From 52185a4332b95e3c4781e32b561aac146ee29f92ae3f8252af8d07f55710c687 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Thu, 29 Aug 2013 08:53:40 +0000 Subject: [PATCH 1/2] Accepting request 196726 from home:wrosenauer OBS-URL: https://build.opensuse.org/request/show/196726 OBS-URL: https://build.opensuse.org/package/show/server:php:applications/roundcubemail?expand=0&rev=58 --- roundcubemail-0.9.1.tar.gz | 3 -- roundcubemail-0.9.3.tar.gz | 3 ++ roundcubemail.changes | 57 ++++++++++++++++++++++++++++++++++++++ roundcubemail.spec | 2 +- 4 files changed, 61 insertions(+), 4 deletions(-) delete mode 100644 roundcubemail-0.9.1.tar.gz create mode 100644 roundcubemail-0.9.3.tar.gz diff --git a/roundcubemail-0.9.1.tar.gz b/roundcubemail-0.9.1.tar.gz deleted file mode 100644 index 263f00f..0000000 --- a/roundcubemail-0.9.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:95962f90eebcf17521f66f4057a030b3eabd4a8cb5748f22bf0d4518816b8938 -size 3734373 diff --git a/roundcubemail-0.9.3.tar.gz b/roundcubemail-0.9.3.tar.gz new file mode 100644 index 0000000..2ce809c --- /dev/null +++ b/roundcubemail-0.9.3.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:2186b8037d02118d1e0a5d782e900f80097f9891711510a6477ed9dae0eacee5 +size 3658220 diff --git a/roundcubemail.changes b/roundcubemail.changes index 3c2c392..e4ea8fd 100644 --- a/roundcubemail.changes +++ b/roundcubemail.changes @@ -1,3 +1,60 @@ +------------------------------------------------------------------- +Thu Aug 29 07:38:09 UTC 2013 - wr@rosenauer.org + +- Update to version 0.9.3 (bnc#837436) + * Optimized UI behavior for touch devices + * Fix setting refresh_interval to "Never" in Preferences + * Fix purge action in folder manager + * Fix base URL resolving on attribute values with no quotes + * Fix wrong handling of links with '|' character + * Fix colorspace issue on image conversion using ImageMagick? + * Fix XSS vulnerability when saving HTML signatures + * Fix XSS vulnerability when editing a message "as new" or draft + * Fix rewrite rule in .htaccess + * Fix detecting Turkish language in ISO-8859-9 encoding + * Fix identity-selection using Return-Path headers + * Fix parsing of links with ... in URL + * Fix compose priority selector when opening in new window + * Fix bug where signature wasn't changed on identity selection when editing a draft + * Fix IMAP SETMETADATA parameters quoting + * Fix "could not load message" error on valid empty message body + * Fix handling of message/rfc822 attachments on message forward and edit + * Fix parsing of square bracket characters in IMAP response strings + * Don't clear References and in-Reply-To when a message is "edited as new" + * Fix messages list sorting with THREAD=REFS + * Remove deprecated (in PHP 5.5) PREG /e modifier usage + * Fix empty messages list when register_globals is enabled + * Fix so valid and set date.timezone is not required by installer checks + * Canonize boolean ini_get() results + * Fix so install do not fail when one of DB driver checks fails but other drivers exist + * Fix so exported vCard specifies encoding in v3-compatible format +- Update to version 0.9.2 + * Fix image thumbnails display in print mode + * Fix height of message headers block + * Fix timeout issue on drag&drop uploads + * Fix default sorting of threaded list when THREAD=REFS isn't supported + * Fix list mode switch to 'List' after saving list settings in Larry skin + * Fix error when there's no writeable addressbook source + * Fix zipdownload plugin issue with filenames charset + * Fix so non-inline images aren't skipped on forward + * Fix "null" instead of empty string on messages list in IE10 + * Fix legacy options handling + * Fix so bounces addresses in Sender headers are skipped on Reply-All + * Fix bug where serialized strings were truncated in PDO::quote() + * Fix displaying messages with invalid self-closing HTML tags + * Fix PHP warning when responding to a message with many Return-Path headers + * Fix unintentional compose window resize + * Fix performance regression in text wrapping function + * Fix connection to posgtres db using unix socket + * Fix handling of comma when adding contact from contacts widget + * Fix bug where a message was opened in both preview pane and new window on double-click + * Fix fatal error when xdebug.max_nesting_level was exceeded in rcube_washtml + * Fix PHP warning in html_table::set_row_attribs() in PHP 5.4 + * Fix invalid option selected in default_font selector when font is unset + * Fix displaying contact with ID divisible by 100 in sql addressbook + * Fix browser warnings on PDF plugin detection + * Fix fatal error when parsing UUencoded messages + ------------------------------------------------------------------- Mon Jun 3 17:15:26 UTC 2013 - wr@rosenauer.org diff --git a/roundcubemail.spec b/roundcubemail.spec index cb30705..ae7de95 100644 --- a/roundcubemail.spec +++ b/roundcubemail.spec @@ -21,7 +21,7 @@ Summary: A modern browser-based multilingual IMAP client License: GPL-3.0+ and GPL-2.0 and BSD-3-Clause Group: Productivity/Networking/Email/Clients Url: http://www.roundcube.net/ -Version: 0.9.1 +Version: 0.9.3 Release: 0 BuildRequires: apache2-devel %if 0%{suse_version} >= 1100 From 4aeb4d5306bbc396eb9fcfcc03bfc9e2b897524bec16d39d9e3493982653ebb2 Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Thu, 29 Aug 2013 09:00:30 +0000 Subject: [PATCH 2/2] Accepting request 196745 from home:wrosenauer OBS-URL: https://build.opensuse.org/request/show/196745 OBS-URL: https://build.opensuse.org/package/show/server:php:applications/roundcubemail?expand=0&rev=59 --- roundcubemail.changes | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roundcubemail.changes b/roundcubemail.changes index e4ea8fd..57d3a3f 100644 --- a/roundcubemail.changes +++ b/roundcubemail.changes @@ -1,7 +1,7 @@ ------------------------------------------------------------------- Thu Aug 29 07:38:09 UTC 2013 - wr@rosenauer.org -- Update to version 0.9.3 (bnc#837436) +- Update to version 0.9.3 (bnc#837436) (CVE-2013-5645) * Optimized UI behavior for touch devices * Fix setting refresh_interval to "Never" in Preferences * Fix purge action in folder manager