1.1 --- a/ChangeLog	Sat Aug 27 18:00:40 2011 +0200
     1.2 +++ b/ChangeLog	Sat Aug 27 18:12:55 2011 +0200
     1.3 @@ -7,9 +7,17 @@
     1.4  technical speach and with focus on compatibility.
     1.5  
     1.6  
     1.7 +0.2.30  Sat, 27 Aug 2011 18:00:57 +0200
     1.8 +	* Fixed a possible security problem, reported by John Lightsey. See
     1.9 +	  Debian bug #638002. The return value of seteuid() calls was handled
    1.10 +	  wrong or not at all. Now, the (already available) set_euidgid()
    1.11 +	  function is used when possible. Additionally, removed the unnecessary
    1.12 +	  identity change when writing into an already open file descriptor.
    1.13 +
    1.14  0.2.29  Fri, 03 Jun 2011 09:52:44 +0200
    1.15  	* Fixed a problem with folded headers. The folded lines of a
    1.16  	  long header would be ignored in unpredictable cases.
    1.17 +
    1.18  0.2.28  Fri, 23 Jul 2010 09:58:56 +0200
    1.19  	* added STARTTLS support with external wrappers like openssl.
    1.20  	  Added a new route config option `instant_helo' therefore.