-
Committer:
Bazaar Package Importer
-
Author(s):
Martin Pitt
-
Date:
2006-05-12 14:48:39 UTC
-
mfrom:
(1.9.1 upstream)
-
Revision ID:
james.westby@ubuntu.com-20060512144839-1ks8532ptp6izdqq
Tags: 1.0.beta3-3ubuntu4
* Add debian/patches/prohibit_.._mbox_mask.dpatch:
- Fix information disclosure due to path traversal: Do not allow '.' and
'..' as valid list masks.
- This regression was introduced in some 1.0beta version, so 0.99.x are
not affected.
- Patch taken from upstream:
http://dovecot.org/list/dovecot-cvs/2006-May/005563.html
- Closes: LP#44364