fix building with latest openssl (RHEL-117460)

add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)
Resolves: RHEL-117460

dovecot-2.3.6-opensslhmac.patch

@@ -388,16 +388,16 @@ diff -up dovecot-2.3.18/src/lib/hmac.c.opensslhmac dovecot-2.3.18/src/lib/hmac.c
  
  	/* salt and info can be NULL */
  	i_assert(salt != NULL || salt_len == 0);
-@@ -118,35 +192,30 @@ void hmac_hkdf(const struct hash_method
+@@ -118,35 +192,36 @@ void hmac_hkdf(const struct hash_method
  	i_assert(ikm != NULL && ikm_len > 0);
  	i_assert(okm_r != NULL && okm_len > 0);
  
--	/* but they still need valid pointer, reduces
--	   complains from static analysers */
--	if (salt == NULL)
--		salt = &uchar_nul;
--	if (info == NULL)
--		info = &uchar_nul;
+ 	/* but they still need valid pointer, reduces
+ 	   complains from static analysers */
+ 	if (salt == NULL)
+ 		salt = &uchar_nul;
+ 	if (info == NULL)
+ 		info = &uchar_nul;
 -
 -	/* extract */
 -	hmac_init(&key_mac, salt, salt_len, method);

dovecot.spec

@@ -6,7 +6,7 @@ Name: dovecot
 Epoch: 1
 Version: 2.3.21
 %global prever %{nil}
-Release: 16%{?dist}
+Release: 17%{?dist}
 #dovecot itself is MIT, a few sources are PD, pigeonhole is LGPLv2
 License: MIT AND LGPL-2.1-only
 
@@ -536,6 +536,10 @@ make check
 %{_libdir}/%{name}/dict/libdriver_pgsql.so
 
 %changelog
+* Mon Jan 12 2026 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-17
+- fix building with latest openssl (RHEL-117460)
+- add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)
+
 * Wed Feb 05 2025 Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-16
 - fix sysusers config file name (RHEL-77323)
 

dovecot.tmpfilesd

@@ -1,2 +1,3 @@
 d /run/dovecot 0755 root dovecot -
+d /var/lib/dovecot 0750 dovecot dovecot - -