From: Tom C. <to...@to...> - 2009-05-02 19:59:00
|
http://qmailadmin.sf.net/ 1.2.13 - released 2-May-09 QmailAdmin is in maintenance mode, so these are minor changes that have piled up over the past year or so. Be sure to check out the -- disable-catchall and --disable-trivial-password options. ChangeLog: Simone Lazzaris - Add --disable-catchall and --disable-trivial-password options to configure scripts. Tom Collins - qmailadmin.c: check return value of setuid() and setgid() and exit if either fail (security issue reported by Miguel Lourenco). - template.c: fix for potential XSS (cross-site scripting) hole in the login page (reported by Michael Middleton). - mailinglist.c: Increase size of tmp buffer used to delete orphan .qmail files when removing a mailing list (reported by William Fuller). - auth.c: Fix compiler warning. Variable ip_value only used if IPAUTH is defined. - util.c: minor performance improvement (use strchr instead of strstr) in open_lang(). - command.c: disabled catchall commands unless enabled Chaz Owensby - Report disk usage to non-admin user on their Modify User page. Tomas Kuliavas - Updated Lithuanian translation. [1913361] Dvorkin Dmitry - Updated Russian translation (now in utf8). Ismail YENIGUL - qmailadmin.c: check return value of open_lang() in load_lang() and exit on failure. |