From f36e1f275d150c276ccd8b8060f3694d018d91b0807c7e57ef5a0e8603015cb4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Aeneas=20Jai=C3=9Fle?= Date: Fri, 13 Apr 2018 18:03:28 +0000 Subject: [PATCH] Accepting request 596134 from home:kbabioch:branches:server:php:applications - Upgrade to version 1.3.6 * Fix parsing date strings (e.g. from a Date: mail header) with comments * Fix PHP 7.2: count(): Parameter must be an array in enchant-based spellchecker * Fix possible IMAP command injection and type juggling vulnerabilities * Enigma: Fix key selection for signing * Enigma: Enable keypair generation on Internet Explorer 11 * Fix check_request() bypass in places using get_uids() (CVE-2018-9846 boo#1067574) * Fix bug where usernames without domain part could be malformed or converted to lower-case on logon OBS-URL: https://build.opensuse.org/request/show/596134 OBS-URL: https://build.opensuse.org/package/show/server:php:applications/roundcubemail?expand=0&rev=118 --- roundcubemail-1.3.5-complete.tar.gz | 3 --- roundcubemail-1.3.5-complete.tar.gz.asc | 16 ---------------- roundcubemail-1.3.6-complete.tar.gz | 3 +++ roundcubemail-1.3.6-complete.tar.gz.asc | 16 ++++++++++++++++ roundcubemail.changes | 12 ++++++++++++ roundcubemail.spec | 2 +- 6 files changed, 32 insertions(+), 20 deletions(-) delete mode 100644 roundcubemail-1.3.5-complete.tar.gz delete mode 100644 roundcubemail-1.3.5-complete.tar.gz.asc create mode 100644 roundcubemail-1.3.6-complete.tar.gz create mode 100644 roundcubemail-1.3.6-complete.tar.gz.asc diff --git a/roundcubemail-1.3.5-complete.tar.gz b/roundcubemail-1.3.5-complete.tar.gz deleted file mode 100644 index b8d2a15..0000000 --- a/roundcubemail-1.3.5-complete.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:634e98b3e422208d25aba0a0e5adf603833b4b9d32b5db6c1162a122f31b686b -size 5527013 diff --git a/roundcubemail-1.3.5-complete.tar.gz.asc b/roundcubemail-1.3.5-complete.tar.gz.asc deleted file mode 100644 index f9f4d89..0000000 --- a/roundcubemail-1.3.5-complete.tar.gz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIcBAABCAAGBQJaqtfKAAoJEMKUapYJzVa0Uc0QAKZee6ZhWo20tX+ENrcR46Dw -OjixnEU49QkURalbDbPsA3vTjFgY7W4AUwZTqASS6bUDgydMj9jjM9aNC1SSJEXM -c5pKIcw7ncgvrxA18xTmli2jOgUW3Vpohi4jPauwc213GspAbcs3n+OOEunIM5Ku -0Kar56b8AcFar+GPgcI60MPTwVFwWKB7iucNQWXMHWJYOD3wH+aIXA7B+uU9gtmP -ALtpP7buy1aeqhG7O9eYq4JF3YXLjejNmf4Ws4QR2M3yHWczM0rhaCZS8t9WBHsh -NNPe/P64QmZidGFVh/aF6JZvEjWsrIGNvBlSSQ0H5m22bweI1P0ICPwL+IlunJ5V -LkFxY54a6vamN+gke9gxz4c8WlPtIORMIvX1r1AREZ+xaJFV/nC0+kCQZArARCvy -LcyZ8udK7z8MclHCn97lYl5RAbzxXZ/m37V9tCAv/Mphn/hSaoedHJhbifWYBJU/ -hUEp1soCOvrnXIJkn2y5hS44Z99M4VLlV4w2Pmbke1VotjsXcxA6pNVNI+tc8xxl -S6dkzKsNvTLNKZC2Fh1nl+j4mQSECVvj0/3i0kd5NLO108F51/dcDe5JP8wBR0qZ -t45WjJshWKV9RGwoae+n2HvEcvFZEbTuWkNI5E3tQmbYTQsACph1ORnH1GdhgQGo -/bxywgJ/xUBmIKiJb2rA -=z8V8 ------END PGP SIGNATURE----- diff --git a/roundcubemail-1.3.6-complete.tar.gz b/roundcubemail-1.3.6-complete.tar.gz new file mode 100644 index 0000000..d14760d --- /dev/null +++ b/roundcubemail-1.3.6-complete.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:f1b86e97cc8fd69bb1957d4115762af6ea2d6957ea17b33dd3ec2995662670d9 +size 5529370 diff --git a/roundcubemail-1.3.6-complete.tar.gz.asc b/roundcubemail-1.3.6-complete.tar.gz.asc new file mode 100644 index 0000000..6802f9c --- /dev/null +++ b/roundcubemail-1.3.6-complete.tar.gz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIcBAABCAAGBQJazmYfAAoJEMKUapYJzVa061MQAIL7vw9n0CrmLV7ndCE5+U77 +ZBM6kP7uOlGCrkcnV952gvIq/S8V+/Ddza3YsIJpVFeqa4nd2ztwW9SX0y6pGzy4 +66riJBpUfqF58R7rma3JWBbqvzHtBpWjw0jCXygKVKcKB8nxvKjPXwV294rH3BP/ +PfsIhW0TtEXC5Iyk0epv5x0UbbiLkvNURTXqgkQNewTK9WfnFlrM5AIdVsn2xEPe +D9Yso53JJh5jmk95Md6StVjymMeCC20cqjsHiWQq5ZtavnN0vVQOWNs5Lq9tQ5wD +wuttx56D1eTMNnT9fIkmoq9/mMxxJhlRd6WbIUs2N22wo5RqW44U6wSKVCUiJiEb +rpQfG1+eAQ6iOWrEiBInC4qGdtR1RrDe7FAC1jqRFkXaAJGucOkZ0IyJEjzNO9ZJ +AOzW1SRiLD69CTnqfYzEReMFZxjh4x9AOH8GfnqdtlrBEQ/4NIQyR6aeCwU2mGWI +8P8DkppRrwpH44menkVMyVtZleZQgxhJt8wT06p1PzQ42KqGZMpT4CJ+CWHRkhRw +rAp7LO7ywf7f5pzmqm3dCrSQu+TSNaZSgCuvthew82MjQxzvNaR1Ai2nLLhz0fSD +rV9+bQYx294udFCJieLjCbYLPK7HnlaMSxK8ovzi756l8HKCbk9oOQuh25wRVvem +0fERhZrfLwXocWToD7gs +=vOlx +-----END PGP SIGNATURE----- diff --git a/roundcubemail.changes b/roundcubemail.changes index fc5c335..17160b2 100644 --- a/roundcubemail.changes +++ b/roundcubemail.changes @@ -1,3 +1,15 @@ +------------------------------------------------------------------- +Fri Apr 13 06:40:00 UTC 2018 - kbabioch@suse.com + +- Upgrade to version 1.3.6 + * Fix parsing date strings (e.g. from a Date: mail header) with comments + * Fix PHP 7.2: count(): Parameter must be an array in enchant-based spellchecker + * Fix possible IMAP command injection and type juggling vulnerabilities + * Enigma: Fix key selection for signing + * Enigma: Enable keypair generation on Internet Explorer 11 + * Fix check_request() bypass in places using get_uids() (CVE-2018-9846 boo#1067574) + * Fix bug where usernames without domain part could be malformed or converted to lower-case on logon + ------------------------------------------------------------------- Fri Mar 16 08:57:47 UTC 2018 - joop.boonen@opensuse.org diff --git a/roundcubemail.spec b/roundcubemail.spec index a3ea5eb..0d001b3 100644 --- a/roundcubemail.spec +++ b/roundcubemail.spec @@ -17,7 +17,7 @@ Name: roundcubemail -Version: 1.3.5 +Version: 1.3.6 Release: 0 Summary: A browser-based multilingual IMAP client License: GPL-3.0-or-later AND GPL-2.0-only AND BSD-3-Clause