[dev] [commits] Horde branch master updated. caa4af675a2be98a597c237189022da45b97c3d5

Jan Schneider jan at horde.org
Mon Jun 10 19:21:57 UTC 2013


Zitat von Michael M Slusarz <slusarz at horde.org>:

> Quoting Jan Schneider <jan at horde.org>:
>
>> Zitat von Michael M Slusarz <slusarz at horde.org>:
>>
>>> The branch "master" has been updated.
>>> The following is a summary of the commits.
>>>
>>> from: 21f4a6dc23769d29d60a43cb1d6487025b32fa4a
>>>
>>> a9ee0b4 [mms] Mailbox imports are now limited to 500 messages by default.
>>
>> Please move this to 6.2.
>
> Why?  This is a security/DoS fix.

How is that a security fix? And a DOS could easily be appoached with  
setting a maximum execution time in the PHP configuration.
A change that requires UPGRADING notices for changes in backends.php  
is very strong signal that this is more than just a bug fix.
-- 
Jan Schneider
The Horde Project
http://www.horde.org/



More information about the dev mailing list