On Tue, 2009-10-27 at 09:03 -0400, Thomas Berezansky wrote: > But for whatever reason, when deliver is called by something that IS > SetUID root I get the following error: > > /usr/local/libexec/dovecot/deliver must not be both world-executable > and setuid-root. This allows root exploits. See > http://wiki.dovecot.org/LDA#multipleuids
Fixed: http://hg.dovecot.org/dovecot-1.2/rev/ead94beba32a
signature.asc
Description: This is a digitally signed message part
