1
0
forked from pool/roundcubemail
Go to file
Dirk Stoecker a7a754dee8 Accepting request 811037 from home:lrupp:branches:server:php:applications
- update to 1.4.5
  Security fixes
  * Fix XSS issue in template object 'username' (#7406)
  * Fix cross-site scripting (XSS) via malicious XML attachment
  * Fix a couple of XSS issues in Installer (#7406)
  * Better fix for CVE-2020-12641
  Other changes
  * Fix bug in extracting required plugins from composer.json that led 
    to spurious error in log (#7364)
  * Fix so the database setup description is compatible with MySQL 8 (#7340)
  * Markasjunk: Fix regression in jsevent driver (#7361)
  * Fix missing flag indication on collapsed thread in Larry and Elastic (#7366)
  * Fix default keyservers (use keys.openpgp.org), add note about CORS (#7373, #7367)
  * Password: Fix issue with Modoboa driver (#7372)
  * Mailvelope: Use sender's address to find pubkeys to check signatures (#7348)
  * Mailvelope: Fix Encrypt button hidden in Elastic (#7353)
  * Fix PHP warning: count(): Parameter must be an array or an object... 
    in ID command handler (#7392)
  * Fix error when user-configured skin does not exist anymore (#7271)
  * Elastic: Fix aspect ratio of a contact photo in mail preview (#7339)
  * Fix bug where PDF attachments marked as inline could have not been 
    attached on mail forward (#7382)
  * Security: Fix a couple of XSS issues in Installer (#7406)
  * Security: Fix XSS issue in template object 'username' (#7406)
  * Security: Fix cross-site scripting (XSS) via malicious XML attachment
  * Security: Better fix for CVE-2020-12641
- renamed roundcubemail-1.4.4-config_dir.patch to
  roundcubemail-1.4.5-config_dir.patch

OBS-URL: https://build.opensuse.org/request/show/811037
OBS-URL: https://build.opensuse.org/package/show/server:php:applications/roundcubemail?expand=0&rev=139
2020-06-03 15:22:56 +00:00
.gitattributes OBS-URL: https://build.opensuse.org/package/show/server:php:applications/roundcubemail?expand=0&rev=1 2006-10-27 00:38:30 +00:00
.gitignore OBS-URL: https://build.opensuse.org/package/show/server:php:applications/roundcubemail?expand=0&rev=1 2006-10-27 00:38:30 +00:00
README.openSUSE Accepting request 644894 from home:lrupp:branches:server:php:applications 2018-10-26 14:42:37 +00:00
robots.txt Accepting request 572447 from home:worldcitizen:branches:server:php:applications 2018-02-05 12:49:27 +00:00
roundcubemail-1.4.5-complete.tar.gz Accepting request 811037 from home:lrupp:branches:server:php:applications 2020-06-03 15:22:56 +00:00
roundcubemail-1.4.5-complete.tar.gz.asc Accepting request 811037 from home:lrupp:branches:server:php:applications 2020-06-03 15:22:56 +00:00
roundcubemail-1.4.5-config_dir.patch Accepting request 811037 from home:lrupp:branches:server:php:applications 2020-06-03 15:22:56 +00:00
roundcubemail-httpd.conf Accepting request 776199 from home:lrupp:branches:server:php:applications 2020-02-19 06:18:10 +00:00
roundcubemail-rpmlintrc Accepting request 207974 from home:aeneas_jaissle:branches:server:php:applications 2013-11-24 09:49:38 +00:00
roundcubemail.changes Accepting request 811037 from home:lrupp:branches:server:php:applications 2020-06-03 15:22:56 +00:00
roundcubemail.keyring Accepting request 433470 from home:AndreasStieger:branches:server:php:applications 2016-10-06 10:32:22 +00:00
roundcubemail.logrotate Accepting request 644894 from home:lrupp:branches:server:php:applications 2018-10-26 14:42:37 +00:00
roundcubemail.spec Accepting request 811037 from home:lrupp:branches:server:php:applications 2020-06-03 15:22:56 +00:00

This README contains additional information specific to the
openSUSE package of roundcube.


INSTALLATION
============

This application is packaged to integrate with Apache and MySQL but
it can basically run with every webserver being able to run PHP and
also use other SQL based database engines.

After installation of the package the application will immediately
be reachable from everywhere once Apache is enabled under the URL

  http://IP-ADDRESS/roundcubemail

The configuration is copied from the example config files from the
package and therefore not really working.

First step is to prepare the MySQL database for Roundcube:

Setting up the mysql database can be done by creating an empty database,
importing the table layout and granting the proper permissions to the
roundcube user. Here is an example of that procedure:

# mysql
> CREATE DATABASE roundcubemail /*!40101 CHARACTER SET utf8 COLLATE utf8_general_ci */;
> GRANT ALL PRIVILEGES ON roundcubemail.* TO 'roundcube'@'localhost' IDENTIFIED BY 'password';
> FLUSH PRIVILEGES;
> quit

# mysql roundcubemail < /usr/share/doc/packages/roundcubemail/SQL/mysql.initial.sql

Note 1: 'password' is the master password for the roundcube user. It is strongly
recommended you replace this with a more secure password. Please keep in
mind: You need to specify this password later in '/etc/roundcubemail/config.inc.php'.

To use the integrated web based installer you need to enable it first
in /etc/roundcubemail/config.inc.php:

$rcmail_config['enable_installer'] = true;

IMPORTANT: This MUST be disabled again after installation is finished
           for SECURITY reasons

and then access

  http://IP-ADDRESS/roundcubemail/installer

to finish the installation.