~ubuntu-branches/ubuntu/wily/squirrelmail/wily : changes

~ubuntu-branches/ubuntu/wily/squirrelmail/wily » Changes from revision 22

From Revision 22 to 3

Rev	Summary	Authors	Tags	Date
22	* Add patch from upstream to cope with changed behaviour of * Add patch from upstream to cope with changed behaviour of htmlspecialchars() in PHP 5.4 (closes: #664895). * Add patch from upstream to cope with removal of session_unregister() in PHP 5.4.	Thijs Kinkhorst	2:1.4.23~svn20120406-2	11 years ago
21	* New upstream snapshot release. * New upstream snapshot release. - Addresses PHP 5.4 compatibility issues (closes: #664895). - Fixes PHP warning (closes: #641869). - Fixes hide_auth_header (closes: #661394).	Thijs Kinkhorst	2:1.4.23~svn20120406-1	12 years ago
20	* New upstream release, fixes several security issues * New upstream release, fixes several security issues (CVE-2011-2023, CVE-2010-4554, CVE-2010-4555, closes: #593345, #634822). * Move to dpkg source format 3.0, separate out Debian patches. Small packaging cleanups.	Thijs Kinkhorst	2:1.4.22-1	12 years ago
19	* New upstream release. * New upstream release. + Addresses two low-imact security issues, bump urgency. [CVE-2010-1637, CVE-2010-2813] * Checked for policy 3.9.1, no changes necessary.	Thijs Kinkhorst	2:1.4.21-1	13 years ago
18	* SECURITY UPDATE: (LP: #598077) * SECURITY UPDATE: (LP: #598077) * The Mail Fetch plugin allows remote authenticated users to bypass firewall restrictions and use SquirrelMail as a proxy to scan internal networks via a modified POP3 port number. - http://squirrelmail.org/security/issue/2010-06-21 - CVE-2010-1637 - Patch taken from upstream svn rev. 13951. Applied inline.	Andreas Wenning	2:1.4.20-1ubuntu1	13 years ago
17	* New upstream release. * New upstream release. + Addresses search bug (closes: #550763). * Update to policy 3.8.4, no changes necessary.	Thijs Kinkhorst	2:1.4.20-1	14 years ago
16	* New upstream release candidate. * New upstream release candidate. + Addresses cross site request forgery (CVE-2009-2964, closes: #543818). * Update to policy 3.8.3, no changes necessary.	Thijs Kinkhorst	2:1.4.20~rc2-1	14 years ago
15	* New upstream release. * New upstream release. + Corrects incomplete fix for CVE-2009-1579 [CVE-2009-1381] + Fixes filter plugin regression (closes: #529328)	Thijs Kinkhorst	2:1.4.19-1	14 years ago
14	* New upstream release. * New upstream release. + Addresses several security issues (closes: #528528): CVE-2009-1578, CVE-2009-1579, CVE-2009-1580, CVE-2009-1581. * Update to debhelper 7 and policy 3.8.1. * Make squirrelmail.cron.daily cope with the administrator enabling the hashed dir feature, thanks Marcello Nuccio (closes: #508287). * Update Recommends and Suggests: + Remove all php4-related relations. + Add recommends for php5-mcode which speeds up crypto. + Suggest php5-recode for some character sets. + Recommend plugins: squirrelmail-viewashtml for HTML mail, squirrelmail-logger to provide logging. (closes: #523966, #527964)	Thijs Kinkhorst	2:1.4.18-1	15 years ago
13	Address cross site scripting issue in the HTML filter Address cross site scripting issue in the HTML filter (CVE-2008-2379).	Thijs Kinkhorst	2:1.4.15-4	15 years ago
12	Cookies sent over HTTPS will now be confined to HTTPS only Cookies sent over HTTPS will now be confined to HTTPS only (cookie secure flag) and more support for the HTTPOnly cookie attribute. Patch taken from upstream release. (CVE-2008-3663, closes: #499942)	Thijs Kinkhorst	2:1.4.15-3	15 years ago
11	* New upstream security release. * New upstream security release. - Additionally tightens HTML filter for IE <= 5 parsing absolutely everything and it's horse.	Thijs Kinkhorst	2:1.4.9a-1	17 years ago
10	* Add note to README.Debian about server side sorting (Close... * Add note to README.Debian about server side sorting (Closes: #394286) and regular_globals not being supported. * Add IfModule conditionals for register_globals setting in apache.conf (Closes: #398173).	Thijs Kinkhorst	2:1.4.8-3	17 years ago
9	* Update Debian patch to display options to cope with the cu... * Update Debian patch to display options to cope with the custom charset plugin. Thanks Tomas Kuliavas, Closes: #385300. * Suggest php[45]-ldap, Closes: #392306. * Improve package description.	Thijs Kinkhorst	2:1.4.8-2	17 years ago
8	* New upstream release * New upstream release - Includes security fix: variable overwriting in compose.php by logged-in user [CVE-2006-4019] - Does not ship SquirrelMail developer's documentation anymore. * Remove duplicate content from README.locales.	Thijs Kinkhorst	2:1.4.8-1	17 years ago
7	* New upstream bugfix release. * New upstream bugfix release. + Addresses some low-impact, theoretical or disputed security bugs, for which the code is tightened just-in-case: - Possible local file inclusion (Closes: #373731, CVE-2006-2842) - XSS in search.php (Closes: #375782, CVE-2006-3174) + Adds note to db-backend.txt about postgreSQL (Closes: #376605). * Checked for standards version to 3.7.2, no changes necessary. * Update maintainer address.	Thijs Kinkhorst	2:1.4.7-1	17 years ago
6	* New upstream release. * New upstream release. * Includes the following security fixes: - Fix IMAP command injection in sqimap_mailbox_select with upstream patch. [CVE-2006-0377] (Closes: #354063) - Fix possible XSS in MagicHTML, concerning the parsing of u\rl and comments in styles. Internet Explorer specific. [CVE-2006-0195] (Closes: #354062) - Fix possible cross site scripting through the right_main parameter of webmail.php. This now uses a whitelist of acceptable values. [CVE-2006-0188] (Closes: #354064, #355424)	Thijs Kinkhorst	2:1.4.6-1	18 years ago
5	[ Jeroen van Wolffelaar ] [ Jeroen van Wolffelaar ] * Restore squirrelmail-configure manpage, accidently dropped in -1 * Use debhelper compat level 4 [ Thijs Kinkhorst ] * Drop obsolete symlink for attachment dir. * Do not ship upstream README, which contains hardly any information relevant to Debian. Extend README.Debian a bit. Thanks W. Borgert. * Add years to copyright statement.	Thijs Kinkhorst	2:1.4.5-2	18 years ago
4	* Non-maintainer upload by the Security Team * Non-maintainer upload by the Security Team * Corrected the patch based on upstream input [src/options_identities.php, CAN-2005-2095]	Martin Schulze	2:1.4.4-6sarge1	18 years ago
3	* Move default_pref config file from /var to /etc, as per De... * Move default_pref config file from /var to /etc, as per Debian policy (Closes: #293281) * [JvW] (finally) override two lintian warnings about nonstandard permissions that are intentional (Closes: #293366)	Thijs Kinkhorst	2:1.4.4-3	19 years ago

Older »