Timo released a new version of Dovecot, I’ve installed it on my test servers and production server without a problem. No security issues solved, upgrade at your own leisure. The noticeable changes are:

• DIGEST-MD5 authentication supports authorization id now. Patch by Yubao Liu
• Added instance_name setting which is used to prefix Dovecot processes in ps output.
• LDA/LMTP: Sending a large mail via submission_host or via LMTP proxy may have caused a hang.
• Fixed dbox + mail_attachment_dir + zlib problems.
• Login processes weren’t logging all intended messages with auth_verbose=yes
• IMAP: THREAD REFS sometimes returned invalid (0) nodes.
• IMAP: CONTEXT search return option wasn’t handled at all.
• dbox: Various error handling fixes.
• snarf plugin: Keep the mailbox locked during snarfing to avoid duplicates.

A new version of Dovecot has been released, I’ve installed it on my test servers and production server without a problem. I would advise you to upgrade this time as the SSL stuff is recommended to be used. The noticeable changes are:

• Proxying now supports sending SSL client certificate to server with ssl_client_cert/key settings.
• doveadm dump: Added support for dumping dbox headers/metadata.
• Fixed memory leaks in login processes with SSL connections
• vpopmail support was broken in v2.0.16

A new version of Dovecot has been released, as usual I’ve installed it on my test servers and production server without a problem. Check the improvements and decide if you want to upgrade as it are many small fixes, plus some more noticeable:

Comment from Timo on this release was:

I only now noticed that the VSZ limits weren’t being enforced with earlier v2.0.x releases (or they were set 1024 times too high). So if a Dovecot process was leaking memory, it wasn’t being killed by kernel. Now that this enforcing is done, some installations will probably start seeing errors about reaching these limits in normal operation. The default_vsz_limit is 256 MB. You may want to increase it in larger installations to 1 GB just in case.

Besides the changes listed below, a lot of smaller fixes were done.

A list of the bigger fixes:

• VSZ limits weren’t being enforced for any processes. On server with large mailboxes you may now see errors about it if the limits aren’t high enough. To fix them, either increase individual service { vsz_limit } values or simply increase the default_vsz_limit setting.
• Proxying: If using ssl=yes or starttls=yes with a hostname (not IP) as proxy destination, require that the certificate matches the given hostname.
• LMTP: Changed default client_limit to 1. This should improve LMTP throughput with default settings.
• dsync: Quota is no longer enforced (i.e. dsync can’t fail because user is over quota).
• Added “auto” mail storage driver, which can be used to auto detect mailbox location and format. This behavior is already the default for empty mail_location setting, so this change is mainly useful for shared namespace’s location setting.
• checkpassword: Export all auth %variables to AUTH_* environment.

Whilst upgrading my production server, the one you’re getting these pages served by, to Lion and reinstalling all the programs on it I’ve also found time to write everything down for you to use when you upgrade to Lion. We already had the MAMP stuff teated and documented but now all the mail server components have been tested and written.

http://diymacserver.com/mail/lion/

So enjoy your new installation of Lion with these instructions.

In the coming week I will move all my stuff to the new Mini, hopefully without too much interruptions in our service.

A new version of Dovecot has been released, as usual I’ve installed it on my test servers and production server without a problem. Check the improvements and decide if you want to upgrade as it are many small fixes, plus some more noticeable:

• Added “doveadm index” command to add unindexed messages into index/cache. If full text search is enabled, it also adds unindexed messages to the fts database
• added “doveadm director dump” command.
• pop3: Added support for showing messages in “POP3 order”, which can be different from IMAP message order. This can be useful for migrations from other servers. Implemented it for Maildir as ‘O’ field in dovecot-uidlist.
• doveconf: Fixed a wrong “subsection has ssl=yes” warning.
• mdbox purge: Fixed wrong warning about corrupted extrefs.
• sdbox: INBOX GUID changed when INBOX was autocreated, leading to trouble with dsync.
• script-login binary wasn’t actually dropping privileges to the user/group/chroot specified by its service settings.
• Fixed potential crashes and other problems when parsing header names that contained NUL characters.