Bug#599521: [dovecot] New Upstream version 1.2.15 fix two ACL bugs

2010-10-08 Thread Miotto Paolo
Package: dovecot Version: 1:1.2.13-1 Severity: grave On Oct, 1 Timo released version 1.2.15 to correct two bugs in the ACL evaluation logic: * acl: Fixed the logic of merging multiple ACL entries. Now it works as documented, while previously it could have done slightly

Bug#599521: [dovecot] New Upstream version 1.2.15 fix two ACL bugs

2010-10-08 Thread Jaldhar H. Vyas
On Fri, 8 Oct 2010, Miotto Paolo wrote: I think this is a important security fix, because without it a user can gain access to other mailboxes or, worst, admin rights an shared mailboxes. It would be a Good Thing(TM) to have version 1.2.15 in Squeeze. I am inclined to agree with you. I'll