for
    instructions.
  - [Feature 20170128] The postmap command, and the inline: and
    texthash: maps now support spaces in left-hand field of the
    lookup table "source text". Use double quotes (") around a
    left-hand field that contains spaces, and use backslash (\) to
    protect embedded quotes in a left-hand field. There is no
    change in the processing of the right-hand field.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Feature 20161024] smtpd_milter_maps support for per-client
    Milter configuration that overrides smtpd_milters, and that has
    the same syntax. A lookup result of "DISABLE" turns off Milter
    support. See MILTER_README.html for details.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Incompat 20170129] The postqueue command no longer forces all
    message arrival times to be reported in UTC. To get the old
    behavior, set TZ=UTC in main.cf:import_environment (this
    override is not recommended, as it affects all Postfix utities
    and daemons).
  - [Incompat 20161227] For safety reasons, the sendmail -C option
    must specify an authorized directory: the default configuration
    directory, a directory that is listed in the default main.cf
    file with alternate_config_directories or
    multi_instance_directories, or the command must be invoked with
    root privileges (UID 0 and EUID 0).  This mitigates a recurring
    problem with the PHP mail() function.
  - [Feature 20160625] The Postfix SMTP server now passes remote
    client and local server network address and port information to
    the Cyrus SASL library. Build with ``make makefiles
    "CCARGS=$CCARGS -DNO_IP_CYRUS_SASL_AUTH"'' for backwards
    compatibility.
  - [Feature 20161103] Postfix 3.2 disables the 'transitional'
    compatibility between the IDNA2003 and IDNA2008 standards for
    internationalized domain names (domain names beyond the limits
    of US-ASCII).
    This change makes Postfix behavior consistent with contemporary
    web browsers. It affects the handling of some corner cases such
    as German sz and Greek zeta. See
    http://unicode.org/cldr/utility/idna.jsp for more examples.
    Specify "enable_idna2003_compatibility = yes" to restore
    historical behavior (but keep in mind that the rest of the
    world may not make that same choice).
  - [Feature 20160828] Fixes for deprecated OpenSSL 1.1.0 API
    features, so that Postfix will build without depending on
    backwards-compatibility support.
    [Incompat 20161204] Postfix 3.2 removes tentative features that
    were implemented before the DANE spec was finalized:
  - Support for certificate usage PKIX-EE(1),
  - The ability to disable digest agility (Postfix now behaves as
    if "tls_dane_digest_agility = on"), and
  - The ability to disable support for "TLSA 2 [01] [12]" records
    that specify the digest of a trust anchor (Postfix now
    behaves as if "tls_dane_trust_anchor_digest_enable = yes).
  - [Feature 20161217] Postfix 3.2 enables elliptic curve
    negotiation with OpenSSL &gt;= 1.0.2.  This changes the default
    smtpd_tls_eecdh_grade setting to "auto", and introduces a new
    parameter tls_eecdh_auto_curves with the names of curves that
    may be negotiated.
    The default tls_eecdh_auto_curves setting is determined at
    compile time, and depends on the Postfix and OpenSSL versions.
    At runtime, Postfix will skip curve names that aren't supported
    by the OpenSSL library.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
- refresh postfix-master.cf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system group mail
- Use mail group name instead of GID</changelog>
  <changelog author="chris@computersalat.de" date="1491652800">- update postfix-master.cf.patch
  * recover lost (with 3.2.0 update) submission, smtps sections
  * merge with upstream update
- update config.postfix
  * update master.cf generation for submission
- rebase patches against 3.2.0
  * pointer_to_literals.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="werner@suse.de" date="1492084800">- Some cleanups
  * Fix SUSE postfix-files to avoid chown errors (anyway this file
    seems to be obsolete)
  * Avoid installing shared libraries twice
  * Refresh patch postfix-linux45.patch</changelog>
  <changelog author="chris@computersalat.de" date="1492603200">- revert changes of postfix-main.cf.patch from rev=261
  * config.postfix will not 'enable' (remove #) var, but place
    modified (enabled) var at end of file, far away from place
    where it should be
  * keep vars enabled but empty</changelog>
  <changelog author="michael@stroeder.com" date="1497614400">- update to 3.2.2
  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    &lt; 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.
  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.
  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.</changelog>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
</package>
<package pkgid="ce2e3726c2234b9847ed331e63cd6991097504c9424f6f4234e3d1c457429db3" name="postfix-devel" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="295.1"/>
  <changelog author="varkoly@suse.com" date="1464091200">- Fix typo in config.postfix</changelog>
  <changelog author="chris@computersalat.de" date="1464523200">- fix Changelog cause of Factory decline</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- postfix-post-install.patch: remove empty patch</changelog>
  <changelog author="michael@stroeder.com" date="1472990400">- update to 3.1.2:
  * Changes to make Postfix build with OpenSSL 1.1.0.
  * The makedefs script ignored readme_directory=pathname overrides.
    Fix by Todd C. Olson.
  * The tls_session_ticket_cipher documentation says that the default
    cipher for TLS session tickets is aes-256-cbc, but the implemented
    default was aes-128-cbc. Note that TLS session ticket keys are
    rotated after 1/2 hour, to limit the impact of attacks on session
    ticket keys.</changelog>
  <changelog author="michael@stroeder.com" date="1476014400">- update to 3.1.3:
  * The Postfix SMTP server did not reset a previous session's
    failed/total command counts before rejecting a client that
    exceeds request or concurrency rates. This resulted in incorrect
    failed/total command counts being logged at the end of the
    rejected session.
  * The unionmap multi-table interface did not propagate table
    lookup errors, resulting in false "user unknown" responses.
  * The documentation was updated with a workaround for false "not
    found" errors with MySQL map queries that contain UTF8-encoded
    text. The workaround is to specify "option_group = client" in
    Postfix MySQL configuration files. This will be the default
    setting with Postfix 3.2 and later.</changelog>
  <changelog author="chris@computersalat.de" date="1478520000">- update vda patch to latest available
  * remove postfix-vda-v13-3.10.0.patch
  * add postfix-vda-v14-3.0.3.patch
- rebase patches (and to be p0)
  * pointer_to_literals.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
- add /etc/postfix/ssl as default DIR for SSL stuff
  * cacerts -&gt; ../../ssl/certs/
  * certs/
- revert POSTFIX_SSL_PATH from '/etc/ssl' to '/etc/postfix/ssl'
- improve config.postfix
  * revert smtpd_tls_CApath to POSTFIX_SSL_PATH/cacerts which is a
    symlink to /etc/ssl/certs
    Without reverting, 'gen_CA' would create files which would then be on
    the previous defined 'sslpath(/etc/ssl)/certs' (smtpd_tls_CApath)
    Cert reqs would be placed in 'sslpath(/etc/ssl)/certs/postfixreq.pem'
    which is not a good idea.
  * mkchroot: sync '/etc/postfix/ssl' to chroot
  * improve PCONF for smtp{,d}_tls_{cert,key}_file, adding/removing from
    main.cf, show warning if enabled and file is missing</changelog>
  <changelog author="chris@computersalat.de" date="1479124800">- improve config.postfix
  * improve with MySQL stuff</changelog>
  <changelog author="chris@computersalat.de" date="1480161600">- improve config.postfix
  * improve SASL stuff
  * add POSTFIX_SMTP_AUTH_SERVICE=(cyrus|dovecot)</changelog>
  <changelog author="varkoly@suse.com" date="1483444800">- update to 3.1.4
  * The postscreen daemon did not merge the client test status information
    for concurrent sessions from the same IP address.
  * The Postfix SMTP server falsely rejected a sender address when validating
    a sender address with "smtpd_reject_unlisted_recipient = yes" or with
    "reject_unlisted_sender". Cause: the address validation code did not query sender_canonical_maps.
  * The virtual delivery agent did not detect failure to skip to the end
    of a mailbox file, so that mail would be delivered to the beginning of the file.
    This could happen when a mailbox file was already larger than the virtual mailbox size limit.
  * The postsuper logged an incorrect rename operation count after creating a missing directory.
  * The Postfix SMTP server falsely rejected mail when a sender-dependent "error"
    transport was configured. Cause: the SMTP server address validation code
    was not updated when the sender_dependent_default_transport_maps feature
    was introduced.
  * The Postfix SMTP server falsely rejected an SMTPUTF8 sender address, when "smtpd_delay_reject = no".
  * The "postfix tls deploy-server-cert" command used the wrong certificate
    and key file. This was caused by a cut-and-paste error in the postfix-tls-script file.</changelog>
  <changelog author="varkoly@suse.com" date="1484136000">- FATE#322322 Update postfix to version 3.X
  Merging changes with SLES12-SP2
  Removeved patches: add_missed_library.patch bnc#947707.diff dynamic_maps.patch postfix-db6.diff
    postfix-opensslconfig.patch bnc#947519.diff dynamic_maps_pie.patch
    postfix-post-install.patch
    These are included in the new version of postfix
- Remove references to SuSEconfig.postfix from sysconfig docs.
  (bsc#871575)
- bnc#947519 SuSEconfig.postfix should enforce umask 022
- bnc#947707 mail generated by Amavis being prevented from being re-adressed by /etc/postfix/virtual
- bnc#972346 /usr/sbin/SuSEconfig.postfix is wrong
- postfix-linux45.patch: handle Linux 4.x and Linux 5.x (used by aarch64)
  (bsc#940289)</changelog>
  <changelog author="chris@computersalat.de" date="1485000000">- update postfix-mysql
  * update  mysql_*.cf files
  * update postfix-mysql.sql (INNODB, utf8)
- update postfix-main.cf.patch
  * uncomment smtpd_sasl_path, smtpd_sasl_type
    can be changed via POSTFIX_SMTP_AUTH_SERVICE=(cyrus,dovecot)
  * add option for smtp_tls_policy_maps (commented)
- update postfix-master.cf.patch
  * fix indentation of submission, smtps options for correct
    enabling via config.postfix
- update config.postfix
  * fix sync of CA certificates
  * fix master.cf generation for submission, smtps
- rebase postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Fix requires:
  - shadow is needed for postfix-mysql pre-install section
  - insserv is not needed if systemd is used</changelog>
  <changelog author="wr@rosenauer.org" date="1488801600">- make sure that system users can be created in %pre</changelog>
  <changelog author="mrueckert@suse.de" date="1488801601">- update to 3.2.0
  - [Feature 20170128] Postfix 3.2 fixes the handling of address
    extensions with email addresses that contain spaces. For
    example, the virtual_alias_maps, canonical_maps, and
    smtp_generic_maps features now correctly propagate an address
    extension from "aa bb+ext"@example.com to "cc
    dd+ext"@other.example, instead of producing broken output.
  - [Feature 20161008] "PASS" and "STRIP" actions in
    header/body_checks.  "STRIP" is similar to "IGNORE" but also
    logs the action, and "PASS" disables header, body, and Milter
    inspection for the remainder of the message content.
    Contributed by Hobbit.
  - [Feature 20160330] The collate.pl script by Viktor Dukhovni for
    grouping Postfix logfile records into "sessions" based on queue
    ID and process ID information. It's in the auxiliary/collate
    directory of the Postfix source tree.
  - [Feature 20160527] Postfix 3.2 cidr tables support if/endif and
    negation (by prepending ! to a pattern), just like regexp and
    pcre tables.  The primarily purpose is to improve readability
    of complex tables. See the cidr_table(5) manpage for syntax
    details.
  - [Incompat 20160925] In the Postfix MySQL database client, the
    default option_group value has changed to "client", to enable
    reading of "client" option group settings in the MySQL options
    file. This fixes a "not found" problem with Postfix queries
    that contain UTF8-encoded non-ASCII text.  Specify an empty
    option_group value (option_group =) to get backwards-compatible
    behavior.
  - [Feature 20161217] Stored-procedure support for MySQL
    databases.  Contributed by John Fawcett. See mysql_table(5) for
    instructions.
  - [Feature 20170128] The postmap command, and the inline: and
    texthash: maps now support spaces in left-hand field of the
    lookup table "source text". Use double quotes (") around a
    left-hand field that contains spaces, and use backslash (\) to
    protect embedded quotes in a left-hand field. There is no
    change in the processing of the right-hand field.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Feature 20161024] smtpd_milter_maps support for per-client
    Milter configuration that overrides smtpd_milters, and that has
    the same syntax. A lookup result of "DISABLE" turns off Milter
    support. See MILTER_README.html for details.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Incompat 20170129] The postqueue command no longer forces all
    message arrival times to be reported in UTC. To get the old
    behavior, set TZ=UTC in main.cf:import_environment (this
    override is not recommended, as it affects all Postfix utities
    and daemons).
  - [Incompat 20161227] For safety reasons, the sendmail -C option
    must specify an authorized directory: the default configuration
    directory, a directory that is listed in the default main.cf
    file with alternate_config_directories or
    multi_instance_directories, or the command must be invoked with
    root privileges (UID 0 and EUID 0).  This mitigates a recurring
    problem with the PHP mail() function.
  - [Feature 20160625] The Postfix SMTP server now passes remote
    client and local server network address and port information to
    the Cyrus SASL library. Build with ``make makefiles
    "CCARGS=$CCARGS -DNO_IP_CYRUS_SASL_AUTH"'' for backwards
    compatibility.
  - [Feature 20161103] Postfix 3.2 disables the 'transitional'
    compatibility between the IDNA2003 and IDNA2008 standards for
    internationalized domain names (domain names beyond the limits
    of US-ASCII).
    This change makes Postfix behavior consistent with contemporary
    web browsers. It affects the handling of some corner cases such
    as German sz and Greek zeta. See
    http://unicode.org/cldr/utility/idna.jsp for more examples.
    Specify "enable_idna2003_compatibility = yes" to restore
    historical behavior (but keep in mind that the rest of the
    world may not make that same choice).
  - [Feature 20160828] Fixes for deprecated OpenSSL 1.1.0 API
    features, so that Postfix will build without depending on
    backwards-compatibility support.
    [Incompat 20161204] Postfix 3.2 removes tentative features that
    were implemented before the DANE spec was finalized:
  - Support for certificate usage PKIX-EE(1),
  - The ability to disable digest agility (Postfix now behaves as
    if "tls_dane_digest_agility = on"), and
  - The ability to disable support for "TLSA 2 [01] [12]" records
    that specify the digest of a trust anchor (Postfix now
    behaves as if "tls_dane_trust_anchor_digest_enable = yes).
  - [Feature 20161217] Postfix 3.2 enables elliptic curve
    negotiation with OpenSSL &gt;= 1.0.2.  This changes the default
    smtpd_tls_eecdh_grade setting to "auto", and introduces a new
    parameter tls_eecdh_auto_curves with the names of curves that
    may be negotiated.
    The default tls_eecdh_auto_curves setting is determined at
    compile time, and depends on the Postfix and OpenSSL versions.
    At runtime, Postfix will skip curve names that aren't supported
    by the OpenSSL library.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
- refresh postfix-master.cf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system group mail
- Use mail group name instead of GID</changelog>
  <changelog author="chris@computersalat.de" date="1491652800">- update postfix-master.cf.patch
  * recover lost (with 3.2.0 update) submission, smtps sections
  * merge with upstream update
- update config.postfix
  * update master.cf generation for submission
- rebase patches against 3.2.0
  * pointer_to_literals.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="werner@suse.de" date="1492084800">- Some cleanups
  * Fix SUSE postfix-files to avoid chown errors (anyway this file
    seems to be obsolete)
  * Avoid installing shared libraries twice
  * Refresh patch postfix-linux45.patch</changelog>
  <changelog author="chris@computersalat.de" date="1492603200">- revert changes of postfix-main.cf.patch from rev=261
  * config.postfix will not 'enable' (remove #) var, but place
    modified (enabled) var at end of file, far away from place
    where it should be
  * keep vars enabled but empty</changelog>
  <changelog author="michael@stroeder.com" date="1497614400">- update to 3.2.2
  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    &lt; 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.
  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.
  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.</changelog>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
</package>
<package pkgid="6fd637466e0f1e47f2e2eec5144adf6f78aa75b6ee60b0950027688046c0e87b" name="postfix-doc" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="295.1"/>
  <changelog author="varkoly@suse.com" date="1464091200">- Fix typo in config.postfix</changelog>
  <changelog author="chris@computersalat.de" date="1464523200">- fix Changelog cause of Factory decline</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- postfix-post-install.patch: remove empty patch</changelog>
  <changelog author="michael@stroeder.com" date="1472990400">- update to 3.1.2:
  * Changes to make Postfix build with OpenSSL 1.1.0.
  * The makedefs script ignored readme_directory=pathname overrides.
    Fix by Todd C. Olson.
  * The tls_session_ticket_cipher documentation says that the default
    cipher for TLS session tickets is aes-256-cbc, but the implemented
    default was aes-128-cbc. Note that TLS session ticket keys are
    rotated after 1/2 hour, to limit the impact of attacks on session
    ticket keys.</changelog>
  <changelog author="michael@stroeder.com" date="1476014400">- update to 3.1.3:
  * The Postfix SMTP server did not reset a previous session's
    failed/total command counts before rejecting a client that
    exceeds request or concurrency rates. This resulted in incorrect
    failed/total command counts being logged at the end of the
    rejected session.
  * The unionmap multi-table interface did not propagate table
    lookup errors, resulting in false "user unknown" responses.
  * The documentation was updated with a workaround for false "not
    found" errors with MySQL map queries that contain UTF8-encoded
    text. The workaround is to specify "option_group = client" in
    Postfix MySQL configuration files. This will be the default
    setting with Postfix 3.2 and later.</changelog>
  <changelog author="chris@computersalat.de" date="1478520000">- update vda patch to latest available
  * remove postfix-vda-v13-3.10.0.patch
  * add postfix-vda-v14-3.0.3.patch
- rebase patches (and to be p0)
  * pointer_to_literals.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
- add /etc/postfix/ssl as default DIR for SSL stuff
  * cacerts -&gt; ../../ssl/certs/
  * certs/
- revert POSTFIX_SSL_PATH from '/etc/ssl' to '/etc/postfix/ssl'
- improve config.postfix
  * revert smtpd_tls_CApath to POSTFIX_SSL_PATH/cacerts which is a
    symlink to /etc/ssl/certs
    Without reverting, 'gen_CA' would create files which would then be on
    the previous defined 'sslpath(/etc/ssl)/certs' (smtpd_tls_CApath)
    Cert reqs would be placed in 'sslpath(/etc/ssl)/certs/postfixreq.pem'
    which is not a good idea.
  * mkchroot: sync '/etc/postfix/ssl' to chroot
  * improve PCONF for smtp{,d}_tls_{cert,key}_file, adding/removing from
    main.cf, show warning if enabled and file is missing</changelog>
  <changelog author="chris@computersalat.de" date="1479124800">- improve config.postfix
  * improve with MySQL stuff</changelog>
  <changelog author="chris@computersalat.de" date="1480161600">- improve config.postfix
  * improve SASL stuff
  * add POSTFIX_SMTP_AUTH_SERVICE=(cyrus|dovecot)</changelog>
  <changelog author="varkoly@suse.com" date="1483444800">- update to 3.1.4
  * The postscreen daemon did not merge the client test status information
    for concurrent sessions from the same IP address.
  * The Postfix SMTP server falsely rejected a sender address when validating
    a sender address with "smtpd_reject_unlisted_recipient = yes" or with
    "reject_unlisted_sender". Cause: the address validation code did not query sender_canonical_maps.
  * The virtual delivery agent did not detect failure to skip to the end
    of a mailbox file, so that mail would be delivered to the beginning of the file.
    This could happen when a mailbox file was already larger than the virtual mailbox size limit.
  * The postsuper logged an incorrect rename operation count after creating a missing directory.
  * The Postfix SMTP server falsely rejected mail when a sender-dependent "error"
    transport was configured. Cause: the SMTP server address validation code
    was not updated when the sender_dependent_default_transport_maps feature
    was introduced.
  * The Postfix SMTP server falsely rejected an SMTPUTF8 sender address, when "smtpd_delay_reject = no".
  * The "postfix tls deploy-server-cert" command used the wrong certificate
    and key file. This was caused by a cut-and-paste error in the postfix-tls-script file.</changelog>
  <changelog author="varkoly@suse.com" date="1484136000">- FATE#322322 Update postfix to version 3.X
  Merging changes with SLES12-SP2
  Removeved patches: add_missed_library.patch bnc#947707.diff dynamic_maps.patch postfix-db6.diff
    postfix-opensslconfig.patch bnc#947519.diff dynamic_maps_pie.patch
    postfix-post-install.patch
    These are included in the new version of postfix
- Remove references to SuSEconfig.postfix from sysconfig docs.
  (bsc#871575)
- bnc#947519 SuSEconfig.postfix should enforce umask 022
- bnc#947707 mail generated by Amavis being prevented from being re-adressed by /etc/postfix/virtual
- bnc#972346 /usr/sbin/SuSEconfig.postfix is wrong
- postfix-linux45.patch: handle Linux 4.x and Linux 5.x (used by aarch64)
  (bsc#940289)</changelog>
  <changelog author="chris@computersalat.de" date="1485000000">- update postfix-mysql
  * update  mysql_*.cf files
  * update postfix-mysql.sql (INNODB, utf8)
- update postfix-main.cf.patch
  * uncomment smtpd_sasl_path, smtpd_sasl_type
    can be changed via POSTFIX_SMTP_AUTH_SERVICE=(cyrus,dovecot)
  * add option for smtp_tls_policy_maps (commented)
- update postfix-master.cf.patch
  * fix indentation of submission, smtps options for correct
    enabling via config.postfix
- update config.postfix
  * fix sync of CA certificates
  * fix master.cf generation for submission, smtps
- rebase postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Fix requires:
  - shadow is needed for postfix-mysql pre-install section
  - insserv is not needed if systemd is used</changelog>
  <changelog author="wr@rosenauer.org" date="1488801600">- make sure that system users can be created in %pre</changelog>
  <changelog author="mrueckert@suse.de" date="1488801601">- update to 3.2.0
  - [Feature 20170128] Postfix 3.2 fixes the handling of address
    extensions with email addresses that contain spaces. For
    example, the virtual_alias_maps, canonical_maps, and
    smtp_generic_maps features now correctly propagate an address
    extension from "aa bb+ext"@example.com to "cc
    dd+ext"@other.example, instead of producing broken output.
  - [Feature 20161008] "PASS" and "STRIP" actions in
    header/body_checks.  "STRIP" is similar to "IGNORE" but also
    logs the action, and "PASS" disables header, body, and Milter
    inspection for the remainder of the message content.
    Contributed by Hobbit.
  - [Feature 20160330] The collate.pl script by Viktor Dukhovni for
    grouping Postfix logfile records into "sessions" based on queue
    ID and process ID information. It's in the auxiliary/collate
    directory of the Postfix source tree.
  - [Feature 20160527] Postfix 3.2 cidr tables support if/endif and
    negation (by prepending ! to a pattern), just like regexp and
    pcre tables.  The primarily purpose is to improve readability
    of complex tables. See the cidr_table(5) manpage for syntax
    details.
  - [Incompat 20160925] In the Postfix MySQL database client, the
    default option_group value has changed to "client", to enable
    reading of "client" option group settings in the MySQL options
    file. This fixes a "not found" problem with Postfix queries
    that contain UTF8-encoded non-ASCII text.  Specify an empty
    option_group value (option_group =) to get backwards-compatible
    behavior.
  - [Feature 20161217] Stored-procedure support for MySQL
    databases.  Contributed by John Fawcett. See mysql_table(5) for
    instructions.
  - [Feature 20170128] The postmap command, and the inline: and
    texthash: maps now support spaces in left-hand field of the
    lookup table "source text". Use double quotes (") around a
    left-hand field that contains spaces, and use backslash (\) to
    protect embedded quotes in a left-hand field. There is no
    change in the processing of the right-hand field.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Feature 20161024] smtpd_milter_maps support for per-client
    Milter configuration that overrides smtpd_milters, and that has
    the same syntax. A lookup result of "DISABLE" turns off Milter
    support. See MILTER_README.html for details.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Incompat 20170129] The postqueue command no longer forces all
    message arrival times to be reported in UTC. To get the old
    behavior, set TZ=UTC in main.cf:import_environment (this
    override is not recommended, as it affects all Postfix utities
    and daemons).
  - [Incompat 20161227] For safety reasons, the sendmail -C option
    must specify an authorized directory: the default configuration
    directory, a directory that is listed in the default main.cf
    file with alternate_config_directories or
    multi_instance_directories, or the command must be invoked with
    root privileges (UID 0 and EUID 0).  This mitigates a recurring
    problem with the PHP mail() function.
  - [Feature 20160625] The Postfix SMTP server now passes remote
    client and local server network address and port information to
    the Cyrus SASL library. Build with ``make makefiles
    "CCARGS=$CCARGS -DNO_IP_CYRUS_SASL_AUTH"'' for backwards
    compatibility.
  - [Feature 20161103] Postfix 3.2 disables the 'transitional'
    compatibility between the IDNA2003 and IDNA2008 standards for
    internationalized domain names (domain names beyond the limits
    of US-ASCII).
    This change makes Postfix behavior consistent with contemporary
    web browsers. It affects the handling of some corner cases such
    as German sz and Greek zeta. See
    http://unicode.org/cldr/utility/idna.jsp for more examples.
    Specify "enable_idna2003_compatibility = yes" to restore
    historical behavior (but keep in mind that the rest of the
    world may not make that same choice).
  - [Feature 20160828] Fixes for deprecated OpenSSL 1.1.0 API
    features, so that Postfix will build without depending on
    backwards-compatibility support.
    [Incompat 20161204] Postfix 3.2 removes tentative features that
    were implemented before the DANE spec was finalized:
  - Support for certificate usage PKIX-EE(1),
  - The ability to disable digest agility (Postfix now behaves as
    if "tls_dane_digest_agility = on"), and
  - The ability to disable support for "TLSA 2 [01] [12]" records
    that specify the digest of a trust anchor (Postfix now
    behaves as if "tls_dane_trust_anchor_digest_enable = yes).
  - [Feature 20161217] Postfix 3.2 enables elliptic curve
    negotiation with OpenSSL &gt;= 1.0.2.  This changes the default
    smtpd_tls_eecdh_grade setting to "auto", and introduces a new
    parameter tls_eecdh_auto_curves with the names of curves that
    may be negotiated.
    The default tls_eecdh_auto_curves setting is determined at
    compile time, and depends on the Postfix and OpenSSL versions.
    At runtime, Postfix will skip curve names that aren't supported
    by the OpenSSL library.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
- refresh postfix-master.cf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system group mail
- Use mail group name instead of GID</changelog>
  <changelog author="chris@computersalat.de" date="1491652800">- update postfix-master.cf.patch
  * recover lost (with 3.2.0 update) submission, smtps sections
  * merge with upstream update
- update config.postfix
  * update master.cf generation for submission
- rebase patches against 3.2.0
  * pointer_to_literals.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="werner@suse.de" date="1492084800">- Some cleanups
  * Fix SUSE postfix-files to avoid chown errors (anyway this file
    seems to be obsolete)
  * Avoid installing shared libraries twice
  * Refresh patch postfix-linux45.patch</changelog>
  <changelog author="chris@computersalat.de" date="1492603200">- revert changes of postfix-main.cf.patch from rev=261
  * config.postfix will not 'enable' (remove #) var, but place
    modified (enabled) var at end of file, far away from place
    where it should be
  * keep vars enabled but empty</changelog>
  <changelog author="michael@stroeder.com" date="1497614400">- update to 3.2.2
  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    &lt; 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.
  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.
  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.</changelog>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
</package>
<package pkgid="58318cb5ce681ba4aed2bd40f82691842b21f4cf1f0dda29449c7b2deddfc845" name="postfix-mysql" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="295.1"/>
  <changelog author="varkoly@suse.com" date="1464091200">- Fix typo in config.postfix</changelog>
  <changelog author="chris@computersalat.de" date="1464523200">- fix Changelog cause of Factory decline</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- postfix-post-install.patch: remove empty patch</changelog>
  <changelog author="michael@stroeder.com" date="1472990400">- update to 3.1.2:
  * Changes to make Postfix build with OpenSSL 1.1.0.
  * The makedefs script ignored readme_directory=pathname overrides.
    Fix by Todd C. Olson.
  * The tls_session_ticket_cipher documentation says that the default
    cipher for TLS session tickets is aes-256-cbc, but the implemented
    default was aes-128-cbc. Note that TLS session ticket keys are
    rotated after 1/2 hour, to limit the impact of attacks on session
    ticket keys.</changelog>
  <changelog author="michael@stroeder.com" date="1476014400">- update to 3.1.3:
  * The Postfix SMTP server did not reset a previous session's
    failed/total command counts before rejecting a client that
    exceeds request or concurrency rates. This resulted in incorrect
    failed/total command counts being logged at the end of the
    rejected session.
  * The unionmap multi-table interface did not propagate table
    lookup errors, resulting in false "user unknown" responses.
  * The documentation was updated with a workaround for false "not
    found" errors with MySQL map queries that contain UTF8-encoded
    text. The workaround is to specify "option_group = client" in
    Postfix MySQL configuration files. This will be the default
    setting with Postfix 3.2 and later.</changelog>
  <changelog author="chris@computersalat.de" date="1478520000">- update vda patch to latest available
  * remove postfix-vda-v13-3.10.0.patch
  * add postfix-vda-v14-3.0.3.patch
- rebase patches (and to be p0)
  * pointer_to_literals.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
- add /etc/postfix/ssl as default DIR for SSL stuff
  * cacerts -&gt; ../../ssl/certs/
  * certs/
- revert POSTFIX_SSL_PATH from '/etc/ssl' to '/etc/postfix/ssl'
- improve config.postfix
  * revert smtpd_tls_CApath to POSTFIX_SSL_PATH/cacerts which is a
    symlink to /etc/ssl/certs
    Without reverting, 'gen_CA' would create files which would then be on
    the previous defined 'sslpath(/etc/ssl)/certs' (smtpd_tls_CApath)
    Cert reqs would be placed in 'sslpath(/etc/ssl)/certs/postfixreq.pem'
    which is not a good idea.
  * mkchroot: sync '/etc/postfix/ssl' to chroot
  * improve PCONF for smtp{,d}_tls_{cert,key}_file, adding/removing from
    main.cf, show warning if enabled and file is missing</changelog>
  <changelog author="chris@computersalat.de" date="1479124800">- improve config.postfix
  * improve with MySQL stuff</changelog>
  <changelog author="chris@computersalat.de" date="1480161600">- improve config.postfix
  * improve SASL stuff
  * add POSTFIX_SMTP_AUTH_SERVICE=(cyrus|dovecot)</changelog>
  <changelog author="varkoly@suse.com" date="1483444800">- update to 3.1.4
  * The postscreen daemon did not merge the client test status information
    for concurrent sessions from the same IP address.
  * The Postfix SMTP server falsely rejected a sender address when validating
    a sender address with "smtpd_reject_unlisted_recipient = yes" or with
    "reject_unlisted_sender". Cause: the address validation code did not query sender_canonical_maps.
  * The virtual delivery agent did not detect failure to skip to the end
    of a mailbox file, so that mail would be delivered to the beginning of the file.
    This could happen when a mailbox file was already larger than the virtual mailbox size limit.
  * The postsuper logged an incorrect rename operation count after creating a missing directory.
  * The Postfix SMTP server falsely rejected mail when a sender-dependent "error"
    transport was configured. Cause: the SMTP server address validation code
    was not updated when the sender_dependent_default_transport_maps feature
    was introduced.
  * The Postfix SMTP server falsely rejected an SMTPUTF8 sender address, when "smtpd_delay_reject = no".
  * The "postfix tls deploy-server-cert" command used the wrong certificate
    and key file. This was caused by a cut-and-paste error in the postfix-tls-script file.</changelog>
  <changelog author="varkoly@suse.com" date="1484136000">- FATE#322322 Update postfix to version 3.X
  Merging changes with SLES12-SP2
  Removeved patches: add_missed_library.patch bnc#947707.diff dynamic_maps.patch postfix-db6.diff
    postfix-opensslconfig.patch bnc#947519.diff dynamic_maps_pie.patch
    postfix-post-install.patch
    These are included in the new version of postfix
- Remove references to SuSEconfig.postfix from sysconfig docs.
  (bsc#871575)
- bnc#947519 SuSEconfig.postfix should enforce umask 022
- bnc#947707 mail generated by Amavis being prevented from being re-adressed by /etc/postfix/virtual
- bnc#972346 /usr/sbin/SuSEconfig.postfix is wrong
- postfix-linux45.patch: handle Linux 4.x and Linux 5.x (used by aarch64)
  (bsc#940289)</changelog>
  <changelog author="chris@computersalat.de" date="1485000000">- update postfix-mysql
  * update  mysql_*.cf files
  * update postfix-mysql.sql (INNODB, utf8)
- update postfix-main.cf.patch
  * uncomment smtpd_sasl_path, smtpd_sasl_type
    can be changed via POSTFIX_SMTP_AUTH_SERVICE=(cyrus,dovecot)
  * add option for smtp_tls_policy_maps (commented)
- update postfix-master.cf.patch
  * fix indentation of submission, smtps options for correct
    enabling via config.postfix
- update config.postfix
  * fix sync of CA certificates
  * fix master.cf generation for submission, smtps
- rebase postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Fix requires:
  - shadow is needed for postfix-mysql pre-install section
  - insserv is not needed if systemd is used</changelog>
  <changelog author="wr@rosenauer.org" date="1488801600">- make sure that system users can be created in %pre</changelog>
  <changelog author="mrueckert@suse.de" date="1488801601">- update to 3.2.0
  - [Feature 20170128] Postfix 3.2 fixes the handling of address
    extensions with email addresses that contain spaces. For
    example, the virtual_alias_maps, canonical_maps, and
    smtp_generic_maps features now correctly propagate an address
    extension from "aa bb+ext"@example.com to "cc
    dd+ext"@other.example, instead of producing broken output.
  - [Feature 20161008] "PASS" and "STRIP" actions in
    header/body_checks.  "STRIP" is similar to "IGNORE" but also
    logs the action, and "PASS" disables header, body, and Milter
    inspection for the remainder of the message content.
    Contributed by Hobbit.
  - [Feature 20160330] The collate.pl script by Viktor Dukhovni for
    grouping Postfix logfile records into "sessions" based on queue
    ID and process ID information. It's in the auxiliary/collate
    directory of the Postfix source tree.
  - [Feature 20160527] Postfix 3.2 cidr tables support if/endif and
    negation (by prepending ! to a pattern), just like regexp and
    pcre tables.  The primarily purpose is to improve readability
    of complex tables. See the cidr_table(5) manpage for syntax
    details.
  - [Incompat 20160925] In the Postfix MySQL database client, the
    default option_group value has changed to "client", to enable
    reading of "client" option group settings in the MySQL options
    file. This fixes a "not found" problem with Postfix queries
    that contain UTF8-encoded non-ASCII text.  Specify an empty
    option_group value (option_group =) to get backwards-compatible
    behavior.
  - [Feature 20161217] Stored-procedure support for MySQL
    databases.  Contributed by John Fawcett. See mysql_table(5) for
    instructions.
  - [Feature 20170128] The postmap command, and the inline: and
    texthash: maps now support spaces in left-hand field of the
    lookup table "source text". Use double quotes (") around a
    left-hand field that contains spaces, and use backslash (\) to
    protect embedded quotes in a left-hand field. There is no
    change in the processing of the right-hand field.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Feature 20161024] smtpd_milter_maps support for per-client
    Milter configuration that overrides smtpd_milters, and that has
    the same syntax. A lookup result of "DISABLE" turns off Milter
    support. See MILTER_README.html for details.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Incompat 20170129] The postqueue command no longer forces all
    message arrival times to be reported in UTC. To get the old
    behavior, set TZ=UTC in main.cf:import_environment (this
    override is not recommended, as it affects all Postfix utities
    and daemons).
  - [Incompat 20161227] For safety reasons, the sendmail -C option
    must specify an authorized directory: the default configuration
    directory, a directory that is listed in the default main.cf
    file with alternate_config_directories or
    multi_instance_directories, or the command must be invoked with
    root privileges (UID 0 and EUID 0).  This mitigates a recurring
    problem with the PHP mail() function.
  - [Feature 20160625] The Postfix SMTP server now passes remote
    client and local server network address and port information to
    the Cyrus SASL library. Build with ``make makefiles
    "CCARGS=$CCARGS -DNO_IP_CYRUS_SASL_AUTH"'' for backwards
    compatibility.
  - [Feature 20161103] Postfix 3.2 disables the 'transitional'
    compatibility between the IDNA2003 and IDNA2008 standards for
    internationalized domain names (domain names beyond the limits
    of US-ASCII).
    This change makes Postfix behavior consistent with contemporary
    web browsers. It affects the handling of some corner cases such
    as German sz and Greek zeta. See
    http://unicode.org/cldr/utility/idna.jsp for more examples.
    Specify "enable_idna2003_compatibility = yes" to restore
    historical behavior (but keep in mind that the rest of the
    world may not make that same choice).
  - [Feature 20160828] Fixes for deprecated OpenSSL 1.1.0 API
    features, so that Postfix will build without depending on
    backwards-compatibility support.
    [Incompat 20161204] Postfix 3.2 removes tentative features that
    were implemented before the DANE spec was finalized:
  - Support for certificate usage PKIX-EE(1),
  - The ability to disable digest agility (Postfix now behaves as
    if "tls_dane_digest_agility = on"), and
  - The ability to disable support for "TLSA 2 [01] [12]" records
    that specify the digest of a trust anchor (Postfix now
    behaves as if "tls_dane_trust_anchor_digest_enable = yes).
  - [Feature 20161217] Postfix 3.2 enables elliptic curve
    negotiation with OpenSSL &gt;= 1.0.2.  This changes the default
    smtpd_tls_eecdh_grade setting to "auto", and introduces a new
    parameter tls_eecdh_auto_curves with the names of curves that
    may be negotiated.
    The default tls_eecdh_auto_curves setting is determined at
    compile time, and depends on the Postfix and OpenSSL versions.
    At runtime, Postfix will skip curve names that aren't supported
    by the OpenSSL library.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
- refresh postfix-master.cf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system group mail
- Use mail group name instead of GID</changelog>
  <changelog author="chris@computersalat.de" date="1491652800">- update postfix-master.cf.patch
  * recover lost (with 3.2.0 update) submission, smtps sections
  * merge with upstream update
- update config.postfix
  * update master.cf generation for submission
- rebase patches against 3.2.0
  * pointer_to_literals.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="werner@suse.de" date="1492084800">- Some cleanups
  * Fix SUSE postfix-files to avoid chown errors (anyway this file
    seems to be obsolete)
  * Avoid installing shared libraries twice
  * Refresh patch postfix-linux45.patch</changelog>
  <changelog author="chris@computersalat.de" date="1492603200">- revert changes of postfix-main.cf.patch from rev=261
  * config.postfix will not 'enable' (remove #) var, but place
    modified (enabled) var at end of file, far away from place
    where it should be
  * keep vars enabled but empty</changelog>
  <changelog author="michael@stroeder.com" date="1497614400">- update to 3.2.2
  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    &lt; 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.
  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.
  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.</changelog>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
</package>
<package pkgid="c1b379729dbb39bdb1b0b6e76365702dc6860fa38ada0a76595cee84b18e802d" name="postfix-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="295.1"/>
  <changelog author="varkoly@suse.com" date="1464091200">- Fix typo in config.postfix</changelog>
  <changelog author="chris@computersalat.de" date="1464523200">- fix Changelog cause of Factory decline</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- postfix-post-install.patch: remove empty patch</changelog>
  <changelog author="michael@stroeder.com" date="1472990400">- update to 3.1.2:
  * Changes to make Postfix build with OpenSSL 1.1.0.
  * The makedefs script ignored readme_directory=pathname overrides.
    Fix by Todd C. Olson.
  * The tls_session_ticket_cipher documentation says that the default
    cipher for TLS session tickets is aes-256-cbc, but the implemented
    default was aes-128-cbc. Note that TLS session ticket keys are
    rotated after 1/2 hour, to limit the impact of attacks on session
    ticket keys.</changelog>
  <changelog author="michael@stroeder.com" date="1476014400">- update to 3.1.3:
  * The Postfix SMTP server did not reset a previous session's
    failed/total command counts before rejecting a client that
    exceeds request or concurrency rates. This resulted in incorrect
    failed/total command counts being logged at the end of the
    rejected session.
  * The unionmap multi-table interface did not propagate table
    lookup errors, resulting in false "user unknown" responses.
  * The documentation was updated with a workaround for false "not
    found" errors with MySQL map queries that contain UTF8-encoded
    text. The workaround is to specify "option_group = client" in
    Postfix MySQL configuration files. This will be the default
    setting with Postfix 3.2 and later.</changelog>
  <changelog author="chris@computersalat.de" date="1478520000">- update vda patch to latest available
  * remove postfix-vda-v13-3.10.0.patch
  * add postfix-vda-v14-3.0.3.patch
- rebase patches (and to be p0)
  * pointer_to_literals.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
- add /etc/postfix/ssl as default DIR for SSL stuff
  * cacerts -&gt; ../../ssl/certs/
  * certs/
- revert POSTFIX_SSL_PATH from '/etc/ssl' to '/etc/postfix/ssl'
- improve config.postfix
  * revert smtpd_tls_CApath to POSTFIX_SSL_PATH/cacerts which is a
    symlink to /etc/ssl/certs
    Without reverting, 'gen_CA' would create files which would then be on
    the previous defined 'sslpath(/etc/ssl)/certs' (smtpd_tls_CApath)
    Cert reqs would be placed in 'sslpath(/etc/ssl)/certs/postfixreq.pem'
    which is not a good idea.
  * mkchroot: sync '/etc/postfix/ssl' to chroot
  * improve PCONF for smtp{,d}_tls_{cert,key}_file, adding/removing from
    main.cf, show warning if enabled and file is missing</changelog>
  <changelog author="chris@computersalat.de" date="1479124800">- improve config.postfix
  * improve with MySQL stuff</changelog>
  <changelog author="chris@computersalat.de" date="1480161600">- improve config.postfix
  * improve SASL stuff
  * add POSTFIX_SMTP_AUTH_SERVICE=(cyrus|dovecot)</changelog>
  <changelog author="varkoly@suse.com" date="1483444800">- update to 3.1.4
  * The postscreen daemon did not merge the client test status information
    for concurrent sessions from the same IP address.
  * The Postfix SMTP server falsely rejected a sender address when validating
    a sender address with "smtpd_reject_unlisted_recipient = yes" or with
    "reject_unlisted_sender". Cause: the address validation code did not query sender_canonical_maps.
  * The virtual delivery agent did not detect failure to skip to the end
    of a mailbox file, so that mail would be delivered to the beginning of the file.
    This could happen when a mailbox file was already larger than the virtual mailbox size limit.
  * The postsuper logged an incorrect rename operation count after creating a missing directory.
  * The Postfix SMTP server falsely rejected mail when a sender-dependent "error"
    transport was configured. Cause: the SMTP server address validation code
    was not updated when the sender_dependent_default_transport_maps feature
    was introduced.
  * The Postfix SMTP server falsely rejected an SMTPUTF8 sender address, when "smtpd_delay_reject = no".
  * The "postfix tls deploy-server-cert" command used the wrong certificate
    and key file. This was caused by a cut-and-paste error in the postfix-tls-script file.</changelog>
  <changelog author="varkoly@suse.com" date="1484136000">- FATE#322322 Update postfix to version 3.X
  Merging changes with SLES12-SP2
  Removeved patches: add_missed_library.patch bnc#947707.diff dynamic_maps.patch postfix-db6.diff
    postfix-opensslconfig.patch bnc#947519.diff dynamic_maps_pie.patch
    postfix-post-install.patch
    These are included in the new version of postfix
- Remove references to SuSEconfig.postfix from sysconfig docs.
  (bsc#871575)
- bnc#947519 SuSEconfig.postfix should enforce umask 022
- bnc#947707 mail generated by Amavis being prevented from being re-adressed by /etc/postfix/virtual
- bnc#972346 /usr/sbin/SuSEconfig.postfix is wrong
- postfix-linux45.patch: handle Linux 4.x and Linux 5.x (used by aarch64)
  (bsc#940289)</changelog>
  <changelog author="chris@computersalat.de" date="1485000000">- update postfix-mysql
  * update  mysql_*.cf files
  * update postfix-mysql.sql (INNODB, utf8)
- update postfix-main.cf.patch
  * uncomment smtpd_sasl_path, smtpd_sasl_type
    can be changed via POSTFIX_SMTP_AUTH_SERVICE=(cyrus,dovecot)
  * add option for smtp_tls_policy_maps (commented)
- update postfix-master.cf.patch
  * fix indentation of submission, smtps options for correct
    enabling via config.postfix
- update config.postfix
  * fix sync of CA certificates
  * fix master.cf generation for submission, smtps
- rebase postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Fix requires:
  - shadow is needed for postfix-mysql pre-install section
  - insserv is not needed if systemd is used</changelog>
  <changelog author="wr@rosenauer.org" date="1488801600">- make sure that system users can be created in %pre</changelog>
  <changelog author="mrueckert@suse.de" date="1488801601">- update to 3.2.0
  - [Feature 20170128] Postfix 3.2 fixes the handling of address
    extensions with email addresses that contain spaces. For
    example, the virtual_alias_maps, canonical_maps, and
    smtp_generic_maps features now correctly propagate an address
    extension from "aa bb+ext"@example.com to "cc
    dd+ext"@other.example, instead of producing broken output.
  - [Feature 20161008] "PASS" and "STRIP" actions in
    header/body_checks.  "STRIP" is similar to "IGNORE" but also
    logs the action, and "PASS" disables header, body, and Milter
    inspection for the remainder of the message content.
    Contributed by Hobbit.
  - [Feature 20160330] The collate.pl script by Viktor Dukhovni for
    grouping Postfix logfile records into "sessions" based on queue
    ID and process ID information. It's in the auxiliary/collate
    directory of the Postfix source tree.
  - [Feature 20160527] Postfix 3.2 cidr tables support if/endif and
    negation (by prepending ! to a pattern), just like regexp and
    pcre tables.  The primarily purpose is to improve readability
    of complex tables. See the cidr_table(5) manpage for syntax
    details.
  - [Incompat 20160925] In the Postfix MySQL database client, the
    default option_group value has changed to "client", to enable
    reading of "client" option group settings in the MySQL options
    file. This fixes a "not found" problem with Postfix queries
    that contain UTF8-encoded non-ASCII text.  Specify an empty
    option_group value (option_group =) to get backwards-compatible
    behavior.
  - [Feature 20161217] Stored-procedure support for MySQL
    databases.  Contributed by John Fawcett. See mysql_table(5) for
    instructions.
  - [Feature 20170128] The postmap command, and the inline: and
    texthash: maps now support spaces in left-hand field of the
    lookup table "source text". Use double quotes (") around a
    left-hand field that contains spaces, and use backslash (\) to
    protect embedded quotes in a left-hand field. There is no
    change in the processing of the right-hand field.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Feature 20161024] smtpd_milter_maps support for per-client
    Milter configuration that overrides smtpd_milters, and that has
    the same syntax. A lookup result of "DISABLE" turns off Milter
    support. See MILTER_README.html for details.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Incompat 20170129] The postqueue command no longer forces all
    message arrival times to be reported in UTC. To get the old
    behavior, set TZ=UTC in main.cf:import_environment (this
    override is not recommended, as it affects all Postfix utities
    and daemons).
  - [Incompat 20161227] For safety reasons, the sendmail -C option
    must specify an authorized directory: the default configuration
    directory, a directory that is listed in the default main.cf
    file with alternate_config_directories or
    multi_instance_directories, or the command must be invoked with
    root privileges (UID 0 and EUID 0).  This mitigates a recurring
    problem with the PHP mail() function.
  - [Feature 20160625] The Postfix SMTP server now passes remote
    client and local server network address and port information to
    the Cyrus SASL library. Build with ``make makefiles
    "CCARGS=$CCARGS -DNO_IP_CYRUS_SASL_AUTH"'' for backwards
    compatibility.
  - [Feature 20161103] Postfix 3.2 disables the 'transitional'
    compatibility between the IDNA2003 and IDNA2008 standards for
    internationalized domain names (domain names beyond the limits
    of US-ASCII).
    This change makes Postfix behavior consistent with contemporary
    web browsers. It affects the handling of some corner cases such
    as German sz and Greek zeta. See
    http://unicode.org/cldr/utility/idna.jsp for more examples.
    Specify "enable_idna2003_compatibility = yes" to restore
    historical behavior (but keep in mind that the rest of the
    world may not make that same choice).
  - [Feature 20160828] Fixes for deprecated OpenSSL 1.1.0 API
    features, so that Postfix will build without depending on
    backwards-compatibility support.
    [Incompat 20161204] Postfix 3.2 removes tentative features that
    were implemented before the DANE spec was finalized:
  - Support for certificate usage PKIX-EE(1),
  - The ability to disable digest agility (Postfix now behaves as
    if "tls_dane_digest_agility = on"), and
  - The ability to disable support for "TLSA 2 [01] [12]" records
    that specify the digest of a trust anchor (Postfix now
    behaves as if "tls_dane_trust_anchor_digest_enable = yes).
  - [Feature 20161217] Postfix 3.2 enables elliptic curve
    negotiation with OpenSSL &gt;= 1.0.2.  This changes the default
    smtpd_tls_eecdh_grade setting to "auto", and introduces a new
    parameter tls_eecdh_auto_curves with the names of curves that
    may be negotiated.
    The default tls_eecdh_auto_curves setting is determined at
    compile time, and depends on the Postfix and OpenSSL versions.
    At runtime, Postfix will skip curve names that aren't supported
    by the OpenSSL library.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
- refresh postfix-master.cf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system group mail
- Use mail group name instead of GID</changelog>
  <changelog author="chris@computersalat.de" date="1491652800">- update postfix-master.cf.patch
  * recover lost (with 3.2.0 update) submission, smtps sections
  * merge with upstream update
- update config.postfix
  * update master.cf generation for submission
- rebase patches against 3.2.0
  * pointer_to_literals.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="werner@suse.de" date="1492084800">- Some cleanups
  * Fix SUSE postfix-files to avoid chown errors (anyway this file
    seems to be obsolete)
  * Avoid installing shared libraries twice
  * Refresh patch postfix-linux45.patch</changelog>
  <changelog author="chris@computersalat.de" date="1492603200">- revert changes of postfix-main.cf.patch from rev=261
  * config.postfix will not 'enable' (remove #) var, but place
    modified (enabled) var at end of file, far away from place
    where it should be
  * keep vars enabled but empty</changelog>
  <changelog author="michael@stroeder.com" date="1497614400">- update to 3.2.2
  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    &lt; 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.
  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.
  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.</changelog>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
</package>
<package pkgid="6c1db48e11a2c299008478ef80cfb305c8322a12cb60e41bd9721480a297dbdc" name="postfix-postgresql" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="295.1"/>
  <changelog author="varkoly@suse.com" date="1464091200">- Fix typo in config.postfix</changelog>
  <changelog author="chris@computersalat.de" date="1464523200">- fix Changelog cause of Factory decline</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- postfix-post-install.patch: remove empty patch</changelog>
  <changelog author="michael@stroeder.com" date="1472990400">- update to 3.1.2:
  * Changes to make Postfix build with OpenSSL 1.1.0.
  * The makedefs script ignored readme_directory=pathname overrides.
    Fix by Todd C. Olson.
  * The tls_session_ticket_cipher documentation says that the default
    cipher for TLS session tickets is aes-256-cbc, but the implemented
    default was aes-128-cbc. Note that TLS session ticket keys are
    rotated after 1/2 hour, to limit the impact of attacks on session
    ticket keys.</changelog>
  <changelog author="michael@stroeder.com" date="1476014400">- update to 3.1.3:
  * The Postfix SMTP server did not reset a previous session's
    failed/total command counts before rejecting a client that
    exceeds request or concurrency rates. This resulted in incorrect
    failed/total command counts being logged at the end of the
    rejected session.
  * The unionmap multi-table interface did not propagate table
    lookup errors, resulting in false "user unknown" responses.
  * The documentation was updated with a workaround for false "not
    found" errors with MySQL map queries that contain UTF8-encoded
    text. The workaround is to specify "option_group = client" in
    Postfix MySQL configuration files. This will be the default
    setting with Postfix 3.2 and later.</changelog>
  <changelog author="chris@computersalat.de" date="1478520000">- update vda patch to latest available
  * remove postfix-vda-v13-3.10.0.patch
  * add postfix-vda-v14-3.0.3.patch
- rebase patches (and to be p0)
  * pointer_to_literals.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
- add /etc/postfix/ssl as default DIR for SSL stuff
  * cacerts -&gt; ../../ssl/certs/
  * certs/
- revert POSTFIX_SSL_PATH from '/etc/ssl' to '/etc/postfix/ssl'
- improve config.postfix
  * revert smtpd_tls_CApath to POSTFIX_SSL_PATH/cacerts which is a
    symlink to /etc/ssl/certs
    Without reverting, 'gen_CA' would create files which would then be on
    the previous defined 'sslpath(/etc/ssl)/certs' (smtpd_tls_CApath)
    Cert reqs would be placed in 'sslpath(/etc/ssl)/certs/postfixreq.pem'
    which is not a good idea.
  * mkchroot: sync '/etc/postfix/ssl' to chroot
  * improve PCONF for smtp{,d}_tls_{cert,key}_file, adding/removing from
    main.cf, show warning if enabled and file is missing</changelog>
  <changelog author="chris@computersalat.de" date="1479124800">- improve config.postfix
  * improve with MySQL stuff</changelog>
  <changelog author="chris@computersalat.de" date="1480161600">- improve config.postfix
  * improve SASL stuff
  * add POSTFIX_SMTP_AUTH_SERVICE=(cyrus|dovecot)</changelog>
  <changelog author="varkoly@suse.com" date="1483444800">- update to 3.1.4
  * The postscreen daemon did not merge the client test status information
    for concurrent sessions from the same IP address.
  * The Postfix SMTP server falsely rejected a sender address when validating
    a sender address with "smtpd_reject_unlisted_recipient = yes" or with
    "reject_unlisted_sender". Cause: the address validation code did not query sender_canonical_maps.
  * The virtual delivery agent did not detect failure to skip to the end
    of a mailbox file, so that mail would be delivered to the beginning of the file.
    This could happen when a mailbox file was already larger than the virtual mailbox size limit.
  * The postsuper logged an incorrect rename operation count after creating a missing directory.
  * The Postfix SMTP server falsely rejected mail when a sender-dependent "error"
    transport was configured. Cause: the SMTP server address validation code
    was not updated when the sender_dependent_default_transport_maps feature
    was introduced.
  * The Postfix SMTP server falsely rejected an SMTPUTF8 sender address, when "smtpd_delay_reject = no".
  * The "postfix tls deploy-server-cert" command used the wrong certificate
    and key file. This was caused by a cut-and-paste error in the postfix-tls-script file.</changelog>
  <changelog author="varkoly@suse.com" date="1484136000">- FATE#322322 Update postfix to version 3.X
  Merging changes with SLES12-SP2
  Removeved patches: add_missed_library.patch bnc#947707.diff dynamic_maps.patch postfix-db6.diff
    postfix-opensslconfig.patch bnc#947519.diff dynamic_maps_pie.patch
    postfix-post-install.patch
    These are included in the new version of postfix
- Remove references to SuSEconfig.postfix from sysconfig docs.
  (bsc#871575)
- bnc#947519 SuSEconfig.postfix should enforce umask 022
- bnc#947707 mail generated by Amavis being prevented from being re-adressed by /etc/postfix/virtual
- bnc#972346 /usr/sbin/SuSEconfig.postfix is wrong
- postfix-linux45.patch: handle Linux 4.x and Linux 5.x (used by aarch64)
  (bsc#940289)</changelog>
  <changelog author="chris@computersalat.de" date="1485000000">- update postfix-mysql
  * update  mysql_*.cf files
  * update postfix-mysql.sql (INNODB, utf8)
- update postfix-main.cf.patch
  * uncomment smtpd_sasl_path, smtpd_sasl_type
    can be changed via POSTFIX_SMTP_AUTH_SERVICE=(cyrus,dovecot)
  * add option for smtp_tls_policy_maps (commented)
- update postfix-master.cf.patch
  * fix indentation of submission, smtps options for correct
    enabling via config.postfix
- update config.postfix
  * fix sync of CA certificates
  * fix master.cf generation for submission, smtps
- rebase postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Fix requires:
  - shadow is needed for postfix-mysql pre-install section
  - insserv is not needed if systemd is used</changelog>
  <changelog author="wr@rosenauer.org" date="1488801600">- make sure that system users can be created in %pre</changelog>
  <changelog author="mrueckert@suse.de" date="1488801601">- update to 3.2.0
  - [Feature 20170128] Postfix 3.2 fixes the handling of address
    extensions with email addresses that contain spaces. For
    example, the virtual_alias_maps, canonical_maps, and
    smtp_generic_maps features now correctly propagate an address
    extension from "aa bb+ext"@example.com to "cc
    dd+ext"@other.example, instead of producing broken output.
  - [Feature 20161008] "PASS" and "STRIP" actions in
    header/body_checks.  "STRIP" is similar to "IGNORE" but also
    logs the action, and "PASS" disables header, body, and Milter
    inspection for the remainder of the message content.
    Contributed by Hobbit.
  - [Feature 20160330] The collate.pl script by Viktor Dukhovni for
    grouping Postfix logfile records into "sessions" based on queue
    ID and process ID information. It's in the auxiliary/collate
    directory of the Postfix source tree.
  - [Feature 20160527] Postfix 3.2 cidr tables support if/endif and
    negation (by prepending ! to a pattern), just like regexp and
    pcre tables.  The primarily purpose is to improve readability
    of complex tables. See the cidr_table(5) manpage for syntax
    details.
  - [Incompat 20160925] In the Postfix MySQL database client, the
    default option_group value has changed to "client", to enable
    reading of "client" option group settings in the MySQL options
    file. This fixes a "not found" problem with Postfix queries
    that contain UTF8-encoded non-ASCII text.  Specify an empty
    option_group value (option_group =) to get backwards-compatible
    behavior.
  - [Feature 20161217] Stored-procedure support for MySQL
    databases.  Contributed by John Fawcett. See mysql_table(5) for
    instructions.
  - [Feature 20170128] The postmap command, and the inline: and
    texthash: maps now support spaces in left-hand field of the
    lookup table "source text". Use double quotes (") around a
    left-hand field that contains spaces, and use backslash (\) to
    protect embedded quotes in a left-hand field. There is no
    change in the processing of the right-hand field.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Feature 20161024] smtpd_milter_maps support for per-client
    Milter configuration that overrides smtpd_milters, and that has
    the same syntax. A lookup result of "DISABLE" turns off Milter
    support. See MILTER_README.html for details.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Incompat 20170129] The postqueue command no longer forces all
    message arrival times to be reported in UTC. To get the old
    behavior, set TZ=UTC in main.cf:import_environment (this
    override is not recommended, as it affects all Postfix utities
    and daemons).
  - [Incompat 20161227] For safety reasons, the sendmail -C option
    must specify an authorized directory: the default configuration
    directory, a directory that is listed in the default main.cf
    file with alternate_config_directories or
    multi_instance_directories, or the command must be invoked with
    root privileges (UID 0 and EUID 0).  This mitigates a recurring
    problem with the PHP mail() function.
  - [Feature 20160625] The Postfix SMTP server now passes remote
    client and local server network address and port information to
    the Cyrus SASL library. Build with ``make makefiles
    "CCARGS=$CCARGS -DNO_IP_CYRUS_SASL_AUTH"'' for backwards
    compatibility.
  - [Feature 20161103] Postfix 3.2 disables the 'transitional'
    compatibility between the IDNA2003 and IDNA2008 standards for
    internationalized domain names (domain names beyond the limits
    of US-ASCII).
    This change makes Postfix behavior consistent with contemporary
    web browsers. It affects the handling of some corner cases such
    as German sz and Greek zeta. See
    http://unicode.org/cldr/utility/idna.jsp for more examples.
    Specify "enable_idna2003_compatibility = yes" to restore
    historical behavior (but keep in mind that the rest of the
    world may not make that same choice).
  - [Feature 20160828] Fixes for deprecated OpenSSL 1.1.0 API
    features, so that Postfix will build without depending on
    backwards-compatibility support.
    [Incompat 20161204] Postfix 3.2 removes tentative features that
    were implemented before the DANE spec was finalized:
  - Support for certificate usage PKIX-EE(1),
  - The ability to disable digest agility (Postfix now behaves as
    if "tls_dane_digest_agility = on"), and
  - The ability to disable support for "TLSA 2 [01] [12]" records
    that specify the digest of a trust anchor (Postfix now
    behaves as if "tls_dane_trust_anchor_digest_enable = yes).
  - [Feature 20161217] Postfix 3.2 enables elliptic curve
    negotiation with OpenSSL &gt;= 1.0.2.  This changes the default
    smtpd_tls_eecdh_grade setting to "auto", and introduces a new
    parameter tls_eecdh_auto_curves with the names of curves that
    may be negotiated.
    The default tls_eecdh_auto_curves setting is determined at
    compile time, and depends on the Postfix and OpenSSL versions.
    At runtime, Postfix will skip curve names that aren't supported
    by the OpenSSL library.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
- refresh postfix-master.cf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system group mail
- Use mail group name instead of GID</changelog>
  <changelog author="chris@computersalat.de" date="1491652800">- update postfix-master.cf.patch
  * recover lost (with 3.2.0 update) submission, smtps sections
  * merge with upstream update
- update config.postfix
  * update master.cf generation for submission
- rebase patches against 3.2.0
  * pointer_to_literals.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="werner@suse.de" date="1492084800">- Some cleanups
  * Fix SUSE postfix-files to avoid chown errors (anyway this file
    seems to be obsolete)
  * Avoid installing shared libraries twice
  * Refresh patch postfix-linux45.patch</changelog>
  <changelog author="chris@computersalat.de" date="1492603200">- revert changes of postfix-main.cf.patch from rev=261
  * config.postfix will not 'enable' (remove #) var, but place
    modified (enabled) var at end of file, far away from place
    where it should be
  * keep vars enabled but empty</changelog>
  <changelog author="michael@stroeder.com" date="1497614400">- update to 3.2.2
  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    &lt; 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.
  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.
  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.</changelog>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
</package>
<package pkgid="0c6b4beffcdd451811ffac4954aec10ef8ae341c8b7acd169cdf4535fcec6a5d" name="postfix-postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="295.1"/>
  <changelog author="varkoly@suse.com" date="1464091200">- Fix typo in config.postfix</changelog>
  <changelog author="chris@computersalat.de" date="1464523200">- fix Changelog cause of Factory decline</changelog>
  <changelog author="schwab@suse.de" date="1464868800">- postfix-post-install.patch: remove empty patch</changelog>
  <changelog author="michael@stroeder.com" date="1472990400">- update to 3.1.2:
  * Changes to make Postfix build with OpenSSL 1.1.0.
  * The makedefs script ignored readme_directory=pathname overrides.
    Fix by Todd C. Olson.
  * The tls_session_ticket_cipher documentation says that the default
    cipher for TLS session tickets is aes-256-cbc, but the implemented
    default was aes-128-cbc. Note that TLS session ticket keys are
    rotated after 1/2 hour, to limit the impact of attacks on session
    ticket keys.</changelog>
  <changelog author="michael@stroeder.com" date="1476014400">- update to 3.1.3:
  * The Postfix SMTP server did not reset a previous session's
    failed/total command counts before rejecting a client that
    exceeds request or concurrency rates. This resulted in incorrect
    failed/total command counts being logged at the end of the
    rejected session.
  * The unionmap multi-table interface did not propagate table
    lookup errors, resulting in false "user unknown" responses.
  * The documentation was updated with a workaround for false "not
    found" errors with MySQL map queries that contain UTF8-encoded
    text. The workaround is to specify "option_group = client" in
    Postfix MySQL configuration files. This will be the default
    setting with Postfix 3.2 and later.</changelog>
  <changelog author="chris@computersalat.de" date="1478520000">- update vda patch to latest available
  * remove postfix-vda-v13-3.10.0.patch
  * add postfix-vda-v14-3.0.3.patch
- rebase patches (and to be p0)
  * pointer_to_literals.patch
  * postfix-main.cf.patch
  * postfix-master.cf.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
- add /etc/postfix/ssl as default DIR for SSL stuff
  * cacerts -&gt; ../../ssl/certs/
  * certs/
- revert POSTFIX_SSL_PATH from '/etc/ssl' to '/etc/postfix/ssl'
- improve config.postfix
  * revert smtpd_tls_CApath to POSTFIX_SSL_PATH/cacerts which is a
    symlink to /etc/ssl/certs
    Without reverting, 'gen_CA' would create files which would then be on
    the previous defined 'sslpath(/etc/ssl)/certs' (smtpd_tls_CApath)
    Cert reqs would be placed in 'sslpath(/etc/ssl)/certs/postfixreq.pem'
    which is not a good idea.
  * mkchroot: sync '/etc/postfix/ssl' to chroot
  * improve PCONF for smtp{,d}_tls_{cert,key}_file, adding/removing from
    main.cf, show warning if enabled and file is missing</changelog>
  <changelog author="chris@computersalat.de" date="1479124800">- improve config.postfix
  * improve with MySQL stuff</changelog>
  <changelog author="chris@computersalat.de" date="1480161600">- improve config.postfix
  * improve SASL stuff
  * add POSTFIX_SMTP_AUTH_SERVICE=(cyrus|dovecot)</changelog>
  <changelog author="varkoly@suse.com" date="1483444800">- update to 3.1.4
  * The postscreen daemon did not merge the client test status information
    for concurrent sessions from the same IP address.
  * The Postfix SMTP server falsely rejected a sender address when validating
    a sender address with "smtpd_reject_unlisted_recipient = yes" or with
    "reject_unlisted_sender". Cause: the address validation code did not query sender_canonical_maps.
  * The virtual delivery agent did not detect failure to skip to the end
    of a mailbox file, so that mail would be delivered to the beginning of the file.
    This could happen when a mailbox file was already larger than the virtual mailbox size limit.
  * The postsuper logged an incorrect rename operation count after creating a missing directory.
  * The Postfix SMTP server falsely rejected mail when a sender-dependent "error"
    transport was configured. Cause: the SMTP server address validation code
    was not updated when the sender_dependent_default_transport_maps feature
    was introduced.
  * The Postfix SMTP server falsely rejected an SMTPUTF8 sender address, when "smtpd_delay_reject = no".
  * The "postfix tls deploy-server-cert" command used the wrong certificate
    and key file. This was caused by a cut-and-paste error in the postfix-tls-script file.</changelog>
  <changelog author="varkoly@suse.com" date="1484136000">- FATE#322322 Update postfix to version 3.X
  Merging changes with SLES12-SP2
  Removeved patches: add_missed_library.patch bnc#947707.diff dynamic_maps.patch postfix-db6.diff
    postfix-opensslconfig.patch bnc#947519.diff dynamic_maps_pie.patch
    postfix-post-install.patch
    These are included in the new version of postfix
- Remove references to SuSEconfig.postfix from sysconfig docs.
  (bsc#871575)
- bnc#947519 SuSEconfig.postfix should enforce umask 022
- bnc#947707 mail generated by Amavis being prevented from being re-adressed by /etc/postfix/virtual
- bnc#972346 /usr/sbin/SuSEconfig.postfix is wrong
- postfix-linux45.patch: handle Linux 4.x and Linux 5.x (used by aarch64)
  (bsc#940289)</changelog>
  <changelog author="chris@computersalat.de" date="1485000000">- update postfix-mysql
  * update  mysql_*.cf files
  * update postfix-mysql.sql (INNODB, utf8)
- update postfix-main.cf.patch
  * uncomment smtpd_sasl_path, smtpd_sasl_type
    can be changed via POSTFIX_SMTP_AUTH_SERVICE=(cyrus,dovecot)
  * add option for smtp_tls_policy_maps (commented)
- update postfix-master.cf.patch
  * fix indentation of submission, smtps options for correct
    enabling via config.postfix
- update config.postfix
  * fix sync of CA certificates
  * fix master.cf generation for submission, smtps
- rebase postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Fix requires:
  - shadow is needed for postfix-mysql pre-install section
  - insserv is not needed if systemd is used</changelog>
  <changelog author="wr@rosenauer.org" date="1488801600">- make sure that system users can be created in %pre</changelog>
  <changelog author="mrueckert@suse.de" date="1488801601">- update to 3.2.0
  - [Feature 20170128] Postfix 3.2 fixes the handling of address
    extensions with email addresses that contain spaces. For
    example, the virtual_alias_maps, canonical_maps, and
    smtp_generic_maps features now correctly propagate an address
    extension from "aa bb+ext"@example.com to "cc
    dd+ext"@other.example, instead of producing broken output.
  - [Feature 20161008] "PASS" and "STRIP" actions in
    header/body_checks.  "STRIP" is similar to "IGNORE" but also
    logs the action, and "PASS" disables header, body, and Milter
    inspection for the remainder of the message content.
    Contributed by Hobbit.
  - [Feature 20160330] The collate.pl script by Viktor Dukhovni for
    grouping Postfix logfile records into "sessions" based on queue
    ID and process ID information. It's in the auxiliary/collate
    directory of the Postfix source tree.
  - [Feature 20160527] Postfix 3.2 cidr tables support if/endif and
    negation (by prepending ! to a pattern), just like regexp and
    pcre tables.  The primarily purpose is to improve readability
    of complex tables. See the cidr_table(5) manpage for syntax
    details.
  - [Incompat 20160925] In the Postfix MySQL database client, the
    default option_group value has changed to "client", to enable
    reading of "client" option group settings in the MySQL options
    file. This fixes a "not found" problem with Postfix queries
    that contain UTF8-encoded non-ASCII text.  Specify an empty
    option_group value (option_group =) to get backwards-compatible
    behavior.
  - [Feature 20161217] Stored-procedure support for MySQL
    databases.  Contributed by John Fawcett. See mysql_table(5) for
    instructions.
  - [Feature 20170128] The postmap command, and the inline: and
    texthash: maps now support spaces in left-hand field of the
    lookup table "source text". Use double quotes (") around a
    left-hand field that contains spaces, and use backslash (\) to
    protect embedded quotes in a left-hand field. There is no
    change in the processing of the right-hand field.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Feature 20161024] smtpd_milter_maps support for per-client
    Milter configuration that overrides smtpd_milters, and that has
    the same syntax. A lookup result of "DISABLE" turns off Milter
    support. See MILTER_README.html for details.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
  - [Incompat 20170129] The postqueue command no longer forces all
    message arrival times to be reported in UTC. To get the old
    behavior, set TZ=UTC in main.cf:import_environment (this
    override is not recommended, as it affects all Postfix utities
    and daemons).
  - [Incompat 20161227] For safety reasons, the sendmail -C option
    must specify an authorized directory: the default configuration
    directory, a directory that is listed in the default main.cf
    file with alternate_config_directories or
    multi_instance_directories, or the command must be invoked with
    root privileges (UID 0 and EUID 0).  This mitigates a recurring
    problem with the PHP mail() function.
  - [Feature 20160625] The Postfix SMTP server now passes remote
    client and local server network address and port information to
    the Cyrus SASL library. Build with ``make makefiles
    "CCARGS=$CCARGS -DNO_IP_CYRUS_SASL_AUTH"'' for backwards
    compatibility.
  - [Feature 20161103] Postfix 3.2 disables the 'transitional'
    compatibility between the IDNA2003 and IDNA2008 standards for
    internationalized domain names (domain names beyond the limits
    of US-ASCII).
    This change makes Postfix behavior consistent with contemporary
    web browsers. It affects the handling of some corner cases such
    as German sz and Greek zeta. See
    http://unicode.org/cldr/utility/idna.jsp for more examples.
    Specify "enable_idna2003_compatibility = yes" to restore
    historical behavior (but keep in mind that the rest of the
    world may not make that same choice).
  - [Feature 20160828] Fixes for deprecated OpenSSL 1.1.0 API
    features, so that Postfix will build without depending on
    backwards-compatibility support.
    [Incompat 20161204] Postfix 3.2 removes tentative features that
    were implemented before the DANE spec was finalized:
  - Support for certificate usage PKIX-EE(1),
  - The ability to disable digest agility (Postfix now behaves as
    if "tls_dane_digest_agility = on"), and
  - The ability to disable support for "TLSA 2 [01] [12]" records
    that specify the digest of a trust anchor (Postfix now
    behaves as if "tls_dane_trust_anchor_digest_enable = yes).
  - [Feature 20161217] Postfix 3.2 enables elliptic curve
    negotiation with OpenSSL &gt;= 1.0.2.  This changes the default
    smtpd_tls_eecdh_grade setting to "auto", and introduces a new
    parameter tls_eecdh_auto_curves with the names of curves that
    may be negotiated.
    The default tls_eecdh_auto_curves setting is determined at
    compile time, and depends on the Postfix and OpenSSL versions.
    At runtime, Postfix will skip curve names that aren't supported
    by the OpenSSL library.
  - [Feature 20160611] The Postfix SMTP server local IP address and
    port are available in the policy delegation protocol (attribute
    names: server_address, server_port), in the Milter protocol
    (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
    protocol (attribute names: DESTADDR, DESTPORT).
- refresh postfix-master.cf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system group mail
- Use mail group name instead of GID</changelog>
  <changelog author="chris@computersalat.de" date="1491652800">- update postfix-master.cf.patch
  * recover lost (with 3.2.0 update) submission, smtps sections
  * merge with upstream update
- update config.postfix
  * update master.cf generation for submission
- rebase patches against 3.2.0
  * pointer_to_literals.patch
  * postfix-no-md5.patch
  * postfix-ssl-release-buffers.patch
  * postfix-vda-v14-3.0.3.patch</changelog>
  <changelog author="werner@suse.de" date="1492084800">- Some cleanups
  * Fix SUSE postfix-files to avoid chown errors (anyway this file
    seems to be obsolete)
  * Avoid installing shared libraries twice
  * Refresh patch postfix-linux45.patch</changelog>
  <changelog author="chris@computersalat.de" date="1492603200">- revert changes of postfix-main.cf.patch from rev=261
  * config.postfix will not 'enable' (remove #) var, but place
    modified (enabled) var at end of file, far away from place
    where it should be
  * keep vars enabled but empty</changelog>
  <changelog author="michael@stroeder.com" date="1497614400">- update to 3.2.2
  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    &lt; 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.
  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.
  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.</changelog>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
</package>
<package pkgid="cc20da7693515030d31e2c75a1e9f7dbdc421dc543b629b79c7a680e1fab6066" name="postgrey" arch="noarch">
  <version epoch="0" ver="1.37" rel="80.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1259582400">- refresh patches with fuzz=0</changelog>
  <changelog author="bugs@singvogel.com" date="1282996800">- version 1.33
  - fix warning with IPv6 address (Edwin Kremer)
  - added --x-greylist-header option (Guido Leisker)
  - contrib/postgrey.init: new LSB-compliant init script by
    Adrian von Bidder (Debian)
  - contrib/postgreyreport: fix POD error (Christian Perrier)
  - contrib/postgreyreport: added --tab and --show_time options
    (Leonard den Ottolander)
  - updated whitelist</changelog>
  <changelog author="coolo@novell.com" date="1295265600">- avoid owning /var/spool/postfix directory (bnc#664537)</changelog>
  <changelog author="chris@computersalat.de" date="1301572800">- cleanup init script (skeleton)
  o added sleep 3s when restart</changelog>
  <changelog author="obs@botter.cc" date="1352376000">- add systemd service file for openSUSE &gt;= 12.1</changelog>
  <changelog author="lars@linux-schulserver.de" date="1353412800">- update to 1.34:
  - gracefully handle future timestamps in the database
    (Andreas Hoedle)
  - replaced obsolete Digest::SHA1 with Digest::SHA
    (Salvatore Bonaccorso)
  - updated whitelist
- adapt patches to the new version
- adapt URL to the postgrey_clients_dump source
- specfile cleanup
- removed empty verifyscript</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369828800">- fix multiple bugs in systemd unit file, syslog.target must
  not be used neither Requires but Wants</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1375963200">- Added missing perl-Net-DNS is needed for postgreyreport</changelog>
  <changelog author="obs@botter.cc" date="1380888000">- fix postgre-1.34-config.path to include change of name and
  location of whitelist_recipients</changelog>
  <changelog author="obs@botter.cc" date="1392120000">- fix files section in spec file: submit from Nov 20 2012 removed
  two directories  (bnc#862552)</changelog>
  <changelog author="varkoly@suse.com" date="1403697600">- Update to 1.35 (boo #919194)
  - use just 'postgrey' as process name, instead of '/usr/sbin/postgrey', because
    Linux tools are limited to 15 characters (#5)
  - Make postgrey work with Perl 5.18 (Yasuhiro KIMURA, #4)
  - updated whitelist</changelog>
  <changelog author="mpluskal@suse.com" date="1421668800">- Replace postgrey-1.34-config.patch with postgrey-1.35-config.patch
  which was updated to correctly apply to current release
- Build as noarch since there are now architecture dependend
  components
- Don't install init scripts when systemd is used
- Create rcpostgrey also when systemd is used
- Misc spec file cleanups
- Remove unnecessary echo from unit file
- Remove condition for suggesting cron since all current releases
  already have cron</changelog>
  <changelog author="benedikt.schindler@gsx.de" date="1450094400">- update to 1.36:
  - improved support for IPv6 addresses: new --ipv4cidr and --ipv6cidr options
    for proper subnetting of IPv6 (Håvard Moen, BenediktS)
  - updated whitelist
  - user-settable unix socket permission: --socketmode (Teubel György)
  - init script fixes (Sacha Ott)
- Replace postgrey-1.35-config.patch with postgrey-1.36-config.patch
  which was updated to correctly apply to current release
- Added missing perl-NetAddr-IP to the requirements</changelog>
  <changelog author="wr@rosenauer.org" date="1461499200">- installing sysconfig via fillup macro was lost in systemd migration
  (boo#976963)</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- add condition for suggesting cron to fix build for CentOS</changelog>
  <changelog author="chris@computersalat.de" date="1463745600">- revert process name changes from 1.35, startproc will return 7
  * add postgrey_process_name.patch
  * enable for openSUSE &lt; 1210 (SLE_11)</changelog>
  <changelog author="draht@schaltsekun.de" date="1476360000">- Update to 1.37:
  * added initial test suite
  * testing using travis-ci (https://travis-ci.org/schweikert/postgrey)
  * removed IP pool-detection code for --lookup-by-net, because it matched
    also the naming of some big hosters like facebook (#32, Michal Petrucha,
    Andrew Ayer, Jon Sailor)
  * fix early logging of errors and warnings to syslog
  * simplified IP matching code
  * added support for IPv6 whitelists with netmask
  * add network-range based whitelist for Office 365 (Holger Stember)
  * updated whitelist
- postgrey-1.36-config.patch renamed to postgrey-1.37-config.patch
  and rebased to new version.</changelog>
  <changelog author="chris@computersalat.de" date="1485172800">- add ExecReload to service file</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Require group(nogroup) for %pre</changelog>
</package>
<package pkgid="59a86c071ca6448dd31a43852adad23497ee977167b9c94ef17be66bc6ffb117" name="postgrey" arch="src">
  <version epoch="0" ver="1.37" rel="80.1"/>
  <changelog author="kssingvo@suse.de" date="1233662400">- postgrey_clients_dump is now in examples; otherwise manpage should
  be included</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1259582400">- refresh patches with fuzz=0</changelog>
  <changelog author="bugs@singvogel.com" date="1282996800">- version 1.33
  - fix warning with IPv6 address (Edwin Kremer)
  - added --x-greylist-header option (Guido Leisker)
  - contrib/postgrey.init: new LSB-compliant init script by
    Adrian von Bidder (Debian)
  - contrib/postgreyreport: fix POD error (Christian Perrier)
  - contrib/postgreyreport: added --tab and --show_time options
    (Leonard den Ottolander)
  - updated whitelist</changelog>
  <changelog author="coolo@novell.com" date="1295265600">- avoid owning /var/spool/postfix directory (bnc#664537)</changelog>
  <changelog author="chris@computersalat.de" date="1301572800">- cleanup init script (skeleton)
  o added sleep 3s when restart</changelog>
  <changelog author="obs@botter.cc" date="1352376000">- add systemd service file for openSUSE &gt;= 12.1</changelog>
  <changelog author="lars@linux-schulserver.de" date="1353412800">- update to 1.34:
  - gracefully handle future timestamps in the database
    (Andreas Hoedle)
  - replaced obsolete Digest::SHA1 with Digest::SHA
    (Salvatore Bonaccorso)
  - updated whitelist
- adapt patches to the new version
- adapt URL to the postgrey_clients_dump source
- specfile cleanup
- removed empty verifyscript</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369828800">- fix multiple bugs in systemd unit file, syslog.target must
  not be used neither Requires but Wants</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1375963200">- Added missing perl-Net-DNS is needed for postgreyreport</changelog>
  <changelog author="obs@botter.cc" date="1380888000">- fix postgre-1.34-config.path to include change of name and
  location of whitelist_recipients</changelog>
  <changelog author="obs@botter.cc" date="1392120000">- fix files section in spec file: submit from Nov 20 2012 removed
  two directories  (bnc#862552)</changelog>
  <changelog author="varkoly@suse.com" date="1403697600">- Update to 1.35 (boo #919194)
  - use just 'postgrey' as process name, instead of '/usr/sbin/postgrey', because
    Linux tools are limited to 15 characters (#5)
  - Make postgrey work with Perl 5.18 (Yasuhiro KIMURA, #4)
  - updated whitelist</changelog>
  <changelog author="mpluskal@suse.com" date="1421668800">- Replace postgrey-1.34-config.patch with postgrey-1.35-config.patch
  which was updated to correctly apply to current release
- Build as noarch since there are now architecture dependend
  components
- Don't install init scripts when systemd is used
- Create rcpostgrey also when systemd is used
- Misc spec file cleanups
- Remove unnecessary echo from unit file
- Remove condition for suggesting cron since all current releases
  already have cron</changelog>
  <changelog author="benedikt.schindler@gsx.de" date="1450094400">- update to 1.36:
  - improved support for IPv6 addresses: new --ipv4cidr and --ipv6cidr options
    for proper subnetting of IPv6 (Håvard Moen, BenediktS)
  - updated whitelist
  - user-settable unix socket permission: --socketmode (Teubel György)
  - init script fixes (Sacha Ott)
- Replace postgrey-1.35-config.patch with postgrey-1.36-config.patch
  which was updated to correctly apply to current release
- Added missing perl-NetAddr-IP to the requirements</changelog>
  <changelog author="wr@rosenauer.org" date="1461499200">- installing sysconfig via fillup macro was lost in systemd migration
  (boo#976963)</changelog>
  <changelog author="chris@computersalat.de" date="1463400000">- add condition for suggesting cron to fix build for CentOS</changelog>
  <changelog author="chris@computersalat.de" date="1463745600">- revert process name changes from 1.35, startproc will return 7
  * add postgrey_process_name.patch
  * enable for openSUSE &lt; 1210 (SLE_11)</changelog>
  <changelog author="draht@schaltsekun.de" date="1476360000">- Update to 1.37:
  * added initial test suite
  * testing using travis-ci (https://travis-ci.org/schweikert/postgrey)
  * removed IP pool-detection code for --lookup-by-net, because it matched
    also the naming of some big hosters like facebook (#32, Michal Petrucha,
    Andrew Ayer, Jon Sailor)
  * fix early logging of errors and warnings to syslog
  * simplified IP matching code
  * added support for IPv6 whitelists with netmask
  * add network-range based whitelist for Office 365 (Holger Stember)
  * updated whitelist
- postgrey-1.36-config.patch renamed to postgrey-1.37-config.patch
  and rebased to new version.</changelog>
  <changelog author="chris@computersalat.de" date="1485172800">- add ExecReload to service file</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Require group(nogroup) for %pre</changelog>
</package>
<package pkgid="2f6fa2b49d8970f1c4bbcb5afd34ffe58fec7afc013f47c873c28d3a5e7167c2" name="pst2mbox" arch="src">
  <version epoch="0" ver="0.5.3" rel="2.1"/>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.4" date="1217851200">- new package</changelog>
  <changelog author="Pascal Bleser &lt;pascal.bleser@opensuse.org&gt; 0.5.3" date="1241179200">- update to 0.5.3</changelog>
</package>
<package pkgid="5268e5889f8a37f6a652da2f9a14b1effe59aa10c2ec7bf33b53771b3293e4f3" name="pst2mbox" arch="x86_64">
  <version epoch="0" ver="0.5.3" rel="2.1"/>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.4" date="1217851200">- new package</changelog>
  <changelog author="Pascal Bleser &lt;pascal.bleser@opensuse.org&gt; 0.5.3" date="1241179200">- update to 0.5.3</changelog>
</package>
<package pkgid="bad2bc71156d1c2a7f41d7dccb1b08a8022470bfb26a78833eca4d756a764caa" name="pst2mbox-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.5.3" rel="2.1"/>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.4" date="1217851200">- new package</changelog>
  <changelog author="Pascal Bleser &lt;pascal.bleser@opensuse.org&gt; 0.5.3" date="1241179200">- update to 0.5.3</changelog>
</package>
<package pkgid="82e64a7bdd2a8ff15aa9d45f7cd2647785b863ff220779651061e7c50abc48c2" name="pst2mbox-debugsource" arch="x86_64">
  <version epoch="0" ver="0.5.3" rel="2.1"/>
  <changelog author="Pascal Bleser &lt;guru@unixtech.be&gt; 0.3.4" date="1217851200">- new package</changelog>
  <changelog author="Pascal Bleser &lt;pascal.bleser@opensuse.org&gt; 0.5.3" date="1241179200">- update to 0.5.3</changelog>
</package>
<package pkgid="2453c234f6c047a81c9a79fd1b11cc30e3d9358d15cf7ef0dad84bbbf2e62d5e" name="python-IPy" arch="src">
  <version epoch="0" ver="0.52" rel="2.1"/>
  <changelog author="mrueckert@suse.de" date="1164196800">- initial package</changelog>
</package>
<package pkgid="73e7ea42962bd2cc333229317eea670ecbcddd8c229181972875ae6fd60c929d" name="python-IPy" arch="x86_64">
  <version epoch="0" ver="0.52" rel="2.1"/>
  <changelog author="mrueckert@suse.de" date="1164196800">- initial package</changelog>
</package>
<package pkgid="1720c3270cc63715cb45b043dde742b43ee2f951e1690c785d50e0504821469b" name="python-policyd-spf" arch="noarch">
  <version epoch="0" ver="1.3.2" rel="2.1"/>
  <changelog author="gerberb@zenez.com" date="1218801600">- Updated to version 0.7.1:
  + Fix default log level in policyd-spf.conf.commented to match
    default
  + Update configuration recommendations in policyd-spf.1</changelog>
  <changelog author="gerberb@zenez.com" date="1333368000">- Add SuSE specific spec file changes
- Updated to version 1.0:
  + Fixed missing authentication results headers for no
    authentication performed cases (when authres is enabled)
  + Fixed ambiguous config file warning in per user processing
  + Make functions private (leading underscore)
  + Fixed erroneous use of syslog.LOG_ERR in per user processing
- License changed from GPL 2 to Apache 2.0
- Changes from version 0.9:
  + Add support for optionally generating RFC 5451 authentication
    results headers
  + Add new Header_Type configuration option to support generating
    RFC 4408 Received-SPF and/or RFC 5451 Authentication-Results
    headers (default is Received-SPF)
  + Changed license from GPL version 2 to Apache 2.0 with
    agreement from all copyright holders
  + Log message to the error facility for all OSErrors
  + Instead of crashing if per user configuration is missing,
    continue with global configuration
  + Use openspf.net instead of openspf.org for Why text in
    reject/defer messages due to extended openspf.org downtime
  + Fix install location of standard config file when installed
    with distutils
  + Fix example syntax in policyd-spf.peruser.5
  + Update and clarify inconsistencies in policyd-spf.conf.5
- Changes from version 0.8.1:
  + Prepend headers even when defaultSeedOnly = 0 (now does what's
    documented)
  + Fix typos in policyd-spf.conf(5)
- Changes from version 0.8:
  + Add Domain_Whitelist_PTR to allow whitelisting from SPF tests
    based on rDNS PTR match (patch from Colin Stewart
    &lt;colin@owlfish.com&gt;)
  + Only check Domain_Whitelist if it actually exists in the
    configuration
  + Add No_Mail option to allow for only rejecting from
    hosts/domains that send no mail ("v=spf1 -all")
  + Add ability to provide per user (per recipient) settings
  + Fixed a bug so that skipping SPF checks due to localhost or
    any whitelist settings does not prepend multiple headers per
    message for multi recipient messages
  + Fixed a bug so that non-reject HELO results are correctly
    used when Mail From checks are disabled (No_Check)
  + Clean up unused code in policydspfsupp.py
- Changes from version 0.7.3:
  + No longer require Python 2.5 (Thanks to Matthew Munsey
    &lt;openspf@msm.unending.org&gt;)
  + Update copyright for new year
  + Update for new project location
  + Clean up imports (PEP-8 style, remove redundancy, removed
    unused)
  + Remove deprecated licence distribution option from setup.py
- Changes from version 0.7.2:
  + Require at least Python 2.5
  + Fix to not crash on invalid senders that lack a domain part
  + Remove unused imports of deprecated popen2 module</changelog>
  <changelog author="opensuse@mirell.de" date="1446897600">- Update to version 1.3.2:
  + Fix python3 incompatibility in cases where HELO name is
    somehow missing (LP: #1184102)
  + Updated README to mention the minimum ipaddr version,
    if needed, is 2.1.10 (LP: #1229862)
  + Fix up header caching (LP: #1422325)
  + Fix and refactor for simplicity detection of Authserv_Id
    missing from configuration (LP: #1484239)
  + Add try/except around SPF record queries of No_Mail option to
    avoid errors on bogus TXT records
- Changes from version 1.3.1:
  + Fix case where, when run with python3 the policy server would
    choke on email addresses that contained non-ascii characters
    (LP: #1325579)
- Changes from version 1.3:
  + Updates related to the new SPF RFC, RFC 7208
  - Added new config option, Lookup_Time, to adjust SPF record
    timeout limit (default 20 seconds per RFC 7208)
    Requires at least pyspf 2.0.7
  - Added new config option, Void_Limit, to enable the new void
    lookup limit instroduced in RFC 7208 to be adjusted -
    Default is 2 as recommended in RFC 7208, section 4.6.4.
    Has no effect on pyspf before 2.0.9.
  - Updated documentation to refer to RFC 7208 (and RFC 7001 for
    authentication results)
  - Updated descriptions in documentation to describe spec
    compliance relative to RFC 7208 instead of RFC 4408
  + Guard against crashes when forming header field contents if
    the receiver is somehow missing
- Changes from version 1.2:
  + Added external dependency on ipaddr module for python versions
    &lt; 3.3
  + Fix PTR whitelist to work with IPv6 connections (patch from
    Frank Hunszinger) - LP: #1179266
  + Replace custom code with use of ipaddr/ipaddress to perform
    CIDR matching
  + CIDR network definitions are now more limited to correct
    networks
  - Double slashes are no longer allowed
  - Updated defaults and documentation for skip_addresses to
    match
- Changes from version 1.1.2 (2013-05-10 1:
    Brown paper bag release
  + Add MANIFEST.in and rename in setup.py to make package
    compatible with using sdist (fixes missing files in 1.1.1)
- Changes from version 1.1.1 (2013-05-10 1:
  + Fixed documentation to be more compatible with running with
    Python3.
- Changes from version 1.1 (2012-07-21 2:
  + Ported to Python 3. Tested on python3.2, python2.7, and
    python2.6. Versions previous to python2.6 will not work.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1462190400">- add python-authres as recommended package</changelog>
</package>
<package pkgid="11ae93dfd4d7a3ab6c0e6187c51cbf08fbaf9cfed095d8d1a64fc4250f1977a7" name="python-policyd-spf" arch="src">
  <version epoch="0" ver="1.3.2" rel="2.1"/>
  <changelog author="gerberb@zenez.com" date="1218801600">- Updated to version 0.7.1:
  + Fix default log level in policyd-spf.conf.commented to match
    default
  + Update configuration recommendations in policyd-spf.1</changelog>
  <changelog author="gerberb@zenez.com" date="1333368000">- Add SuSE specific spec file changes
- Updated to version 1.0:
  + Fixed missing authentication results headers for no
    authentication performed cases (when authres is enabled)
  + Fixed ambiguous config file warning in per user processing
  + Make functions private (leading underscore)
  + Fixed erroneous use of syslog.LOG_ERR in per user processing
- License changed from GPL 2 to Apache 2.0
- Changes from version 0.9:
  + Add support for optionally generating RFC 5451 authentication
    results headers
  + Add new Header_Type configuration option to support generating
    RFC 4408 Received-SPF and/or RFC 5451 Authentication-Results
    headers (default is Received-SPF)
  + Changed license from GPL version 2 to Apache 2.0 with
    agreement from all copyright holders
  + Log message to the error facility for all OSErrors
  + Instead of crashing if per user configuration is missing,
    continue with global configuration
  + Use openspf.net instead of openspf.org for Why text in
    reject/defer messages due to extended openspf.org downtime
  + Fix install location of standard config file when installed
    with distutils
  + Fix example syntax in policyd-spf.peruser.5
  + Update and clarify inconsistencies in policyd-spf.conf.5
- Changes from version 0.8.1:
  + Prepend headers even when defaultSeedOnly = 0 (now does what's
    documented)
  + Fix typos in policyd-spf.conf(5)
- Changes from version 0.8:
  + Add Domain_Whitelist_PTR to allow whitelisting from SPF tests
    based on rDNS PTR match (patch from Colin Stewart
    &lt;colin@owlfish.com&gt;)
  + Only check Domain_Whitelist if it actually exists in the
    configuration
  + Add No_Mail option to allow for only rejecting from
    hosts/domains that send no mail ("v=spf1 -all")
  + Add ability to provide per user (per recipient) settings
  + Fixed a bug so that skipping SPF checks due to localhost or
    any whitelist settings does not prepend multiple headers per
    message for multi recipient messages
  + Fixed a bug so that non-reject HELO results are correctly
    used when Mail From checks are disabled (No_Check)
  + Clean up unused code in policydspfsupp.py
- Changes from version 0.7.3:
  + No longer require Python 2.5 (Thanks to Matthew Munsey
    &lt;openspf@msm.unending.org&gt;)
  + Update copyright for new year
  + Update for new project location
  + Clean up imports (PEP-8 style, remove redundancy, removed
    unused)
  + Remove deprecated licence distribution option from setup.py
- Changes from version 0.7.2:
  + Require at least Python 2.5
  + Fix to not crash on invalid senders that lack a domain part
  + Remove unused imports of deprecated popen2 module</changelog>
  <changelog author="opensuse@mirell.de" date="1446897600">- Update to version 1.3.2:
  + Fix python3 incompatibility in cases where HELO name is
    somehow missing (LP: #1184102)
  + Updated README to mention the minimum ipaddr version,
    if needed, is 2.1.10 (LP: #1229862)
  + Fix up header caching (LP: #1422325)
  + Fix and refactor for simplicity detection of Authserv_Id
    missing from configuration (LP: #1484239)
  + Add try/except around SPF record queries of No_Mail option to
    avoid errors on bogus TXT records
- Changes from version 1.3.1:
  + Fix case where, when run with python3 the policy server would
    choke on email addresses that contained non-ascii characters
    (LP: #1325579)
- Changes from version 1.3:
  + Updates related to the new SPF RFC, RFC 7208
  - Added new config option, Lookup_Time, to adjust SPF record
    timeout limit (default 20 seconds per RFC 7208)
    Requires at least pyspf 2.0.7
  - Added new config option, Void_Limit, to enable the new void
    lookup limit instroduced in RFC 7208 to be adjusted -
    Default is 2 as recommended in RFC 7208, section 4.6.4.
    Has no effect on pyspf before 2.0.9.
  - Updated documentation to refer to RFC 7208 (and RFC 7001 for
    authentication results)
  - Updated descriptions in documentation to describe spec
    compliance relative to RFC 7208 instead of RFC 4408
  + Guard against crashes when forming header field contents if
    the receiver is somehow missing
- Changes from version 1.2:
  + Added external dependency on ipaddr module for python versions
    &lt; 3.3
  + Fix PTR whitelist to work with IPv6 connections (patch from
    Frank Hunszinger) - LP: #1179266
  + Replace custom code with use of ipaddr/ipaddress to perform
    CIDR matching
  + CIDR network definitions are now more limited to correct
    networks
  - Double slashes are no longer allowed
  - Updated defaults and documentation for skip_addresses to
    match
- Changes from version 1.1.2 (2013-05-10 1:
    Brown paper bag release
  + Add MANIFEST.in and rename in setup.py to make package
    compatible with using sdist (fixes missing files in 1.1.1)
- Changes from version 1.1.1 (2013-05-10 1:
  + Fixed documentation to be more compatible with running with
    Python3.
- Changes from version 1.1 (2012-07-21 2:
  + Ported to Python 3. Tested on python3.2, python2.7, and
    python2.6. Versions previous to python2.6 will not work.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1462190400">- add python-authres as recommended package</changelog>
</package>
<package pkgid="8e763f28e453cb90c7c8b3c340b8d892b1f7f70538ff9e422db615fab7693a5a" name="python-pydns" arch="src">
  <version epoch="0" ver="2.3.6" rel="2.1"/>
  <changelog author="gerberb@zenez.com" date="1218801600">- Initial package of version 2.3.3
- added -pydns-2.3.3</changelog>
</package>
<package pkgid="bdbe687c4a5324f85406ee0407789b515fce90521c4b078f762ae6e9a70e818f" name="python-pydns" arch="x86_64">
  <version epoch="0" ver="2.3.6" rel="2.1"/>
  <changelog author="gerberb@zenez.com" date="1218801600">- Initial package of version 2.3.3
- added -pydns-2.3.3</changelog>
</package>
<package pkgid="a1c078810412fdef5747ad040de801c07806a0dbb7552b2bd2552ea6bf894283" name="python-pyspf" arch="noarch">
  <version epoch="0" ver="2.0.12" rel="1.1"/>
  <changelog author="gerberb@zenez.com" date="1333281600">- Update to version 2.0.7:
  + Allow for timeouts to be global for all DNS lookups instead of
    per DNS lookup to allow for MAY processing time limits in
    RFC 4408 10.1. See README for details.
  + Use openspf.net for SPF web site instead of openspf.org
  + Extend query.get_header to return either Received-SPF (still
    default) or RFC 5451 Authentication Results headers (needs
    authres 0.3 or later)
  + Rework query.parse_header:
  - Make query.parse_header automatically select Received-DPF or
    Authentication Results header types and use them to collect
    SPF results from trusted relays
  - Add query.parse_header_spf and query.parse_header_ar
    functions for header type specific processing
  + Finish Python3 port - works with python2.6/2.7/3.2 and 2to3 is
    no longer required - will also work with newer py3dns where
    TXT records are returned as type bytes and not strings
  + Accounts for new py3dns error classes coming in py3dns 3.0.2
    (but fully backward compatible with earlier versions)
  + check for 7-bit ascii on TXT and SPF records
  + fix CNAME chain duplicating TXT records</changelog>
  <changelog author="opensuse@mirell.de" date="1446897600">- Update to version 2.0.12:
  + Reset void_lookups at top of check()
  + Ignore permerror for best_guess()
  + Don't crash on null DNS TXT record (ignore): test case
    null-text
  + Trailing spaces are allowed by 4.5/2: test case trailing-space
  + Make CNAME loop result in unknown host: test case
    ptr-cname-loop
  + Test case and fix for mixed case CNAME loop, test case
    ptr-cname-loop
- Changes from version 2.0.11:
  + Fix another bug in SPF record parsing that caused records with
    terms separated by multple spaces as invalid, but they are
    fine per the ABNF
  + Downcase names in additional answers returned by DNS before
    adding to cache, since case inconsistency can cause PTR match
    failures (initial patch thanks to Joni Fieggen) and other
    problems.
- Changes from version 2.0.10:
  + Fix bug in SPF record parsing that caused all 'whitespace'
    characters to be considered valid term separators and not just
    spaces
  + Fixed multiple bugs in temperror processing that would lead to
    tracebacks instead of correct error processing
  + Fix AAAA not flagged as bytes when strict=2
  + Include '~' as safe char in url quoted macro expansion
- Changes from version 2.0.9:
  + Update for new SPF standards track RFC 7208
  - Add processing for new void lookups processing limit
  - Default SPF process timeout limit to 20 seconds per RFC 7208
    4.6.4
  - Change default DNS timeout to 20 seconds in DNSLookup to
    better match RFC 7208 4.6.4
  - Make mx lookups &gt; 10 a permerror per RFC 7208 and mx-limit
    test
  - Add RFC 7208 specific test suite and make allowance for
    RFC 7208 changes in RFC 4408 test suite
  - Convert YAML tests to TestCases, and have testspf.py return
    success/fail.
- Changes from version 2.0.8:
  + Use ipaddr/ipaddres module in place of custom IP processing
    code
  + Numerous python3 compatibility fixes
  + Improved unicode error detection in SPF records
  + Fixed a bug caused by a null CNAME in cache</changelog>
</package>
<package pkgid="4e2e21ce34a92220bb8b1f1a51f8e087045bebc73eecc18f76243b4b0b130d59" name="python-pyspf" arch="src">
  <version epoch="0" ver="2.0.12" rel="1.1"/>
  <changelog author="gerberb@zenez.com" date="1333281600">- Update to version 2.0.7:
  + Allow for timeouts to be global for all DNS lookups instead of
    per DNS lookup to allow for MAY processing time limits in
    RFC 4408 10.1. See README for details.
  + Use openspf.net for SPF web site instead of openspf.org
  + Extend query.get_header to return either Received-SPF (still
    default) or RFC 5451 Authentication Results headers (needs
    authres 0.3 or later)
  + Rework query.parse_header:
  - Make query.parse_header automatically select Received-DPF or
    Authentication Results header types and use them to collect
    SPF results from trusted relays
  - Add query.parse_header_spf and query.parse_header_ar
    functions for header type specific processing
  + Finish Python3 port - works with python2.6/2.7/3.2 and 2to3 is
    no longer required - will also work with newer py3dns where
    TXT records are returned as type bytes and not strings
  + Accounts for new py3dns error classes coming in py3dns 3.0.2
    (but fully backward compatible with earlier versions)
  + check for 7-bit ascii on TXT and SPF records
  + fix CNAME chain duplicating TXT records</changelog>
  <changelog author="opensuse@mirell.de" date="1446897600">- Update to version 2.0.12:
  + Reset void_lookups at top of check()
  + Ignore permerror for best_guess()
  + Don't crash on null DNS TXT record (ignore): test case
    null-text
  + Trailing spaces are allowed by 4.5/2: test case trailing-space
  + Make CNAME loop result in unknown host: test case
    ptr-cname-loop
  + Test case and fix for mixed case CNAME loop, test case
    ptr-cname-loop
- Changes from version 2.0.11:
  + Fix another bug in SPF record parsing that caused records with
    terms separated by multple spaces as invalid, but they are
    fine per the ABNF
  + Downcase names in additional answers returned by DNS before
    adding to cache, since case inconsistency can cause PTR match
    failures (initial patch thanks to Joni Fieggen) and other
    problems.
- Changes from version 2.0.10:
  + Fix bug in SPF record parsing that caused all 'whitespace'
    characters to be considered valid term separators and not just
    spaces
  + Fixed multiple bugs in temperror processing that would lead to
    tracebacks instead of correct error processing
  + Fix AAAA not flagged as bytes when strict=2
  + Include '~' as safe char in url quoted macro expansion
- Changes from version 2.0.9:
  + Update for new SPF standards track RFC 7208
  - Add processing for new void lookups processing limit
  - Default SPF process timeout limit to 20 seconds per RFC 7208
    4.6.4
  - Change default DNS timeout to 20 seconds in DNSLookup to
    better match RFC 7208 4.6.4
  - Make mx lookups &gt; 10 a permerror per RFC 7208 and mx-limit
    test
  - Add RFC 7208 specific test suite and make allowance for
    RFC 7208 changes in RFC 4408 test suite
  - Convert YAML tests to TestCases, and have testspf.py return
    success/fail.
- Changes from version 2.0.8:
  + Use ipaddr/ipaddres module in place of custom IP processing
    code
  + Numerous python3 compatibility fixes
  + Improved unicode error detection in SPF records
  + Fixed a bug caused by a null CNAME in cache</changelog>
</package>
<package pkgid="c825c313ae58dc66f8423a15a127373aebf894d157597dc122079cdeb195bbb1" name="pyzor" arch="noarch">
  <version epoch="0" ver="0.5.0" rel="2.1"/>
  <changelog author="suse-tux@gmx.de" date="1136116800">- initial build</changelog>
  <changelog author="petr.uzel@suse.cz" date="1234612800">- fix build on openSUSE &gt;= 11.1
  Mi Mär 28 00:00:00 CEST 2007 - suse-tux@gmx.de
- removed %%define %%_prefix line at the beginning</changelog>
  <changelog author="chris@computersalat.de" date="1273060800">- cleanup spec
  o added Header
  o changelog to changes file
  Mi Mär 17 00:00:00 CET 2010 - opensuse@dstoecker.de
- update: 0.5.0</changelog>
</package>
<package pkgid="281f8eaa6ac1fa0e460c64932b815aae7936a91af9d68fe1096a88aaa24e008a" name="pyzor" arch="src">
  <version epoch="0" ver="0.5.0" rel="2.1"/>
  <changelog author="suse-tux@gmx.de" date="1136116800">- initial build</changelog>
  <changelog author="petr.uzel@suse.cz" date="1234612800">- fix build on openSUSE &gt;= 11.1
  Mi Mär 28 00:00:00 CEST 2007 - suse-tux@gmx.de
- removed %%define %%_prefix line at the beginning</changelog>
  <changelog author="chris@computersalat.de" date="1273060800">- cleanup spec
  o added Header
  o changelog to changes file
  Mi Mär 17 00:00:00 CET 2010 - opensuse@dstoecker.de
- update: 0.5.0</changelog>
</package>
<package pkgid="ac3fa29be2cd615a8b52e4357108d4a5005e7275dac6b9692c1cf54e059ed5c6" name="ragel" arch="src">
  <version epoch="0" ver="6.9" rel="5.4.1"/>
  <changelog author="jengelh@inai.de" date="1353067200">- Initial package (version 6.7) for build.opensuse.org</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 6.9
  * updated command-line synopsis
  * ocaml: fix missing semicolon
  * ocaml: support -G1
  * ocaml: choose a unique name for type state
  * ruby: reduce the amount of calls to GET_WIDE_KEY()
  * union test case: warning fix
  * omit line directives around expression-oriented write statements
  * use AS_IF and test command to check if the DIST file is present
  * added missing std:: using
  * go: added '//line' directive support
- Add gpg signature and project keyring fof gpg verification
- Remove 0001-explicit-methods-inherited-from-base-templates.patch;
  merged on upstream release</changelog>
  <changelog author="asn@cryptomilk.org" date="1489838400">- Fix building with gcc6</changelog>
</package>
<package pkgid="9ded932347fe4d84ed32a15d8587585681df8bfd28e66f86f1693e785af2c234" name="ragel" arch="x86_64">
  <version epoch="0" ver="6.9" rel="5.4.1"/>
  <changelog author="jengelh@inai.de" date="1353067200">- Initial package (version 6.7) for build.opensuse.org</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 6.9
  * updated command-line synopsis
  * ocaml: fix missing semicolon
  * ocaml: support -G1
  * ocaml: choose a unique name for type state
  * ruby: reduce the amount of calls to GET_WIDE_KEY()
  * union test case: warning fix
  * omit line directives around expression-oriented write statements
  * use AS_IF and test command to check if the DIST file is present
  * added missing std:: using
  * go: added '//line' directive support
- Add gpg signature and project keyring fof gpg verification
- Remove 0001-explicit-methods-inherited-from-base-templates.patch;
  merged on upstream release</changelog>
  <changelog author="asn@cryptomilk.org" date="1489838400">- Fix building with gcc6</changelog>
</package>
<package pkgid="bb3c768fd87edd9e82cda7d5620e2fc768f236ccec9dbd339d8c775840729e7e" name="ragel-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.9" rel="5.4.1"/>
  <changelog author="jengelh@inai.de" date="1353067200">- Initial package (version 6.7) for build.opensuse.org</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 6.9
  * updated command-line synopsis
  * ocaml: fix missing semicolon
  * ocaml: support -G1
  * ocaml: choose a unique name for type state
  * ruby: reduce the amount of calls to GET_WIDE_KEY()
  * union test case: warning fix
  * omit line directives around expression-oriented write statements
  * use AS_IF and test command to check if the DIST file is present
  * added missing std:: using
  * go: added '//line' directive support
- Add gpg signature and project keyring fof gpg verification
- Remove 0001-explicit-methods-inherited-from-base-templates.patch;
  merged on upstream release</changelog>
  <changelog author="asn@cryptomilk.org" date="1489838400">- Fix building with gcc6</changelog>
</package>
<package pkgid="f54aeb465fbe909bbf0e7a59c34eac6df2635094796e11af3bc236a43854ab11" name="ragel-debugsource" arch="x86_64">
  <version epoch="0" ver="6.9" rel="5.4.1"/>
  <changelog author="jengelh@inai.de" date="1353067200">- Initial package (version 6.7) for build.opensuse.org</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 6.9
  * updated command-line synopsis
  * ocaml: fix missing semicolon
  * ocaml: support -G1
  * ocaml: choose a unique name for type state
  * ruby: reduce the amount of calls to GET_WIDE_KEY()
  * union test case: warning fix
  * omit line directives around expression-oriented write statements
  * use AS_IF and test command to check if the DIST file is present
  * added missing std:: using
  * go: added '//line' directive support
- Add gpg signature and project keyring fof gpg verification
- Remove 0001-explicit-methods-inherited-from-base-templates.patch;
  merged on upstream release</changelog>
  <changelog author="asn@cryptomilk.org" date="1489838400">- Fix building with gcc6</changelog>
</package>
<package pkgid="01e6d0150b52c581f40130b0abf0f3ff113df73aedad6db973c3d37abd8f2001" name="ripmime" arch="src">
  <version epoch="0" ver="1.4.0.10" rel="1.1"/>
  <changelog author="espinoza@forcenetworks.com" date="1136030400">- Initial Package</changelog>
  <changelog author="alexandre@exatati.com.br" date="1199102400">- Spec file revised.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1199102401">- Spec file revised again.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1230724800">- Updated to V. 1.4.0.9.</changelog>
  <changelog author="petr.uzel@suse.cz" date="1230724801">- do not strip the binary</changelog>
  <changelog author="alexandre@exatati.com.br" date="1272283200">- Fixed Group tag on spec file;
- Generated changes file and removed changelog section from spec file;
- Spec file cleaned with spec-cleaner.
  Sáb Jan 24 00:00:00 BRST 2009 - alexandre@exatati.com.br
- Spec file cleanup.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1421928000">- Updated to release 1.4.0.10
  * Added iconv output support via -x&lt;set&gt; thanks to ?????????? ????????
  * Fixed many compile errors that have come up with newer gcc versions
  * Fixed an incorrectly matched size/var pairing in MIME_headers.c thanks
    to David Binderman, Gary Petersen, Dag Andersen and Tullio Andreatta
- Removed former upstream patch
- Revised License and provides/obsoletes section</changelog>
</package>
<package pkgid="34ae4aae91263c18e3f9fdadff15ce3c233842c018ba3dcab17957e56064b00d" name="ripmime" arch="x86_64">
  <version epoch="0" ver="1.4.0.10" rel="1.1"/>
  <changelog author="espinoza@forcenetworks.com" date="1136030400">- Initial Package</changelog>
  <changelog author="alexandre@exatati.com.br" date="1199102400">- Spec file revised.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1199102401">- Spec file revised again.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1230724800">- Updated to V. 1.4.0.9.</changelog>
  <changelog author="petr.uzel@suse.cz" date="1230724801">- do not strip the binary</changelog>
  <changelog author="alexandre@exatati.com.br" date="1272283200">- Fixed Group tag on spec file;
- Generated changes file and removed changelog section from spec file;
- Spec file cleaned with spec-cleaner.
  Sáb Jan 24 00:00:00 BRST 2009 - alexandre@exatati.com.br
- Spec file cleanup.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1421928000">- Updated to release 1.4.0.10
  * Added iconv output support via -x&lt;set&gt; thanks to ?????????? ????????
  * Fixed many compile errors that have come up with newer gcc versions
  * Fixed an incorrectly matched size/var pairing in MIME_headers.c thanks
    to David Binderman, Gary Petersen, Dag Andersen and Tullio Andreatta
- Removed former upstream patch
- Revised License and provides/obsoletes section</changelog>
</package>
<package pkgid="2b24225b5f9f5c60d4f61739733de623e1ad46d7a9ded89459af8a08a92095f4" name="ripmime-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.0.10" rel="1.1"/>
  <changelog author="espinoza@forcenetworks.com" date="1136030400">- Initial Package</changelog>
  <changelog author="alexandre@exatati.com.br" date="1199102400">- Spec file revised.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1199102401">- Spec file revised again.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1230724800">- Updated to V. 1.4.0.9.</changelog>
  <changelog author="petr.uzel@suse.cz" date="1230724801">- do not strip the binary</changelog>
  <changelog author="alexandre@exatati.com.br" date="1272283200">- Fixed Group tag on spec file;
- Generated changes file and removed changelog section from spec file;
- Spec file cleaned with spec-cleaner.
  Sáb Jan 24 00:00:00 BRST 2009 - alexandre@exatati.com.br
- Spec file cleanup.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1421928000">- Updated to release 1.4.0.10
  * Added iconv output support via -x&lt;set&gt; thanks to ?????????? ????????
  * Fixed many compile errors that have come up with newer gcc versions
  * Fixed an incorrectly matched size/var pairing in MIME_headers.c thanks
    to David Binderman, Gary Petersen, Dag Andersen and Tullio Andreatta
- Removed former upstream patch
- Revised License and provides/obsoletes section</changelog>
</package>
<package pkgid="f65b85510a8e6b817ae4921b58b9bb591c2f60e8624d923ad94292566ad3e511" name="ripmime-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.0.10" rel="1.1"/>
  <changelog author="espinoza@forcenetworks.com" date="1136030400">- Initial Package</changelog>
  <changelog author="alexandre@exatati.com.br" date="1199102400">- Spec file revised.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1199102401">- Spec file revised again.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1230724800">- Updated to V. 1.4.0.9.</changelog>
  <changelog author="petr.uzel@suse.cz" date="1230724801">- do not strip the binary</changelog>
  <changelog author="alexandre@exatati.com.br" date="1272283200">- Fixed Group tag on spec file;
- Generated changes file and removed changelog section from spec file;
- Spec file cleaned with spec-cleaner.
  Sáb Jan 24 00:00:00 BRST 2009 - alexandre@exatati.com.br
- Spec file cleanup.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1421928000">- Updated to release 1.4.0.10
  * Added iconv output support via -x&lt;set&gt; thanks to ?????????? ????????
  * Fixed many compile errors that have come up with newer gcc versions
  * Fixed an incorrectly matched size/var pairing in MIME_headers.c thanks
    to David Binderman, Gary Petersen, Dag Andersen and Tullio Andreatta
- Removed former upstream patch
- Revised License and provides/obsoletes section</changelog>
</package>
<package pkgid="d116639be01b321f1a4f73197d6c607bc04dc8724d6d92e435f12331ba0cf94c" name="rmail" arch="x86_64">
  <version epoch="0" ver="8.15.2" rel="232.2"/>
  <changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
  <changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
  <changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
  <changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
  <changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
  <changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
  <changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
  <changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
  <changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
  <changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
  <changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
  <changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
  <changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
  <changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
  <changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
  <changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>
</package>
<package pkgid="6583301b8aba7ca49384fe1b5c95d4bac912805a1437b9a79db24048192319c1" name="rmail-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.15.2" rel="232.2"/>
  <changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
  <changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
  <changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
  <changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
  <changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
  <changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
  <changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
  <changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
  <changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
  <changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
  <changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
  <changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
  <changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
  <changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
  <changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
  <changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>
</package>
<package pkgid="18b18d99160a70cc37c24d823637e8d4cb03f844d81d02aa3f1f802497dcccea" name="sendmail" arch="src">
  <version epoch="0" ver="8.15.2" rel="232.2"/>
  <changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
  <changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
  <changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
  <changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
  <changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
  <changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
  <changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
  <changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
  <changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
  <changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
  <changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
  <changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
  <changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
  <changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
  <changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
  <changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>
</package>
<package pkgid="12540080dfb47e88095636d3ae737539072e31992a90afbbc7d37cbd500a863d" name="sendmail" arch="x86_64">
  <version epoch="0" ver="8.15.2" rel="232.2"/>
  <changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
  <changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
  <changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
  <changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
  <changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
  <changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
  <changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
  <changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
  <changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
  <changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
  <changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
  <changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
  <changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
  <changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
  <changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
  <changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>
</package>
<package pkgid="085560b02ece35e247c165e90c9d89acb4a40339df08f47d38a46181b78aa5b3" name="sendmail-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.15.2" rel="232.2"/>
  <changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
  <changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
  <changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
  <changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
  <changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
  <changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
  <changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
  <changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
  <changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
  <changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
  <changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
  <changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
  <changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
  <changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
  <changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
  <changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>
</package>
<package pkgid="121cdb79cd5dd33dc53342320f85942d3f82a0b4f41d00a41fb079a908db73b1" name="sendmail-debugsource" arch="x86_64">
  <version epoch="0" ver="8.15.2" rel="232.2"/>
  <changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
  <changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
  <changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
  <changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
  <changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
  <changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
  <changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
  <changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
  <changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
  <changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
  <changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
  <changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
  <changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
  <changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
  <changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
  <changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>
</package>
<package pkgid="3104da6236f41c97d51aeb9cb9f736c38ee016619294e41e7b92933b7d867b8b" name="sendmail-devel" arch="x86_64">
  <version epoch="0" ver="8.15.2" rel="232.2"/>
  <changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
  <changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
  <changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
  <changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
  <changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
  <changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
  <changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
  <changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
  <changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
  <changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
  <changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
  <changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
  <changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
  <changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
  <changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
  <changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>
</package>
<package pkgid="99a5d79b02c1e69422bea86f9376cf23d11f1b4bc69709ca6779a1046574e3bd" name="sendmail-starttls" arch="noarch">
  <version epoch="0" ver="8.15.2" rel="232.2"/>
  <changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
  <changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
  <changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
  <changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
  <changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
  <changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
  <changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
  <changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
  <changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
  <changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
  <changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
  <changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
  <changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
  <changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
  <changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
  <changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
  <changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>
</package>
<package pkgid="688a8e4be62be7d69df66148c053ab9eedd8373d6704685b48df701af1d136df" name="sendmailanalyzer" arch="noarch">
  <version epoch="0" ver="9.2" rel="2.1"/>
  <changelog author="projects@localside.net" date="1313150400">- Initial release version 8.0</changelog>
  <changelog author="projects@localside.net" date="1348488000">- This is a bug fix release, with the addition of the SIGHUP signal handler to allow
  a full restart of sendmailanalyzer forcing it to reread configuration and reopen the
  log file.
  - Add signal handler to SIGHUP to allow a full restart of sendmailanalyzer
  to force reread configuration file and reopen the pipe to the log file.
  Suggested by Vicky Brown.
  - Allow character @ in secure_param() to allow syslog-ng remote host
  syntax - Reported by Leon van Ofwegen.
  - Add more information on CGI param error returned by secure_param().
  - Add logrotate example to restart sendmailanalyzer in main documentation.
  Reported by Vicki Brown.
  - Fix a bug in Top Authid where number was always 1. Reported by Dan Szkola
- UPGRADE: you'd better reinstall all files after saving your configuration. Unless
  you just want to copy sendmailanalyzer and sa_report.cgi that are the only files
  that have changed as well as the documentation.</changelog>
  <changelog author="projects@localside.net" date="1356523200">-  This is a bugs fix release with better signal handling and spam logs detection.
  - Fix spam report with spamd and add spamd to the SPAM_TOOLS configuration directive. Thanks to Bill V for the report.
  - Update documentation about start script and signal handling.
  - Add new starter file for distribution using systemd at init and a README file to explain how to install those scripts.
    Thanks to Durwin for the report.
  - Fix typo in regex pattern of spamd lines detection. Thanks to Bill V for the report.
  - Fix removing of pid file which in some case was not removed.
  - Fix signal handler on SIGTERM.
  - sendmailanalyzer.conf will now be installed as sendmailanalyzer.conf.orig.
  - Fix issue in spam message detection. Thanks to Stefan Berger for the report.
  - Fix case where recipient was not collected on postfix servers because the
    Sent status in in lower case. Thanks to Kalpesh Patel for the report.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1357128000">- Update to 8.6:
  + Fix details search of top sender and status in top rejected stats.
    Thanks to Arthur Gouros for the report.
  + Add SKIP_RCPT_RELAY configuration directive to bypass local delivery
    messages that double the count of messages. Default is dovecot.
    Thanks to Richard Victor Correia for the report.
  + Change install to copy sendmailanalyzer.conf.sample into the doc/
    directory and copy sendmailanalyzer.conf into etc/ if none already
    exist. Thanks to Igor Vuk for the report.
  + Fix search of rejected message on domain. Thanks to Arthur Gouros
    for the report.
  + Fix virus name storage with spamd-milter quarantine detection.
    Thanks to Bill V for the report.
  + Change menu "Rejection &amp; Errors" into "Rejection and Events".
  + Fix missing system message when it was registered at same time than
    a previous one.
  + Reorder command line option, short before long.
  + Fix top authid with anonymous TLS SMTP auth.
  + Add support to syslog high resolution timestamp. Thanks to Richard
    Victor Correia for the report.
  + Replace .orig extension into .sample.
  + Add anonymous TLS connection established into auth report instead,
    of errors/events report. Thanks to Arthur Gouros for the suggestion.
  + Fix top domain name search in top rejected view. Thanks to Arthur
    Gouros for the report.
  + Change in .spec file to reflect the config file renaming. Thanks to
    ivuk fro the patch.
  + Add missing spamd historical report in sa_cache. Thanks to Bill V
    for the report.
- split out www subpackage including needed dependencies for apache
- specfile cleanup
- added systemd service files
- added apache configuration
- added manpage for sa_cache and README.SuSE</changelog>
  <changelog author="wr@rosenauer.org" date="1360238400">- Update to 8.7:
  + Fix major bug with new year change when LAST_PARSED has a last line
    parsed from December. Thanks to Richard Victor Correia for the report.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1394971200">- Update to 9.0:
  + This is a major release with lot of major enhancements and a full
    year of bug fixes. There is a complete remove of dependency to
    libgd and GD::Graph* Perl modules, graphs are now drawn using the
    flotr2 javascript library. It adds support to ipv6 addresses, a
    new week view in the calendar menu. It also restores reports on
    postgrey and adds support to policyd-weight, sqlgrey and maiad
    plugins.
    A new directive EXCLUDE_TO to be able to exclude some destination
    addresses from reports and new Brazilian Portuguese translation.
  + UPGRADE: You need to reinstall all file and rebuild your
    configuration file from the new default configuration file. Data
    files may not need to be remove, backward compatibility should
    be preserved.
- removed dependencies to perl(GD*) modules
- use upper case README.SUSE filename
- do not use 'restart': use 'try-restart' in logrotate instead</changelog>
  <changelog author="ecsos@opensuse.org" date="1430049600">- Update to 9.1
  - Detailed views are now also downloadable as CSV file. Thanks to Tsioritafita
    Rahajanisainana for the feature request.
  - Fix computation of starttls graph. Thanks to MAYER Hans for the report.
  - Allow download of Top senders and recipients in CSV format from a link [csv]
    after the column header. Thanks to Tsioritafita Andre Rolly Rahajanisainana
    for the feature request.
  - Add russian translation. Thanks to sef1976 for the patch.
  - Add --duplicate command line entry to fix a bad Postfix behavior which use
    different MTA id per recipient for a single message. Note that when enabled
    you will not see messages with multiple recipient. Thanks to Olivier Zolli
    for the report.
  - Add STARTLS status report. Thanks to Hans Mayer for the feature request.
  - Fix documentation about MAIL_GW and MAIL_HUB where ip addresses must be
    used instead of DNS name. Thanks to Roger for the report.
  - Fix comment to MAIL_GW and MAIL_HUB where ip addresses must be used instead
    of DNS name. Thanks to Roger for the report.
  - Remove rejected mail from top senders statistics. Thanks to Michal Paulus
    for the report.
  - Add DSN report for postfix log. Thanks to Wolfgang for the feature request.
  - Fix DNSBL entries are missing if the from=&lt;&gt;. Thanks to Olivier Zolli for
    the patch.
  - Update configuration file in debian directory.
  - Add Italian translation file. Thanks to Luca Sasdelli for the patch.
  - Fix unrecognized virus infection log report produced by amavis-new. Thanks
    to Olaf Menzel for the report.
  - Fix case where incoming message was not counted in messaging flow.
  - Fix spamd sendmail parser, some messages was lost. Thanks for Sir Y Dog
    for the report.
  - Remove README.RPM from slackBuild, the file no longer exists. Thanks to
    Syr Y Dog for the report.
  - First work on adding support to Exim log file.
  - Add new configuration directives EXCLUDE_FROM, EXCLUDE_TO and EXCLUDE_RELAY
    to not report emails from the specified list of senders or senders relay.
    Thanks to Dave Wreski for the feature request.
  - Fix rejection Top status with Domain of sender address....
  - Fix Top DSN wrong report count. Unknown senders are marked as unknown.
    Thanks to Paul Cantle for the report.
  - Fix Top DSN details reports. Thanks to Paul Cantle for the report.
  - Fix enhdnsbl rejection, they should be reported as DNSBL spam now. Thanks
    to Piotr Bodnar for the report.
  - Limit Top rejection status to any text before : character.
  - Fix some status cleanup.
  - Add support to milter-limit. Will be shown in Top Rejection &amp; Events report
    with status starting with "has exceeded ...". Thanks to Juan Carlos Sanchez
    for the feature request.
  - Fix missing sender relay when no DNS name was appended in front. Thanks to
    Juan Carlos Sanchez for the report.
  - Exclude authid single message from System messages report.
  - Add aggregating of STARTTLS error.
  - Fix a possible case where Amavis Hits score was not stores.
  - Make systemd happy with sendmailanalyzer.pid file. Thanks to Piotr Bodnar
    for the report.
  - Test log file size before seeking in incremental mode.
  - Accelerate incremental mode by seeking directly to last position of the
    parser in the logfile after last run. It will also auto detect file rotation
    and fall back to the start of the file when the file has changed.
  - Some documentation fixes. Thanks to Igor Vuk for the patch.
  - Add WEEKLY_FREE_SPACE configuration directive to force sa_cache to archive
    or remove data file each weeks instead of default per month. This will help
    saving space on huge MTA.
  - Fix summarization of some status messages.
  - Add error message when the archive command can not be achieved.
  - Add postfix warning into SysErr reports. Thanks to Mathieu Chateau for the
    feature request.
  - Add support to spampd spam detection. Thanks to Thibaut Varene for the
    feature request.
  - Recalculate current time at each line to compare log entry with current date
    to search the year used in the log file.
  - Add information about settings for sendmailanalyzer into systemd service.
    Thanks to fmalfatto for the report.
  - Add ruleset=check_relay with reject=550 5.7.1 to the spam reports. Thanks
    to Ricardson Williams for the report.
  + UPGRADE: You need to reinstall all file and rebuild your
    configuration file from the new default configuration file.
    Data files do not need to be remove, backward compatibility is
    preserved.
- rpmlint: fix incorrect-fsf-address</changelog>
  <changelog author="ecsos@opensuse.org" date="1455019200">- update to 9.2
  - Update de_DE translation file. Thanks to Wolfgang for the patch.
  - Fix wrong ExecStop command. Thanks to fmalfatto for the patch.
  - Add sorttable.js javascript to be able to sort on each column in detailed
    views. Thanks to Siervo Andrey Amado Benavides for the patch.
  - Fix systemd start script
  - Allow yyyy-mm-dd hh:mm:ss in history timestamp for journalctl together
    with iso format: yyyy-mm-ddThh:mm:ss.
  - Prevent redefining --since journalctl option if it is already given in
    JOURNALCTL_CMD or --journalctl.
  - Add documentation about JOURNALCTL configuration directive and the -j or
  - -journalctl command line option.
  - Fix command line option in uppercase and not.
  - Fix wrong status and spam rule for spam rejected by eXpurGate milter.
    Thanks to Tiyma Ahmed for the report.
  - Fix Postfix/Amavis discarded spam and virus that appears with status sent.
    Thanks to Miquel Angel Daniel Veny for the report.
  - Fix long spamassassin messages that are not detected as spam by sendmail
    analyzer. Thanks to Stefan Berger for the patch.
  - Add information about the FORCE configuration option and -F command line.
  - Add -F | --force command line option to be used if you always have log
    files with fresh entries and log files coming from multiple host. Thanks
    to Sladjan Andjelic for the feature request.
  - Update Debian package and documentation in packaging/README. Thanks to
    Nicolas Quiniou-Briand for the report.
  - Update copyrights.
  - Fix start script, it was not killing off the process, added -s kill. Thanks
    to Gary McLean for the patch.
  - Add support to sendmail milter with subject rewriting.
  - Fix an other issue in message delivery direction. Thanks to Gary McLean for
    the report.
  - Add date before hour in the detailed report.
  - Add date with hour to the CSV details file output. Thanks to Tsioritafita
    Rajahanisainana for the report.
  - Remove --duplicate option, it is too much confusing. Fix case where SA
    doubled recipient entries with the same message-id but not the same MTA id.
  - Fix postfix double delivery by using "queued as" and "orig_queue_id".
  - Fix case where sender relay was not checked against LOCAL_DOMAIN to find
    mail incoming direction. Thanks to Kulikov Dmitrii for the report.
  - Fix case to avoid double when postfix send the message locally to a plugin.
  - Change MTA_NAME default value to add spampd: sm-mta|sendmail|postfix|spampd
  - Add support to postfix clamsmtpd virus and spampd detection. Thanks to
    Zdenek Zamecnik for the feature request.
  - Add subject field to CSV download.
  - Add report of subject in detailed view when available in log file. Thanks
    to Tsioritafita Rahajanisainana for the feature request.</changelog>
  <changelog author="ecsos@opensuse.org" date="1488715200">- fix build error in Tumbleweed and Factory</changelog>
</package>
<package pkgid="e417f0f3f65a2cf78d1f5846d7e5d93a1041c76c9346b3205d616eb0b6ad1377" name="sendmailanalyzer" arch="src">
  <version epoch="0" ver="9.2" rel="2.1"/>
  <changelog author="projects@localside.net" date="1313150400">- Initial release version 8.0</changelog>
  <changelog author="projects@localside.net" date="1348488000">- This is a bug fix release, with the addition of the SIGHUP signal handler to allow
  a full restart of sendmailanalyzer forcing it to reread configuration and reopen the
  log file.
  - Add signal handler to SIGHUP to allow a full restart of sendmailanalyzer
  to force reread configuration file and reopen the pipe to the log file.
  Suggested by Vicky Brown.
  - Allow character @ in secure_param() to allow syslog-ng remote host
  syntax - Reported by Leon van Ofwegen.
  - Add more information on CGI param error returned by secure_param().
  - Add logrotate example to restart sendmailanalyzer in main documentation.
  Reported by Vicki Brown.
  - Fix a bug in Top Authid where number was always 1. Reported by Dan Szkola
- UPGRADE: you'd better reinstall all files after saving your configuration. Unless
  you just want to copy sendmailanalyzer and sa_report.cgi that are the only files
  that have changed as well as the documentation.</changelog>
  <changelog author="projects@localside.net" date="1356523200">-  This is a bugs fix release with better signal handling and spam logs detection.
  - Fix spam report with spamd and add spamd to the SPAM_TOOLS configuration directive. Thanks to Bill V for the report.
  - Update documentation about start script and signal handling.
  - Add new starter file for distribution using systemd at init and a README file to explain how to install those scripts.
    Thanks to Durwin for the report.
  - Fix typo in regex pattern of spamd lines detection. Thanks to Bill V for the report.
  - Fix removing of pid file which in some case was not removed.
  - Fix signal handler on SIGTERM.
  - sendmailanalyzer.conf will now be installed as sendmailanalyzer.conf.orig.
  - Fix issue in spam message detection. Thanks to Stefan Berger for the report.
  - Fix case where recipient was not collected on postfix servers because the
    Sent status in in lower case. Thanks to Kalpesh Patel for the report.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1357128000">- Update to 8.6:
  + Fix details search of top sender and status in top rejected stats.
    Thanks to Arthur Gouros for the report.
  + Add SKIP_RCPT_RELAY configuration directive to bypass local delivery
    messages that double the count of messages. Default is dovecot.
    Thanks to Richard Victor Correia for the report.
  + Change install to copy sendmailanalyzer.conf.sample into the doc/
    directory and copy sendmailanalyzer.conf into etc/ if none already
    exist. Thanks to Igor Vuk for the report.
  + Fix search of rejected message on domain. Thanks to Arthur Gouros
    for the report.
  + Fix virus name storage with spamd-milter quarantine detection.
    Thanks to Bill V for the report.
  + Change menu "Rejection &amp; Errors" into "Rejection and Events".
  + Fix missing system message when it was registered at same time than
    a previous one.
  + Reorder command line option, short before long.
  + Fix top authid with anonymous TLS SMTP auth.
  + Add support to syslog high resolution timestamp. Thanks to Richard
    Victor Correia for the report.
  + Replace .orig extension into .sample.
  + Add anonymous TLS connection established into auth report instead,
    of errors/events report. Thanks to Arthur Gouros for the suggestion.
  + Fix top domain name search in top rejected view. Thanks to Arthur
    Gouros for the report.
  + Change in .spec file to reflect the config file renaming. Thanks to
    ivuk fro the patch.
  + Add missing spamd historical report in sa_cache. Thanks to Bill V
    for the report.
- split out www subpackage including needed dependencies for apache
- specfile cleanup
- added systemd service files
- added apache configuration
- added manpage for sa_cache and README.SuSE</changelog>
  <changelog author="wr@rosenauer.org" date="1360238400">- Update to 8.7:
  + Fix major bug with new year change when LAST_PARSED has a last line
    parsed from December. Thanks to Richard Victor Correia for the report.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1394971200">- Update to 9.0:
  + This is a major release with lot of major enhancements and a full
    year of bug fixes. There is a complete remove of dependency to
    libgd and GD::Graph* Perl modules, graphs are now drawn using the
    flotr2 javascript library. It adds support to ipv6 addresses, a
    new week view in the calendar menu. It also restores reports on
    postgrey and adds support to policyd-weight, sqlgrey and maiad
    plugins.
    A new directive EXCLUDE_TO to be able to exclude some destination
    addresses from reports and new Brazilian Portuguese translation.
  + UPGRADE: You need to reinstall all file and rebuild your
    configuration file from the new default configuration file. Data
    files may not need to be remove, backward compatibility should
    be preserved.
- removed dependencies to perl(GD*) modules
- use upper case README.SUSE filename
- do not use 'restart': use 'try-restart' in logrotate instead</changelog>
  <changelog author="ecsos@opensuse.org" date="1430049600">- Update to 9.1
  - Detailed views are now also downloadable as CSV file. Thanks to Tsioritafita
    Rahajanisainana for the feature request.
  - Fix computation of starttls graph. Thanks to MAYER Hans for the report.
  - Allow download of Top senders and recipients in CSV format from a link [csv]
    after the column header. Thanks to Tsioritafita Andre Rolly Rahajanisainana
    for the feature request.
  - Add russian translation. Thanks to sef1976 for the patch.
  - Add --duplicate command line entry to fix a bad Postfix behavior which use
    different MTA id per recipient for a single message. Note that when enabled
    you will not see messages with multiple recipient. Thanks to Olivier Zolli
    for the report.
  - Add STARTLS status report. Thanks to Hans Mayer for the feature request.
  - Fix documentation about MAIL_GW and MAIL_HUB where ip addresses must be
    used instead of DNS name. Thanks to Roger for the report.
  - Fix comment to MAIL_GW and MAIL_HUB where ip addresses must be used instead
    of DNS name. Thanks to Roger for the report.
  - Remove rejected mail from top senders statistics. Thanks to Michal Paulus
    for the report.
  - Add DSN report for postfix log. Thanks to Wolfgang for the feature request.
  - Fix DNSBL entries are missing if the from=&lt;&gt;. Thanks to Olivier Zolli for
    the patch.
  - Update configuration file in debian directory.
  - Add Italian translation file. Thanks to Luca Sasdelli for the patch.
  - Fix unrecognized virus infection log report produced by amavis-new. Thanks
    to Olaf Menzel for the report.
  - Fix case where incoming message was not counted in messaging flow.
  - Fix spamd sendmail parser, some messages was lost. Thanks for Sir Y Dog
    for the report.
  - Remove README.RPM from slackBuild, the file no longer exists. Thanks to
    Syr Y Dog for the report.
  - First work on adding support to Exim log file.
  - Add new configuration directives EXCLUDE_FROM, EXCLUDE_TO and EXCLUDE_RELAY
    to not report emails from the specified list of senders or senders relay.
    Thanks to Dave Wreski for the feature request.
  - Fix rejection Top status with Domain of sender address....
  - Fix Top DSN wrong report count. Unknown senders are marked as unknown.
    Thanks to Paul Cantle for the report.
  - Fix Top DSN details reports. Thanks to Paul Cantle for the report.
  - Fix enhdnsbl rejection, they should be reported as DNSBL spam now. Thanks
    to Piotr Bodnar for the report.
  - Limit Top rejection status to any text before : character.
  - Fix some status cleanup.
  - Add support to milter-limit. Will be shown in Top Rejection &amp; Events report
    with status starting with "has exceeded ...". Thanks to Juan Carlos Sanchez
    for the feature request.
  - Fix missing sender relay when no DNS name was appended in front. Thanks to
    Juan Carlos Sanchez for the report.
  - Exclude authid single message from System messages report.
  - Add aggregating of STARTTLS error.
  - Fix a possible case where Amavis Hits score was not stores.
  - Make systemd happy with sendmailanalyzer.pid file. Thanks to Piotr Bodnar
    for the report.
  - Test log file size before seeking in incremental mode.
  - Accelerate incremental mode by seeking directly to last position of the
    parser in the logfile after last run. It will also auto detect file rotation
    and fall back to the start of the file when the file has changed.
  - Some documentation fixes. Thanks to Igor Vuk for the patch.
  - Add WEEKLY_FREE_SPACE configuration directive to force sa_cache to archive
    or remove data file each weeks instead of default per month. This will help
    saving space on huge MTA.
  - Fix summarization of some status messages.
  - Add error message when the archive command can not be achieved.
  - Add postfix warning into SysErr reports. Thanks to Mathieu Chateau for the
    feature request.
  - Add support to spampd spam detection. Thanks to Thibaut Varene for the
    feature request.
  - Recalculate current time at each line to compare log entry with current date
    to search the year used in the log file.
  - Add information about settings for sendmailanalyzer into systemd service.
    Thanks to fmalfatto for the report.
  - Add ruleset=check_relay with reject=550 5.7.1 to the spam reports. Thanks
    to Ricardson Williams for the report.
  + UPGRADE: You need to reinstall all file and rebuild your
    configuration file from the new default configuration file.
    Data files do not need to be remove, backward compatibility is
    preserved.
- rpmlint: fix incorrect-fsf-address</changelog>
  <changelog author="ecsos@opensuse.org" date="1455019200">- update to 9.2
  - Update de_DE translation file. Thanks to Wolfgang for the patch.
  - Fix wrong ExecStop command. Thanks to fmalfatto for the patch.
  - Add sorttable.js javascript to be able to sort on each column in detailed
    views. Thanks to Siervo Andrey Amado Benavides for the patch.
  - Fix systemd start script
  - Allow yyyy-mm-dd hh:mm:ss in history timestamp for journalctl together
    with iso format: yyyy-mm-ddThh:mm:ss.
  - Prevent redefining --since journalctl option if it is already given in
    JOURNALCTL_CMD or --journalctl.
  - Add documentation about JOURNALCTL configuration directive and the -j or
  - -journalctl command line option.
  - Fix command line option in uppercase and not.
  - Fix wrong status and spam rule for spam rejected by eXpurGate milter.
    Thanks to Tiyma Ahmed for the report.
  - Fix Postfix/Amavis discarded spam and virus that appears with status sent.
    Thanks to Miquel Angel Daniel Veny for the report.
  - Fix long spamassassin messages that are not detected as spam by sendmail
    analyzer. Thanks to Stefan Berger for the patch.
  - Add information about the FORCE configuration option and -F command line.
  - Add -F | --force command line option to be used if you always have log
    files with fresh entries and log files coming from multiple host. Thanks
    to Sladjan Andjelic for the feature request.
  - Update Debian package and documentation in packaging/README. Thanks to
    Nicolas Quiniou-Briand for the report.
  - Update copyrights.
  - Fix start script, it was not killing off the process, added -s kill. Thanks
    to Gary McLean for the patch.
  - Add support to sendmail milter with subject rewriting.
  - Fix an other issue in message delivery direction. Thanks to Gary McLean for
    the report.
  - Add date before hour in the detailed report.
  - Add date with hour to the CSV details file output. Thanks to Tsioritafita
    Rajahanisainana for the report.
  - Remove --duplicate option, it is too much confusing. Fix case where SA
    doubled recipient entries with the same message-id but not the same MTA id.
  - Fix postfix double delivery by using "queued as" and "orig_queue_id".
  - Fix case where sender relay was not checked against LOCAL_DOMAIN to find
    mail incoming direction. Thanks to Kulikov Dmitrii for the report.
  - Fix case to avoid double when postfix send the message locally to a plugin.
  - Change MTA_NAME default value to add spampd: sm-mta|sendmail|postfix|spampd
  - Add support to postfix clamsmtpd virus and spampd detection. Thanks to
    Zdenek Zamecnik for the feature request.
  - Add subject field to CSV download.
  - Add report of subject in detailed view when available in log file. Thanks
    to Tsioritafita Rahajanisainana for the feature request.</changelog>
  <changelog author="ecsos@opensuse.org" date="1488715200">- fix build error in Tumbleweed and Factory</changelog>
</package>
<package pkgid="f5a24eddbf7cabbc47da0701ed27885684e2b1aae880d50d476acb4a8e3f6c4d" name="sendmailanalyzer-www" arch="noarch">
  <version epoch="0" ver="9.2" rel="2.1"/>
  <changelog author="projects@localside.net" date="1313150400">- Initial release version 8.0</changelog>
  <changelog author="projects@localside.net" date="1348488000">- This is a bug fix release, with the addition of the SIGHUP signal handler to allow
  a full restart of sendmailanalyzer forcing it to reread configuration and reopen the
  log file.
  - Add signal handler to SIGHUP to allow a full restart of sendmailanalyzer
  to force reread configuration file and reopen the pipe to the log file.
  Suggested by Vicky Brown.
  - Allow character @ in secure_param() to allow syslog-ng remote host
  syntax - Reported by Leon van Ofwegen.
  - Add more information on CGI param error returned by secure_param().
  - Add logrotate example to restart sendmailanalyzer in main documentation.
  Reported by Vicki Brown.
  - Fix a bug in Top Authid where number was always 1. Reported by Dan Szkola
- UPGRADE: you'd better reinstall all files after saving your configuration. Unless
  you just want to copy sendmailanalyzer and sa_report.cgi that are the only files
  that have changed as well as the documentation.</changelog>
  <changelog author="projects@localside.net" date="1356523200">-  This is a bugs fix release with better signal handling and spam logs detection.
  - Fix spam report with spamd and add spamd to the SPAM_TOOLS configuration directive. Thanks to Bill V for the report.
  - Update documentation about start script and signal handling.
  - Add new starter file for distribution using systemd at init and a README file to explain how to install those scripts.
    Thanks to Durwin for the report.
  - Fix typo in regex pattern of spamd lines detection. Thanks to Bill V for the report.
  - Fix removing of pid file which in some case was not removed.
  - Fix signal handler on SIGTERM.
  - sendmailanalyzer.conf will now be installed as sendmailanalyzer.conf.orig.
  - Fix issue in spam message detection. Thanks to Stefan Berger for the report.
  - Fix case where recipient was not collected on postfix servers because the
    Sent status in in lower case. Thanks to Kalpesh Patel for the report.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1357128000">- Update to 8.6:
  + Fix details search of top sender and status in top rejected stats.
    Thanks to Arthur Gouros for the report.
  + Add SKIP_RCPT_RELAY configuration directive to bypass local delivery
    messages that double the count of messages. Default is dovecot.
    Thanks to Richard Victor Correia for the report.
  + Change install to copy sendmailanalyzer.conf.sample into the doc/
    directory and copy sendmailanalyzer.conf into etc/ if none already
    exist. Thanks to Igor Vuk for the report.
  + Fix search of rejected message on domain. Thanks to Arthur Gouros
    for the report.
  + Fix virus name storage with spamd-milter quarantine detection.
    Thanks to Bill V for the report.
  + Change menu "Rejection &amp; Errors" into "Rejection and Events".
  + Fix missing system message when it was registered at same time than
    a previous one.
  + Reorder command line option, short before long.
  + Fix top authid with anonymous TLS SMTP auth.
  + Add support to syslog high resolution timestamp. Thanks to Richard
    Victor Correia for the report.
  + Replace .orig extension into .sample.
  + Add anonymous TLS connection established into auth report instead,
    of errors/events report. Thanks to Arthur Gouros for the suggestion.
  + Fix top domain name search in top rejected view. Thanks to Arthur
    Gouros for the report.
  + Change in .spec file to reflect the config file renaming. Thanks to
    ivuk fro the patch.
  + Add missing spamd historical report in sa_cache. Thanks to Bill V
    for the report.
- split out www subpackage including needed dependencies for apache
- specfile cleanup
- added systemd service files
- added apache configuration
- added manpage for sa_cache and README.SuSE</changelog>
  <changelog author="wr@rosenauer.org" date="1360238400">- Update to 8.7:
  + Fix major bug with new year change when LAST_PARSED has a last line
    parsed from December. Thanks to Richard Victor Correia for the report.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1394971200">- Update to 9.0:
  + This is a major release with lot of major enhancements and a full
    year of bug fixes. There is a complete remove of dependency to
    libgd and GD::Graph* Perl modules, graphs are now drawn using the
    flotr2 javascript library. It adds support to ipv6 addresses, a
    new week view in the calendar menu. It also restores reports on
    postgrey and adds support to policyd-weight, sqlgrey and maiad
    plugins.
    A new directive EXCLUDE_TO to be able to exclude some destination
    addresses from reports and new Brazilian Portuguese translation.
  + UPGRADE: You need to reinstall all file and rebuild your
    configuration file from the new default configuration file. Data
    files may not need to be remove, backward compatibility should
    be preserved.
- removed dependencies to perl(GD*) modules
- use upper case README.SUSE filename
- do not use 'restart': use 'try-restart' in logrotate instead</changelog>
  <changelog author="ecsos@opensuse.org" date="1430049600">- Update to 9.1
  - Detailed views are now also downloadable as CSV file. Thanks to Tsioritafita
    Rahajanisainana for the feature request.
  - Fix computation of starttls graph. Thanks to MAYER Hans for the report.
  - Allow download of Top senders and recipients in CSV format from a link [csv]
    after the column header. Thanks to Tsioritafita Andre Rolly Rahajanisainana
    for the feature request.
  - Add russian translation. Thanks to sef1976 for the patch.
  - Add --duplicate command line entry to fix a bad Postfix behavior which use
    different MTA id per recipient for a single message. Note that when enabled
    you will not see messages with multiple recipient. Thanks to Olivier Zolli
    for the report.
  - Add STARTLS status report. Thanks to Hans Mayer for the feature request.
  - Fix documentation about MAIL_GW and MAIL_HUB where ip addresses must be
    used instead of DNS name. Thanks to Roger for the report.
  - Fix comment to MAIL_GW and MAIL_HUB where ip addresses must be used instead
    of DNS name. Thanks to Roger for the report.
  - Remove rejected mail from top senders statistics. Thanks to Michal Paulus
    for the report.
  - Add DSN report for postfix log. Thanks to Wolfgang for the feature request.
  - Fix DNSBL entries are missing if the from=&lt;&gt;. Thanks to Olivier Zolli for
    the patch.
  - Update configuration file in debian directory.
  - Add Italian translation file. Thanks to Luca Sasdelli for the patch.
  - Fix unrecognized virus infection log report produced by amavis-new. Thanks
    to Olaf Menzel for the report.
  - Fix case where incoming message was not counted in messaging flow.
  - Fix spamd sendmail parser, some messages was lost. Thanks for Sir Y Dog
    for the report.
  - Remove README.RPM from slackBuild, the file no longer exists. Thanks to
    Syr Y Dog for the report.
  - First work on adding support to Exim log file.
  - Add new configuration directives EXCLUDE_FROM, EXCLUDE_TO and EXCLUDE_RELAY
    to not report emails from the specified list of senders or senders relay.
    Thanks to Dave Wreski for the feature request.
  - Fix rejection Top status with Domain of sender address....
  - Fix Top DSN wrong report count. Unknown senders are marked as unknown.
    Thanks to Paul Cantle for the report.
  - Fix Top DSN details reports. Thanks to Paul Cantle for the report.
  - Fix enhdnsbl rejection, they should be reported as DNSBL spam now. Thanks
    to Piotr Bodnar for the report.
  - Limit Top rejection status to any text before : character.
  - Fix some status cleanup.
  - Add support to milter-limit. Will be shown in Top Rejection &amp; Events report
    with status starting with "has exceeded ...". Thanks to Juan Carlos Sanchez
    for the feature request.
  - Fix missing sender relay when no DNS name was appended in front. Thanks to
    Juan Carlos Sanchez for the report.
  - Exclude authid single message from System messages report.
  - Add aggregating of STARTTLS error.
  - Fix a possible case where Amavis Hits score was not stores.
  - Make systemd happy with sendmailanalyzer.pid file. Thanks to Piotr Bodnar
    for the report.
  - Test log file size before seeking in incremental mode.
  - Accelerate incremental mode by seeking directly to last position of the
    parser in the logfile after last run. It will also auto detect file rotation
    and fall back to the start of the file when the file has changed.
  - Some documentation fixes. Thanks to Igor Vuk for the patch.
  - Add WEEKLY_FREE_SPACE configuration directive to force sa_cache to archive
    or remove data file each weeks instead of default per month. This will help
    saving space on huge MTA.
  - Fix summarization of some status messages.
  - Add error message when the archive command can not be achieved.
  - Add postfix warning into SysErr reports. Thanks to Mathieu Chateau for the
    feature request.
  - Add support to spampd spam detection. Thanks to Thibaut Varene for the
    feature request.
  - Recalculate current time at each line to compare log entry with current date
    to search the year used in the log file.
  - Add information about settings for sendmailanalyzer into systemd service.
    Thanks to fmalfatto for the report.
  - Add ruleset=check_relay with reject=550 5.7.1 to the spam reports. Thanks
    to Ricardson Williams for the report.
  + UPGRADE: You need to reinstall all file and rebuild your
    configuration file from the new default configuration file.
    Data files do not need to be remove, backward compatibility is
    preserved.
- rpmlint: fix incorrect-fsf-address</changelog>
  <changelog author="ecsos@opensuse.org" date="1455019200">- update to 9.2
  - Update de_DE translation file. Thanks to Wolfgang for the patch.
  - Fix wrong ExecStop command. Thanks to fmalfatto for the patch.
  - Add sorttable.js javascript to be able to sort on each column in detailed
    views. Thanks to Siervo Andrey Amado Benavides for the patch.
  - Fix systemd start script
  - Allow yyyy-mm-dd hh:mm:ss in history timestamp for journalctl together
    with iso format: yyyy-mm-ddThh:mm:ss.
  - Prevent redefining --since journalctl option if it is already given in
    JOURNALCTL_CMD or --journalctl.
  - Add documentation about JOURNALCTL configuration directive and the -j or
  - -journalctl command line option.
  - Fix command line option in uppercase and not.
  - Fix wrong status and spam rule for spam rejected by eXpurGate milter.
    Thanks to Tiyma Ahmed for the report.
  - Fix Postfix/Amavis discarded spam and virus that appears with status sent.
    Thanks to Miquel Angel Daniel Veny for the report.
  - Fix long spamassassin messages that are not detected as spam by sendmail
    analyzer. Thanks to Stefan Berger for the patch.
  - Add information about the FORCE configuration option and -F command line.
  - Add -F | --force command line option to be used if you always have log
    files with fresh entries and log files coming from multiple host. Thanks
    to Sladjan Andjelic for the feature request.
  - Update Debian package and documentation in packaging/README. Thanks to
    Nicolas Quiniou-Briand for the report.
  - Update copyrights.
  - Fix start script, it was not killing off the process, added -s kill. Thanks
    to Gary McLean for the patch.
  - Add support to sendmail milter with subject rewriting.
  - Fix an other issue in message delivery direction. Thanks to Gary McLean for
    the report.
  - Add date before hour in the detailed report.
  - Add date with hour to the CSV details file output. Thanks to Tsioritafita
    Rajahanisainana for the report.
  - Remove --duplicate option, it is too much confusing. Fix case where SA
    doubled recipient entries with the same message-id but not the same MTA id.
  - Fix postfix double delivery by using "queued as" and "orig_queue_id".
  - Fix case where sender relay was not checked against LOCAL_DOMAIN to find
    mail incoming direction. Thanks to Kulikov Dmitrii for the report.
  - Fix case to avoid double when postfix send the message locally to a plugin.
  - Change MTA_NAME default value to add spampd: sm-mta|sendmail|postfix|spampd
  - Add support to postfix clamsmtpd virus and spampd detection. Thanks to
    Zdenek Zamecnik for the feature request.
  - Add subject field to CSV download.
  - Add report of subject in detailed view when available in log file. Thanks
    to Tsioritafita Rahajanisainana for the feature request.</changelog>
  <changelog author="ecsos@opensuse.org" date="1488715200">- fix build error in Tumbleweed and Factory</changelog>
</package>
<package pkgid="b8dd43b46b853d5f86fa104499857a12c08dd3686bb3890f34cdfdad9fdc4451" name="sieve-connect" arch="noarch">
  <version epoch="0" ver="0.81" rel="1.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1323777600">- initial version (0.81)</changelog>
</package>
<package pkgid="4e5fdc987b81de3bade5fc72c04788e321e45988c3100de8d0cdffe0980551be" name="sieve-connect" arch="src">
  <version epoch="0" ver="0.81" rel="1.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1323777600">- initial version (0.81)</changelog>
</package>
<package pkgid="f36a2f347cdd0988c834e9138fbfac6a50339f78581542e2d234d590feec9bb4" name="sqlgrey" arch="noarch">
  <version epoch="0" ver="1.8.0rc2" rel="3.1"/>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1119614400">- 1.6.1 release
  - sqlgrey-logstats.pl fixes (support for more hostnames in logs,
  better from awl matches report)</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1120478400">- 1.6.2 release
  - DB handles aren't destroyed by the DBD driver anymore,
  - spec file updated to conform to RPM 4,
  - logstat bugfix,
  - protect Syslog calls from "%?" strings</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1120737600">- 1.6.3 release
  - the database cleanup method is configurable, the default is now
  safe on all configurations</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1122379200">- 1.6.5 release
  - clean_method support bugfix</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1126699200">- 1.6.6 release
  - bugfix for a multiple instance race condition (thanks to Steffen Plotner)</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt; - 1.6.7" date="1130155200">- 1.6.7 release
  - bugfix for superfluous log messages</changelog>
  <changelog author="Peter Nixon &lt;peter+rpmspam@suntel.com.tr&gt; - 1.6.8" date="1162728000">- Package for SUSE</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 1.6.8" date="1256817600">- Adapted to openSUSE 11.1 (FHS 2.2)</changelog>
  <changelog author="nix@opensuse.org" date="1267876800">- Update to 1.8.0 RC2</changelog>
  <changelog author="suse-beta@cboltz.de" date="1469880000">- make initscript executable when installing it (fixes a brp check)
- use exact license (GPL-2.0)</changelog>
</package>
<package pkgid="1e14dedb0e12eabda1228ec2e37d9ec6f54a0e78e056afe9538d9523401decd3" name="sqlgrey" arch="src">
  <version epoch="0" ver="1.8.0rc2" rel="3.1"/>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1109764800">- 1.5.1 release
  - replaced smart algorithm with Michel Bouissou's one</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1109851200">- 1.5.2 release
  - optimize SQL queries by avoiding some now() function calls</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1110024000">- 1.5.3 release
  - the cleanup is now done in a separate process to avoid stalling the service</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1110888000">- 1.5.4 release
  - fix for regexp compilation (regexp in fqdn_whitelists didn't work)</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1114430400">- 1.5.5 release
  - small fix for SRS (again!)
  - small fix for deverp code
  - log types</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1115035200">- 1.5.6 release
  - fix for MySQL disconnection crash
  - IPv6 support
  - Optin/optout support</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1117627200">- 1.5.7 release
  - fix for a memory leak
  - config directory now user-configurable
  - preliminary log analyser</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1117713600">- 1.5.8 release
  - fix for Makefile: rpmbuild didn't work</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1118145600">- 1.5.9 release
  - fix for MySQL's mishandling of timestamps
  - better log parser</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1118923200">- 1.6.0 release
  - fix for alternate conf_dir
  - fix for timestamp handling in log parser
  - log parser cleanup
  - added README.PERF and documentation cleanup</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1119614400">- 1.6.1 release
  - sqlgrey-logstats.pl fixes (support for more hostnames in logs,
  better from awl matches report)</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1120478400">- 1.6.2 release
  - DB handles aren't destroyed by the DBD driver anymore,
  - spec file updated to conform to RPM 4,
  - logstat bugfix,
  - protect Syslog calls from "%?" strings</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1120737600">- 1.6.3 release
  - the database cleanup method is configurable, the default is now
  safe on all configurations</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1122379200">- 1.6.5 release
  - clean_method support bugfix</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt;" date="1126699200">- 1.6.6 release
  - bugfix for a multiple instance race condition (thanks to Steffen Plotner)</changelog>
  <changelog author="Lionel Bouton &lt;lionel-dev@bouton.name&gt; - 1.6.7" date="1130155200">- 1.6.7 release
  - bugfix for superfluous log messages</changelog>
  <changelog author="Peter Nixon &lt;peter+rpmspam@suntel.com.tr&gt; - 1.6.8" date="1162728000">- Package for SUSE</changelog>
  <changelog author="Matthias Bach &lt;marix@marix.org&gt; - 1.6.8" date="1256817600">- Adapted to openSUSE 11.1 (FHS 2.2)</changelog>
  <changelog author="nix@opensuse.org" date="1267876800">- Update to 1.8.0 RC2</changelog>
  <changelog author="suse-beta@cboltz.de" date="1469880000">- make initscript executable when installing it (fixes a brp check)
- use exact license (GPL-2.0)</changelog>
</package>
<package pkgid="9034f97a353a1f4f873ae1be76e87a84927e06480d17da0c7b0468ca1529bbe4" name="tinycdb" arch="src">
  <version epoch="0" ver="0.78" rel="3.1"/>
  <changelog author="awafaa@opensuse.org" date="1277121600">- Initial import for openSUSE version 0.76</changelog>
  <changelog author="andrea@opensuse.org" date="1280923200">- completly rewritten spec file
- bzipped source
- removed useless patch to fix path
- fixed multiarch building</changelog>
  <changelog author="toddrme2178@gmail.com" date="1315310400">- Cleaned up spec file formatting</changelog>
  <changelog author="toddrme2178@gmail.com" date="1327492800">- Updated to 0.77</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353153600">- Update to 0.78
  * fix handling of files &gt;4Gb
  * fix handling of files &gt;2Gb on 32bit platforms (compile with _FILE_OFFSET_BITS=64)
  * fix file size limit test
  * fix compiler warnings (missing #include)
- Fix the SLES build</changelog>
</package>
<package pkgid="66595c461e93277b5ef951c69de3b7116568102c90ee50deb5a36222ee11a838" name="tinycdb" arch="x86_64">
  <version epoch="0" ver="0.78" rel="3.1"/>
  <changelog author="awafaa@opensuse.org" date="1277121600">- Initial import for openSUSE version 0.76</changelog>
  <changelog author="andrea@opensuse.org" date="1280923200">- completly rewritten spec file
- bzipped source
- removed useless patch to fix path
- fixed multiarch building</changelog>
  <changelog author="toddrme2178@gmail.com" date="1315310400">- Cleaned up spec file formatting</changelog>
  <changelog author="toddrme2178@gmail.com" date="1327492800">- Updated to 0.77</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353153600">- Update to 0.78
  * fix handling of files &gt;4Gb
  * fix handling of files &gt;2Gb on 32bit platforms (compile with _FILE_OFFSET_BITS=64)
  * fix file size limit test
  * fix compiler warnings (missing #include)
- Fix the SLES build</changelog>
</package>
<package pkgid="5ee64813a36b317db8c457e054889a005bb410b6d62a510cf3f55dd174094c9e" name="tinycdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.78" rel="3.1"/>
  <changelog author="awafaa@opensuse.org" date="1277121600">- Initial import for openSUSE version 0.76</changelog>
  <changelog author="andrea@opensuse.org" date="1280923200">- completly rewritten spec file
- bzipped source
- removed useless patch to fix path
- fixed multiarch building</changelog>
  <changelog author="toddrme2178@gmail.com" date="1315310400">- Cleaned up spec file formatting</changelog>
  <changelog author="toddrme2178@gmail.com" date="1327492800">- Updated to 0.77</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353153600">- Update to 0.78
  * fix handling of files &gt;4Gb
  * fix handling of files &gt;2Gb on 32bit platforms (compile with _FILE_OFFSET_BITS=64)
  * fix file size limit test
  * fix compiler warnings (missing #include)
- Fix the SLES build</changelog>
</package>
<package pkgid="7d7c91525833c303f6d37826470ff2d9ecf1782e8803d1b861ad44d6d8f65fe1" name="tinycdb-debugsource" arch="x86_64">
  <version epoch="0" ver="0.78" rel="3.1"/>
  <changelog author="awafaa@opensuse.org" date="1277121600">- Initial import for openSUSE version 0.76</changelog>
  <changelog author="andrea@opensuse.org" date="1280923200">- completly rewritten spec file
- bzipped source
- removed useless patch to fix path
- fixed multiarch building</changelog>
  <changelog author="toddrme2178@gmail.com" date="1315310400">- Cleaned up spec file formatting</changelog>
  <changelog author="toddrme2178@gmail.com" date="1327492800">- Updated to 0.77</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353153600">- Update to 0.78
  * fix handling of files &gt;4Gb
  * fix handling of files &gt;2Gb on 32bit platforms (compile with _FILE_OFFSET_BITS=64)
  * fix file size limit test
  * fix compiler warnings (missing #include)
- Fix the SLES build</changelog>
</package>
<package pkgid="456a0a7e426615a325e885e162b46767099fc0221c25139147f104a61e9262cc" name="tinycdb-devel" arch="x86_64">
  <version epoch="0" ver="0.78" rel="3.1"/>
  <changelog author="awafaa@opensuse.org" date="1277121600">- Initial import for openSUSE version 0.76</changelog>
  <changelog author="andrea@opensuse.org" date="1280923200">- completly rewritten spec file
- bzipped source
- removed useless patch to fix path
- fixed multiarch building</changelog>
  <changelog author="toddrme2178@gmail.com" date="1315310400">- Cleaned up spec file formatting</changelog>
  <changelog author="toddrme2178@gmail.com" date="1327492800">- Updated to 0.77</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353153600">- Update to 0.78
  * fix handling of files &gt;4Gb
  * fix handling of files &gt;2Gb on 32bit platforms (compile with _FILE_OFFSET_BITS=64)
  * fix file size limit test
  * fix compiler warnings (missing #include)
- Fix the SLES build</changelog>
</package>
<package pkgid="8a940272a3b680c07806f5402d84b5aba98507fa3f264f0a64f6dc4777e94702" name="tnef" arch="src">
  <version epoch="0" ver="1.4.15" rel="156.1"/>
  <changelog author="dipa@suse.de" date="962107200">- add a customer dif-file</changelog>
  <changelog author="uli@suse.de" date="962625600">- added secfix</changelog>
  <changelog author="stark@suse.de" date="963835200">- added &lt;unistd.h&gt;
- fixed spec-file for compiling patched sources</changelog>
  <changelog author="uli@suse.de" date="969364800">- removed so-called "sanity check" which makes tnef virtually unusable</changelog>
  <changelog author="uli@suse.de" date="986472000">- update -&gt; 1.0
- fixed Group tag</changelog>
  <changelog author="uli@suse.de" date="986817600">- update -&gt; 1.0.1</changelog>
  <changelog author="uli@suse.de" date="997963200">- update -&gt; 1.1</changelog>
  <changelog author="uli@suse.de" date="1007553600">- update -&gt; 1.1.1 (cosmetic, just to keep people from complaining)</changelog>
  <changelog author="coolo@suse.de" date="1055937600">- use BuildRoot</changelog>
  <changelog author="pth@suse.de" date="1082635200">- Fix configure.in and acinclude.m4.
- Define _GNU_SOURCE unconditionally to get basename declaration.
- Include headers where necessary.</changelog>
  <changelog author="hmacht@suse.de" date="1083844800">- added norootforbuild in specfile</changelog>
  <changelog author="mmj@suse.de" date="1093262400">- Update to 1.2.3.1 which obsoletes our patches</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1298116800">- Update to 1.4.7:
  * Reverting to older UTF decoding method.
  * Updating main copyright date notice.
  From 1.4.6:
  * Including patch from Randy Diffenderfer for a variety of fixes &amp; tweaks.
  * Replacing my buggy/wrong UTF converter code with public domain UTF
    converter code.
  From 1.4.5:
  * Fixing bug when reading from stdin [Bug #2126695]
  From 1.4.4:
  * Small updates after long absense
  * Adding --ignore-checksum feature.
  From 1.4.3:
  * Fixing 'unicode string filename' bug [Bug #1546546].
  From 1.4.2:
  * Fixing 'garbage at end of file' bug [Bug# 1513940]. Now tries to handle
    gracefully
  * Fixing Solaris 10 empty libreplace.a bug [Bug# 1517789]. Now libreplace.a
    never empty.
  From 1.4.1:
  * Applied patch from Tony Aiuto &lt;tony@ics.com&gt; to add the ability to list the
    file mime types.
  From 1.4:
  * Code reorganization
  * New MAPI property names
  * Fixing parsing of multi-value MAPI properties [Bug# 1434145]
  From 1.3.4:
  * Fixing RTF message body saving [Bug#  1318728].  Fix courtesy of Eduardo
    Subelman.
  From 1.3.3:
  * Fixing memory leak bug [Bug# 1168062].  GUIDs not being freed corrrectly.
  * Fixing tnef.spec.in bug [Bug# 1200197]. Adding fix to RedHat package
    building problem from John Simpson &lt;jms1@users.sourceforge.net&gt;
  * Now saving message body data [RFE# 1033855]. Now optionally saves message
    body data, generalizing the previous --save-rtf feature.
  * Implementing Unicode handling [Patch# 666561].  Implementing code to
    translate Unicode strings to uft8 as best as can be.  Snitched code from
    ytnef &lt;URL: www.sourceforge.net/projects/ytnef&gt;  Thanks
    yerase@users.sourceforge.net!
  From 1.3.2:
  * Fixing test buf [Bug# 1121539].  Tests failed due to 32 vs. 64 bit diff.
  * Fixing compile bug [Bug# 1109683].  Basename declared incorrectly
  * Fixing endian bug [Bug# 1117373].  GUIDs were not being parsed, only copied
    out of stream, thus endianess was wrong left up to chance
  From 1.3.1:
  * Fixing dumb compiling bugs [BUG: #1108485].  GCC lets me write incorrect code!
  * Small modifications to tnef.spec.in as suggested by jmsl@users.sf.net [BUG:
    [#1102128]]
  * Corrected type problems to improve portability to 64 bit systems and Mac.
  From 1.3:
  * Adding feature to allow for saving of RTF data.
- Spec file updates:
  * Changes based on rpmdevtools templates and spec-cleaner run.
  * Added Url: entry.
  * Updates in %build and %install sections.
  * Removed %changelog entries from spec file.
- Added a patch from upstream to fix some manpage errors.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1303905600">- Update to 1.4.8:
  * Applied patch for man page from Jari Aalto [patch sf#3104753].
- Minor spec file updates.
- Removed patch from upstream to fix some manpage errors (fixed in new
  version).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1331467200">- Update to 1.4.9:
  * Fix some memory leaks.
  * Fixes for printing out MIME types.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1399204800">- Update to 1.4.10:
  * Incorporating documentation patch from bentley.
  * Fixing small problems from new versions of automake/gcc.</changelog>
  <changelog author="p.drouand@gmail.com" date="1428408000">- Update to version 1.4.12
  * Fixing bug in distribution tarball.
    https://github.com/verdammelt/tnef/issues/9
  * Fixing autoconf warnings
    https://github.com/verdammelt/tnef/issues/4
    https://github.com/verdammelt/tnef/pull/10
  * Fixing compilation warning on Fedora
    https://github.com/verdammelt/tnef/pull/8
- Changes from version 1.4.11
  * Fixing bug when parsing files with multiple value MAPI attributes
    https://github.com/verdammelt/tnef/issues/3
  * Fixing compilation warnings
    https://github.com/verdammelt/tnef/issues/5</changelog>
  <changelog author="jengelh@inai.de" date="1488196800">- Update to new upstream release 1.4.13
  * Prevent against various cases of null derefences,
    buffer overshooting, and fix some integer overflows.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499256000">- Update to version 1.4.15:
  * Fix underflow problem
    https://github.com/verdammelt/tnef/issues/23
  From version 1.4.14:
  * Use __builtin_mul_overflow when available.
  * Fixing Unicode related bugs introduced in previous release.
    https://github.com/verdammelt/tnef/issues/20</changelog>
</package>
<package pkgid="c1537f693193303d620c0a2b65a0c8700ddebc6847ccd2e87474b74ce39d8b4e" name="tnef" arch="x86_64">
  <version epoch="0" ver="1.4.15" rel="156.1"/>
  <changelog author="hmacht@suse.de" date="1083844800">- added norootforbuild in specfile</changelog>
  <changelog author="mmj@suse.de" date="1093262400">- Update to 1.2.3.1 which obsoletes our patches</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1298116800">- Update to 1.4.7:
  * Reverting to older UTF decoding method.
  * Updating main copyright date notice.
  From 1.4.6:
  * Including patch from Randy Diffenderfer for a variety of fixes &amp; tweaks.
  * Replacing my buggy/wrong UTF converter code with public domain UTF
    converter code.
  From 1.4.5:
  * Fixing bug when reading from stdin [Bug #2126695]
  From 1.4.4:
  * Small updates after long absense
  * Adding --ignore-checksum feature.
  From 1.4.3:
  * Fixing 'unicode string filename' bug [Bug #1546546].
  From 1.4.2:
  * Fixing 'garbage at end of file' bug [Bug# 1513940]. Now tries to handle
    gracefully
  * Fixing Solaris 10 empty libreplace.a bug [Bug# 1517789]. Now libreplace.a
    never empty.
  From 1.4.1:
  * Applied patch from Tony Aiuto &lt;tony@ics.com&gt; to add the ability to list the
    file mime types.
  From 1.4:
  * Code reorganization
  * New MAPI property names
  * Fixing parsing of multi-value MAPI properties [Bug# 1434145]
  From 1.3.4:
  * Fixing RTF message body saving [Bug#  1318728].  Fix courtesy of Eduardo
    Subelman.
  From 1.3.3:
  * Fixing memory leak bug [Bug# 1168062].  GUIDs not being freed corrrectly.
  * Fixing tnef.spec.in bug [Bug# 1200197]. Adding fix to RedHat package
    building problem from John Simpson &lt;jms1@users.sourceforge.net&gt;
  * Now saving message body data [RFE# 1033855]. Now optionally saves message
    body data, generalizing the previous --save-rtf feature.
  * Implementing Unicode handling [Patch# 666561].  Implementing code to
    translate Unicode strings to uft8 as best as can be.  Snitched code from
    ytnef &lt;URL: www.sourceforge.net/projects/ytnef&gt;  Thanks
    yerase@users.sourceforge.net!
  From 1.3.2:
  * Fixing test buf [Bug# 1121539].  Tests failed due to 32 vs. 64 bit diff.
  * Fixing compile bug [Bug# 1109683].  Basename declared incorrectly
  * Fixing endian bug [Bug# 1117373].  GUIDs were not being parsed, only copied
    out of stream, thus endianess was wrong left up to chance
  From 1.3.1:
  * Fixing dumb compiling bugs [BUG: #1108485].  GCC lets me write incorrect code!
  * Small modifications to tnef.spec.in as suggested by jmsl@users.sf.net [BUG:
    [#1102128]]
  * Corrected type problems to improve portability to 64 bit systems and Mac.
  From 1.3:
  * Adding feature to allow for saving of RTF data.
- Spec file updates:
  * Changes based on rpmdevtools templates and spec-cleaner run.
  * Added Url: entry.
  * Updates in %build and %install sections.
  * Removed %changelog entries from spec file.
- Added a patch from upstream to fix some manpage errors.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1303905600">- Update to 1.4.8:
  * Applied patch for man page from Jari Aalto [patch sf#3104753].
- Minor spec file updates.
- Removed patch from upstream to fix some manpage errors (fixed in new
  version).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1331467200">- Update to 1.4.9:
  * Fix some memory leaks.
  * Fixes for printing out MIME types.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1399204800">- Update to 1.4.10:
  * Incorporating documentation patch from bentley.
  * Fixing small problems from new versions of automake/gcc.</changelog>
  <changelog author="p.drouand@gmail.com" date="1428408000">- Update to version 1.4.12
  * Fixing bug in distribution tarball.
    https://github.com/verdammelt/tnef/issues/9
  * Fixing autoconf warnings
    https://github.com/verdammelt/tnef/issues/4
    https://github.com/verdammelt/tnef/pull/10
  * Fixing compilation warning on Fedora
    https://github.com/verdammelt/tnef/pull/8
- Changes from version 1.4.11
  * Fixing bug when parsing files with multiple value MAPI attributes
    https://github.com/verdammelt/tnef/issues/3
  * Fixing compilation warnings
    https://github.com/verdammelt/tnef/issues/5</changelog>
  <changelog author="jengelh@inai.de" date="1488196800">- Update to new upstream release 1.4.13
  * Prevent against various cases of null derefences,
    buffer overshooting, and fix some integer overflows.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499256000">- Update to version 1.4.15:
  * Fix underflow problem
    https://github.com/verdammelt/tnef/issues/23
  From version 1.4.14:
  * Use __builtin_mul_overflow when available.
  * Fixing Unicode related bugs introduced in previous release.
    https://github.com/verdammelt/tnef/issues/20</changelog>
</package>
<package pkgid="7ac5d35db89e5b2d8df26db31d750392f434218e2a744dfc30cf6ae07b1e4979" name="tnef-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.15" rel="156.1"/>
  <changelog author="dipa@suse.de" date="962107200">- add a customer dif-file</changelog>
  <changelog author="uli@suse.de" date="962625600">- added secfix</changelog>
  <changelog author="stark@suse.de" date="963835200">- added &lt;unistd.h&gt;
- fixed spec-file for compiling patched sources</changelog>
  <changelog author="uli@suse.de" date="969364800">- removed so-called "sanity check" which makes tnef virtually unusable</changelog>
  <changelog author="uli@suse.de" date="986472000">- update -&gt; 1.0
- fixed Group tag</changelog>
  <changelog author="uli@suse.de" date="986817600">- update -&gt; 1.0.1</changelog>
  <changelog author="uli@suse.de" date="997963200">- update -&gt; 1.1</changelog>
  <changelog author="uli@suse.de" date="1007553600">- update -&gt; 1.1.1 (cosmetic, just to keep people from complaining)</changelog>
  <changelog author="coolo@suse.de" date="1055937600">- use BuildRoot</changelog>
  <changelog author="pth@suse.de" date="1082635200">- Fix configure.in and acinclude.m4.
- Define _GNU_SOURCE unconditionally to get basename declaration.
- Include headers where necessary.</changelog>
  <changelog author="hmacht@suse.de" date="1083844800">- added norootforbuild in specfile</changelog>
  <changelog author="mmj@suse.de" date="1093262400">- Update to 1.2.3.1 which obsoletes our patches</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1298116800">- Update to 1.4.7:
  * Reverting to older UTF decoding method.
  * Updating main copyright date notice.
  From 1.4.6:
  * Including patch from Randy Diffenderfer for a variety of fixes &amp; tweaks.
  * Replacing my buggy/wrong UTF converter code with public domain UTF
    converter code.
  From 1.4.5:
  * Fixing bug when reading from stdin [Bug #2126695]
  From 1.4.4:
  * Small updates after long absense
  * Adding --ignore-checksum feature.
  From 1.4.3:
  * Fixing 'unicode string filename' bug [Bug #1546546].
  From 1.4.2:
  * Fixing 'garbage at end of file' bug [Bug# 1513940]. Now tries to handle
    gracefully
  * Fixing Solaris 10 empty libreplace.a bug [Bug# 1517789]. Now libreplace.a
    never empty.
  From 1.4.1:
  * Applied patch from Tony Aiuto &lt;tony@ics.com&gt; to add the ability to list the
    file mime types.
  From 1.4:
  * Code reorganization
  * New MAPI property names
  * Fixing parsing of multi-value MAPI properties [Bug# 1434145]
  From 1.3.4:
  * Fixing RTF message body saving [Bug#  1318728].  Fix courtesy of Eduardo
    Subelman.
  From 1.3.3:
  * Fixing memory leak bug [Bug# 1168062].  GUIDs not being freed corrrectly.
  * Fixing tnef.spec.in bug [Bug# 1200197]. Adding fix to RedHat package
    building problem from John Simpson &lt;jms1@users.sourceforge.net&gt;
  * Now saving message body data [RFE# 1033855]. Now optionally saves message
    body data, generalizing the previous --save-rtf feature.
  * Implementing Unicode handling [Patch# 666561].  Implementing code to
    translate Unicode strings to uft8 as best as can be.  Snitched code from
    ytnef &lt;URL: www.sourceforge.net/projects/ytnef&gt;  Thanks
    yerase@users.sourceforge.net!
  From 1.3.2:
  * Fixing test buf [Bug# 1121539].  Tests failed due to 32 vs. 64 bit diff.
  * Fixing compile bug [Bug# 1109683].  Basename declared incorrectly
  * Fixing endian bug [Bug# 1117373].  GUIDs were not being parsed, only copied
    out of stream, thus endianess was wrong left up to chance
  From 1.3.1:
  * Fixing dumb compiling bugs [BUG: #1108485].  GCC lets me write incorrect code!
  * Small modifications to tnef.spec.in as suggested by jmsl@users.sf.net [BUG:
    [#1102128]]
  * Corrected type problems to improve portability to 64 bit systems and Mac.
  From 1.3:
  * Adding feature to allow for saving of RTF data.
- Spec file updates:
  * Changes based on rpmdevtools templates and spec-cleaner run.
  * Added Url: entry.
  * Updates in %build and %install sections.
  * Removed %changelog entries from spec file.
- Added a patch from upstream to fix some manpage errors.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1303905600">- Update to 1.4.8:
  * Applied patch for man page from Jari Aalto [patch sf#3104753].
- Minor spec file updates.
- Removed patch from upstream to fix some manpage errors (fixed in new
  version).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1331467200">- Update to 1.4.9:
  * Fix some memory leaks.
  * Fixes for printing out MIME types.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1399204800">- Update to 1.4.10:
  * Incorporating documentation patch from bentley.
  * Fixing small problems from new versions of automake/gcc.</changelog>
  <changelog author="p.drouand@gmail.com" date="1428408000">- Update to version 1.4.12
  * Fixing bug in distribution tarball.
    https://github.com/verdammelt/tnef/issues/9
  * Fixing autoconf warnings
    https://github.com/verdammelt/tnef/issues/4
    https://github.com/verdammelt/tnef/pull/10
  * Fixing compilation warning on Fedora
    https://github.com/verdammelt/tnef/pull/8
- Changes from version 1.4.11
  * Fixing bug when parsing files with multiple value MAPI attributes
    https://github.com/verdammelt/tnef/issues/3
  * Fixing compilation warnings
    https://github.com/verdammelt/tnef/issues/5</changelog>
  <changelog author="jengelh@inai.de" date="1488196800">- Update to new upstream release 1.4.13
  * Prevent against various cases of null derefences,
    buffer overshooting, and fix some integer overflows.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499256000">- Update to version 1.4.15:
  * Fix underflow problem
    https://github.com/verdammelt/tnef/issues/23
  From version 1.4.14:
  * Use __builtin_mul_overflow when available.
  * Fixing Unicode related bugs introduced in previous release.
    https://github.com/verdammelt/tnef/issues/20</changelog>
</package>
<package pkgid="d11048f99e1f5cfe6811f5671925d9a27ace58a84ebc639eccff40ffc8fbd21f" name="tnef-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.15" rel="156.1"/>
  <changelog author="hmacht@suse.de" date="1083844800">- added norootforbuild in specfile</changelog>
  <changelog author="mmj@suse.de" date="1093262400">- Update to 1.2.3.1 which obsoletes our patches</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1298116800">- Update to 1.4.7:
  * Reverting to older UTF decoding method.
  * Updating main copyright date notice.
  From 1.4.6:
  * Including patch from Randy Diffenderfer for a variety of fixes &amp; tweaks.
  * Replacing my buggy/wrong UTF converter code with public domain UTF
    converter code.
  From 1.4.5:
  * Fixing bug when reading from stdin [Bug #2126695]
  From 1.4.4:
  * Small updates after long absense
  * Adding --ignore-checksum feature.
  From 1.4.3:
  * Fixing 'unicode string filename' bug [Bug #1546546].
  From 1.4.2:
  * Fixing 'garbage at end of file' bug [Bug# 1513940]. Now tries to handle
    gracefully
  * Fixing Solaris 10 empty libreplace.a bug [Bug# 1517789]. Now libreplace.a
    never empty.
  From 1.4.1:
  * Applied patch from Tony Aiuto &lt;tony@ics.com&gt; to add the ability to list the
    file mime types.
  From 1.4:
  * Code reorganization
  * New MAPI property names
  * Fixing parsing of multi-value MAPI properties [Bug# 1434145]
  From 1.3.4:
  * Fixing RTF message body saving [Bug#  1318728].  Fix courtesy of Eduardo
    Subelman.
  From 1.3.3:
  * Fixing memory leak bug [Bug# 1168062].  GUIDs not being freed corrrectly.
  * Fixing tnef.spec.in bug [Bug# 1200197]. Adding fix to RedHat package
    building problem from John Simpson &lt;jms1@users.sourceforge.net&gt;
  * Now saving message body data [RFE# 1033855]. Now optionally saves message
    body data, generalizing the previous --save-rtf feature.
  * Implementing Unicode handling [Patch# 666561].  Implementing code to
    translate Unicode strings to uft8 as best as can be.  Snitched code from
    ytnef &lt;URL: www.sourceforge.net/projects/ytnef&gt;  Thanks
    yerase@users.sourceforge.net!
  From 1.3.2:
  * Fixing test buf [Bug# 1121539].  Tests failed due to 32 vs. 64 bit diff.
  * Fixing compile bug [Bug# 1109683].  Basename declared incorrectly
  * Fixing endian bug [Bug# 1117373].  GUIDs were not being parsed, only copied
    out of stream, thus endianess was wrong left up to chance
  From 1.3.1:
  * Fixing dumb compiling bugs [BUG: #1108485].  GCC lets me write incorrect code!
  * Small modifications to tnef.spec.in as suggested by jmsl@users.sf.net [BUG:
    [#1102128]]
  * Corrected type problems to improve portability to 64 bit systems and Mac.
  From 1.3:
  * Adding feature to allow for saving of RTF data.
- Spec file updates:
  * Changes based on rpmdevtools templates and spec-cleaner run.
  * Added Url: entry.
  * Updates in %build and %install sections.
  * Removed %changelog entries from spec file.
- Added a patch from upstream to fix some manpage errors.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1303905600">- Update to 1.4.8:
  * Applied patch for man page from Jari Aalto [patch sf#3104753].
- Minor spec file updates.
- Removed patch from upstream to fix some manpage errors (fixed in new
  version).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1331467200">- Update to 1.4.9:
  * Fix some memory leaks.
  * Fixes for printing out MIME types.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1399204800">- Update to 1.4.10:
  * Incorporating documentation patch from bentley.
  * Fixing small problems from new versions of automake/gcc.</changelog>
  <changelog author="p.drouand@gmail.com" date="1428408000">- Update to version 1.4.12
  * Fixing bug in distribution tarball.
    https://github.com/verdammelt/tnef/issues/9
  * Fixing autoconf warnings
    https://github.com/verdammelt/tnef/issues/4
    https://github.com/verdammelt/tnef/pull/10
  * Fixing compilation warning on Fedora
    https://github.com/verdammelt/tnef/pull/8
- Changes from version 1.4.11
  * Fixing bug when parsing files with multiple value MAPI attributes
    https://github.com/verdammelt/tnef/issues/3
  * Fixing compilation warnings
    https://github.com/verdammelt/tnef/issues/5</changelog>
  <changelog author="jengelh@inai.de" date="1488196800">- Update to new upstream release 1.4.13
  * Prevent against various cases of null derefences,
    buffer overshooting, and fix some integer overflows.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499256000">- Update to version 1.4.15:
  * Fix underflow problem
    https://github.com/verdammelt/tnef/issues/23
  From version 1.4.14:
  * Use __builtin_mul_overflow when available.
  * Fixing Unicode related bugs introduced in previous release.
    https://github.com/verdammelt/tnef/issues/20</changelog>
</package>
<package pkgid="df94a9a500cdebac146c3b978eb1ba8e4d4c4a11b20372b12b857358be8c1f16" name="up-imapproxy" arch="src">
  <version epoch="0" ver="1.2.7" rel="2.1"/>
  <changelog author="devrim@gazi.edu.tr" date="1047902400">- Created imapproxy.spec file</changelog>
  <changelog author="whooper@freeshell.org" date="1118318400">- Removed obsolete Copyright tag
- Added License tag
- Removed extra Source tags</changelog>
  <changelog author="p.heinlein@heinlein-support.d" date="1226664000">- Created imapproxy.spec file for openSUSE buildservice</changelog>
  <changelog author="p.heinlein@heinlein-support.d" date="1263556800">- Fixed directory attributes for openSUSE 11.2</changelog>
  <changelog author="Ralf Lang &lt;lang@b1-systems.de&gt;" date="1356523200">- updated to version 1.2.7 - this release is now adopted by squirrelmail project
- started changes file and converted inline changelog
- updated source server to sourceforge
- changed license tag to spdx format
- removed duplicate file imapproxy.init
- renamed init script to "up-imapproxy"</changelog>
  <changelog author="Ralf Lang &lt;lang@b1-systems.de&gt;" date="1356523201">- added lsb header "short-description" to start script
- changed RPM group to Productivity/Networking/Email/Servers
- added a "reload" alias to the restart section to make rpmlint happy (no "reload" implemented yet)
- updated FSF address</changelog>
  <changelog author="lang@b1-systems.de" date="1358337600">- systemd service file added (still lacks package integration)</changelog>
</package>
<package pkgid="da91cf011b9e3cd83134dbcfb87c46d27eb9e78fc3177d17894a6eb40e599e2f" name="up-imapproxy" arch="x86_64">
  <version epoch="0" ver="1.2.7" rel="2.1"/>
  <changelog author="devrim@gazi.edu.tr" date="1047902400">- Created imapproxy.spec file</changelog>
  <changelog author="whooper@freeshell.org" date="1118318400">- Removed obsolete Copyright tag
- Added License tag
- Removed extra Source tags</changelog>
  <changelog author="p.heinlein@heinlein-support.d" date="1226664000">- Created imapproxy.spec file for openSUSE buildservice</changelog>
  <changelog author="p.heinlein@heinlein-support.d" date="1263556800">- Fixed directory attributes for openSUSE 11.2</changelog>
  <changelog author="Ralf Lang &lt;lang@b1-systems.de&gt;" date="1356523200">- updated to version 1.2.7 - this release is now adopted by squirrelmail project
- started changes file and converted inline changelog
- updated source server to sourceforge
- changed license tag to spdx format
- removed duplicate file imapproxy.init
- renamed init script to "up-imapproxy"</changelog>
  <changelog author="Ralf Lang &lt;lang@b1-systems.de&gt;" date="1356523201">- added lsb header "short-description" to start script
- changed RPM group to Productivity/Networking/Email/Servers
- added a "reload" alias to the restart section to make rpmlint happy (no "reload" implemented yet)
- updated FSF address</changelog>
  <changelog author="lang@b1-systems.de" date="1358337600">- systemd service file added (still lacks package integration)</changelog>
</package>
<package pkgid="5dc2d81dd73584dd033315d13bdf884c50224669643e23ca058b44e50ea67da5" name="up-imapproxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.7" rel="2.1"/>
  <changelog author="devrim@gazi.edu.tr" date="1047902400">- Created imapproxy.spec file</changelog>
  <changelog author="whooper@freeshell.org" date="1118318400">- Removed obsolete Copyright tag
- Added License tag
- Removed extra Source tags</changelog>
  <changelog author="p.heinlein@heinlein-support.d" date="1226664000">- Created imapproxy.spec file for openSUSE buildservice</changelog>
  <changelog author="p.heinlein@heinlein-support.d" date="1263556800">- Fixed directory attributes for openSUSE 11.2</changelog>
  <changelog author="Ralf Lang &lt;lang@b1-systems.de&gt;" date="1356523200">- updated to version 1.2.7 - this release is now adopted by squirrelmail project
- started changes file and converted inline changelog
- updated source server to sourceforge
- changed license tag to spdx format
- removed duplicate file imapproxy.init
- renamed init script to "up-imapproxy"</changelog>
  <changelog author="Ralf Lang &lt;lang@b1-systems.de&gt;" date="1356523201">- added lsb header "short-description" to start script
- changed RPM group to Productivity/Networking/Email/Servers
- added a "reload" alias to the restart section to make rpmlint happy (no "reload" implemented yet)
- updated FSF address</changelog>
  <changelog author="lang@b1-systems.de" date="1358337600">- systemd service file added (still lacks package integration)</changelog>
</package>
<package pkgid="e6ea6f8f52174a568c5c278bb6205ebab74c0d44450e01e77414a62dc24be5fd" name="up-imapproxy-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.7" rel="2.1"/>
  <changelog author="devrim@gazi.edu.tr" date="1047902400">- Created imapproxy.spec file</changelog>
  <changelog author="whooper@freeshell.org" date="1118318400">- Removed obsolete Copyright tag
- Added License tag
- Removed extra Source tags</changelog>
  <changelog author="p.heinlein@heinlein-support.d" date="1226664000">- Created imapproxy.spec file for openSUSE buildservice</changelog>
  <changelog author="p.heinlein@heinlein-support.d" date="1263556800">- Fixed directory attributes for openSUSE 11.2</changelog>
  <changelog author="Ralf Lang &lt;lang@b1-systems.de&gt;" date="1356523200">- updated to version 1.2.7 - this release is now adopted by squirrelmail project
- started changes file and converted inline changelog
- updated source server to sourceforge
- changed license tag to spdx format
- removed duplicate file imapproxy.init
- renamed init script to "up-imapproxy"</changelog>
  <changelog author="Ralf Lang &lt;lang@b1-systems.de&gt;" date="1356523201">- added lsb header "short-description" to start script
- changed RPM group to Productivity/Networking/Email/Servers
- added a "reload" alias to the restart section to make rpmlint happy (no "reload" implemented yet)
- updated FSF address</changelog>
  <changelog author="lang@b1-systems.de" date="1358337600">- systemd service file added (still lacks package integration)</changelog>
</package>
<package pkgid="1885c39a0c86da7d52ddb5de24a6b004f847a819f5f04685f699b4849c6d1935" name="vanessa_adt" arch="src">
  <version epoch="0" ver="0.0.9" rel="3.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.5</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1121169600">- updated to 0.0.7</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.0.9
  - lot of changes please see ChangeLog
- lib packaging policy
  o added sub-pkg libsoname
- disable-static
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to spdx license tag</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- use url</changelog>
</package>
<package pkgid="c07296226e90d636d9963cb105b2fd41f3bd9de2fd27a26cce0025e98a02bf0b" name="vanessa_adt-debugsource" arch="x86_64">
  <version epoch="0" ver="0.0.9" rel="3.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.5</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1121169600">- updated to 0.0.7</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.0.9
  - lot of changes please see ChangeLog
- lib packaging policy
  o added sub-pkg libsoname
- disable-static
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to spdx license tag</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- use url</changelog>
</package>
<package pkgid="a91fa27d0c9bb3d4a6a5fde7e599fd86d34fd433eec4890d401a1a2fb9690f98" name="vanessa_adt-devel" arch="x86_64">
  <version epoch="0" ver="0.0.9" rel="3.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.5</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1121169600">- updated to 0.0.7</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.0.9
  - lot of changes please see ChangeLog
- lib packaging policy
  o added sub-pkg libsoname
- disable-static
- moved changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- update to spdx license tag</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- use url</changelog>
</package>
<package pkgid="072894cead042f7e82b5ee6cc042be34df2f273e26351afccba07365cff4a3e5" name="vanessa_logger" arch="src">
  <version epoch="0" ver="0.0.10" rel="4.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.5</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1110283200">- updated to 0.0.7</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.10
  * vanessa_logger 0.0.10
  * Add pkgconfig information
  * Remove __VANESSA_LOGGER_SAFE_FREE
  * Reopen syslog loggers
  * Debian: Update standards version to 3.9.0
  * Remove unnecessary call to realloc() in __vanessa_logger_str_dump_oct()
  * Remove duplicate handling of ' ' in __vanessa_logger_str_dump_oct()
  * Don't overrun buffer in vanessa_logger_str_dump_oct()
- lib naming policy
- fix deps
  o add pkg-config
- package baselibs.conf
- build --disable-static
- move changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- spec file clean up and make it build again
  - require things for autoreconf -fi
  - strip some macros and conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- disable the pkg config file rename. it breaks perdition finding
  the libraries.</changelog>
</package>
<package pkgid="5181bfb3d74297f77e0a35e85b9a1125e4b22c866dc9ba2df7b52f05091a049e" name="vanessa_logger-debugsource" arch="x86_64">
  <version epoch="0" ver="0.0.10" rel="4.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.5</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1110283200">- updated to 0.0.7</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.10
  * vanessa_logger 0.0.10
  * Add pkgconfig information
  * Remove __VANESSA_LOGGER_SAFE_FREE
  * Reopen syslog loggers
  * Debian: Update standards version to 3.9.0
  * Remove unnecessary call to realloc() in __vanessa_logger_str_dump_oct()
  * Remove duplicate handling of ' ' in __vanessa_logger_str_dump_oct()
  * Don't overrun buffer in vanessa_logger_str_dump_oct()
- lib naming policy
- fix deps
  o add pkg-config
- package baselibs.conf
- build --disable-static
- move changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- spec file clean up and make it build again
  - require things for autoreconf -fi
  - strip some macros and conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- disable the pkg config file rename. it breaks perdition finding
  the libraries.</changelog>
</package>
<package pkgid="3c8a207922ef9fb8b1d82a3889345b9bc6ce884858ceda11b4b746ad86920f5c" name="vanessa_logger-devel" arch="x86_64">
  <version epoch="0" ver="0.0.10" rel="4.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.5</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1110283200">- updated to 0.0.7</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.10
  * vanessa_logger 0.0.10
  * Add pkgconfig information
  * Remove __VANESSA_LOGGER_SAFE_FREE
  * Reopen syslog loggers
  * Debian: Update standards version to 3.9.0
  * Remove unnecessary call to realloc() in __vanessa_logger_str_dump_oct()
  * Remove duplicate handling of ' ' in __vanessa_logger_str_dump_oct()
  * Don't overrun buffer in vanessa_logger_str_dump_oct()
- lib naming policy
- fix deps
  o add pkg-config
- package baselibs.conf
- build --disable-static
- move changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- spec file clean up and make it build again
  - require things for autoreconf -fi
  - strip some macros and conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- disable the pkg config file rename. it breaks perdition finding
  the libraries.</changelog>
</package>
<package pkgid="3ceb3b5b12dbdb401a6dab3e8d02dcd69b05dfdd34f5fa82b1152a4a07ff99be" name="vanessa_logger-sample" arch="x86_64">
  <version epoch="0" ver="0.0.10" rel="4.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.5</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1110283200">- updated to 0.0.7</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.10
  * vanessa_logger 0.0.10
  * Add pkgconfig information
  * Remove __VANESSA_LOGGER_SAFE_FREE
  * Reopen syslog loggers
  * Debian: Update standards version to 3.9.0
  * Remove unnecessary call to realloc() in __vanessa_logger_str_dump_oct()
  * Remove duplicate handling of ' ' in __vanessa_logger_str_dump_oct()
  * Don't overrun buffer in vanessa_logger_str_dump_oct()
- lib naming policy
- fix deps
  o add pkg-config
- package baselibs.conf
- build --disable-static
- move changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- spec file clean up and make it build again
  - require things for autoreconf -fi
  - strip some macros and conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- disable the pkg config file rename. it breaks perdition finding
  the libraries.</changelog>
</package>
<package pkgid="3ac646ef8a5993c396026805ccc17a57101a11271e48d07577d7fd028ebb0ba8" name="vanessa_logger-sample-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.0.10" rel="4.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.5</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1110283200">- updated to 0.0.7</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.10
  * vanessa_logger 0.0.10
  * Add pkgconfig information
  * Remove __VANESSA_LOGGER_SAFE_FREE
  * Reopen syslog loggers
  * Debian: Update standards version to 3.9.0
  * Remove unnecessary call to realloc() in __vanessa_logger_str_dump_oct()
  * Remove duplicate handling of ' ' in __vanessa_logger_str_dump_oct()
  * Don't overrun buffer in vanessa_logger_str_dump_oct()
- lib naming policy
- fix deps
  o add pkg-config
- package baselibs.conf
- build --disable-static
- move changelog to changes file</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- spec file clean up and make it build again
  - require things for autoreconf -fi
  - strip some macros and conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- disable the pkg config file rename. it breaks perdition finding
  the libraries.</changelog>
</package>
<package pkgid="2b529ddbcca4495bebacacb00af07383eb8efbc4bacd0968482a7c1f4b2252d4" name="vanessa_socket" arch="src">
  <version epoch="0" ver="0.0.12" rel="4.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.7</changelog>
  <changelog author="simon.matter@invoca.ch" date="1121169600">- changed license tag in spec file</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161518400">- Updated SPEC to work with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.0.12
  * Debian: The new library file is libvanessa_socket.so.2.1.0
  * Update the library from 2:0:0 to 3:1:0
  * Don't use AC_C_CONST
  * Add pkgconfig information
  * Added support for TCP-KEEPALIVE.
  - for further info please see ChangeLog file
- lib packaging policy
  o added sub-pkg libsoname
- package baselibs.conf
- disable-static
- moved changelog to changes file
- add pkgconfig_DATA patch</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- spec file clean up and make it build again
  - require things for autoreconf -fi
  - strip some macros and conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- disable the pkg config file rename. it breaks perdition finding
  the libraries.</changelog>
</package>
<package pkgid="c7b90d93175b721cd63ceaa4b49e9d32c92fbf6a6f915a52bd8ace22db433c82" name="vanessa_socket-debugsource" arch="x86_64">
  <version epoch="0" ver="0.0.12" rel="4.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.7</changelog>
  <changelog author="simon.matter@invoca.ch" date="1121169600">- changed license tag in spec file</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161518400">- Updated SPEC to work with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.0.12
  * Debian: The new library file is libvanessa_socket.so.2.1.0
  * Update the library from 2:0:0 to 3:1:0
  * Don't use AC_C_CONST
  * Add pkgconfig information
  * Added support for TCP-KEEPALIVE.
  - for further info please see ChangeLog file
- lib packaging policy
  o added sub-pkg libsoname
- package baselibs.conf
- disable-static
- moved changelog to changes file
- add pkgconfig_DATA patch</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- spec file clean up and make it build again
  - require things for autoreconf -fi
  - strip some macros and conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- disable the pkg config file rename. it breaks perdition finding
  the libraries.</changelog>
</package>
<package pkgid="47e6d1ee063392df4957e873895f8a3aee65cde0eb385a58fe5812b7bab03f27" name="vanessa_socket-devel" arch="x86_64">
  <version epoch="0" ver="0.0.12" rel="4.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.7</changelog>
  <changelog author="simon.matter@invoca.ch" date="1121169600">- changed license tag in spec file</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161518400">- Updated SPEC to work with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.0.12
  * Debian: The new library file is libvanessa_socket.so.2.1.0
  * Update the library from 2:0:0 to 3:1:0
  * Don't use AC_C_CONST
  * Add pkgconfig information
  * Added support for TCP-KEEPALIVE.
  - for further info please see ChangeLog file
- lib packaging policy
  o added sub-pkg libsoname
- package baselibs.conf
- disable-static
- moved changelog to changes file
- add pkgconfig_DATA patch</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- spec file clean up and make it build again
  - require things for autoreconf -fi
  - strip some macros and conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- disable the pkg config file rename. it breaks perdition finding
  the libraries.</changelog>
</package>
<package pkgid="3f715663c1582206e523ecd17de666f1c5e09748fc6c000a956fe708204b7195" name="vanessa_socket-pipe" arch="x86_64">
  <version epoch="0" ver="0.0.12" rel="4.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.7</changelog>
  <changelog author="simon.matter@invoca.ch" date="1121169600">- changed license tag in spec file</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161518400">- Updated SPEC to work with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.0.12
  * Debian: The new library file is libvanessa_socket.so.2.1.0
  * Update the library from 2:0:0 to 3:1:0
  * Don't use AC_C_CONST
  * Add pkgconfig information
  * Added support for TCP-KEEPALIVE.
  - for further info please see ChangeLog file
- lib packaging policy
  o added sub-pkg libsoname
- package baselibs.conf
- disable-static
- moved changelog to changes file
- add pkgconfig_DATA patch</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- spec file clean up and make it build again
  - require things for autoreconf -fi
  - strip some macros and conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- disable the pkg config file rename. it breaks perdition finding
  the libraries.</changelog>
</package>
<package pkgid="e91acdd3bcf77635b7e864a34029060b395ef879acf6f6b26701b72211baa3ea" name="vanessa_socket-pipe-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.0.12" rel="4.1"/>
  <changelog author="simon.matter@invoca.ch" date="1056974400">- initial build</changelog>
  <changelog author="simon.matter@invoca.ch" date="1071489600">- updated to 0.0.6</changelog>
  <changelog author="simon.matter@invoca.ch" date="1080043200">- updated to 0.0.7</changelog>
  <changelog author="simon.matter@invoca.ch" date="1121169600">- changed license tag in spec file</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1161518400">- Updated SPEC to work with SUSE</changelog>
  <changelog author="chris@computersalat.de" date="1299672000">- update to 0.0.12
  * Debian: The new library file is libvanessa_socket.so.2.1.0
  * Update the library from 2:0:0 to 3:1:0
  * Don't use AC_C_CONST
  * Add pkgconfig information
  * Added support for TCP-KEEPALIVE.
  - for further info please see ChangeLog file
- lib packaging policy
  o added sub-pkg libsoname
- package baselibs.conf
- disable-static
- moved changelog to changes file
- add pkgconfig_DATA patch</changelog>
  <changelog author="mrueckert@suse.de" date="1447070400">- spec file clean up and make it build again
  - require things for autoreconf -fi
  - strip some macros and conditionals</changelog>
  <changelog author="mrueckert@suse.de" date="1447070401">- disable the pkg config file rename. it breaks perdition finding
  the libraries.</changelog>
</package>
<package pkgid="7db16e6e719805fee07992d09fb654a1ce903c8afed1f4323ca5453b53ab92f4" name="vrfy" arch="src">
  <version epoch="0" ver="990522" rel="478.1"/>
  <changelog author="adostal@suse.cz" date="991656000">- creation a new package and patch the makefile (DESTBIN, DESTMAN, GROUP, PROG)</changelog>
  <changelog author="adostal@suse.cz" date="1000987200">- fix manual pages in patch and spec file</changelog>
  <changelog author="schwab@suse.de" date="1137326400">- Use RPM_OPT_FLAGS.
- Don't strip binaries.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="anicka@suse.cz" date="1152532800">- rewrite functions with optional arguments, fixes [#188991]
- use strerror instead of errlist</changelog>
  <changelog author="ro@suse.de" date="1171195200">- fix build as non-root (no chown in install)</changelog>
</package>
<package pkgid="f62fd43ff69f2b8b05f1d603b417ed1dd6d307533f95ed2a1ce39e68235e36a0" name="vrfy" arch="x86_64">
  <version epoch="0" ver="990522" rel="478.1"/>
  <changelog author="adostal@suse.cz" date="991656000">- creation a new package and patch the makefile (DESTBIN, DESTMAN, GROUP, PROG)</changelog>
  <changelog author="adostal@suse.cz" date="1000987200">- fix manual pages in patch and spec file</changelog>
  <changelog author="schwab@suse.de" date="1137326400">- Use RPM_OPT_FLAGS.
- Don't strip binaries.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="anicka@suse.cz" date="1152532800">- rewrite functions with optional arguments, fixes [#188991]
- use strerror instead of errlist</changelog>
  <changelog author="ro@suse.de" date="1171195200">- fix build as non-root (no chown in install)</changelog>
</package>
<package pkgid="43c8f278822f1d6ed31c77c5a4b8f39abd2536bab5886cd23acdf2a28f9029d6" name="vrfy-debuginfo" arch="x86_64">
  <version epoch="0" ver="990522" rel="478.1"/>
  <changelog author="adostal@suse.cz" date="991656000">- creation a new package and patch the makefile (DESTBIN, DESTMAN, GROUP, PROG)</changelog>
  <changelog author="adostal@suse.cz" date="1000987200">- fix manual pages in patch and spec file</changelog>
  <changelog author="schwab@suse.de" date="1137326400">- Use RPM_OPT_FLAGS.
- Don't strip binaries.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="anicka@suse.cz" date="1152532800">- rewrite functions with optional arguments, fixes [#188991]
- use strerror instead of errlist</changelog>
  <changelog author="ro@suse.de" date="1171195200">- fix build as non-root (no chown in install)</changelog>
</package>
<package pkgid="bb45ee53a236870a08f499b2c0a58995628bedfb0da54f19ff64945386048be9" name="vrfy-debugsource" arch="x86_64">
  <version epoch="0" ver="990522" rel="478.1"/>
  <changelog author="adostal@suse.cz" date="991656000">- creation a new package and patch the makefile (DESTBIN, DESTMAN, GROUP, PROG)</changelog>
  <changelog author="adostal@suse.cz" date="1000987200">- fix manual pages in patch and spec file</changelog>
  <changelog author="schwab@suse.de" date="1137326400">- Use RPM_OPT_FLAGS.
- Don't strip binaries.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="anicka@suse.cz" date="1152532800">- rewrite functions with optional arguments, fixes [#188991]
- use strerror instead of errlist</changelog>
  <changelog author="ro@suse.de" date="1171195200">- fix build as non-root (no chown in install)</changelog>
</package>
</otherdata>