1
0
forked from pool/roundcubemail

Accepting request 1123659 from server:php:applications

- update to 1.6.5 (bsc#1216895)
  * Fix cross-site scripting (XSS) vulnerability in setting 
    Content-Type/Content-Disposition for attachment 
    preview/download  CVE-2023-47272
  Other changes
  * Fix PHP8 fatal error when parsing a malformed BODYSTRUCTURE (#9171)
  * Fix duplicated Inbox folder on IMAP servers that do not use Inbox 
    folder with all capital letters (#9166)
  * Fix PHP warnings (#9174)
  * Fix UI issue when dealing with an invalid managesieve_default_headers 
    value (#9175)
  * Fix bug where images attached to application/smil messages 
    weren't displayed (#8870)
  * Fix PHP string replacement error in utils/error.php (#9185)
  * Fix regression where smtp_user did not allow pre/post strings 
    before/after %u placeholder (#9162)

OBS-URL: https://build.opensuse.org/request/show/1123659
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/roundcubemail?expand=0&rev=81
This commit is contained in:
Ana Guerrero 2023-11-06 20:14:57 +00:00 committed by Git OBS Bridge
commit f6b8ef52da
6 changed files with 41 additions and 21 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:a5eabc7e0828e0261879aec90a9d4a6dc0203e988e14de2f93d6c061e64891c8
size 6027429

View File

@ -1,17 +0,0 @@
-----BEGIN PGP SIGNATURE-----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=q5xQ
-----END PGP SIGNATURE-----

View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:164b72cb78de89d104741ee9090f4024e63bfada43949034844365f3fa70b5fd
size 6028873

View File

@ -0,0 +1,17 @@
-----BEGIN PGP SIGNATURE-----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=dpSa
-----END PGP SIGNATURE-----

View File

@ -1,3 +1,23 @@
-------------------------------------------------------------------
Mon Nov 6 16:39:57 UTC 2023 - Lars Vogdt <lars@linux-schulserver.de>
- update to 1.6.5 (bsc#1216895)
* Fix cross-site scripting (XSS) vulnerability in setting
Content-Type/Content-Disposition for attachment
preview/download CVE-2023-47272
Other changes
* Fix PHP8 fatal error when parsing a malformed BODYSTRUCTURE (#9171)
* Fix duplicated Inbox folder on IMAP servers that do not use Inbox
folder with all capital letters (#9166)
* Fix PHP warnings (#9174)
* Fix UI issue when dealing with an invalid managesieve_default_headers
value (#9175)
* Fix bug where images attached to application/smil messages
weren't displayed (#8870)
* Fix PHP string replacement error in utils/error.php (#9185)
* Fix regression where smtp_user did not allow pre/post strings
before/after %u placeholder (#9162)
-------------------------------------------------------------------
Wed Oct 25 15:36:52 UTC 2023 - Lars Vogdt <lars@linux-schulserver.de>

View File

@ -20,7 +20,7 @@
%define roundcubeconfigpath %{_sysconfdir}/%{name}
Name: roundcubemail
Version: 1.6.4
Version: 1.6.5
Release: 0
Summary: A browser-based multilingual IMAP client
License: BSD-3-Clause AND GPL-2.0-only AND GPL-3.0-or-later