~ubuntu-branches/ubuntu/karmic/squirrelmail/karmic : changes

~ubuntu-branches/ubuntu/karmic/squirrelmail/karmic » Changes from revision 15

From Revision 15

Rev	Summary	Authors	Tags	Date
15	* New upstream release. * New upstream release. + Corrects incomplete fix for CVE-2009-1579 [CVE-2009-1381] + Fixes filter plugin regression (closes: #529328)	Thijs Kinkhorst	2:1.4.19-1	15 years ago
14	* New upstream release. * New upstream release. + Addresses several security issues (closes: #528528): CVE-2009-1578, CVE-2009-1579, CVE-2009-1580, CVE-2009-1581. * Update to debhelper 7 and policy 3.8.1. * Make squirrelmail.cron.daily cope with the administrator enabling the hashed dir feature, thanks Marcello Nuccio (closes: #508287). * Update Recommends and Suggests: + Remove all php4-related relations. + Add recommends for php5-mcode which speeds up crypto. + Suggest php5-recode for some character sets. + Recommend plugins: squirrelmail-viewashtml for HTML mail, squirrelmail-logger to provide logging. (closes: #523966, #527964)	Thijs Kinkhorst	2:1.4.18-1	15 years ago
13	Address cross site scripting issue in the HTML filter Address cross site scripting issue in the HTML filter (CVE-2008-2379).	Thijs Kinkhorst	2:1.4.15-4	15 years ago
12	Cookies sent over HTTPS will now be confined to HTTPS only Cookies sent over HTTPS will now be confined to HTTPS only (cookie secure flag) and more support for the HTTPOnly cookie attribute. Patch taken from upstream release. (CVE-2008-3663, closes: #499942)	Thijs Kinkhorst	2:1.4.15-3	15 years ago
11	* New upstream security release. * New upstream security release. - Additionally tightens HTML filter for IE <= 5 parsing absolutely everything and it's horse.	Thijs Kinkhorst	2:1.4.9a-1	17 years ago
10	* Add note to README.Debian about server side sorting (Close... * Add note to README.Debian about server side sorting (Closes: #394286) and regular_globals not being supported. * Add IfModule conditionals for register_globals setting in apache.conf (Closes: #398173).	Thijs Kinkhorst	2:1.4.8-3	17 years ago
9	* Update Debian patch to display options to cope with the cu... * Update Debian patch to display options to cope with the custom charset plugin. Thanks Tomas Kuliavas, Closes: #385300. * Suggest php[45]-ldap, Closes: #392306. * Improve package description.	Thijs Kinkhorst	2:1.4.8-2	17 years ago
8	* New upstream release * New upstream release - Includes security fix: variable overwriting in compose.php by logged-in user [CVE-2006-4019] - Does not ship SquirrelMail developer's documentation anymore. * Remove duplicate content from README.locales.	Thijs Kinkhorst	2:1.4.8-1	17 years ago
7	* New upstream bugfix release. * New upstream bugfix release. + Addresses some low-impact, theoretical or disputed security bugs, for which the code is tightened just-in-case: - Possible local file inclusion (Closes: #373731, CVE-2006-2842) - XSS in search.php (Closes: #375782, CVE-2006-3174) + Adds note to db-backend.txt about postgreSQL (Closes: #376605). * Checked for standards version to 3.7.2, no changes necessary. * Update maintainer address.	Thijs Kinkhorst	2:1.4.7-1	17 years ago
6	* New upstream release. * New upstream release. * Includes the following security fixes: - Fix IMAP command injection in sqimap_mailbox_select with upstream patch. [CVE-2006-0377] (Closes: #354063) - Fix possible XSS in MagicHTML, concerning the parsing of u\rl and comments in styles. Internet Explorer specific. [CVE-2006-0195] (Closes: #354062) - Fix possible cross site scripting through the right_main parameter of webmail.php. This now uses a whitelist of acceptable values. [CVE-2006-0188] (Closes: #354064, #355424)	Thijs Kinkhorst	2:1.4.6-1	18 years ago
5	[ Jeroen van Wolffelaar ] [ Jeroen van Wolffelaar ] * Restore squirrelmail-configure manpage, accidently dropped in -1 * Use debhelper compat level 4 [ Thijs Kinkhorst ] * Drop obsolete symlink for attachment dir. * Do not ship upstream README, which contains hardly any information relevant to Debian. Extend README.Debian a bit. Thanks W. Borgert. * Add years to copyright statement.	Thijs Kinkhorst	2:1.4.5-2	18 years ago
4	* Non-maintainer upload by the Security Team * Non-maintainer upload by the Security Team * Corrected the patch based on upstream input [src/options_identities.php, CAN-2005-2095]	Martin Schulze	2:1.4.4-6sarge1	18 years ago
3	* Move default_pref config file from /var to /etc, as per De... * Move default_pref config file from /var to /etc, as per Debian policy (Closes: #293281) * [JvW] (finally) override two lintian warnings about nonstandard permissions that are intentional (Closes: #293366)	Thijs Kinkhorst	2:1.4.4-3	19 years ago
2	* New upstream release. Closes #230921. * New upstream release. Closes #230921. * RFC3501 compliance for mailbox naming (eg trailing spaces). Closes: #176590, #215183. * Adds a squirrelmail symlink in /var/www/. Closes: #229282. * Adds PHP safe_mode workaround to README.Debian. Closes: #222071. * Adds daily cron job to clean attachments directory. Closes: #228400. * Checks for config_default.php before copying in postinst. Closes: #229737.	Sam Johnston	1:1.5.0-1	20 years ago
1	Import upstream version 1.5.0 Import upstream version 1.5.0	Sam Johnston	upstream-1.5.0	20 years ago