Merge version 1:2.4.2+dfsg1-3+rpi1 and 1:2.4.3+dfsg1-2 to produce 1:2.4.3+dfsg1-2+rpi1

Merge dovecot (1:2.4.3+dfsg1-2) import into refs/heads/workingbranch

test-dir

===================================================================

Gbp-Pq: Name test-dir.patch

[PATCH] Correctly handle signed 32-bit time_t types

Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1124541
Forwarded: no

dovecot handles 32-bit time_t in a couple of different ways, but neither quite
works currently.  Setting TIME_T_MAX_BITS to 31 isn't correctly handled in
places where time_t values are constructed, for example in
io_loop_get_wait_time().

Similarly, setting TIME_T_MAX_BITS = 32 and defining TIME_T_SIGNED is not
correctly handled by tm_is_too_large().

This change fixes tm_is_too_large() to set max_time to the correct maximum date
representable by a signed 32-bit time_t.

Closes: #1124541
Gbp-Pq: Name Correctly_handle_signed_32-bit_time_t_types.patch

[PATCH] Work around test failure on big-endian architectures

Because the endianness of the target system results in data being
layed out differently in memory, the manually constructed test input
doesn't result in the expected failure modes, which is interpreted as
a test failure.

This is not a permanent fix.  See
https://dovecot.org/mailman3/archives/list/dovecot@dovecot.org/message/FZBVU55TK5332SMZSSDNWIVJCWGUAJQS/

Gbp-Pq: Name work-around-test-failure-on-big-endian-architectures.patch

Fix groff errors in upstream manpages

Forwarded: no
Last-Update: 2025-05-02

Last-Update: 2025-05-02
Gbp-Pq: Name fix-man-errors.patch

fit-32-bit-test-integers

===================================================================

Gbp-Pq: Name fit-32-bit-test-integers.patch

Use _FORTIFY_SOURCE level 3

Forwarded: not-needed

Gbp-Pq: Name Use-_FORTIFY_SOURCE-level-3.patch

Don't try to build doc/rfc subdir components

Forwarded: not-needed

Forwarded: not-needed
Gbp-Pq: Name skip-rfc-subdir.patch

dovecot (1:2.4.3+dfsg1-2) unstable; urgency=medium

  * [2e35d07] autopkgtests: Add managesieved authentication test
  * [226112b] Remove generated settings-history-pigeonhole.h on clean
  * [dd36c64] ci: replace obsolete build-package-twice test
  * [d6da850] use an alternate temporary directory in the test suite
    (Closes: #1133346)
  * [80afe14] ci: disable the validate-package-clean-up check
  * [c9e076a] drop stale lintian overrides

[dgit import unpatched dovecot 1:2.4.3+dfsg1-2]

Import dovecot_2.4.3+dfsg1-2.debian.tar.xz

[dgit import tarball dovecot 1:2.4.3+dfsg1-2 dovecot_2.4.3+dfsg1-2.debian.tar.xz]

Import dovecot_2.4.3+dfsg1.orig.tar.gz

[dgit import orig dovecot_2.4.3+dfsg1.orig.tar.gz]

Import dovecot_2.4.3+dfsg1.orig-pigeonhole.tar.gz

[dgit import orig dovecot_2.4.3+dfsg1.orig-pigeonhole.tar.gz]

Merge dovecot (1:2.4.2+dfsg1-4) import into refs/heads/workingbranch

[PATCH] trash: Use mailbox event in trash_try_mailbox() for settings

Gbp-Pq: Name 0001-trash-Use-mailbox-event-in-trash_try_mailbox-for-set.patch

[PATCH] lib: Preserve errno in our malloc() and free() wrappers

Various places assume that e.g. t_strdup_printf() calls and such don't
modify errno. But because they internally call malloc() or calloc(), this
isn't actually guaranteed now and it can happen at least with newer glibc
versions. Explicitly preserve the errno for these calls where it might
be a problem.

Gbp-Pq: Name lib_Preserve_errno_in_our_malloc_and_free_wrappers.patch

[PATCH] lib-regex: Do not use data stack for replacement string

It will get lost when the data stack frame is dropped at the end,
so use heap memory instead.

Gbp-Pq: Name lib-regex-Do-not-use-data-stack-for-replacement-stri.patch

[PATCH] lib-regex: Limit number of capture groups correctly

We create at maximum max_capture_groups match groups.

Gbp-Pq: Name lib-regex_Limit_number_of_capture_groups_correctly.patch

[PATCH] lib-regex: Set DREGEX_MAX_MATCHES to library default

Gbp-Pq: Name lib-regex_Set_DREGEX_MAX_MATCHES_to_library_default.patch

[PATCH] lib-regex: Separate maximum capture groups and match limit

These are not related.

Gbp-Pq: Name lib-regex_Separate_maximum_capture_groups_and_match_limit.patch

[PATCH] Correctly handle signed 32-bit time_t types

Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1124541
Forwarded: no

dovecot handles 32-bit time_t in a couple of different ways, but neither quite
works currently.  Setting TIME_T_MAX_BITS to 31 isn't correctly handled in
places where time_t values are constructed, for example in
io_loop_get_wait_time().

Similarly, setting TIME_T_MAX_BITS = 32 and defining TIME_T_SIGNED is not
correctly handled by tm_is_too_large().

This change fixes tm_is_too_large() to set max_time to the correct maximum date
representable by a signed 32-bit time_t.

Closes: #1124541
Gbp-Pq: Name Correctly_handle_signed_32-bit_time_t_types.patch

[PATCH] Work around test failure on big-endian architectures

Because the endianness of the target system results in data being
layed out differently in memory, the manually constructed test input
doesn't result in the expected failure modes, which is interpreted as
a test failure.

This is not a permanent fix.  See
https://dovecot.org/mailman3/archives/list/dovecot@dovecot.org/message/FZBVU55TK5332SMZSSDNWIVJCWGUAJQS/

Gbp-Pq: Name work-around-test-failure-on-big-endian-architectures.patch

[PATCH] auth: ldap - Fix crash if users are iterated, but userdb_ldap_iterate_fields is not set

From 576a2f52bff4c13971d9e6d1172857a4f18ddd14 Mon Sep 17 00:00:00 2001
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121000

Gbp-Pq: Name bug1121000_dovecot-ldap_Crash_if_iterate_filter_is_set_but_iterate_fields_is_not_set.patch

fix 32-bit compile failure

Origin: https://github.com/dovecot/pigeonhole/commit/82e3d905d68723f6477619ebb0a642ffe7f126bc.patch

Origin: https://github.com/dovecot/pigeonhole/commit/82e3d905d68723f6477619ebb0a642ffe7f126bc.patch
Gbp-Pq: Name fix-32-bit-compile-error.patch

Fix groff errors in upstream manpages

Forwarded: no
Last-Update: 2025-05-02

Last-Update: 2025-05-02
Gbp-Pq: Name fix-man-errors.patch

fit-32-bit-test-integers

===================================================================

Gbp-Pq: Name fit-32-bit-test-integers.patch

Use _FORTIFY_SOURCE level 3

Forwarded: not-needed

Gbp-Pq: Name Use-_FORTIFY_SOURCE-level-3.patch

Don't try to build doc/rfc subdir components

Forwarded: not-needed

Forwarded: not-needed
Gbp-Pq: Name skip-rfc-subdir.patch

dovecot (1:2.4.2+dfsg1-4) unstable; urgency=medium

  * [e8f1499] Drop stale build-dependency on libdb-dev (Closes: #1119173)
  * [86b8fb2] lib: Preserve errno in our malloc() and free() wrappers
    (Closes: #1128400)
  * [99e1cd6] backport upstream fix for crash in trash plugin (Closes: #1127029)

[dgit import unpatched dovecot 1:2.4.2+dfsg1-4]

Import dovecot_2.4.2+dfsg1-4.debian.tar.xz

[dgit import tarball dovecot 1:2.4.2+dfsg1-4 dovecot_2.4.2+dfsg1-4.debian.tar.xz]

Merge version 1:2.4.1+dfsg1-6+rpi1 and 1:2.4.2+dfsg1-3 to produce 1:2.4.2+dfsg1-3+rpi1

Merge dovecot (1:2.4.2+dfsg1-3) import into refs/heads/workingbranch

[PATCH] lib-regex: Do not use data stack for replacement string

It will get lost when the data stack frame is dropped at the end,
so use heap memory instead.

Gbp-Pq: Name lib-regex-Do-not-use-data-stack-for-replacement-stri.patch

[PATCH] lib-regex: Limit number of capture groups correctly

We create at maximum max_capture_groups match groups.

Gbp-Pq: Name lib-regex_Limit_number_of_capture_groups_correctly.patch

[PATCH] lib-regex: Set DREGEX_MAX_MATCHES to library default

Gbp-Pq: Name lib-regex_Set_DREGEX_MAX_MATCHES_to_library_default.patch

[PATCH] lib-regex: Separate maximum capture groups and match limit

These are not related.

Gbp-Pq: Name lib-regex_Separate_maximum_capture_groups_and_match_limit.patch

[PATCH] Correctly handle signed 32-bit time_t types

Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1124541
Forwarded: no

dovecot handles 32-bit time_t in a couple of different ways, but neither quite
works currently.  Setting TIME_T_MAX_BITS to 31 isn't correctly handled in
places where time_t values are constructed, for example in
io_loop_get_wait_time().

Similarly, setting TIME_T_MAX_BITS = 32 and defining TIME_T_SIGNED is not
correctly handled by tm_is_too_large().

This change fixes tm_is_too_large() to set max_time to the correct maximum date
representable by a signed 32-bit time_t.

Closes: #1124541
Gbp-Pq: Name Correctly_handle_signed_32-bit_time_t_types.patch

[PATCH] Work around test failure on big-endian architectures

Because the endianness of the target system results in data being
layed out differently in memory, the manually constructed test input
doesn't result in the expected failure modes, which is interpreted as
a test failure.

This is not a permanent fix.  See
https://dovecot.org/mailman3/archives/list/dovecot@dovecot.org/message/FZBVU55TK5332SMZSSDNWIVJCWGUAJQS/

Gbp-Pq: Name work-around-test-failure-on-big-endian-architectures.patch

[PATCH] auth: ldap - Fix crash if users are iterated, but userdb_ldap_iterate_fields is not set

From 576a2f52bff4c13971d9e6d1172857a4f18ddd14 Mon Sep 17 00:00:00 2001
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121000

Gbp-Pq: Name bug1121000_dovecot-ldap_Crash_if_iterate_filter_is_set_but_iterate_fields_is_not_set.patch

fix 32-bit compile failure

Origin: https://github.com/dovecot/pigeonhole/commit/82e3d905d68723f6477619ebb0a642ffe7f126bc.patch

Origin: https://github.com/dovecot/pigeonhole/commit/82e3d905d68723f6477619ebb0a642ffe7f126bc.patch
Gbp-Pq: Name fix-32-bit-compile-error.patch

Fix groff errors in upstream manpages

Forwarded: no
Last-Update: 2025-05-02

Last-Update: 2025-05-02
Gbp-Pq: Name fix-man-errors.patch

fit-32-bit-test-integers

===================================================================

Gbp-Pq: Name fit-32-bit-test-integers.patch

Use _FORTIFY_SOURCE level 3

Forwarded: not-needed

Gbp-Pq: Name Use-_FORTIFY_SOURCE-level-3.patch

Don't try to build doc/rfc subdir components

Forwarded: not-needed

Forwarded: not-needed
Gbp-Pq: Name skip-rfc-subdir.patch

dovecot (1:2.4.2+dfsg1-3) unstable; urgency=medium

  * [986f666] Correctly handle signed 32-bit time_t types (Closes: #1124541)
  * [e2498a3] import upstream fixes to regex handling with libpcre
    (Closes: #1121519)
  * [c613433] refresh debian/copyright
  * [79dcac4] refresh lintian overrides
  * [67a151e] d/control: drop Priority fields per policy 4.7.3
  * [7c03ad9] d/control: bump standards-version to 4.7.3

[dgit import unpatched dovecot 1:2.4.2+dfsg1-3]

Import dovecot_2.4.2+dfsg1-3.debian.tar.xz

[dgit import tarball dovecot 1:2.4.2+dfsg1-3 dovecot_2.4.2+dfsg1-3.debian.tar.xz]

Merge dovecot (1:2.4.2+dfsg1-2) import into refs/heads/workingbranch

[PATCH] Work around test failure on big-endian architectures

Because the endianness of the target system results in data being
layed out differently in memory, the manually constructed test input
doesn't result in the expected failure modes, which is interpreted as
a test failure.

This is not a permanent fix.  See
https://dovecot.org/mailman3/archives/list/dovecot@dovecot.org/message/FZBVU55TK5332SMZSSDNWIVJCWGUAJQS/

Gbp-Pq: Name work-around-test-failure-on-big-endian-architectures.patch

[PATCH] auth: ldap - Fix crash if users are iterated, but userdb_ldap_iterate_fields is not set

From 576a2f52bff4c13971d9e6d1172857a4f18ddd14 Mon Sep 17 00:00:00 2001
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121000

Gbp-Pq: Name bug1121000_dovecot-ldap_Crash_if_iterate_filter_is_set_but_iterate_fields_is_not_set.patch

fix 32-bit compile failure

Origin: https://github.com/dovecot/pigeonhole/commit/82e3d905d68723f6477619ebb0a642ffe7f126bc.patch

Origin: https://github.com/dovecot/pigeonhole/commit/82e3d905d68723f6477619ebb0a642ffe7f126bc.patch
Gbp-Pq: Name fix-32-bit-compile-error.patch

Fix groff errors in upstream manpages

Forwarded: no
Last-Update: 2025-05-02

Last-Update: 2025-05-02
Gbp-Pq: Name fix-man-errors.patch

fit-32-bit-test-integers

===================================================================

Gbp-Pq: Name fit-32-bit-test-integers.patch

Use _FORTIFY_SOURCE level 3

Forwarded: not-needed

Gbp-Pq: Name Use-_FORTIFY_SOURCE-level-3.patch

Don't try to build doc/rfc subdir components

Forwarded: not-needed

Forwarded: not-needed
Gbp-Pq: Name skip-rfc-subdir.patch

dovecot (1:2.4.2+dfsg1-2) unstable; urgency=medium

  * [e34626c] import upstream fix for possible crash in ldap userdb
    (Closes: #1121000)
  * [8d95d15] d/control: add libpcre2-dev to build-deps (Closes: #1121193)
  * [7b23f06] Work around test failure on big-endian architectures

[dgit import unpatched dovecot 1:2.4.2+dfsg1-2]

Import dovecot_2.4.2+dfsg1-2.debian.tar.xz

[dgit import tarball dovecot 1:2.4.2+dfsg1-2 dovecot_2.4.2+dfsg1-2.debian.tar.xz]

Import dovecot_2.4.2+dfsg1.orig.tar.gz

[dgit import orig dovecot_2.4.2+dfsg1.orig.tar.gz]

Import dovecot_2.4.2+dfsg1.orig-pigeonhole.tar.gz

[dgit import orig dovecot_2.4.2+dfsg1.orig-pigeonhole.tar.gz]

Merge version 1:2.4.1+dfsg1-5+rpi1 and 1:2.4.1+dfsg1-6 to produce 1:2.4.1+dfsg1-6+rpi1

Merge version 1:2.4.1+dfsg1-4+rpi1 and 1:2.4.1+dfsg1-5 to produce 1:2.4.1+dfsg1-5+rpi1

Merge dovecot (1:2.4.1+dfsg1-6) import into refs/heads/workingbranch

[PATCH] Fix LDAP SASL auth support

961275fdb54878fdfa4ee1b9f1a4f00e82bf4a83 moved code without creating a
way to have HAVE_LDAP_SASL defined there.

Copy the preprocessor block from src/auth/db-ldap.c to fix this.

Gbp-Pq: Name bug1106784_Fix-LDAP-SASL-auth-support.patch

Fix groff errors in upstream manpages

Forwarded: no
Last-Update: 2025-05-02

Last-Update: 2025-05-02
Gbp-Pq: Name fix-man-errors.patch

Fix GSSAPI regression

Origin: https://dovecot.org/mailman3/archives/list/dovecot@dovecot.org/message/O54EAGLIXXHMOH7BQCCKHHB3Z32HDWVR/
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104549
Last-Update: 2025-05-02

Dovecot 2.4 introduced a regression that broke GSSAPI authentication for
some clients.  This patch contains a fix provided by the upstream maintainers.
Last-Update: 2025-05-02
Gbp-Pq: Name bug1104549-gssapi-regression.patch

fit-32-bit-test-integers

===================================================================

Gbp-Pq: Name fit-32-bit-test-integers.patch

Use _FORTIFY_SOURCE level 3

Forwarded: not-needed

Gbp-Pq: Name Use-_FORTIFY_SOURCE-level-3.patch

[PATCH] lda: Default mail_home=$HOME environment if not using userdb lookup

The previous code to do this was removed by
e57d5b9002f910c095ee5b55821395fcf1da016a

Gbp-Pq: Name 0002-lda-Default-mail_home-HOME-environment-if-not-using-.patch

[PATCH] lda: Fix using USER environment if -d hasn't been specified

This became broken at some point.

Gbp-Pq: Name 0001-lda-Fix-using-USER-environment-if-d-hasn-t-been-spec.patch

Don't try to build doc/rfc subdir components

Forwarded: not-needed

Forwarded: not-needed
Gbp-Pq: Name skip-rfc-subdir.patch

dovecot (1:2.4.1+dfsg1-6) unstable; urgency=medium

  * [8c6ba88] Fix LDAP SASL auth support (Closes: #1106784)
  * [fac9131] Avoid -fstack-clash-protection on hppa architecture
    (Closes: #1107609)
  * [071beb5] d/control: update Uploaders to reflect the current reality

[dgit import unpatched dovecot 1:2.4.1+dfsg1-6]

Import dovecot_2.4.1+dfsg1-6.debian.tar.xz

[dgit import tarball dovecot 1:2.4.1+dfsg1-6 dovecot_2.4.1+dfsg1-6.debian.tar.xz]

Merge dovecot (1:2.4.1+dfsg1-5) import into refs/heads/workingbranch

Fix groff errors in upstream manpages

Forwarded: no
Last-Update: 2025-05-02

Last-Update: 2025-05-02
Gbp-Pq: Name fix-man-errors.patch

Fix GSSAPI regression

Origin: https://dovecot.org/mailman3/archives/list/dovecot@dovecot.org/message/O54EAGLIXXHMOH7BQCCKHHB3Z32HDWVR/
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104549
Last-Update: 2025-05-02

Dovecot 2.4 introduced a regression that broke GSSAPI authentication for
some clients.  This patch contains a fix provided by the upstream maintainers.
Last-Update: 2025-05-02
Gbp-Pq: Name bug1104549-gssapi-regression.patch

fit-32-bit-test-integers

===================================================================

Gbp-Pq: Name fit-32-bit-test-integers.patch

Use _FORTIFY_SOURCE level 3

Forwarded: not-needed

Gbp-Pq: Name Use-_FORTIFY_SOURCE-level-3.patch

[PATCH] lda: Default mail_home=$HOME environment if not using userdb lookup

The previous code to do this was removed by
e57d5b9002f910c095ee5b55821395fcf1da016a

Gbp-Pq: Name 0002-lda-Default-mail_home-HOME-environment-if-not-using-.patch

[PATCH] lda: Fix using USER environment if -d hasn't been specified

This became broken at some point.

Gbp-Pq: Name 0001-lda-Fix-using-USER-environment-if-d-hasn-t-been-spec.patch

Don't try to build doc/rfc subdir components

Forwarded: not-needed

Forwarded: not-needed
Gbp-Pq: Name skip-rfc-subdir.patch

dovecot (1:2.4.1+dfsg1-5) unstable; urgency=medium

  * [e6e5ef7] Fix typo in conf.d/auth-passwdfile.conf.ext (Closes: #1106072)
  * [2a34ed0] Import upstream fix for dovecot-lda data loss (Closes: #1106485)
  * [6c287ea] Fix typo in doveadm-fetch(1) (Closes: #1106533)
  * [11f8b62] Fix invalid metadata in debian/patches/skip-rfc-subdir.patch

[dgit import unpatched dovecot 1:2.4.1+dfsg1-5]

Import dovecot_2.4.1+dfsg1-5.debian.tar.xz

[dgit import tarball dovecot 1:2.4.1+dfsg1-5 dovecot_2.4.1+dfsg1-5.debian.tar.xz]

Merge version 1:2.3.21.1+dfsg1-1+rpi1 and 1:2.4.1+dfsg1-4 to produce 1:2.4.1+dfsg1-4+rpi1

Merge dovecot (1:2.4.1+dfsg1-4) import into refs/heads/workingbranch

Fix groff errors in upstream manpages

Forwarded: no
Last-Update: 2025-05-02

Last-Update: 2025-05-02
Gbp-Pq: Name fix-man-errors.patch

Fix GSSAPI regression

Origin: https://dovecot.org/mailman3/archives/list/dovecot@dovecot.org/message/O54EAGLIXXHMOH7BQCCKHHB3Z32HDWVR/
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104549
Last-Update: 2025-05-02

Dovecot 2.4 introduced a regression that broke GSSAPI authentication for
some clients.  This patch contains a fix provided by the upstream maintainers.
Last-Update: 2025-05-02
Gbp-Pq: Name bug1104549-gssapi-regression.patch

fit-32-bit-test-integers

===================================================================

Gbp-Pq: Name fit-32-bit-test-integers.patch

Use _FORTIFY_SOURCE level 3

Forwarded: not-needed

Gbp-Pq: Name Use-_FORTIFY_SOURCE-level-3.patch

Don't try to build doc/rfc subdir components

Forwarded: no (Debian-specific)

Gbp-Pq: Name skip-rfc-subdir.patch

dovecot (1:2.4.1+dfsg1-4) unstable; urgency=medium

  * [235de56] managesieved: lintian: suppress library-not-linked-against-libc
  * [74e7dcd] Ensure we use a 32-bit time_t on i386
  * [461bc68] dovecot-core: postinst: fix purge of obsolete ucf conf files
    (Closes: #1105003)

[dgit import unpatched dovecot 1:2.4.1+dfsg1-4]

Import dovecot_2.4.1+dfsg1-4.debian.tar.xz

[dgit import tarball dovecot 1:2.4.1+dfsg1-4 dovecot_2.4.1+dfsg1-4.debian.tar.xz]

Import dovecot_2.4.1+dfsg1.orig.tar.gz

[dgit import orig dovecot_2.4.1+dfsg1.orig.tar.gz]

Import dovecot_2.4.1+dfsg1.orig-pigeonhole.tar.gz

[dgit import orig dovecot_2.4.1+dfsg1.orig-pigeonhole.tar.gz]

Merge version 1:2.3.21+dfsg1-3+rpi1 and 1:2.3.21.1+dfsg1-1 to produce 1:2.3.21.1+dfsg1-1+rpi1

Merge dovecot (1:2.3.21.1+dfsg1-1) import into refs/heads/workingbranch

Silence prototype conflicts

Forwarded: https://github.com/dovecot/core/pull/206

    program-client.c:705:5: warning: conflicting types for 'program_client_run' due to enum/integer mismatch; have 'int(struct program_client *)' [-Wenum-int-mismatch]
      705 | int program_client_run(struct program_client *pclient)
          |     ^~~~~~~~~~~~~~~~~~
    In file included from program-client-private.h:4,
                     from program-client.c:17:
    program-client.h:93:1: note: previous declaration of 'program_client_run' with type 'enum program_client_exit_status(struct program_client *)'
       93 | program_client_run(struct program_client *pclient);
          | ^~~~~~~~~~~~~~~~~~

    db-lua.c:599:1: warning: conflicting types for 'auth_lua_call_password_verify' due to enum/integer mismatch; have 'enum passdb_result(struct dlua_script *, struct auth_request *, const char *, const char **)' [-Wenum-int-mismatch]
      599 | auth_lua_call_password_verify(struct dlua_script *script,
          | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    In file included from db-lua.c:28:
    db-lua.h:14:5: note: previous declaration of 'auth_lua_call_password_verify' with type 'int(struct dlua_script *, struct auth_request *, const char *, const char **)'
       14 | int auth_lua_call_password_verify(struct dlua_script *script,
          |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Gbp-Pq: Name Silence-prototype-conflicts.patch

Cleanup temporary build files

Forwarded: https://github.com/dovecot/core/pull/207

Support building twice:

    dpkg-source: info: local changes detected, the modified files are:
     source/src/plugins/quota/rquota.h.tmp
     source/src/plugins/quota/rquota_xdr.c.tmp

Gbp-Pq: Name Cleanup-temporary-build-files.patch

Use _FORTIFY_SOURCE level 3

Forwarded: not-needed

Gbp-Pq: Name Use-_FORTIFY_SOURCE-level-3.patch

Fix uninitialized read in doveadm-oldstats

The third argument to doveadm_cmd_param_bool() is only set on a return
value of TRUE.
Since disk_input_field and disk_output_field should be set if the value
of show-disk-io is specified and specified to true, fix the condition.

    doveadm-oldstats.c: In function 'cmd_stats_top':
    doveadm-oldstats.c:551:63: warning: 'b' may be used uninitialized [-Wmaybe-uninitialized]
      551 |         if (!doveadm_cmd_param_bool(cctx, "show-disk-io", &b) && b) {
          |                                                               ^
    doveadm-oldstats.c:545:14: note: 'b' was declared here
      545 |         bool b;
          |              ^

Gbp-Pq: Name Fix-uninitialized-read-in-doveadm-oldstats.patch

auth: Add a comment about updating userdb_find()

Gbp-Pq: Name auth-Add-a-comment-about-updating-userdb_find.patch

auth: Fix handling passdbs with identical driver/args but different mechanisms/username_filter

The passdb was wrongly deduplicated in this situation, causing wrong
mechanisms or username_filter setting to be used. This would be a rather
unlikely configuration though.

Fixed by moving mechanisms and username_filter from struct passdb_module
to struct auth_passdb, which is where they should have been in the first
place.

Gbp-Pq: Name auth-Fix-handling-passdbs-with-identical-driver-args-but-.patch