Re: Security alert: disable CRAM-MD5 if you don't use it

On 2014-12-20 22:20, Paul J Stevens wrote:
> Ok.
> 
> 
> Good news: dbmail-3.1 is not affected. Apparently the problem only
> occurs in 3.2.0 and 3.2.1. It's definitely a regression.
> 
> Bad news: if you use 3.2, you should apply the patch I pushed 
> yesterday.
> The workaround offers no real protection, as Caspar correctly surmised.
> 
> 

@paul: I just noticed that the webpage is in need of some attention -- 
in particular the downloads section lists 3.2.0 as only 3.2 release so 
if you could upload 3.2.1 and 3.2.2 that'd be great since I otherwise 
have to just patch from 3.2.0 to 3.2.2 in our (gentoo) ebuild.

Regards