Mercurial > dovecot > core-2.2
changeset 19279:d7e14d388a7e
Released v2.2.19.
| author | Timo Sirainen <tss@iki.fi> |
|---|---|
| date | Fri, 02 Oct 2015 19:02:42 +0300 |
| parents | 05e0700daea3 |
| children | 0818b2fb5148 |
| files | NEWS configure.ac |
| diffstat | 2 files changed, 8 insertions(+), 3 deletions(-) [+] |
line wrap: on
line diff
--- a/NEWS Fri Oct 02 18:30:22 2015 +0300 +++ b/NEWS Fri Oct 02 19:02:42 2015 +0300 @@ -1,5 +1,10 @@ -v2.2.19 2015-09-xx Timo Sirainen <tss@iki.fi> - +v2.2.19 2015-10-02 Timo Sirainen <tss@iki.fi> + + * pop3_deleted_flag has been broken since v2.2.10. Using it would + cause buffer overflows, which could be exploitable. However, this + bug would have become visible quite soon after users had deleted + some POP3 mails, because the pop3 processes would have started + crashing all the time even in normal use. * "doveadm director flush" command has a changed meaning now: It safely moves users to their wanted backends, instead of simply forgetting the mapping entirely and leaving the existing connections
--- a/configure.ac Fri Oct 02 18:30:22 2015 +0300 +++ b/configure.ac Fri Oct 02 19:02:42 2015 +0300 @@ -2,7 +2,7 @@ # Be sure to update ABI version also if anything changes that might require # recompiling plugins. Most importantly that means if any structs are changed. -AC_INIT([Dovecot],[2.2.19.rc2],[dovecot@dovecot.org]) +AC_INIT([Dovecot],[2.2.19],[dovecot@dovecot.org]) AC_DEFINE_UNQUOTED([DOVECOT_ABI_VERSION], "2.2.ABIv19($PACKAGE_VERSION)", [Dovecot ABI version]) AC_CONFIG_SRCDIR([src])