[Dovecot] v1.0.10 released
Gerhard Wiesinger
lists at wiesinger.com
Sat Dec 29 18:54:55 EET 2007
Hello Timo!
What was exactly wrong in v1.0.8 and v1.0.9 with mbox handling?
Ciao,
Gerhard
--
http://www.wiesinger.com/
On Sat, 29 Dec 2007, Timo Sirainen wrote:
> http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz
> http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz.sig
>
> v1.0.8 and v1.0.9 were a bit bad releases. Hopefully one day I've
> managed to have written a proper test suite which can be run before
> doing any releases..
>
> * Security hole with LDAP+auth cache: If base setting contained
> %variables they weren't included in auth cache key, which broke
> caching. This could have caused different users with same passwords
> to log in as each other.
>
> - LDAP: Fixed potential infinite looping when connection to LDAP
> server was lost and there were queued requests.
> - mbox: More changes to fix problems caused by v1.0.8 and v1.0.9.
> - Maildir: Fixed a UIDLIST_IS_LOCKED() assert-crash in some conditions
> (caused by changes in v1.0.9)
> - If protocols=none, don't require imap executables to exist
>
>
More information about the dovecot
mailing list