james-server-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From sbre...@apache.org
Subject svn commit: r1694280 - /james/server/tags/2_3_2_1/RELEASE_NOTES.txt
Date Wed, 05 Aug 2015 18:42:34 GMT
Author: sbrewin
Date: Wed Aug  5 18:42:33 2015
New Revision: 1694280

URL: http://svn.apache.org/r1694280
A minor tweak


Modified: james/server/tags/2_3_2_1/RELEASE_NOTES.txt
URL: http://svn.apache.org/viewvc/james/server/tags/2_3_2_1/RELEASE_NOTES.txt?rev=1694280&r1=1694279&r2=1694280&view=diff
--- james/server/tags/2_3_2_1/RELEASE_NOTES.txt (original)
+++ james/server/tags/2_3_2_1/RELEASE_NOTES.txt Wed Aug  5 18:42:33 2015
@@ -12,10 +12,17 @@ is one of James' strengths, and can allo
 applications surprisingly easily. 
-Is a maintenance release which is compatible with 2.3.2 except for introduction of some constraints
-on user names when the UsersFileRepository is configured as the user repository. User names
are now
-validated for RFC 3696 compliance.  
+Is a maintenance release which is compatible with 2.3.2.
+This release fixes a reported security vulnerability. Therefore, we STRONGLY recommend all
James v2
+users upgrading to this release as a matter of urgency.
+For existing deployments the most significant change is that the UsersFileRepository now
validates user
+names for RFC 3696 compliance. The vast majority of existing user names will already be compliant.
+that are not are likely to be having their sent mails rejected by MTAs and MUAs which require
RFC 3696 
+compliance. This change prevents non-compliance when new users are added, therefore it does
not affect
+existing users and is therefore backwards compatible with version 2.3.2. 
 Bug Fixes
  * JAMES-1600 - Javadocs task references obsolete URLs

To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org

View raw message