[Dovecot-news] v1.2.13 released

Timo Sirainen tss at iki.fi
Sat Jul 24 00:03:52 EEST 2010


http://dovecot.org/releases/1.2/dovecot-1.2.13.tar.gz
http://dovecot.org/releases/1.2/dovecot-1.2.13.tar.gz.sig

This release fixes a bug in ACL plugin, which could be considered a security bug: If Maildir is used with default settings (INBOX is same as Maildir root dir) and user set some ACLs to INBOX, those ACLs were copied to all newly created mailboxes. This should have been done only for "default ACLs", but with Maildir the INBOX directory is the same as the default ACL directory, so this mixup happened. This bug exists only in v1.2.x releases.

Other fixes:

	- Fixed iconv() crash when it was processing several kilobytes of
	  broken continuous input. This mainly could have caused a problem
	  with IMAP SEARCH. Possibly also with some Sieve checks.
	- If MIME encoded-words contained line feeds, Dovecot logged
	  cache corruption errors.
	- mbox: Renaming mailbox under newly created dir didn't move index
	  directory.
	- mbox: When generating envelope to From_-line, don't append a second
	  @owndomain if username already has one. 



More information about the Dovecot-news mailing list