From 6d8f35510531d4e5b77409ba5ecb155ce6f8663c Mon Sep 17 00:00:00 2001 From: Aki Tuomi Date: Tue, 28 Jul 2020 11:02:06 +0300 Subject: [PATCH] NEWS: Add NEWS for 2.3.11.2 --- NEWS | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/NEWS b/NEWS index dc7281be7c..98a5dc67ab 100644 --- a/NEWS +++ b/NEWS @@ -1,3 +1,13 @@ +v2.3.11.2 2020-07-13 Aki Tuomi + + - auth: Lua passdb/userdb leaks stack elements per call, eventually + causing the stack to become too deep and crashing the auth or + auth-worker process. + - lib-mail: v2.3.11 regression: MIME parts not returned correctly by + Dovecot MIME parser. + - pop3-login: Login would fail with "Input buffer full" if the initial + response for SASL was too long. + v2.3.11 2020-06-17 Aki Tuomi * CVE-2020-12100: Parsing mails with a large number of MIME parts could -- 2.47.3