1.1 --- a/ChangeLog	Mon Aug 29 19:32:38 2011 +0200
     1.2 +++ b/ChangeLog	Wed Aug 31 08:40:24 2011 +0200
     1.3 @@ -7,13 +7,18 @@
     1.4  technical speach and with focus on compatibility.
     1.5  
     1.6  
     1.7 -0.3.3  Sat, 27 Aug 2011 18:35:34 +0200
     1.8 +0.3.3  Wed, 31 Aug 2011 08:38:13 +0200
     1.9  	* Fixed a possible security problem, reported by John Lightsey. See
    1.10  	  Debian bug #638002. The return value of seteuid() calls was handled
    1.11  	  wrong or not at all. Now, the (already available) set_euidgid()
    1.12  	  function is used when possible. Additionally, removed the unnecessary
    1.13  	  identity change when writing into an already open file descriptor.
    1.14  	* Added debug level 9 for msgs to stderr during reading config.
    1.15 +	* Fixed local-part only address patterns in route conditions. The man
    1.16 +	  page claimed behavior that wasn't implemented up to now. Thanks to
    1.17 +	  Juergen Daubert for the bug report.
    1.18 +	* Switched default listen address back from 127.0.0.1 to `localhost'.
    1.19 +	  Better be straight-forward than too clever.
    1.20  
    1.21  0.3.2  Fri, 03 Jun 2011 10:14:33 +0200
    1.22  	* Fixed an important bug with folded headers! The folded lines

     2.1 --- a/NEWS	Mon Aug 29 19:32:38 2011 +0200
     2.2 +++ b/NEWS	Wed Aug 31 08:40:24 2011 +0200
     2.3 @@ -12,6 +12,9 @@
     2.4  -  Fixed a possible security problem, reported by John Lightsey. Unwanted
     2.5  identity changes to the user root could have appeared.
     2.6  
     2.7 +- Fixed local-part only address patterns in route conditions, as already
     2.8 +described in the man page.
     2.9 +
    2.10  
    2.11  0.3.2
    2.12