Projects
Kolab:3.4:Updates
roundcubemail
Log In
Username
Password
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
Expand all
Collapse all
Changes of Revision 12
View file
roundcubemail.spec
Changed
@@ -41,7 +41,7 @@ %global tmpdir /var/lib/roundcubemail Name: roundcubemail -Version: 1.1.6 +Version: 1.1.7 Release: 1%{?dist} @@ -2997,6 +2997,9 @@ %defattr(-,root,root,-) %changelog +* Wed Nov 30 2016 Timotheus Pokorra <tp@tbits.net> - 1.1.7-1 +- Check in upstream 1.1.7 release + * Thu Sep 29 2016 Timotheus Pokorra <tp@tbits.net> - 1.1.6-1 - Check in maintenance upstream 1.1.6 release
View file
debian.changelog
Changed
@@ -1,3 +1,9 @@ +roundcubemail (1:1.1.7.0-0~kolab1) unstable; urgency=low + + * Check in upstream 1.1.7 release + + -- Timotheus Pokorra <tp@tbits.net> Wed, 30 Nov 2016 08:42:00 +0200 + roundcubemail (1:1.1.6.0-0~kolab1) unstable; urgency=low * Check in maintenance upstream 1.1.6 release
View file
roundcubemail-1.1.6.tar.gz/CHANGELOG -> roundcubemail-1.1.7.tar.gz/CHANGELOG
Changed
@@ -1,6 +1,10 @@ CHANGELOG Roundcube Webmail =========================== +RELEASE 1.1.7 +------------- +- Fix vulnerability in handling of mail()'s 5th argument + RELEASE 1.1.6 ------------- - Searching in both contacts and groups when LDAP addressbook with group_filters option is used
View file
roundcubemail-1.1.6.tar.gz/index.php -> roundcubemail-1.1.7.tar.gz/index.php
Changed
@@ -2,7 +2,7 @@ /* +-------------------------------------------------------------------------+ | Roundcube Webmail IMAP Client | - | Version 1.1.6 | + | Version 1.1.7 | | | | Copyright (C) 2005-2016, The Roundcube Dev Team | | |
View file
roundcubemail-1.1.6.tar.gz/installer/index.php -> roundcubemail-1.1.7.tar.gz/installer/index.php
Changed
@@ -3,7 +3,7 @@ /* +-------------------------------------------------------------------------+ | Roundcube Webmail setup tool | - | Version 1.1.6 | + | Version 1.1.7 | | | | Copyright (C) 2009-2016, The Roundcube Dev Team | | |
View file
roundcubemail-1.1.6.tar.gz/program/include/iniset.php -> roundcubemail-1.1.7.tar.gz/program/include/iniset.php
Changed
@@ -21,7 +21,7 @@ */ // application constants -define('RCMAIL_VERSION', '1.1.6'); +define('RCMAIL_VERSION', '1.1.7'); define('RCMAIL_START', microtime(true)); if (!defined('INSTALL_PATH')) {
View file
roundcubemail-1.1.6.tar.gz/program/lib/Roundcube/bootstrap.php -> roundcubemail-1.1.7.tar.gz/program/lib/Roundcube/bootstrap.php
Changed
@@ -54,7 +54,7 @@ } // framework constants -define('RCUBE_VERSION', '1.1.6'); +define('RCUBE_VERSION', '1.1.7'); define('RCUBE_CHARSET', 'UTF-8'); if (!defined('RCUBE_LIB_DIR')) {
View file
roundcubemail-1.1.6.tar.gz/program/lib/Roundcube/rcube.php -> roundcubemail-1.1.7.tar.gz/program/lib/Roundcube/rcube.php
Changed
@@ -1749,7 +1749,7 @@ if (filter_var(ini_get('safe_mode'), FILTER_VALIDATE_BOOLEAN)) $sent = mail($to, $subject, $msg_body, $header_str); else - $sent = mail($to, $subject, $msg_body, $header_str, "-f$from"); + $sent = mail($to, $subject, $msg_body, $header_str, '-f ' . escapeshellarg($from)); } }
View file
roundcubemail-1.1.6.tar.gz/program/steps/mail/autocomplete.inc -> roundcubemail-1.1.7.tar.gz/program/steps/mail/autocomplete.inc
Changed
@@ -65,8 +65,8 @@ $search_lc = mb_strtolower($search); $mode |= rcube_addressbook::SEARCH_GROUPS; - foreach ($book_types as $id) { - $abook = $RCMAIL->get_address_book($id); + foreach ($book_types as $abook_id) { + $abook = $RCMAIL->get_address_book($abook_id); $abook->set_pagesize($MAXNUM); if ($result = $abook->search($RCMAIL->config->get('contactlist_fields'), $search, $mode, true, true, 'email')) { @@ -93,7 +93,12 @@ // skip duplicates if (empty($contacts[$index])) { - $contact = array('name' => $contact, 'type' => $sql_arr['_type']); + $contact = array( + 'name' => $contact, + 'type' => $sql_arr['_type'], + 'id' => $sql_arr['ID'], + 'source' => $abook_id, + ); if (($display = rcube_addressbook::compose_search_name($sql_arr, $email, $name)) && $display != $contact['name']) { $contact['display'] = $display; @@ -136,7 +141,7 @@ 'email' => $email, 'type' => 'group', 'id' => $group['ID'], - 'source' => $id, + 'source' => $abook_id, ); if (count($contacts) >= $MAXNUM) { @@ -153,7 +158,7 @@ 'name' => $group['name'] . ' (' . intval($result->count) . ')', 'type' => 'group', 'id' => $group['ID'], - 'source' => $id + 'source' => $abook_id, ); if (count($contacts) >= $MAXNUM) {
View file
roundcubemail-1.1.6.tar.gz/program/steps/mail/search.inc -> roundcubemail-1.1.7.tar.gz/program/steps/mail/search.inc
Changed
@@ -132,6 +132,12 @@ } } + if ($scope != 'all') { + // Remember current folder, it can change in meantime (plugins) + // but we need it to e.g. recognize Sent folder to handle From/To column later + $RCMAIL->output->set_env('mailbox', $mbox); + } + $result = $RCMAIL->storage->search($mboxes, $search_str, $imap_charset, $sort_column); }
View file
roundcubemail-1.1.6.tar.gz/program/steps/mail/sendmail.inc -> roundcubemail-1.1.7.tar.gz/program/steps/mail/sendmail.inc
Changed
@@ -106,11 +106,14 @@ } } // ... if there is no identity record, this might be a custom from -else if ($from_string = rcmail_email_input_format($from)) { - if (preg_match('/(\S+@\S+)/', $from_string, $m)) - $from = trim($m[1], '<>'); - else - $from = null; +else if (($from_string = rcmail_email_input_format($from)) + && preg_match('/(\S+@\S+)/', $from_string, $m) +) { + $from = trim($m[1], '<>'); +} +// ... otherwise it's empty or invalid +else { + $from = null; } if (!$from_string && $from) {
View file
roundcubemail.dsc
Changed
@@ -2,7 +2,7 @@ Source: roundcubemail Binary: roundcubemail Architecture: all -Version: 1:1.1.6-0~kolab1 +Version: 1:1.1.7-0~kolab1 Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@lists.alioth.debian.org> Uploaders: Vincent Bernat <bernat@debian.org>, Romain Beauxis <toots@rastageeks.org>, Jeroen van Meeuwen (Kolab Systems) <vanmeeuwen@kolabsys.com>, Paul Klos <kolab@klos2day.nl> Homepage: http://www.roundcube.net/ @@ -13,5 +13,5 @@ Package-List: roundcubemail deb web extra Files: - 00000000000000000000000000000000 0 roundcubemail-1.1.6.tar.gz + 00000000000000000000000000000000 0 roundcubemail-1.1.7.tar.gz 00000000000000000000000000000000 0 debian.tar.gz
Locations
Projects
Search
Status Monitor
Help
Open Build Service
OBS Manuals
API Documentation
OBS Portal
Reporting a Bug
Contact
Mailing List
Forums
Chat (IRC)
Twitter
Open Build Service (OBS)
is an
openSUSE project
.