~siretart/+junk/bug.306536

~siretart/+junk/bug.306536 » Changes from revision 18

From Revision 18

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
18		Address cross site scripting issue in the HTML filter Address cross site scripting issue in the HTML filter (CVE-2008-2379). LP: #306536. Patch taken from the debian package version 1.4.15-4.	Reinhard Tartler		15 years ago
17		* Sync from Debian (LP: #204754) * Sync from Debian (LP: #204754) * README.locales: add paragraph about setting up locales for gettext   (LP: #133845) * Modify Maintainer value to match the DebianMaintainerField   specification.	Daniel Hahler	ubuntu-2:1.4.13-2ubuntu1	15 years ago
16		New upstream release. New upstream release.	Thijs Kinkhorst	ubuntu-2:1.4.13-1	15 years ago
15		* New upstream release. * New upstream release. * Minor packaging cleanups.	Thijs Kinkhorst	ubuntu-2:1.4.12-1	15 years ago
14		Fix broken attachment handling in PHP4 by applying patch Fix broken attachment handling in PHP4 by applying patch from upstream. NOTE: this is only a courtesy to PHP4 users, it must be noted that Debian does not support PHP4 in current unstable anymore. (Closes: #444970)	Thijs Kinkhorst	ubuntu-2:1.4.11-2	15 years ago
13		* Make use of new dictionaries-common SquirrelMail interface... * Make use of new dictionaries-common SquirrelMail interface to   detect the installed squirrelspell dictionaries (Closes: #420877). * Remove obsolete upgrading code. * Make sure config files are not closed with '?>' since it's then   too easy to get stray whitespace at the end of the file.	Thijs Kinkhorst	ubuntu-2:1.4.10a-2	15 years ago
12		* New upstream security release. * New upstream security release.   - Fixes cross site scripting in the HTML filter [CVE-2007-1262]   - Tweaks SMTP error message display (Closes: #403705).   - Fixes address duplication on reply-all (Closes: #408242).	Thijs Kinkhorst	ubuntu-2:1.4.10a-1	15 years ago
11		* New upstream security release. * New upstream security release.   - Additionally tightens HTML filter for IE <= 5 parsing     absolutely everything and it's horse.	Thijs Kinkhorst	ubuntu-2:1.4.9a-1	15 years ago
10		* Add note to README.Debian about server side sorting (Close... * Add note to README.Debian about server side sorting (Closes: #394286)   and regular_globals not being supported. * Add IfModule conditionals for register_globals setting in   apache.conf (Closes: #398173).	Thijs Kinkhorst	ubuntu-2:1.4.8-3	15 years ago
9		* Update Debian patch to display options to cope with the cu... * Update Debian patch to display options to cope with the custom   charset plugin. Thanks Tomas Kuliavas, Closes: #385300. * Suggest php[45]-ldap, Closes: #392306. * Improve package description.	Thijs Kinkhorst	ubuntu-2:1.4.8-2	15 years ago
8		* New upstream release * New upstream release   - Includes security fix: variable overwriting in compose.php     by logged-in user [CVE-2006-4019]   - Does not ship SquirrelMail developer's documentation anymore. * Remove duplicate content from README.locales.	Thijs Kinkhorst	ubuntu-2:1.4.8-1	15 years ago
7		* New upstream bugfix release. * New upstream bugfix release.   + Addresses some low-impact, theoretical or disputed security bugs,     for which the code is tightened just-in-case:     - Possible local file inclusion (Closes: #373731, CVE-2006-2842)     - XSS in search.php (Closes: #375782, CVE-2006-3174)   + Adds note to db-backend.txt about postgreSQL (Closes: #376605). * Checked for standards version to 3.7.2, no changes necessary. * Update maintainer address.	Thijs Kinkhorst	ubuntu-2:1.4.7-1	15 years ago
6		* New upstream release. * New upstream release. * Includes the following security fixes:   - Fix IMAP command injection in sqimap_mailbox_select     with upstream patch. [CVE-2006-0377] (Closes: #354063)   - Fix possible XSS in MagicHTML, concerning the parsing     of u\rl and comments in styles. Internet Explorer     specific. [CVE-2006-0195] (Closes: #354062)   - Fix possible cross site scripting through the right_main     parameter of webmail.php. This now uses a whitelist of     acceptable values. [CVE-2006-0188] (Closes: #354064, #355424)	Thijs Kinkhorst	ubuntu-2:1.4.6-1	15 years ago
5		[ Jeroen van Wolffelaar ] [ Jeroen van Wolffelaar ] * Restore squirrelmail-configure manpage, accidently dropped in -1 * Use debhelper compat level 4 [ Thijs Kinkhorst ] * Drop obsolete symlink for attachment dir. * Do not ship upstream README, which contains hardly any information   relevant to Debian. Extend README.Debian a bit. Thanks W. Borgert. * Add years to copyright statement.	Thijs Kinkhorst	ubuntu-2:1.4.5-2	15 years ago
4		* Non-maintainer upload by the Security Team * Non-maintainer upload by the Security Team * Corrected the patch based on upstream input   [src/options_identities.php, CAN-2005-2095]	Martin Schulze	ubuntu-2:1.4.4-6sarge1	15 years ago
3		* Move default_pref config file from /var to /etc, as per De... * Move default_pref config file from /var to /etc, as per Debian policy   (Closes: #293281) * [JvW] (finally) override two lintian warnings about nonstandard   permissions that are intentional (Closes: #293366)	Thijs Kinkhorst	ubuntu-2:1.4.4-3	15 years ago
2		* New upstream release. Closes #230921. * New upstream release. Closes #230921. * RFC3501 compliance for mailbox naming (eg trailing spaces).   Closes: #176590, #215183. * Adds a squirrelmail symlink in /var/www/. Closes: #229282. * Adds PHP safe_mode workaround to README.Debian. Closes: #222071. * Adds daily cron job to clean attachments directory. Closes: #228400. * Checks for config_default.php before copying in postinst.   Closes: #229737.	Sam Johnston	ubuntu-1:1.5.0-1	15 years ago
1		Import upstream version 1.5.0 Import upstream version 1.5.0	Bazaar Package Impor...	upstream-ubuntu-1.5.0	15 years ago