29 Dec
2007
29 Dec
'07
6:54 p.m.
Hello Timo!
What was exactly wrong in v1.0.8 and v1.0.9 with mbox handling?
Ciao, Gerhard
On Sat, 29 Dec 2007, Timo Sirainen wrote:
http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz http://dovecot.org/releases/1.0/dovecot-1.0.10.tar.gz.sig
v1.0.8 and v1.0.9 were a bit bad releases. Hopefully one day I've managed to have written a proper test suite which can be run before doing any releases..
- Security hole with LDAP+auth cache: If base setting contained %variables they weren't included in auth cache key, which broke caching. This could have caused different users with same passwords to log in as each other.
- LDAP: Fixed potential infinite looping when connection to LDAP server was lost and there were queued requests.
- mbox: More changes to fix problems caused by v1.0.8 and v1.0.9.
- Maildir: Fixed a UIDLIST_IS_LOCKED() assert-crash in some conditions (caused by changes in v1.0.9)
- If protocols=none, don't require imap executables to exist