vpopmail-4.10.35 is available.
This is a security fix.
This is the first pre5.0 canidate. If no problems are
found in the next week this will be the 5.0 release.
Changes from 4.10.34 are:
1) vpopmail/lib directory is now owned by root
and read/write/execute only by root.
2) vpopmail/lib/libvpopmail.a is also owned by
root and read/write only by root.
These changes make it impossible for non root
users to compile programs which use the vpopmail
library. This should restrict the ability for
a regular user to create a vpopmail application
and then core dump it to view the contents of
the libvpopmail.a library, which includes the
authentication information to databases,
like mysql, oracle or ldap.
Ken Jones
inter7.com
