Accepting request 596134 from home:kbabioch:branches:server:php:applications

- Upgrade to version 1.3.6
  * Fix parsing date strings (e.g. from a Date: mail header) with comments
  * Fix PHP 7.2: count(): Parameter must be an array in enchant-based spellchecker
  * Fix possible IMAP command injection and type juggling vulnerabilities
  * Enigma: Fix key selection for signing
  * Enigma: Enable keypair generation on Internet Explorer 11
  * Fix check_request() bypass in places using get_uids() (CVE-2018-9846 boo#1067574)
  * Fix bug where usernames without domain part could be malformed or converted to lower-case on logon

OBS-URL: https://build.opensuse.org/request/show/596134
OBS-URL: https://build.opensuse.org/package/show/server:php:applications/roundcubemail?expand=0&rev=118

roundcubemail-1.3.5-complete.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:634e98b3e422208d25aba0a0e5adf603833b4b9d32b5db6c1162a122f31b686b
-size 5527013

roundcubemail-1.3.5-complete.tar.gz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIcBAABCAAGBQJaqtfKAAoJEMKUapYJzVa0Uc0QAKZee6ZhWo20tX+ENrcR46Dw
-OjixnEU49QkURalbDbPsA3vTjFgY7W4AUwZTqASS6bUDgydMj9jjM9aNC1SSJEXM
-c5pKIcw7ncgvrxA18xTmli2jOgUW3Vpohi4jPauwc213GspAbcs3n+OOEunIM5Ku
-0Kar56b8AcFar+GPgcI60MPTwVFwWKB7iucNQWXMHWJYOD3wH+aIXA7B+uU9gtmP
-ALtpP7buy1aeqhG7O9eYq4JF3YXLjejNmf4Ws4QR2M3yHWczM0rhaCZS8t9WBHsh
-NNPe/P64QmZidGFVh/aF6JZvEjWsrIGNvBlSSQ0H5m22bweI1P0ICPwL+IlunJ5V
-LkFxY54a6vamN+gke9gxz4c8WlPtIORMIvX1r1AREZ+xaJFV/nC0+kCQZArARCvy
-LcyZ8udK7z8MclHCn97lYl5RAbzxXZ/m37V9tCAv/Mphn/hSaoedHJhbifWYBJU/
-hUEp1soCOvrnXIJkn2y5hS44Z99M4VLlV4w2Pmbke1VotjsXcxA6pNVNI+tc8xxl
-S6dkzKsNvTLNKZC2Fh1nl+j4mQSECVvj0/3i0kd5NLO108F51/dcDe5JP8wBR0qZ
-t45WjJshWKV9RGwoae+n2HvEcvFZEbTuWkNI5E3tQmbYTQsACph1ORnH1GdhgQGo
-/bxywgJ/xUBmIKiJb2rA
-=z8V8
------END PGP SIGNATURE-----

roundcubemail-1.3.6-complete.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f1b86e97cc8fd69bb1957d4115762af6ea2d6957ea17b33dd3ec2995662670d9
+size 5529370

roundcubemail-1.3.6-complete.tar.gz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=vOlx
+-----END PGP SIGNATURE-----

roundcubemail.changes

@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Fri Apr 13 06:40:00 UTC 2018 - kbabioch@suse.com
+
+- Upgrade to version 1.3.6
+  * Fix parsing date strings (e.g. from a Date: mail header) with comments
+  * Fix PHP 7.2: count(): Parameter must be an array in enchant-based spellchecker
+  * Fix possible IMAP command injection and type juggling vulnerabilities
+  * Enigma: Fix key selection for signing
+  * Enigma: Enable keypair generation on Internet Explorer 11
+  * Fix check_request() bypass in places using get_uids() (CVE-2018-9846 boo#1067574)
+  * Fix bug where usernames without domain part could be malformed or converted to lower-case on logon
+
 -------------------------------------------------------------------
 Fri Mar 16 08:57:47 UTC 2018 - joop.boonen@opensuse.org
 

roundcubemail.spec

@@ -17,7 +17,7 @@
 
 
 Name:           roundcubemail
-Version:        1.3.5
+Version:        1.3.6
 Release:        0
 Summary:        A browser-based multilingual IMAP client
 License:        GPL-3.0-or-later AND GPL-2.0-only AND BSD-3-Clause