1
0
forked from pool/roundcubemail
Lars Vogdt aaea9d8cf8 Accepting request 1175253 from home:lrupp:branches:server:php:applications
- update to 1.6.7
  This is a security update to the stable version 1.6 of Roundcube Webmail.
  It provides a fix to a recently reported XSS vulnerabilities:
  * Fix cross-site scripting (XSS) vulnerability in handling SVG animate attributes.
    Reported by Valentin T. and Lutz Wolf of CrowdStrike.
  * Fix cross-site scripting (XSS) vulnerability in handling list columns from user preferences.
    Reported by Huy Nguyễn Phạm Nhật.
  * Fix command injection via crafted im_convert_path/im_identify_path on Windows.
    Reported by Huy Nguyễn Phạm Nhật.
  CHANGELOG
  * Makefile: Use phpDocumentor v3.4 for the Framework docs (#9313)
  * Fix bug where HTML entities in URLs were not decoded on HTML to plain text conversion (#9312)
  * Fix bug in collapsing/expanding folders with some special characters in names (#9324)
  * Fix PHP8 warnings (#9363, #9365, #9429)
  * Fix missing field labels in CSV import, for some locales (#9393)
  * Fix cross-site scripting (XSS) vulnerability in handling SVG animate attributes
  * Fix cross-site scripting (XSS) vulnerability in handling list columns from user preferences
  * Fix command injection via crafted im_convert_path/im_identify_path on Windows

OBS-URL: https://build.opensuse.org/request/show/1175253
OBS-URL: https://build.opensuse.org/package/show/server:php:applications/roundcubemail?expand=0&rev=173
2024-05-19 17:47:04 +00:00

This README contains additional information specific to the
openSUSE package of roundcube.


INSTALLATION
============

This application is packaged to integrate with Apache and MySQL but
it can basically run with every webserver being able to run PHP and
also use other SQL based database engines.

After installation of the package the application will immediately
be reachable from everywhere once Apache is enabled under the URL

  http://IP-ADDRESS/roundcubemail

The configuration is copied from the example config files from the
package and therefore not really working.

First step is to prepare the MySQL database for Roundcube:

Setting up the mysql database can be done by creating an empty database,
importing the table layout and granting the proper permissions to the
roundcube user. Here is an example of that procedure:

# mysql
> CREATE DATABASE roundcubemail /*!40101 CHARACTER SET utf8 COLLATE utf8_general_ci */;
> GRANT ALL PRIVILEGES ON roundcubemail.* TO 'roundcube'@'localhost' IDENTIFIED BY 'password';
> FLUSH PRIVILEGES;
> quit

# mysql roundcubemail < /usr/share/doc/packages/roundcubemail/SQL/mysql.initial.sql

Note 1: 'password' is the master password for the roundcube user. It is strongly
recommended you replace this with a more secure password. Please keep in
mind: You need to specify this password later in '/etc/roundcubemail/config.inc.php'.

To use the integrated web based installer you need to enable it first
in /etc/roundcubemail/config.inc.php:

$rcmail_config['enable_installer'] = true;

IMPORTANT: This MUST be disabled again after installation is finished
           for SECURITY reasons

and then access

  http://IP-ADDRESS/roundcubemail/installer

to finish the installation.

Description
No description provided
Readme 430 KiB
Languages
POV-Ray SDL 100%