Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 329821 - net-mail/dovecot-1.2.13 version bump
Summary: net-mail/dovecot-1.2.13 version bump
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High enhancement (vote)
Assignee: Patrick Lauer
URL: http://www.dovecot.org/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-07-25 20:17 UTC by Eray Aslan
Modified: 2010-07-26 23:22 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Eray Aslan gentoo-dev 2010-07-25 20:17:44 UTC
This release fixes a bug in ACL plugin, which could be considered a security bug: If Maildir is used with default settings (INBOX is same as Maildir root dir)
+and user set some ACLs to INBOX, those ACLs were copied to all newly created mailboxes. This should have been done only for "default ACLs", but with Maildir
+the INBOX directory is the same as the default ACL directory, so this mixup happened. This bug exists only in v1.2.x releases.

Other fixes:

        - Fixed iconv() crash when it was processing several kilobytes of
          broken continuous input. This mainly could have caused a problem
          with IMAP SEARCH. Possibly also with some Sieve checks.
        - If MIME encoded-words contained line feeds, Dovecot logged
          cache corruption errors.
        - mbox: Renaming mailbox under newly created dir didn't move index
          directory.
        - mbox: When generating envelope to From_-line, don't append a second
          @owndomain if username already has one.

Renaming dovecot-1.2.12 works.

Reproducible: Always
Comment 1 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2010-07-26 23:22:10 UTC
+*dovecot-1.2.13 (26 Jul 2010)
+
+  26 Jul 2010; Jeremy Olexa <darkside@gentoo.org> +dovecot-1.2.13.ebuild:
+  Upstream version bump for misc fixes, bug 329821 by Eray Aslan