# HG changeset patch # User Timo Sirainen # Date 1207071642 -10800 # Node ID 4607141a6bdc4226acbbece913d9780e5c3c818f # Parent 45884655c0c4559107083864660a0b3f43715d60 Released v1.1.rc4. diff -r 45884655c0c4 -r 4607141a6bdc NEWS --- a/NEWS Tue Apr 01 20:34:51 2008 +0300 +++ b/NEWS Tue Apr 01 20:40:42 2008 +0300 @@ -1,3 +1,20 @@ +v1.1.rc4 2008-04-01 Timo Sirainen + + * Fixed two buffer overflows in str_find_init(). It was used by + SEARCH code when searching for headers or message body. Added code + to catch these kind of overflows when compiling with --enable-debug. + Found by Diego Liziero. + + + LDAP: Added debug_level and ldaprc_path settings (OpenLDAP-only) + + Squat: Added fts_squat = partial=n full=m settings. See the wiki. + - dbox metadata updating fixes. + - quota: backend=n didn't work + - SEARCH RECENT may have returned non-recent messages if index files + were created by v1.0. + - If mailbox was opened as read-only with EXAMINE, STOREs were + permanently saved. + - LDAP: Templates were somewhat broken (by richs at whidbey.net) + v1.1.rc3 2008-03-09 Timo Sirainen * Fixed a security hole in blocking passdbs (MySQL always. PAM, passwd diff -r 45884655c0c4 -r 4607141a6bdc TODO --- a/TODO Tue Apr 01 20:34:51 2008 +0300 +++ b/TODO Tue Apr 01 20:40:42 2008 +0300 @@ -1,7 +1,13 @@ + - index: clear recent flags created by v1.0 at some point so the bit may be + reused for something useful later. + - mbox: mail_privileged_group should be used when creating INBOX?.. + - convert plugin: Create a r/w lock for a file. It's read-locked if + conversion isn't wanted and released when process dies. If conversion is + wanted and write-lock succeeds, conversion is done, if write-lock doesn't + succeed it fallbacks to using the old storage. When process is exiting it + again tries to write-lock and do the conversion. Add a parameter that + specifies if conversion should be done. - dbox: - - "metadata changed unexpectedly" with alt paths - why? - - check that metadata is always correct and whitespace contains only - whitespace - "File unexpectedly lost" doesn't get fixed by itself - doesn't call fsync - do something about From_-lines splitting mails with mboxes @@ -15,6 +21,8 @@ - expunges are delayed until more mails are added - test replacement chars (SEARCH / SORT / Squat) + - DEBUG: buffer overflow checking code probably doesn't handle a successful + t_try_realloc() or pool_alloconly_realloc() properly - cache: compress when we can drop temporary fields. - POP3 UIDL caching - ACL: "foo/bar" in public namespace -> LIST "" % doesn't show "foo" diff -r 45884655c0c4 -r 4607141a6bdc configure.in --- a/configure.in Tue Apr 01 20:34:51 2008 +0300 +++ b/configure.in Tue Apr 01 20:40:42 2008 +0300 @@ -1,5 +1,5 @@ AC_PREREQ([2.59]) -AC_INIT([dovecot],[1.1.rc3],[dovecot@dovecot.org]) +AC_INIT([dovecot],[1.1.rc4],[dovecot@dovecot.org]) AC_CONFIG_SRCDIR([src]) AM_INIT_AUTOMAKE