Projects
Kolab:Winterfell
roundcubemail
Log In
Username
Password
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
Expand all
Collapse all
Changes of Revision 60
View file
roundcubemail.spec
Changed
@@ -47,7 +47,7 @@ %global tmpdir /var/lib/roundcubemail Name: roundcubemail -Version: 1.2.4 +Version: 1.2.5 Release: 4%{?dist} @@ -2872,6 +2872,9 @@ %defattr(-,root,root,-) %changelog +* Fri Apr 28 2017 Timotheus Pokorra <tp@tbits.net> - 1.2.5-1 +- Check in upstream 1.2.5 release + * Tue Apr 25 2017 Jeroen van Meeuwen <vanmeeuwen@kolabsys.com> - 1.2.4-4 - Correct config.inc.php
View file
debian.changelog
Changed
@@ -1,3 +1,9 @@ +roundcubemail (1.2.5-0~kolab1) unstable; urgency=low + + * Check in upstream 1.2.5 release + + -- Timotheus Pokorra <tp@tbits.net> Wed, 28 Apr 2017 08:42:00 +0200 + roundcubemail (1.2.4-0~kolab4) unstable; urgency=low * Correct config.inc.php
View file
roundcubemail-1.2.4.tar.gz/CHANGELOG -> roundcubemail-1.2.5.tar.gz/CHANGELOG
Changed
@@ -1,6 +1,15 @@ CHANGELOG Roundcube Webmail =========================== +RELEASE 1.2.5 +------------- +- Fix re-positioning of the fixed header of messages list in Chrome when using minimal mode toggle and About dialog (#5711) +- Fix so settings/upload.inc could not be used by plugins (#5694) +- Fix regression in LDAP fuzzy search where it always used prefix search instead (#5713) +- Fix bug where namespace prefix could not be truncated on folders list if show_real_foldernames=true (#5695) +- Fix bug where base_dn setting was ignored inside group_filters (#5720) +- Password: Fix security issue in virtualmin and sasl drivers [CVE-2017-8114] + RELEASE 1.2.4 ------------- - Managesieve: Fix handling of scripts with nested rules (#5540) @@ -24,7 +33,7 @@ - Fix update of group name in the contacts list header on group rename (#5648) - Add rewrite rule to disable access to /vendor/bin folder in .htaccess (#5630) - Fix bug where it was too easy accidentally move a folder when using the subscription checkbox (#5655) -- Fix XSS issue in handling of a style tag inside of an svg element +- Fix XSS issue in handling of a style tag inside of an svg element (CVE-2017-6820) RELEASE 1.2.3 -------------
View file
roundcubemail-1.2.4.tar.gz/config/defaults.inc.php -> roundcubemail-1.2.5.tar.gz/config/defaults.inc.php
Changed
@@ -1032,11 +1032,11 @@ // sort contacts by this col (preferably either one of name, firstname, surname) $config['addressbook_sort_col'] = 'surname'; -// the way how contact names are displayed in the list -// 0: display name -// 1: (prefix) firstname middlename surname (suffix) -// 2: (prefix) surname firstname middlename (suffix) -// 3: (prefix) surname, firstname middlename (suffix) +// The way how contact names are displayed in the list. +// 0: prefix firstname middlename surname suffix (only if display name is not set) +// 1: firstname middlename surname +// 2: surname firstname middlename +// 3: surname, firstname middlename $config['addressbook_name_listing'] = 0; // use this timezone to display date/time
View file
roundcubemail-1.2.4.tar.gz/index.php -> roundcubemail-1.2.5.tar.gz/index.php
Changed
@@ -2,9 +2,9 @@ /** +-------------------------------------------------------------------------+ | Roundcube Webmail IMAP Client | - | Version 1.2.4 | + | Version 1.2.5 | | | - | Copyright (C) 2005-2016, The Roundcube Dev Team | + | Copyright (C) 2005-2017, The Roundcube Dev Team | | | | This program is free software: you can redistribute it and/or modify | | it under the terms of the GNU General Public License (with exceptions |
View file
roundcubemail-1.2.4.tar.gz/installer/index.php -> roundcubemail-1.2.5.tar.gz/installer/index.php
Changed
@@ -3,9 +3,9 @@ /** +-------------------------------------------------------------------------+ | Roundcube Webmail setup tool | - | Version 1.2.4 | + | Version 1.2.5 | | | - | Copyright (C) 2009-2016, The Roundcube Dev Team | + | Copyright (C) 2009-2017, The Roundcube Dev Team | | | | This program is free software: you can redistribute it and/or modify | | it under the terms of the GNU General Public License (with exceptions |
View file
roundcubemail-1.2.4.tar.gz/plugins/password/drivers/sasl.php -> roundcubemail-1.2.5.tar.gz/plugins/password/drivers/sasl.php
Changed
@@ -36,7 +36,7 @@ function save($currpass, $newpass) { $curdir = RCUBE_PLUGINS_DIR . 'password/helpers'; - $username = escapeshellcmd($_SESSION['username']); + $username = escapeshellarg($_SESSION['username']); $args = rcmail::get_instance()->config->get('password_saslpasswd_args', ''); if ($fh = popen("$curdir/chgsaslpasswd -p $args $username", 'w')) {
View file
roundcubemail-1.2.4.tar.gz/plugins/password/drivers/virtualmin.php -> roundcubemail-1.2.5.tar.gz/plugins/password/drivers/virtualmin.php
Changed
@@ -70,9 +70,9 @@ $domain = $rcmail->user->get_username('domain'); } - $username = escapeshellcmd($username); - $domain = escapeshellcmd($domain); - $newpass = escapeshellcmd($newpass); + $username = escapeshellarg($username); + $domain = escapeshellarg($domain); + $newpass = escapeshellarg($newpass); $curdir = RCUBE_PLUGINS_DIR . 'password/helpers'; exec("$curdir/chgvirtualminpasswd modify-user --domain $domain --user $username --pass $newpass", $output, $returnvalue);
View file
roundcubemail-1.2.4.tar.gz/program/include/iniset.php -> roundcubemail-1.2.5.tar.gz/program/include/iniset.php
Changed
@@ -5,7 +5,7 @@ | program/include/iniset.php | | | | This file is part of the Roundcube Webmail client | - | Copyright (C) 2008-2016, The Roundcube Dev Team | + | Copyright (C) 2008-2017, The Roundcube Dev Team | | | | Licensed under the GNU General Public License version 3 or | | any later version with exceptions for skins & plugins. | @@ -21,7 +21,7 @@ */ // application constants -define('RCMAIL_VERSION', '1.2.4'); +define('RCMAIL_VERSION', '1.2.5'); define('RCMAIL_START', microtime(true)); if (!defined('INSTALL_PATH')) {
View file
roundcubemail-1.2.4.tar.gz/program/include/rcmail.php -> roundcubemail-1.2.5.tar.gz/program/include/rcmail.php
Changed
@@ -1674,12 +1674,13 @@ * Try to localize the given IMAP folder name. * UTF-7 decode it in case no localized text was found * - * @param string $name Folder name - * @param bool $with_path Enable path localization + * @param string $name Folder name + * @param bool $with_path Enable path localization + * @param bool $path_remove Remove the path * * @return string Localized folder name in UTF-8 encoding */ - public function localize_foldername($name, $with_path = false) + public function localize_foldername($name, $with_path = false, $path_remove = false) { $realnames = $this->config->get('show_real_foldernames'); @@ -1687,12 +1688,20 @@ return $this->gettext($folder_class); } + $storage = $this->get_storage(); + $delimiter = $storage->get_hierarchy_delimiter(); + + // Remove the path + if ($path_remove) { + if (strpos($name, $delimiter)) { + $path = explode($delimiter, $name); + $name = array_pop($path); + } + } // try to localize path of the folder - if ($with_path && !$realnames) { - $storage = $this->get_storage(); - $delimiter = $storage->get_hierarchy_delimiter(); - $path = explode($delimiter, $name); - $count = count($path); + else if ($with_path && !$realnames) { + $path = explode($delimiter, $name); + $count = count($path); if ($count > 1) { for ($i = 1; $i < $count; $i++) {
View file
roundcubemail-1.2.4.tar.gz/program/lib/Roundcube/bootstrap.php -> roundcubemail-1.2.5.tar.gz/program/lib/Roundcube/bootstrap.php
Changed
@@ -3,7 +3,7 @@ /** +-----------------------------------------------------------------------+ | This file is part of the Roundcube PHP suite | - | Copyright (C) 2005-2015, The Roundcube Dev Team | + | Copyright (C) 2005-2017, The Roundcube Dev Team | | | | Licensed under the GNU General Public License version 3 or | | any later version with exceptions for skins & plugins. | @@ -55,7 +55,7 @@ } // framework constants -define('RCUBE_VERSION', '1.2.4'); +define('RCUBE_VERSION', '1.2.5'); define('RCUBE_CHARSET', 'UTF-8'); if (!defined('RCUBE_LIB_DIR')) {
View file
roundcubemail-1.2.4.tar.gz/program/lib/Roundcube/rcube_addressbook.php -> roundcubemail-1.2.5.tar.gz/program/lib/Roundcube/rcube_addressbook.php
Changed
@@ -497,8 +497,11 @@ $contact = rcube::get_instance()->plugins->exec_hook('contact_displayname', $contact); $fn = $contact['name']; - if (!$fn) // default display name composition according to vcard standard - $fn = trim(join(' ', array_filter(array($contact['prefix'], $contact['firstname'], $contact['middlename'], $contact['surname'], $contact['suffix'])))); + // default display name composition according to vcard standard + if (!$fn) { + $fn = join(' ', array_filter(array($contact['prefix'], $contact['firstname'], $contact['middlename'], $contact['surname'], $contact['suffix']))); + $fn = trim(preg_replace('/\s+/', ' ', $fn)); + } // use email address part for name $email = self::get_col_values('email', $contact, true); @@ -547,6 +550,7 @@ } $fn = trim($fn, ', '); + $fn = preg_replace('/\s+/', ' ', $fn); // fallbacks... if ($fn === '') {
View file
roundcubemail-1.2.4.tar.gz/program/lib/Roundcube/rcube_ldap.php -> roundcubemail-1.2.5.tar.gz/program/lib/Roundcube/rcube_ldap.php
Changed
@@ -840,7 +840,7 @@ } // compose a full-text-like search filter - $filter = rcube_ldap_generic::fulltext_search_filter($value, $attributes, $mode); + $filter = rcube_ldap_generic::fulltext_search_filter($value, $attributes, $mode & ~rcube_addressbook::SEARCH_GROUPS); } // add required (non empty) fields filter @@ -911,7 +911,7 @@ protected function extended_search($count = false) { $prop = $this->group_id ? $this->group_data : $this->prop; - $base_dn = $this->group_id ? $this->groups_base_dn : $this->base_dn; + $base_dn = $this->group_id ? $prop['base_dn'] : $this->base_dn; $attrs = $count ? array('dn') : $this->prop['attributes']; $entries = array();
View file
roundcubemail-1.2.4.tar.gz/program/steps/settings/edit_folder.inc -> roundcubemail-1.2.5.tar.gz/program/steps/settings/edit_folder.inc
Changed
@@ -86,20 +86,21 @@ // Location (name) if ($options['protected']) { - $foldername = str_replace($delimiter, ' » ', rcube::Q($RCMAIL->localize_folderpath($mbox))); + $foldername = str_replace($delimiter, ' » ', rcube::Q($RCMAIL->localize_foldername($mbox, false, true))); } else if ($options['norename']) { $foldername = rcube::Q($folder); } else { - if (isset($_POST['_name'])) + if (isset($_POST['_name'])) { $folder = trim(rcube_utils::get_input_value('_name', rcube_utils::INPUT_POST, true)); + } $foldername = new html_inputfield(array('name' => '_name', 'id' => '_name', 'size' => 30)); $foldername = $foldername->show($folder); - if ($options['special']) { - $foldername .= ' (' . rcube::Q($RCMAIL->localize_foldername($mbox)) .')'; + if ($options['special'] && ($sname = $RCMAIL->localize_foldername($mbox, false, true)) != $folder) { + $foldername .= ' (' . rcube::Q($sname) .')'; } }
View file
roundcubemail-1.2.4.tar.gz/program/steps/settings/folders.inc -> roundcubemail-1.2.5.tar.gz/program/steps/settings/folders.inc
Changed
@@ -277,12 +277,13 @@ foreach ($list_folders as $i => $folder) { $sub_key = array_search($folder['id'], $a_subscribed); $subscribed = $sub_key !== false; - $protected = $folder['id'] == 'INBOX' || ($protect_default && isset($special_folders[$folder['id']])); + $special = $folder['id'] == 'INBOX' || isset($special_folders[$folder['id']]); + $protected = $folder['id'] == 'INBOX' || ($protect_default && $special); $noselect = false; $classes = array(); $folder_utf8 = rcube_charset::convert($folder['id'], 'UTF7-IMAP'); - $display_folder = rcube::Q($protected ? $RCMAIL->localize_foldername($folder['id']) : $folder['name']); + $display_folder = rcube::Q($special ? $RCMAIL->localize_foldername($folder['id'], false, true) : $folder['name']); if ($folder['virtual']) { $classes[] = 'virtual';
View file
roundcubemail-1.2.4.tar.gz/program/steps/settings/upload.inc -> roundcubemail-1.2.5.tar.gz/program/steps/settings/upload.inc
Changed
@@ -27,6 +27,11 @@ $from = rcube_utils::get_input_value('_from', rcube_utils::INPUT_GET); $type = preg_replace('/(add|edit)-/', '', $from); +// Plugins in Settings may use this file for some uploads (#5694) +// Make sure it does not contain a dot, which is a special character +// when using rcube_session::append() below +$type = str_replace('.', '-', $type); + if ($RCMAIL->action == 'upload-display') { $id = 'undefined';
View file
roundcubemail-1.2.4.tar.gz/skins/larry/ui.js -> roundcubemail-1.2.5.tar.gz/skins/larry/ui.js
Changed
@@ -131,6 +131,10 @@ var ismin = $(document.body).toggleClass('minimal').hasClass('minimal'); save_pref('minimalmode', ismin?1:0); $(window).resize(); + + // This hack fixes re-positioning of the fixed header of messages list (#5711) + if (bw.chrome) + $('#mailviewsplitterv').trigger('mousedown').trigger('mouseup'); }); /*** mail task ***/
View file
roundcubemail.dsc
Changed
@@ -2,7 +2,7 @@ Source: roundcubemail Binary: roundcubemail Architecture: all -Version: 1:1.2.4-0~kolab4 +Version: 1:1.2.5-0~kolab1 Maintainer: Jeroen van Meeuwen (Kolab Systems) <vanmeeuwen@kolabsys.com> Uploaders: Paul Klos <kolab@klos2day.nl> Homepage: http://www.roundcube.net/ @@ -14,5 +14,5 @@ roundcubemail deb web extra roundcubemail-core deb web extra Files: - 00000000000000000000000000000000 0 roundcubemail-1.2.4.tar.gz + 00000000000000000000000000000000 0 roundcubemail-1.2.5.tar.gz 00000000000000000000000000000000 0 debian.tar.gz
Locations
Projects
Search
Status Monitor
Help
Open Build Service
OBS Manuals
API Documentation
OBS Portal
Reporting a Bug
Contact
Mailing List
Forums
Chat (IRC)
Twitter
Open Build Service (OBS)
is an
openSUSE project
.